Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Replies 5 replies
  • Subscribers 40 subscribers
  • Views 673 views
  • Users 0 members are here
Options
Suggested

IPv6 PD and v20.0.2 MR-2

rfcat_vk

Hi folks,

a couple of days ago my network was downgraded/upgraded from 1000/50 to 250/100, all very good. The IP4 address is now static assigned by the RSP DHCP servers.

After a number attempts for over an hour and logging a fault with the RSP, investigation showed the IPv6 PD no longer worked. I also required the default SNAT to be enabled.

During the change of WAN bandwidth the fibre to ethernet box (NTD) was restarted twice. The IPv6 PD did not work, the IPv6 showed a gateway, but no active address for the XG115W.

Today (Tuesday) I reset the IPv6 settings to PD and disabled the SNAT, then restarted the XG, still no IPv6 address.

I have disabled the IPv6 PD and now receive an IPv6 address for the WAN interface, the same address that was provided before the WAN capacity change. The SNAT is now required.

The RSP advises there has not been any changes the IPv6 DHCP server and my details still show the same IPv6 address asignments.

The WAN connection had not failed and did not fail during the upgrade to MR-2 and the upgrade was performed using the SIG file so the existing WAN configuration stuck.

So, in summary v20.0.2 MR-2 has removed the IPv6 PD function or at the very least broken it.

Yes, I posted a smaller version of the is on MR-2 experience thread, but have not received any responses.

Ian



Added TAGs
[edited by: Raphael Alganes at 5:20 AM (GMT -7) on 20 Aug 2024]
Parents
  • 0

    Hello Ian,

    I have requested for appliance access detail on other thread.

    I will ask detailed questions once team will have a look at the appliance.

    However, there doesn't seem to have any direct changes made in DHCP-PD area in v20-MR2 which can cause such issue.

    Was it working after firmware upgrade to MR2 and then stopped working after WAN interface change?

    Regards,

    Sanket Shah

    Director, Software Development, Sophos Firewall

  • +1 in reply to sanket.shah

    Hi Sanket Shah,

    the issue has been resolved by the RSP assigning a new /64 for the external interface and a new /48 for internal use. Now comes the fun of chasing all the IPv6 internal addresses.

    Extract a backup in XML format then edit it.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v20.0.2 MR-2

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • +1 in reply to sanket.shah

    Hi Sanket Shah,

    the issue has been resolved by the RSP assigning a new /64 for the external interface and a new /48 for internal use. Now comes the fun of chasing all the IPv6 internal addresses.

    Extract a backup in XML format then edit it.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v20.0.2 MR-2

    If a post solves your question please use the 'Verify Answer' button.

Children
Unfiltered HTML