TataPlay Fiber does not provide True Static IPv6 (Asus Engineer)

  • Thread starter Thread starter tatyasky
  • Start date Start date
  • Replies Replies 16
  • Views Views 7,966
@tatasky
On Airtel connection I tested few weeks ago. I got WAN IPv6 (non-temporary) on Edgerouter but when I connected Asus ZenWifi AX Mini, I dont get a WAN IPv6 address (sorry no screenshot). Edgerouter Config was shared in the thread below. It is quite possible different implemenation in software in Asus

 
I don’t think it’s Asus router issue as most other ISPs are getting WAN IPv6 correctly on Asus routers around the world. TataPlay themselves told me Non-Temporary address are not required by customers. Then they are falsely advertising static IPv6.
 
TataPlay does not support Dual ipv6 prefix assignment, which is required by Asus routers. Asus routers need one prefix for their WAN and another prefix for their LAN side. It is configured on the DHCPv6 server of the ISP to offer only a single prefix to each PPPOE session of a customer. Router must be able to use a single prefix when assigned and configure a globally routable WAN ipv6 from it.

It's a software limitation in Asus that must be fixed by them.
 
To better explain the process of IPv6 address assignment, you may read this.
In some networks, you do not need to assign a global IPv6 address on the CPE WAN link. Your decision depends on the type of CPE being used:

  • If the CPE is purchased by the subscriber, and is not a device specifically recommended by the service provider, you need to assign a global IPv6 address that can be routed on the Internet.
  • If the CPE is supplied by or recommended by the service provider, you can use the loopback interface to manage the CPE.
    In this case, you can use a link-local address or you can use an address that is derived from DHCPv6 prefix delegation.

As far as the solution to your problem is concerned, you may simply setup a RPi to act as a proxy from within your network. Install a DDNS daemon on it, and maybe use a password-enabled self-signed certificate protected HTTPS session which is reverse-proxied via your Rpi to access your router remotely.
 
Thanks @pillaicha

But I don't have RPI. I only have QNAP NAS and currently I am using Tailscale to access my Asus Router from WAN. But it's slow and hacky. I also have to keep Tailscale app running in the background which saps battery from my iPhone.
 
Back