IPv6 ICMP Inbound issue

[QuozL]

I am having an issue with incoming IPv6 ICMP ping requests on my Asus RT-AC88U running Merlin 384.12 on Win10 Pro 1903 and I'm hoping someone can maybe able to shed some light on it.

According to https://ipv6-test.com/ I score 18/20 with the only issue being it cannot ping my IPv6 address as per the screen shot below,

I believe this is also perhaps causing issues with some websites I am visiting and some other sites loading slowly or not at all as they all return to normal if I disable IPv6.

In the routers firewall settings I have enabled "Respond ICMP Echo (ping) Request from WAN"

as well in the Windows 10 Pro firewall I have added an inbound rule for IPv6 ICMP.

Is there someway to add an inbound rule in the routers IPv6 firewall to allow ICMP? As currently this is the only idea I can think could be causing the issue.

Another user on the same ISP with a RT-AC66U running the same version of Merlin has the same settings on his and he can receive inbound IPv6 ICMP requests fine and scores 20/20 on the https://ipv6-test.com/ site although he is not on a windows box. Testing on my Google pixel 3 connected via wifi also results in the same 18/20 score with failure on the ICMP inbound.

Any help or directions greatly appreciated.

Cheers Al

 

[Jumpstarter]

try a different browser, I have noticed some times it is a browser issue reading false negatives.

 

[Deleted member 22229]

Asus and Merlin firmware allow ICMPv6 requests by default.

 

[QuozL]

try a different browser, I have noticed some times it is a browser issue reading false negatives.

I tired with Edge as well as my usual browser Chrome with the same result.

Asus and Merlin firmware allow ICMPv6 requests by default.

Yes I read that as well but it seems for whatever reason they are not getting through when running the IPv6 test from https://ipv6-test.com/

 

[Jumpstarter]

i think it is an issue with the site and their test, I get the same results as you with both chrome and internet explorer, but I pass the ipv6 ping with firefox. last time I had this issue it was there site, hold on let me see if i can find another place that test ipv6 ping

 

[QuozL]

i think it is an issue with the site and their test, I get the same results as you with both chrome and internet explorer, but I pass the ipv6 ping with firefox. last time I had this issue it was there site, hold on let me see if i can find another place that test ipv6 ping

Cheers thanks for the info

 

[Jumpstarter]

use this site https://tools.keycdn.com/ipv6-ping and try pinging Ipv6.google.com see if you have any loss. if you don't then it is their website that is having the issue.

 

[Jumpstarter]

a more accurate results would be to use your command prompt and type ping -6 Ipv6.google.com

 

[Jumpstarter]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

ping -6 Ipv6.google.com

Pinging ipv6.l.google.com [2607:f8b0:4008:806::200e] with 32 bytes of data:
Reply from 2607:f8b0:4008:806::200e: time=19ms
Reply from 2607:f8b0:4008:806::200e: time=22ms
Reply from 2607:f8b0:4008:806::200e: time=17ms
Reply from 2607:f8b0:4008:806::200e: time=17ms

Ping statistics for 2607:f8b0:4008:806::200e:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 17ms, Maximum = 22ms, Average = 18ms

this is my results pinging from the command prompt.

 

[Jumpstarter]

if you want to do it with putty on the router

 ping6 -c 4 -I eth0 ipv6.google.com
PING ipv6.google.com (2607:f8b0:4008:80e::200e): 56 data bytes
64 bytes from 2607:f8b0:4008:80e::200e: seq=0 ttl=55 time=21.907 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=1 ttl=55 time=22.222 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=2 ttl=55 time=25.520 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=3 ttl=55 time=18.013 ms

--- ipv6.google.com ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 18.013/21.915/25.520 ms

 

[QuozL]

if you want to do it with putty on the router

 ping6 -c 4 -I eth0 ipv6.google.com
PING ipv6.google.com (2607:f8b0:4008:80e::200e): 56 data bytes
64 bytes from 2607:f8b0:4008:80e::200e: seq=0 ttl=55 time=21.907 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=1 ttl=55 time=22.222 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=2 ttl=55 time=25.520 ms
64 bytes from 2607:f8b0:4008:80e::200e: seq=3 ttl=55 time=18.013 ms

--- ipv6.google.com ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 18.013/21.915/25.520 ms

Ping statistics for
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 16ms, Maximum = 17ms, Average = 16ms
PS C:\WINDOWS\system32>

Seems to be working fine then, tried all three of the methods you mentioned all worked perfectly.

Cheers everyone seems to be the sites issue.

 

[QuozL]

if you want to do it with putty on the router

Not sure what putty on the router is?

 

[Jumpstarter]

putty ssh client to you router address.

 

[Jumpstarter]

it is like a command prompt you can use over SSH to access the commandline of your router.

 

[QuozL]

it is like a command prompt you can use over SSH to access the commandline of your router.

I'll steer clear of that for now

Were any of the tests I just ran testing the ping to me though as it seems that is what that site is saying it can't do?

 

[Jumpstarter]

you can also use this http://www.ipv6now.com.au/pingme.php to ping the IPv6 address that the https://ipv6-test.com/ claims is yours, if you have no packet loss then there is no issue with your ipv6. you should see that you are able to ping your IPV6 and not able to ping your IPV4 (unless you have ping from wan turned on next to your firewall options).

btw I just did this with mine and had no packet loss.

 

[Jumpstarter]

I'll steer clear of that for now

Were any of the tests I just ran testing the ping to me though as it seems that is what that site is saying it can't do?

In theory, if your IPV6 is working correctly, you should be able to ping to a ipv6 address with no packet loss, and also ping from another Host to your IPV6 address without any packet loss.

 

[Jumpstarter]

you can also use this http://www.ipv6now.com.au/pingme.php to ping the IPv6 address that the https://ipv6-test.com/ claims is yours, if you have no packet loss then there is no issue with your ipv6. you should see that you are able to ping your IPV6 and not able to ping your IPV4 (unless you have ping from wan turned on next to your firewall options).

btw I just did this with mine and had no packet loss.

also your IPV6 address is listed at the top corner of this page http://www.ipv6now.com.au/index.php aswell.

 

[QuozL]

In theory, if your IPV6 is working correctly, you should be able to ping to a ipv6 address with no packet loss, and also ping from another Host to your IPV6 address without any packet loss.

All the tests you gave me to do were 100% successful but do you know if any of those tests ping to my IPv6 address? The reason I ask is I think that is what that test on the https://ipv6-test.com/ is trying to do. I could be totally mistaken but I'm just trying to make 100% sure.

also your IPV6 address is listed at the top corner of this page http://www.ipv6now.com.au/index.php aswell.

Yep it is there

 

[Jumpstarter]

as long as you ran successful ping on this last test using your ipv6 address and had no packet loss then you are fine, that site uses its own Ping test from its own host address and if it's host site is down or if it has to wait to long to ping you, then it simply gives up and says you fail that test and gives you a lower score.