With the distribution of IPv6 to LAN?

Question

linux

router ASUS N-16
firmware 1.9.2.7-rtn-r5066
external IPv4 white, dynamic via DHCP
authorization via WAN - 802.1x-MD5

IPv6 I receive via 6to4 .
The router itself receives IPv6, pings ipv6.google.com from it

six0      Link encap:IPv6-in-IPv4  
          inet6 addr: ::169.254.150.42/128 Scope:Compat
          inet6 addr: 2002:****:bff6:0:a0e7:f87f::/16 Scope:Global
          UP RUNNING NOARP  MTU:1280  Metric:1
          RX packets:246 errors:0 dropped:0 overruns:0 frame:0
          TX packets:867 errors:2 dropped:0 overruns:0 carrier:2
          collisions:0 txqueuelen:0 
          RX bytes:58086 (56.7 KiB)  TX bytes:107132 (104.6 KiB)

The laptop of the local network received a working IPv6 1 time when the router was rebooted. Then I rebooted the laptop - no IPv6.

[[email protected] root]$ cat   /tmp/etc/dnsmasq.conf
user=nobody
resolv-file=/tmp/resolv.conf
no-poll
interface=br0
no-negcache
cache-size=512
dhcp-leasefile=/tmp/dnsmasq.log
dhcp-range=lan,192.168.1.80,192.168.1.254,86400
read-ethers
dhcp-authoritative
dhcp-range=lan,::,static,86400
dhcp-option=lan,option6:23,2001:4860:4860::8888,[::]
dhcp-option=lan,option6:32,600

[[email protected] root]$ cat /tmp/etc/radvd.conf
interface br0 {
IgnoreIfMissing on;
AdvSendAdvert on;
AdvOtherConfigFlag on;
prefix 2002::/64
 {AdvOnLink on;AdvAutonomous on;Base6to4Interface vlan2;};RDNSS 2001:4860:4860::8888 {};
};

In the logs of the router, spam looks like:

Aug 15 13:09:29 dnsmasq-dhcp[235]: DHCPSOLICIT(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f
Aug 15 13:09:29 dnsmasq-dhcp[235]: DHCPADVERTISE(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f no addresses available
Aug 15 13:09:30 dnsmasq-dhcp[235]: DHCPSOLICIT(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f
Aug 15 13:09:30 dnsmasq-dhcp[235]: DHCPADVERTISE(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f no addresses available
Aug 15 13:09:32 dnsmasq-dhcp[235]: DHCPSOLICIT(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f
Aug 15 13:09:32 dnsmasq-dhcp[235]: DHCPADVERTISE(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f no addresses available
Aug 15 13:09:36 dnsmasq-dhcp[235]: DHCPSOLICIT(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f
Aug 15 13:09:36 dnsmasq-dhcp[235]: DHCPADVERTISE(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f no addresses available
Aug 15 13:09:44 dnsmasq-dhcp[235]: DHCPSOLICIT(br0) 00:01:00:01:16:2e:17:62:b8:70:f4:45:46:5f

those. it looks like the address space has run out ...
I understand correctly that the inet6 addr address received by the router via 6to4: 2002: ****: bff6: 0: a0e7: f87f:: / 16 Scope: Global is actually a 16-bit address range (65536 addresses )?
I have a local network with a mask of 255.255.255.0 , i.e. I am 100% satisfied (and even desirable) if the last byte of the ipv6 address matches the last byte of the ipv4 address.
Moreover, I don’t even have to issue IPv6 to all clients on my home network, I have magical “IPv4 (/etc/ethers) nailed to the MAC address - I’m quite satisfied if IPv6 is issued only to them.
What to do?

Answer 1

To assign a LAN address to clients, SLAAC is used, respectively, from time to time the router announces only the prefix / 64, after receiving which the clients configure the addresses themselves. Until the RA announcement is received, the client does not know that he needs to configure something and where he has a next-hop / default ipv6 gateway.
Depending on the OS, the client can kick the router by sending RS packets and DHCPv6 requests.
In 1.9.2.7-rtn-r5066, radvd was used with default RA advertise timeouts, so immediately after rebooting the client, you need to wait a bit until all stages of address autoconfiguration have passed.
Several addresses on the rocker interface are "old" 6to4 IPv6 addresses resulting from a dynamic IPv4 address when it is changed.
I recommend updating the firmware to a newer one (nightly builds here asus.vectormm.net , the current release is 1.9.2.7-rtn-r5298), which has a lot of IPv6 improvements, in particular announcements every 7-10 seconds, to quickly get a prefix by clients, support for announcing obsolete prefixes, when they are changed with dynamic IPv6/IPv4, other other. You will probably need to go to the IPv6 page and do some tweaking.
There will be questions - contact.

Answer 2

I didn’t touch the firewall, but who knows what’s in the router’s firmware by default ...
As I understand it, the firewall is iptables and ip6tables, right? How to check their condition?

Answer 3

configure the ROUTER's DHCP to distribute ipv6 to the LAN so far, not all routers can work normally with ipv6 update the router firmware, update the network card drivers