Comcast IPv6 issues when hwnat enabled on ER-X

[UBNT-sandisn]

The reason for this post is to bring together all of the affected people for further analysis of the issue

The threads where this issue is discussed:

https://community.ubnt.com/t5/EdgeMAX/Edgerouter-X-ipv6-hwnat/td-p/1644148

https://community.ubnt.com/t5/EdgeMAX-Beta/DHCPV6-PD-Stops-Working-When-HWNAT-Enabled-on-ER-X/m-p/16...

Please add links to other threads if they exist.

Problem

Some people have reported severe issues with IPv6 on ER-X when hwnat offloading is enabled. Mostly we have heard from Comcast customers.

Status

Several developers have tried the described scenarios/configurations and weren't able to reproduce the issues. Also several users have reported that they are running ER-X with hwnat enabled without problems.

Known symptoms

ER-X loses IPv6 addresses on LAN interfaces.

Open questions

There are known issues with IPv6, radvd however if triggered they should affect IPv6 also when hwnat is disabled.

• Some have reported that this happens after a few hours. Others imply that this happens immediately after reboot...
• If there is a cable modem, etc. at your premises then we want to know the model, make.
• Does reboot resolve the issue?
• When the addresses are lost is radvd running? Is radvd.conf empty?

Next steps

If you can reproduce the issue reliably then we kindly ask you to provide packet capture of ICMPv6 and DHCPv6 taken on a neutral device (a switch) that is placed immediately after ER-X's WAN interface.

The capture should start from ER-X bootup and be continued until the problem appears.

When the problem appears please also save output of the following commands:

• ifconfig -a
• cat /etc/radvd.conf
• ps -axww | grep radvd
• sysctl -a | grep ipv6
• and copy the snapshot of your configuration

Thank you all and hopefully we can find what's causing these issues.

[smyers119]

You might want to sticky this for a couple weeks.

[cdozois]

Hello,

The issue happens for me immediately upon boot with HW NAT enabled on ER-X running 1.9.1.

ARRIS DOCSIS 3.0 Touchstone WideBand Cable Modem
HW_REV: 1
VENDOR: Arris Interactive, L.L.C.
BOOTR: 1.2.1.62
SW_REV: 9.1.103M2D
MODEL: CM820A

pre/post HW NAT command outputs and pcaps are attached, along with ER-X config.

Please let me know if there is any additional information that would be helpful.

Best regards,

Chris

erx-commands-HWNAT-disabled.txt

erx-commands-HWNAT-enabled.txt

erx-config.txt

erx-HWNAT-Disabled.pcapng

erx-HWNAT-Enabled.pcapng

[UBNT-sandisn]

@cdozois Thank you for the provided traces. I've been trying to reproduce the issue for the last couple of days without success.

1. Can you double-check the services section of the configuration? I've added dhcp-server to so that I can get in without a console. Is there anything else that you deleted?

2, What is your EdgeOS version and HW model?

3. Can you check if dhcp6c is running when hwnat is enabled? Please also provide /var/run/dhcp6c-eth4-pd.conf.

If these items are OK then we might be looking at either something that is triggered by specific traffic or possibly an undiscovered HW issue.

BTW do you have any spare ERs that we could use to configure "dummy" uplink router?

[cdozois]

1) removed dhcp-server scopes (eth0.6 and eth0.10 subnets). Removed DDNS config. Removed systems domain-name, host-name, and login info.

2)

:~$ show version

Version:      v1.9.1

Build ID:     4939092

Build on:     12/14/16 07:02

Copyright:    2012-2016 Ubiquiti Networks, Inc.

HW model:     EdgeRouter X 5-Port

HW S/N:       44D9E793B929

Uptime:       22:01:46 up 4 days, 23:12,  1 user,  load average: 1.00, 1.03, 1.05

3) 

:~$ sudo ps auwx | grep dhcp6c

root      2017  0.0  0.3   2176   788 ?        S    Mar01   0:01 /usr/sbin/dhcp6c -c /var/run/dhcp6c-eth4-pd.conf -p /var/run/dhcp6c-eth4-pd.pid -df eth4

:~$ sudo cat /var/run/dhcp6c-eth4-pd.conf

# This file was auto-generated by /opt/vyatta/sbin/dhcpv6-pd-client.pl

# configuration sub-system.  Do not edit it.

interface eth4 {

send ia-na 0;

request domain-name-servers, domain-name;

send rapid-commit;

send ia-pd 0;

script "/opt/vyatta/sbin/ubnt-dhcp6c-script";

};

id-assoc na 0 {};

id-assoc pd 0 {

prefix ::/60 infinity;

prefix-interface eth0.6 {

sla-id 0;

sla-len 4;

ifid 1;

};

prefix-interface eth0.10 {

sla-id 1;

sla-len 4;

ifid 1;

};

prefix-interface eth0.99 {

sla-id 2;

sla-len 4;

ifid 1;

};

};

I do not have an spare ERs.  I am connected to a Juniper EX switch and I can hook up a Juniper SRX, but I do not know if that will help with the set-up you are looking for.

[cdozois]

I made the following changes this morning and IPv6 came up.  I'll keep you updated if this remains stable or not.

                     prefix ::/64 {

                         autonomous-flag true

                         on-link-flag true

-                        valid-lifetime 2592000

+                        preferred-lifetime 14400

+                        valid-lifetime 86400

                     }

                     reachable-time 0

                     retrans-timer 0

@@ -106,8 +100,6 @@

         }

         vif 99 {

             address 10.99.0.3/29

             ipv6 {

                 dup-addr-detect-transmits 1

                 router-advert {

@@ -121,7 +113,8 @@

                     prefix ::/64 {

                         autonomous-flag true

                         on-link-flag true

-                        valid-lifetime 2592000

+                        preferred-lifetime 14400

+                        valid-lifetime 86400

                     }

[cdozois]

IPv6 has been lost after a couple hours.  Release/Renew does not bring it back.  Release, delete duid, renew also does not bring it back.

erx-output-Tue Mar 7 15:53:15 UTC 2017.txt

[UBNT-sandisn]

 Let's see if dhcp6c can give us a hint.

1. Stop prefix delegation attempts.

release dhcpv6-pd interface eth4

2, Start dhcp6c in foreground.

/usr/sbin/dhcp6c -d -c /var/run/dhcp6c-eth4-pd.conf -p /var/run/dhcp6c-eth4-pd.pid -df eth4

3. Find the PID of the dhcp6c instance. In another terminal:

ps -axww | grep dhcp6c

4. Make it reinitialize (replace PID with the process ID number from the command above):

kill -hup PID

Then post the output from dhcp6c terminal.

You can stop dhcp6c by pressing CTRL + C and start it again by releasing and renewing.

[cdozois]

Set the default and preferred lifetimes to 3600, as these are the values in the DHCPv6 advertise.  Rebooted and IPv6 came up.  Set up a new packet capture to see what happens at the 1 hour mark.  Prior to reboot, er-x would send a DHCPv6 solict, Comcast would send 2 DHCPv6 advertise, but ER-X never replied to the advertise.

[cdozois]

I'll try running in the foreground next.  I attached a 1 hour pcap.  Everything looks great until we do another solicit after 1 hour, this is when IPv6 breaks.  It also looks like the default and preferred lifetime values change throughout the course of the hour?

erx-dhcpv6-comcast.pcapng

[cdozois]

I did not receive any messages from running DHCPv6-PD in the foreground.  I adjusted all of my valid and preferred lfietimes to the new 345600s values and will reboot the ER-X when I can take a downtime.

[cdozois]

Final update for today.  I cannot seem to get IPv6 to come back up with HWNAT enabled at this point.  I can disable HWNAT, reboot, and IPv6 comes up and has been up for the last 80 minutes.  I'll keep running this way to make sure the er-x config is stable with Comcast.  If I enable HWNAT and reboot, IPv6 does not come up via DHCPv6-PD.  Disable, reboot, and its back working with no other configuration changes.

Behavior is ER-X Solicit, Provider Router sends two Advertisements.  Then this repeats a few times before dhcp6c stands down.

Chris

[UBNT-sandisn]

---

cdozois wrote:

I did not receive any messages from running DHCPv6-PD in the foreground. 

---

Did you see at least the following line when sending it a HUP?

Mar/08/2017 09:23:21: process_signals: restarting

Nothing after that?

I'm preparing dhcp6c with extra debugging output.

[cdozois]

Yes, the SIGHUP shows.  I'll run this and give you the output shortly.

/usr/sbin/dhcp6c -Df -c /var/run/dhcp6c-eth4-pd.conf -p /var/run/dhcp6c-eth4-pd.pid eth4 2> /var/tmp/dhcp6c.log

[cdozois]

Here is the log and the capture.  It appears that DHCP6C is simply not receiving the advertise.  Is there a way to CTY to the SOC to do a capture there?

Mar/08/2017 10:41:19: get_duid: extracted an existing DUID from /var/lib/dhcpv6/dhcp6c_duid: 00:01:00:01:20:51:eb:47:44:d9:e7:93:b9:2e
Mar/08/2017 10:41:19: cfdebug_print: <3>comment [# This file was auto-generated by /opt/vyatta/sbin/dhcpv6-pd-client.pl] (70)
Mar/08/2017 10:41:19: cfdebug_print: <3>comment [# configuration sub-system.  Do not edit it.] (44)
Mar/08/2017 10:41:19: cfdebug_print: <3>[interface] (9)
Mar/08/2017 10:41:19: cfdebug_print: <5>[eth4] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[send] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[ia-na] (5)
Mar/08/2017 10:41:19: cfdebug_print: <3>[0] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[request] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>[domain-name-servers] (19)
Mar/08/2017 10:41:19: cfdebug_print: <3>[,] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[domain-name] (11)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[send] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[rapid-commit] (12)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[send] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[ia-pd] (5)
Mar/08/2017 10:41:19: cfdebug_print: <3>[0] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[script] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>["/opt/vyatta/sbin/ubnt-dhcp6c-script"] (37)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[id-assoc] (8)
Mar/08/2017 10:41:19: cfdebug_print: <15>[na] (2)
Mar/08/2017 10:41:19: cfdebug_print: <15>[0] (1)
Mar/08/2017 10:41:19: cfdebug_print: <15>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[id-assoc] (8)
Mar/08/2017 10:41:19: cfdebug_print: <15>[pd] (2)
Mar/08/2017 10:41:19: cfdebug_print: <15>[0] (1)
Mar/08/2017 10:41:19: cfdebug_print: <15>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[prefix] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>[::] (2)
Mar/08/2017 10:41:19: cfdebug_print: <3>[/] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[60] (2)
Mar/08/2017 10:41:19: cfdebug_print: <3>[infinity] (8)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[prefix-interface] (16)
Mar/08/2017 10:41:19: cfdebug_print: <5>[eth0.6] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-id] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>[0] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-len] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>[4] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[ifid] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[1] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[prefix-interface] (16)
Mar/08/2017 10:41:19: cfdebug_print: <5>[eth0.10] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-id] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>[1] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-len] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>[4] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[ifid] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[1] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[prefix-interface] (16)
Mar/08/2017 10:41:19: cfdebug_print: <5>[eth0.99] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>begin of closure [{] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-id] (6)
Mar/08/2017 10:41:19: cfdebug_print: <3>[2] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[sla-len] (7)
Mar/08/2017 10:41:19: cfdebug_print: <3>[4] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>[ifid] (4)
Mar/08/2017 10:41:19: cfdebug_print: <3>[1] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of closure [}] (1)
Mar/08/2017 10:41:19: cfdebug_print: <3>end of sentence [;] (1)
Mar/08/2017 10:41:19: configure_pool: called
Mar/08/2017 10:41:19: clear_poolconf: called
Mar/08/2017 10:41:19: dhcp6_reset_timer: reset a timer on eth4, state=INIT, timeo=0, retrans=970
Mar/08/2017 10:41:20: client6_send: a new XID (1af09e) is generated
Mar/08/2017 10:41:20: copy_option: set client ID (len 14)
Mar/08/2017 10:41:20: copyout_option: set identity association
Mar/08/2017 10:41:20: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:20: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:20: copy_option: set option request (len 4)
Mar/08/2017 10:41:20: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:20: copyout_option: set IA_PD
Mar/08/2017 10:41:20: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:20: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=0, retrans=1077
Mar/08/2017 10:41:22: copy_option: set client ID (len 14)
Mar/08/2017 10:41:22: copyout_option: set identity association
Mar/08/2017 10:41:22: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:22: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:22: copy_option: set option request (len 4)
Mar/08/2017 10:41:22: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:22: copyout_option: set IA_PD
Mar/08/2017 10:41:22: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:22: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=1, retrans=2200
Mar/08/2017 10:41:24: copy_option: set client ID (len 14)
Mar/08/2017 10:41:24: copyout_option: set identity association
Mar/08/2017 10:41:24: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:24: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:24: copy_option: set option request (len 4)
Mar/08/2017 10:41:24: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:24: copyout_option: set IA_PD
Mar/08/2017 10:41:24: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:24: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=2, retrans=4573
Mar/08/2017 10:41:28: copy_option: set client ID (len 14)
Mar/08/2017 10:41:28: copyout_option: set identity association
Mar/08/2017 10:41:28: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:28: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:28: copy_option: set option request (len 4)
Mar/08/2017 10:41:28: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:28: copyout_option: set IA_PD
Mar/08/2017 10:41:28: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:28: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=3, retrans=9359
Mar/08/2017 10:41:38: copy_option: set client ID (len 14)
Mar/08/2017 10:41:38: copyout_option: set identity association
Mar/08/2017 10:41:38: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:38: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:38: copy_option: set option request (len 4)
Mar/08/2017 10:41:38: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:38: copyout_option: set IA_PD
Mar/08/2017 10:41:38: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:38: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=4, retrans=17853
Mar/08/2017 10:41:56: copy_option: set client ID (len 14)
Mar/08/2017 10:41:56: copyout_option: set identity association
Mar/08/2017 10:41:56: copy_option: set rapid commit (len 0)
Mar/08/2017 10:41:56: copy_option: set elapsed time (len 2)
Mar/08/2017 10:41:56: copy_option: set option request (len 4)
Mar/08/2017 10:41:56: copyout_option: set IA_PD prefix
Mar/08/2017 10:41:56: copyout_option: set IA_PD
Mar/08/2017 10:41:56: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:41:56: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=5, retrans=36680
Mar/08/2017 10:42:32: copy_option: set client ID (len 14)
Mar/08/2017 10:42:32: copyout_option: set identity association
Mar/08/2017 10:42:32: copy_option: set rapid commit (len 0)
Mar/08/2017 10:42:32: copy_option: set elapsed time (len 2)
Mar/08/2017 10:42:32: copy_option: set option request (len 4)
Mar/08/2017 10:42:32: copyout_option: set IA_PD prefix
Mar/08/2017 10:42:32: copyout_option: set IA_PD
Mar/08/2017 10:42:32: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:42:32: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=6, retrans=73411
Mar/08/2017 10:43:46: copy_option: set client ID (len 14)
Mar/08/2017 10:43:46: copyout_option: set identity association
Mar/08/2017 10:43:46: copy_option: set rapid commit (len 0)
Mar/08/2017 10:43:46: copy_option: set elapsed time (len 2)
Mar/08/2017 10:43:46: copy_option: set option request (len 4)
Mar/08/2017 10:43:46: copyout_option: set IA_PD prefix
Mar/08/2017 10:43:46: copyout_option: set IA_PD
Mar/08/2017 10:43:46: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:43:46: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=7, retrans=127800
Mar/08/2017 10:45:54: copy_option: set client ID (len 14)
Mar/08/2017 10:45:54: copyout_option: set identity association
Mar/08/2017 10:45:54: copy_option: set rapid commit (len 0)
Mar/08/2017 10:45:54: copy_option: set elapsed time (len 2)
Mar/08/2017 10:45:54: copy_option: set option request (len 4)
Mar/08/2017 10:45:54: copyout_option: set IA_PD prefix
Mar/08/2017 10:45:54: copyout_option: set IA_PD
Mar/08/2017 10:45:54: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:45:54: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=8, retrans=125760
Mar/08/2017 10:48:00: copy_option: set client ID (len 14)
Mar/08/2017 10:48:00: copyout_option: set identity association
Mar/08/2017 10:48:00: copy_option: set rapid commit (len 0)
Mar/08/2017 10:48:00: copy_option: set elapsed time (len 2)
Mar/08/2017 10:48:00: copy_option: set option request (len 4)
Mar/08/2017 10:48:00: copyout_option: set IA_PD prefix
Mar/08/2017 10:48:00: copyout_option: set IA_PD
Mar/08/2017 10:48:00: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:48:00: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=9, retrans=113904
Mar/08/2017 10:49:54: copy_option: set client ID (len 14)
Mar/08/2017 10:49:54: copyout_option: set identity association
Mar/08/2017 10:49:54: copy_option: set rapid commit (len 0)
Mar/08/2017 10:49:54: copy_option: set elapsed time (len 2)
Mar/08/2017 10:49:54: copy_option: set option request (len 4)
Mar/08/2017 10:49:54: copyout_option: set IA_PD prefix
Mar/08/2017 10:49:54: copyout_option: set IA_PD
Mar/08/2017 10:49:54: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:49:54: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=10, retrans=125976
Mar/08/2017 10:52:00: copy_option: set client ID (len 14)
Mar/08/2017 10:52:00: copyout_option: set identity association
Mar/08/2017 10:52:00: copy_option: set rapid commit (len 0)
Mar/08/2017 10:52:00: copy_option: set elapsed time (len 2)
Mar/08/2017 10:52:00: copy_option: set option request (len 4)
Mar/08/2017 10:52:00: copyout_option: set IA_PD prefix
Mar/08/2017 10:52:00: copyout_option: set IA_PD
Mar/08/2017 10:52:00: client6_send: send solicit to ff02::1:2%eth4
Mar/08/2017 10:52:00: dhcp6_reset_timer: reset a timer on eth4, state=SOLICIT, timeo=11, retrans=109620

dhcpv6-pd-hwnat-2017-03-08_11amCST.pcapng

[cdozois]

Also, here is what conntrack shows:

:~# conntrack -f ipv6 -L
udp      17 25 src=fe80::46d9:e7ff:fe93:b92d dst=ff02::1:2 sport=546 dport=547 [UNREPLIED] src=ff02::1:2 dst=fe80::46d9:e7ff:fe93:b92d sport=547 dport=546 mark=0 use=1
conntrack v0.9.14 (conntrack-tools): 1 flow entries have been shown.

[smyers119]

@UBNT-sandisn I can set you up with a erx-sfp behind comcast for you to play with and investigate this problem further. send me a pm if your interested.

[flbroce]

Has this been solved? I am having the same problem. I want ipv6 so I had to disable hwnat.

Fred B

[smyers119]

No, I know they have been working on it though.

[flbroce]

OK..not a biggie since I have only a 150mb connection. I don't see any difference in speedtest.

I notice that someone said it work correctly with firmware 1.9.0. If that is correct can

you just flash back to that version without any problems?