TataPlay Fiber does not provide True Static IPv6 (Asus Engineer)

[tatyasky]

My Asus router when connected in Bridge Mode was not getting it's own IPv6. From below screenshot, you can see that my Asus Router does not get it's own WAN IPv6. That filed remains blank. All other devices on network however get a temporary IPv6. Below is my router's screenshot.

With month long email echange with remote access to my PC, Asus engineers found out that TataPlay ISP is to blame. The concluding email is as follows.

Hi Tatyasky,

So when you use the PC to directly connect to the connection line provided by the ISP, it can only be set to Static IPv6.
But when you connect to the connection line provided by the ISP through the Router, it can only be set to Native IPv6.
Is there anything wrong with this that there are two ways to set up IPv6?

Do you set "Automatic IP" or "PPPoE" in "WAN Connection Type" in "WAN - Internet Connection" page?
In general, if "Automatic IP", the setting in IPv6 should be "Passthrough".
If it is "PPPoE", it should be selected as "Native".

And if you select "Native", it seems that because your ISP does not provide "Non-temporary Address", the Router cannot obtain the WAN IPv6 Address, but only LAN IPv6 Address.
Although the LAN IPv6 Address can also connect the Router or the LAN Client to the IPv6 network normally, the DDNS function must be operated through the WAN IPv6 Address, so you cannot use this function.
You may need to discuss with your ISP company why there is no "Non-temporary Address" in their DHCPv6 packets.

Thank you.


Best regards,

Kengi Peng (彭冠傑)


The statement in Bold says it all.

When it works correctly (Someone's image of non-Indian ISP), one gets a proper WAN IPv6. Below is their screenshot for comparison.

Some forum members tell that ours is correct implementation of static IPv6. Apparently NOT !!!! BTW IPv6 stops working if set as Passthrough mode like the above screenshot.
Indian ISPs are slowly pissing me more and more day by day.

 

[thecooldean]

Not sure if this is gonna help, I'm not tech savvy, but here's a screenshot with my ACT connection.

 

[tatyasky]

@TheCoolDean This means ACT has correct IPv6 implementation where they allow Non-Temporary addresses in DHCPv6. Awesome!

I had a talk with TataPlay support and they told me people don’t require Non-Temporary addresses to access internet.

 

[Lolita_Magnum]

Yes, DHCP-PD (Prefix Delegation) is not really native IPV6 since the router is not the one giving out IP addresses, but there are no performance penalty nor public connectivity issues because of this.
Judging by your config on the screenshot above, your router should still be accessible from outside.

 

[tatyasky]

No it is not accessible. Even Asus engineer tried accessing but failed because router itself doesn’t have WAN IPv6 address. It however does have LAN IPv6 which is accessible only from LAN. Adding that IP to IPv6 firewall doesn’t help either.

 

[Lolita_Magnum]

Are your devices accessible from outside via IPV6?

 

---

[thecooldean]

sorry if off-topic but when I go to IPv6-test.com I get hostname servfail error, any idea how to fix it? My score is 18/20.

 

[Lolita_Magnum]

@TheCoolDean nothing to be worried about, it just means your ISP does not have Reverse DNS entry for your IP.

 

[tatyasky]

Are your devices accessible from outside via IPV6?

Yes all devices except the router itself. I need access to router to wake up device if I am not home.

 

[igloo]

From my airtel connection on TP-Link router i can conclude wan ip of router is completely diff from lan prefix of devices and both having /64 prefix.
I guess tata is trying to be oversmart or over conservative(whichever way you like) by saving from every customer /64 wan ipv6 address aka 2^64 /128 addresses i.e. 18,446,744,073,709,551,616 unique ipv6 addresses. 😆

 

[panks21]

@tatasky
On Airtel connection I tested few weeks ago. I got WAN IPv6 (non-temporary) on Edgerouter but when I connected Asus ZenWifi AX Mini, I dont get a WAN IPv6 address (sorry no screenshot). Edgerouter Config was shared in the thread below. It is quite possible different implemenation in software in Asus

Airtel Xstream Broadband has switched to CG Nat | Airtel Xstream Broadband

Please try some reddit forums for Netgear / TP-Link. For me it is working without any issues. My neighbour who got Airtel BB 10 days ago got a ZTE ONT and for him also its working without any issues Edit - It didn't work for me initially on the Juniper SRX320, had to spent few hours but finally...

broadband.forum

 

[tatyasky]

I don’t think it’s Asus router issue as most other ISPs are getting WAN IPv6 correctly on Asus routers around the world. TataPlay themselves told me Non-Temporary address are not required by customers. Then they are falsely advertising static IPv6.

 

[pillaicha]

TataPlay does not support Dual ipv6 prefix assignment, which is required by Asus routers. Asus routers need one prefix for their WAN and another prefix for their LAN side. It is configured on the DHCPv6 server of the ISP to offer only a single prefix to each PPPOE session of a customer. Router must be able to use a single prefix when assigned and configure a globally routable WAN ipv6 from it.

It's a software limitation in Asus that must be fixed by them.

 

[pillaicha]

To better explain the process of IPv6 address assignment, you may read this.

In some networks, you do not need to assign a global IPv6 address on the CPE WAN link. Your decision depends on the type of CPE being used:

• If the CPE is purchased by the subscriber, and is not a device specifically recommended by the service provider, you need to assign a global IPv6 address that can be routed on the Internet.
• If the CPE is supplied by or recommended by the service provider, you can use the loopback interface to manage the CPE.
  In this case, you can use a link-local address or you can use an address that is derived from DHCPv6 prefix delegation.

Designs for IPv6 Addressing in a Subscriber Access Network | Junos OS | Juniper Networks

As far as the solution to your problem is concerned, you may simply setup a RPi to act as a proxy from within your network. Install a DDNS daemon on it, and maybe use a password-enabled self-signed certificate protected HTTPS session which is reverse-proxied via your Rpi to access your router remotely.

 

[tatyasky]

Thanks @pillaicha

But I don't have RPI. I only have QNAP NAS and currently I am using Tailscale to access my Asus Router from WAN. But it's slow and hacky. I also have to keep Tailscale app running in the background which saps battery from my iPhone.