Hallo Zusammen,
ich komme von einem "klassischen" Fritzbox Setup mit jeder Menge Unifi Switches & APs.
Nun habe ich mir eine UDM-Pro-Max (4.3.6 + 9.2.87) zum Experimentieren bestellt.
Aktueller Setup: Cabel--->Fritzbox----(Guest Internet)--->UDM-Pro-Max[WAN1]
Ich wollte testen wie weit die DS-Lite Implementierung gediehen ist und habe die UDM auf IPv4 DS-lite (2a02:8071::4001[AFTR]) und IPv6 SLAAC gestellt.
UDM ----(IPv6 only + "AFTR" Tunnel)---> Fritzbox ---> Cabel (Damit keine "native" IPv4 Verbindung zwischen UDM und der Fritzbox)
Zu meiner Überraschung war es anschießend möglich die 1.1.1.1 anzupingen. Nach ziemlich genau 10 Minuten stoppt der Ping und in /var/log/messages sieht es so aus als ob IPv6 RAs verarbeitet werden würden und den Tunnel runterreisen.
Hat das schon mal jemand beobachtet? Kennt jemand die Ursache?
Danke im Voraus.
Viele Grüße,
Odi
2025-07-24T12:21:39+00:00 UDM-Pro-Max ubios-udapi-server[2879]: tunnel-controller: Evaluating local address update for ip6tnl1 local:'2a02:8071:680:oooo:qqqq:rrrr:ssss:tttt' remote:'2a02:8071::4001'
2025-07-24T12:21:41+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-9-dns (192.0.0.2->1.1.1.1) has dns-monitor update: 1.1.1.1:ui.com is down (pol=any loss=100/- lat=0/- jit=0/- !dns_avail=0%)
2025-07-24T12:21:41+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-10-dns (192.0.0.2->8.8.8.8) has dns-monitor update: 8.8.8.8:ui.com is down (pol=any loss=100/- lat=0/- jit=0/- !dns_avail=0%)
2025-07-24T12:21:42+00:00 UDM-Pro-Max mcad[3639]: ace_reporter.geo_info_send(): Sending geo-info request from ip6tnl1
2025-07-24T12:21:42+00:00 UDM-Pro-Max mcad[3639]: wan.wan_geoinfo_update(): Updating GeoInfo wan=2:WAN:ip6tnl1
2025-07-24T12:21:43+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-icmp: wf-monitor-ip6tnl1-8-icmp (192.0.0.2->1.1.1.1) has dpinger update: 1.1.1.1 is up (pol=any loss=0/50 lat=917/- jit=3997/- icmp_state=normal)
2025-07-24T12:21:43+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-icmp: wf-monitor-ip6tnl1-8-icmp (192.0.0.2->8.8.8.8) has dpinger update: 8.8.8.8 is up (pol=any loss=0/50 lat=907/- jit=3957/- icmp_state=normal)
2025-07-24T12:21:46+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-9-dns (192.0.0.2->1.1.1.1) has dns-monitor update: 1.1.1.1:ui.com is up (pol=any loss=50/100 lat=19/1500 jit=0/- dns_avail=50%)
2025-07-24T12:21:46+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-interfaces: wf-interface-ip6tnl1 (192.0.0.2) is up [UUD____]
2025-07-24T12:21:46+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-10-dns (192.0.0.2->8.8.8.8) has dns-monitor update: 8.8.8.8:ui.com is up (pol=any loss=50/100 lat=30/1500 jit=0/- dns_avail=50%)
2025-07-24T12:21:47+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-group-base: wf-group-1-single is up [u](ip6tnl1)
2025-07-24T12:31:27+00:00 UDM-Pro-Max ubios-udapi-server[2879]: tunnel-controller: Evaluating local address update for ip6tnl1 local:'fd69:a6ad:zzzz:xxxx:yyyy:rrrr:ssss:tttt' remote:'2a02:8071::4001'
2025-07-24T12:31:27+00:00 UDM-Pro-Max ubios-udapi-server[2879]: WAN-Diag(eth8): res-interfaces: Adding new dynamic route 2a02:8071:qqqq:oooo::/64 via eth8 (RA)
2025-07-24T12:31:27+00:00 UDM-Pro-Max ubios-udapi-server[2879]: WAN-Diag(eth8): res-interfaces: Adding new dynamic route fd69:a6ad:zzzz:yyyy::/64 via eth8 (RA)
2025-07-24T12:31:27+00:00 UDM-Pro-Max ubios-udapi-server[2879]: sn6-syncer: Synchronizing 2 SN6 prefixes (update)
2025-07-24T12:31:27+00:00 UDM-Pro-Max ubios-udapi-server[2879]: sn6-syncer: Synchronizing 2 SN6 prefixes (update)
2025-07-24T12:32:01+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-9-dns (192.0.0.2->1.1.1.1) has dns-monitor update: 1.1.1.1:ui.com is down (pol=any loss=100/- lat=0/- jit=0/- !dns_avail=0%)
2025-07-24T12:32:01+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-monitor-dns: wf-monitor-ip6tnl1-10-dns (192.0.0.2->8.8.8.8) has dns-monitor update: 8.8.8.8:ui.com is down (pol=any loss=100/- lat=0/- jit=0/- !dns_avail=0%)
2025-07-24T12:32:01+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-interfaces: wf-interface-ip6tnl1 (192.0.0.2) is down [UDD____]
2025-07-24T12:32:02+00:00 UDM-Pro-Max ubios-udapi-server[2879]: wan-failover-group-base: wf-group-1-single is down [d](ip6tnl1)Nachtrag:
Mittels folgendem lassen sich zumindest die RAs droppen.
ip6tables -A INPUT -p icmpv6 --icmpv6-type 134 -j DROP