New problem solver
•
34 Messages
Non-dhcpv6 prefix delegation configured network Comcast modem/router configuration setting for Router Advertisement (RA) configured route
I have set up my router as suggested by the post: https://forums.businesshelp.comcast.com/conversations/ipv6/how-to-setup-ipv6-without-comcast-dhcpv6-prefix-delegation/6043f6068f1fda3bcef2f820
I have the comcast modem and another box on the WAN side of my router. This other box is able to talk to IP addresses on my LAN (at first thanks to a static route, but then later, deleted the SR and relied on RA), but the Comcast modem keeps issuing NS packets looking for addresses on the LAN side instead of sending them to the router's WAN ip address.
I believe my Comcast modem is in bridged mode. I have setup Router Advertisements such that it contains a route entry (RFC 4191 I believe). But it is not sending packets destined for our LAN through our router's WAN interface.
How do we fix this?
UPDATE: per below - I think the necessary change is setting (in the Comcast cable modem/router)
net.ipv6.conf.<interface name>.accept_ra_rt_info_max_plen=64
Changing this setting to '64' will allow the network stack to accept RA advertised routes with a prefix length up to 64 bits. It is likely the default is '0' (accepts only default routes only (by default..lol))
BTW: The Comcast cable modem/router is a CGA4131COM
Thank you,
flyingrobots
New problem solver
•
34 Messages
1 month ago
I've done a little more research on this. Here is what I believe is correct. The bottom line is that the Comcast modem doesn't seem to be able to process Router Advertisements that contain routing information.
Below is a sample tcpdump listening on the interface connected to the cable modem. The cable modem to our router's network address is A:B:C:E300::/64. I have a static subnet established on my LAN as A:B:C:E362::/64.
Notice the Neighbor Solicitation messages that are coming from the cable modem. In this case I am pinging (ICMPv6) google.com from a machine on the E362::/64 subnet
First we have the ping:
Then what looks like an attempt to deliver the reply (it is doing a NS for the above source address):
It doesn't get a Neighbor Advertisement response, so it tries again:
Instead of forwarding the packet to the router's interface, it is trying to find this address on the e300 subnet. It is pretty clear that the comcast modem doesn't know where to route this even though there is a route being specified as part of the router advertisement. Here is a sample:
It is clearly establishing a route to the e362 subnet. I have linux box on the e300 subnet, it gets this RA message an sets up the route specified in the RA message as expected, but the Comcast Router appears to be unable to do so.
I think the Comcast device should be doing the same thing. If it did so, it would not be using NS requests.
I've tried setting the prefix to /56 and /59 (for the route entry in the RA message) but that did not bear fruit either.
How can we get the Comcast Modem to respect the information in the RA message so that proper routing can be performed?
Thank you,
0
0
flyingrobots
New problem solver
•
34 Messages
1 month ago
Good Morning!
I have a follow up post, but I think we've got a forum-bot erroneously marking it as private.
In it I show a tcpdump of the ping to google.com coming out of our LAN and the Comcast Modem attempting to delver the reply.
It is sending out Neighbor Solicitation inquiries to find the IP address of the box sending the ping. Obviously, being on the wrong subnet, it gets nothing so it tries again before it gives up.
I also show the Router Advertisement that is being injected into subnet the Cable Modem is attached to and in that RA is a RFC 4191 compliant 'route' specification that if the Cable Modem was paying attention would use to forward the ICMPv6 echo reply.
I learned something while setting this up, the Linux box I put on this network segment (along with the Cable Modem) also did not at first listen to the 'route' information embedded in the RA. I had to set the:
for the networking stack to utilize the 'route' information in the RA message.
It occurred to me this morning that the Cable Modem could very well have a similar setting. If our tech support sisters and brothers were game, perhaps we could talk someone into adjusting this setting for us? You could do this on the command line as a non-persistent quick test via:
and if it worked, we could then add the setting to /etc/sysctl.conf (or its equivalent) in the Cable Modem.
I think it would be that simple and we would have the ability to configure our networks in which way we need....
(edited)
0
0