AT&T BGW320-500, Purple & IPv6 Configuration
I'm having an issue getting IPv6 to work correctly with my current setup. Grateful in advance for any guidance or advice the community can provide.
I have AT&T Fiber and am using a BGW320-500. Key settings:
- using IP Passthrough (to Firewalla Purple)
- Packet Filter, NAT Default Server & Firewall Advanced are Off
- IPv6, DHCPv6 and DHCPv6 Prefix Delegation are On
On the BGW320-500 Home Network Status page under IPv6:
- It shows as available
- Global Unicast IPv6 Address, IPv6 Addressing Subnet (w/ a length of 64) and IPv6 Delegated Prefix Subnet (w/ a length of 64) are all populated.
On Firewalla Purple, for the WAN Connection under Network:
- IPv6 is On
- Connection Type is DHCPv6
- IPv6 Addresses have been assigned
- IPv6 Gateway is populated and matches the Link-local IPv6 Address on the BGW320-500
- Prefix Delegation Size is 64 (I have also tried the default 60)
On Firewalla Purple, for the Local Network under Network:
- IPv6 is On
- IPv6 Interface Type is Prefix Delegation
- The IPv6 Address is populated with a /64 size
- DHCPv6 is On
- Auto Configuration Type is Stateless
- And the DHCP v6 Lease Time is 86400
My wireless equipment is only being used in Access Point mode.
I can tell both by looking at the details for a Device on Purple and by looking at the WIFI connection details under TCP/IP on those devices (specifically a macOS laptop for this test), that IPv6 addresses are being assigned with a prefix length of /64. However, an IPv6 "router" does not appear to be assigned (via the TCP/IP settings tab under WIFI). This is in contrast to the same field under IPv4 which populates the comparable "router" field with the IPv4 address assigned to Purple.
My laymen observation is that although the device is being assigned an IPv6 address, it's like it doesn't have a gateway/know the IPv6 DNS gateway through which to route traffic.
I'm more interested in setting in up because I can (or would like to be able to :-) and do not purport to be an expert. I feel like I'm missing something and open to feedback and/or direction.
A couple other items:
- I'm only using one LAN on Purple.
- In upstream to downstream order have reset the BGW320-500 and Purple after making configuration changes.
- I'm confirming that it is not working with https://test-ipv6.com/ that reports that no IPv6 address is detected.
- If I connect directly to the BGW320-500, IPv6 works perfectly.
I contacted Firewalla Support and shared access to my Purple and they indicated this is a question more about the BGW320-500 than Purple. I'm just trying to get it working. :-)
Again, thanks in advance for any guidance or feedback.
Thank you.
-
If your BGW320-500 has settings for IPv6 that are enabled, it doesn't sound to me like it's actually in bridge mode.
I'd tend to agree with Firewalla support. I'm thinking that this BGW320-500 isn't actually passing everything through. It's trying to act as a router for at least some things.
-
Thanks for the feedback. You are correct that the BGW320 does not have a true "bridge" mode. AT&T only allows for IP Passthrough. A lot of BGW320 specific searching around IPv6 and IP Passthrough seemed to indicate it was possible, although most of the that has been with ASUS routers and UDM Pro.
Update...armed with little more than obstinance, :-), I have been able to get it to work.
For anyone else who stumbles upon this, the final resolution used all of the settings in the original post for the BGW320.
For Purple, I deleted the WAN network on Purple and set it up again using all of the Purple default settings, except for the pre-fix delegation size, which in my case is /64.
Perhaps, with all of the testing, trying, etc. something was fouled up (or more likely I fouled it up) with the settings and starting clean resolved it.
Thanks for the feedback and appreciative of the assistance. Love my Purple and glad that I am now ready for the "future of Internet." LOL. Have a great day.
-
In the past I used this configuration with pfSense to be able to have multiple delegations. Is it possible to adapt it to Firewalla?
Please sign in to leave a comment.
Comments
3 comments