Visitor
•
1 Message
Multiple Routers (Now on New XB8) - FW.ipv6.input drop still an issue
Hello,
I have had issues with any current Xfinity routers starting with the XB7 and now with the new XB8.
The issue is all over the internet from Xfinity customers complaining about fw.ipv6.input drop.
I have records in my firewall logs of this error all day long every day. I lose VPN connection at work 3-4 times a day.
A solution is needed... Has any fw.ipv6.input drop issue ever been resolved since reported back in 2018?
I need solutions to this issue.
CCYvonne
Contributor
•
340 Messages
3 years ago
Hello @Elykin01 You have reached the right team to work on resolving your internet connection issue. Can you please send our team a direct message with your full name and full address?
To send a "Direct Message" to Xfinity Support:
Click "Sign In" if necessary
Click the "Direct Messaging" icon or https://comca.st/3EqVMu7
Click the "New message" (pencil and paper) icon
The "To:" line prompts you to "Type the name of a person". Instead, type "Xfinity Support" there
- As you are typing a drop-down list appears. Select "Xfinity Support" from that list
- An "Xfinity Support" graphic replaces the "To:" line
Type your message in the text area near the bottom of the window
Press Enter to send it
0
0
flatlander3
Problem Solver
•
1.5K Messages
3 years ago
The issue is actually older than that. You can find threads going back 7 years on it on other sites.
Solution? Well, work around. A BSD kernel seems to ride with comcast ipv6 a bit better than any of their modems with some caveats. Buy a cheap modem (not a gateway) and put it in bridge mode. Take the modem out of the mix. Then use a multi-Ethernet port BSD box to be the firewall/router, or use a distribution like pfsense or opnsense if you want a web interface.
To get ipv6 more or less stable, don't release the dhcp6 lease when you are trying to renew, or ask if it's still valid. Option on pfsense or opnsense is " Do not allow PD/Address release." If the lease is released, sometimes you get dead air (no response from the server) which is part of the problem, then your interfaces all get boned and routing screws up.
If you keep the lease and get dead air, it doesn't matter. You check it in half the lease time anyway, so if the server isn't there, it will be in a few minutes. Seems to ride it better.
You don't have options with gateways.
**An incredible hack solution would be to disable ipv6 entirely on your BSD box -- no ipv6 to internal clients. Yeah, that works. It's stable too.
(edited)
0
0