Traceroute from https://network-tools.webwiz.net/traceroute.htm to 2001:xxx:xxx:23aa::4fb automatically assigned to my laptop (tried configuring the LAN with 23aa for the hell of it).

1 1 ms 2a00:85c0:1::2
2 5 ms 2001:1900:5:2:2:0:8:7d75
3 5 ms 2001:1900:2::3:159
4 6 ms 2001:1900:5:2:2::2a5e
5 9 ms 2001:b98:1:1::ff3e:b0
6 12 ms 2001:b98:300:101::35:2
7 Timeout Unknown Host did not respond to ping

Cheers

What have you got against configuring the LAN as 2300? (2-ffff as the router has 1).

It's the one thing you you don't seem to have tried, and it is what Daisy said you should do!

It's so simple.

Edited by pluralist (Mon 26-Jul-21 21:25:58)

Have Daisy verified they have added the route on their side, pointing towards your firewall? It doesn't look like they have because the error response isn't coming back from the UDM (unless ICMP is disabled and making everything look like a timeout).

What is this firewall? The one in the router or something else? Since when did a (software/firmware) firewall have its own IP address?

If Daisy have only routed the 2300 (/64) in the /56, then pings to LAN 2301 will not get go anywhere.

Most here seem to me to be grossly over-complicating this. The OP is not setting up his LAN as specified by Daisy. Before trying the strange 2301, for heavens sake can't we get the Daisy-specified setup tried?

In reply to a post by pluralist:

What have you got against configuring the LAN as 2300? (2-ffff as the router has 1).

It's the one thing you you don't seem to have tried, and it is what Daisy said you should do!

It's so simple.

I have tried 2300, just tried again and performed a traceroute to 2001:xxx:xxx:2300::4fb assigned to my laptop and got the same results. IPv6 tests fail.

In reply to a post by jpm:

Have Daisy verified they have added the route on their side, pointing towards your firewall? It doesn't look like they have because the error response isn't coming back from the UDM (unless ICMP is disabled and making everything look like a timeout).

I've received a reply from my account manager who sent my request to the relevant team, awaiting next response.

In reply to a post by pluralist:

What is this firewall? The one in the router or something else? Since when did a (software/firmware) firewall have its own IP address?

If Daisy have only routed the 2300 (/64) in the /56, then pings to LAN 2301 will not get go anywhere.

Most here seem to me to be grossly over-complicating this. The OP is not setting up his LAN as specified by Daisy. Before trying the strange 2301, for heavens sake can't we get the Daisy-specified setup tried?

By firewall I mean UDM. The routing goes ISP -> Cisco router -> UDM -> LAN hosts, you can't put addresses from the same /64 on the WAN side of the UDM as well as on a LAN subnet.

Currently we know what /64 to use between the Cisco router and the WAN side of the UDM, because that works. We're just waiting for confirmation that the whole allocation has been routed correctly.

Edited by jpm (Tue 27-Jul-21 09:44:35)

In reply to a post by pluralist:

What is this firewall? The one in the router or something else? Since when did a (software/firmware) firewall have its own IP address?

If Daisy have only routed the 2300 (/64) in the /56, then pings to LAN 2301 will not get go anywhere.

Most here seem to me to be grossly over-complicating this. The OP is not setting up his LAN as specified by Daisy. Before trying the strange 2301, for heavens sake can't we get the Daisy-specified setup tried?

The firewall is built in the UDM Pro, I haven't added any rules for IPv6 yet.

What should I use for the LAN?

Here's how Ubiquiti say it should be setup:
WAN
IPv6 Connection Type: Static IP
IPv6 Address: 2001:db8::1
Prefix Length: 64
Router: 2001:db8::2
LAN
IPv6 Interface Type: Static
IPv6 Gateway Subnet: 2001:db8:1::1/64
IPv6 RA: Checked
IPv6 RA Priority: High
DHCPv6: Checked
DHCPv6 Range > Start: 2001:db8:1::2
DHCPv6 Range > Stop: 2001:db8:1::7d1
DHCPv6 Lease Time: 86400
DHCPv6/RDNSS DNS Control: Auto
DHCPv6/RDNSS Name Server > DNS Server 1: <customizable>
DHCPv6/RDNSS Name Server > DNS Server 2: <customizable>
DHCPv6/RDNSS Name Server > DNS Server 3: <customizable>
DHCPv6/RDNSS Name Server > DNS Server 4: <customizable>

https://help.ui.com/hc/en-us/articles/115005868927-U...

Oh heck!

I've just realised why nobody agrees with me. I think I have been barking up the wrong tree. I'd forgotten what I meant to query as soon as I read your OP. The fact that you have two routers. I know how to configure that with IPv4, as you obviously do as you have it working. But as I just said, I forgot .

Apologies to you and the rest.

But I don't think they have it right either.

You have things working fine on IPv4. But which is the WAN link, as they both seem to have internet connectivity, and which is allocating your LAN addresses by DHCP? Are they both in router mode, or is the WAN link bridged?

In reply to a post by pluralist:

Oh heck!

I've just realised why nobody agrees with me. I think I have been barking up the wrong tree. I'd forgotten what I meant to query as soon as I read your OP. The fact that you have two routers. I know how to configure that with IPv4, as you obviously do as you have it working. But as I just said, I forgot .

Apologies to you and the rest.

But I don't think they have it right either.

You have things working fine on IPv4. But which is the WAN link, as they both seem to have internet connectivity, and which is allocating your LAN addresses by DHCP? Are they both in router mode, or is the WAN link bridged?

No worries!

I'm only using Gi0/1/0 on the cisco, the port I've always used.

DHCP and DHCPv6 are provided by the UDMP, Daisy have been very closed about their setup but maybe the fact that they are unable to provide DHCPv6 shows it is in bridge mode, I'll find out.