Fritz!Box 7270
From SixXS Wiki
NOTE: The original author of this article only has a German branded Fritz!Box 7270 available. If you have an English Fritz!Box or another model than the 7270, please add to this article.
Contents |
Prerequisites
In order to get IPv6 working with your Fritz!Box 7270 you need to take the following steps on the SixXS website:
- First create a SixXS account.
- Request heartbeat tunnel.
- Request a subnet. ( You need additional ISK's for a subnet, therefore if you are a new User best is to provide a XING or Linkedin profile in your signup reason to get additional ISK [Credits FAQ ] )
Be careful with your ISK!
If you get a Error on your System log as follows:
"IPv6 (SixXS Tunnel) Internet connection failed. Check subnet"
You have forgotten to request your subnet. Get ISK and request it. For example as you do not have up and running, Read FAQ how to get extra ISKs.
Feb, 11th 2011: In firmware version 54.04.88 the tunnel fails, if you do not have a subnet. After opening an account the tunnel has to be up for a week before you get enough ISK to request a subnet. Unfortunately there is no way to get the tunnel running in the FritzBox without a subnet, so you need to find another way, as was proposed in the forum: [1]
Additionally, you need either a Fritz!Box 7270, 7240 or 7390 with Firmware version at least 54.04.81-17599 (international version) or 74.04.86 (german version) (available as of Sep, 16th 2010).
Firmware xx.04.86 isn't yet available for the international version, but you can get the FRITZ! Lab IPv6 firmware from The AVM service site.
Currently (Sept 2010) there is no other Fritz!Box supporting IPv6 other than the ones mentioned above. Statements from AVM suggest that there will be no IPv6 support on older Fritz!Box models.
20 April 2011: Updated Firmware for many AVM devices now includes IPv6 support: Complete list of devices: AVM Fritz!Box WLAN 3270 and 3370, FRITZ!Box Fon WLAN 7240, 7270 (only v2, v3 and international, no IPv6 on 7270 v1), 7320, 7340, 7390 and 7570
Configuration
After you have a heartbeat tunnel and a subnet attached to it, log in to your Fritz!Box. See screenshot for detailed instructions.
German Firmware UI
- Go to Einstellungen -> Internet -> IPv6.
- Select Unterstützung für IPv6 aktivieren.
- Select IPv6 über einen SixXS-Tunnel nutzen.
- Enter your username, password and tunnel ID.
- Click Übernehmen.
English Firmware UI
- Go to Settings -> Advanced Settings -> Internet -> IPv6.
- Select Enable support for IPv6.
- Select Use IPv6 via a SixXS tunnel.
- Enter your username, password and tunnel ID.
- Click Apply.
Both Languages
Now the Fritz!Box will reset and should come up with everything working. The startscreen will show IPv6 connected when ready.
Note for FritzBox 7390 and FritzBox 7270 users
Attention - FritzBox 7390 users and FritzBox 7270 users (with V 74.05.06 software), and maybe others as well, must use a different syntax for the username : it is your SIXXS username followed by a slash and your tunnel ID, as in AAA1-SIXXS/T12345.
Regarding the password, you must not use the password sent by email when you registered your SIXXS username but the TIC password that can be setup on your Tunnel Information page at sixxs.net/home/tunnelinfo/?T##### (T##### is your tunnel number). This page is accessed from the Details Box of the Tunnel Listing on your homepage.
This applies to my Swiss (.ch) FritzBox 7390 using the english language firmware, but has also been reported for the German FritzBox on the forum as fritzbox username problem
Clients
Make sure to renew the DHCP lease on your local clients, as you won't get a working IPv6 address otherwise.
Testing
On Linux and Mac OS X you can test your Tunnel with ping6
$ ping6 ipv6.google.com PING6(56=40+8+8 bytes) 2a01:xxx:xxx::xxx:xxx:xxx:xxx --> 2001:4860:a003::68 16 bytes from 2001:4860:a003::68, icmp_seq=0 hlim=59 time=51.396 ms 16 bytes from 2001:4860:a003::68, icmp_seq=1 hlim=59 time=56.082 ms 16 bytes from 2001:4860:a003::68, icmp_seq=2 hlim=59 time=56.018 ms 16 bytes from 2001:4860:a003::68, icmp_seq=3 hlim=59 time=64.578 ms
On Solaris and OpenSolaris normal ping does ipv4 and ipv6 so you can just use ping for the same test.
Also, you can see your IPv6 address here: http://www.ipv6forum.com/test_ipv6.php
DHCPv6 and Router Advertisments
Enabling IPv6 will (firmware 54.04.86) unconditionally enable a DHCPv6 server on the Fritz!Box. There does not appear to be a way to disable the server (e.g. if you already have a DHCPv6 server on your local network). The DHCPv6 server will provide the address of the Fritz!Box as the Recursive DNS Server IPv6 address.
The parameters of the router advertisement messages sent by the Fritz!Box can't be controlled. Currently (firmware 54.04.86) they are hard-coded to:
- Disable stateful (DHCPv6) address configuration
- Enable stateful configuration of other parameters
- Enable autonomous address-configuration for the advertised prefix
For those who have enabled telnet on Fritz!Box there is the possibility to overcome those shortcomings. In ar7.cfg there is a setting "dhcpv6lanmode" that controls the DHCPv6 and RA behaviour. The supported values are:
dhcpv6lanmode_off dhcpv6lanmode_stateless (default) dhcpv6lanmode_statefull dhcpv6lanmode_onlyprefixes dhcpv6lanmode_off_stateless dhcpv6lanmode_off_statefull
"dhcpv6lanmode_off_stateless" is most useful if running a DHCPv6 service on another server as it turns off the DHCPv6 server in the Fritz!Box but leaves the "Other configuration" option in the RA on. "dhcpv6lanmode_off_statefull" in addition turns on the "Managed address configuration" option in the RA to allow for DHCPv6 server assigned addresses. (The "..._off_..." settings have been tested on a 7390 with 84.05.07beta firmware. The setting is already in the 84.05.05 firmware but has not been verified to work.)
Miscellaneous
Incoming ICMPv6 traffic to your subnet is currently (firmware 54.04.86) blocked, meaning that you won't be able to e.g. ping hosts behind the Fritz!Box. The IPv6 firewall only allows you to open UDP/TCP ports on a per-host basis so this limitation is hardcoded.
The Fritz!Box (firmware 54.04.86) automatically picks a /64 subnet from the /48 subnet and you won't be able to pick a different subnet. You can also not set up any static routes for additional subnets.
Old versions of the Fritz!Box IPv6 Labor Firmware caused the SixXS status graphics for the tunnel to show up with 100% package loss. This issue was caused by the firmware blocking incoming ICMP6 traffic to the tunnel endpoint (your local end does not respond to ping). This incompatibility with the SixXS tunnel uptime verification method showed up with firmwares up to Fritz!Box IPv6 Labor Firmware 54.04.94-13992 and was fixed in 54.04.94-14338. So make sure you update at least to that version. See this forum discussion for more information.
FAQ
"Internetverbindung IPv6 (SixXS Tunnel) ist fehlgeschlagen. Subnetz überprüfen"
- You don't have a subnet allocated to your Tunnel or no Tunnel. See paragraph Feb 11th, 2011 above.
- You may haven't entered the right Tunnel-ID. In /var/flash/ar7.cfg (telnet to your box and open with nvi) theres a section "sixxs". In this section you find the data your box will use to connect to sixxs. Make sure the Tunnel-ID is right and there is no trailing "\t". This may be a Bug in Lab-Version of 7270 when copy/paste the Tunnel-ID from sixxs. You can delete the \t by webinterface.
Note: Call #96*7* to enable telnetd. Call #96*8* to disable telnetd again.
External Links
- AVM - Makers of the FRITZ!Box.
