Ee IPv6 address ranges

[b1ink3red]

Hi, I'm in the process of creating firewall rules and I would like to know what the EE 4/5G IPv6 address ranges are.  Is someone able to advise whether there is an updated list of them please? 

[TrickyT]

I am not sure that EE mobile broadband uses them, I am sure that someone more knowledgeable than me will know.

But I have just moved from Sky broadband to EE mobile broadband and put the Smart 5G Hub 3 on passthrough mode.

I used to get iPv6 addresses with Sky, but not getting any with EE mobile broadband.

[Matt_124]

Not sure of the ranges in all honesty. Not overly familiar with that side of things apart from being aware that CGNAT is used and some use cases will struggle with the default IP Type on EE's network but it can be tweaked via the APN settings.

Mobile Broadband from EE uses IPV4V6 by default. Depending on your router configuration you may be able to change this setting to one of your choosing if that is not what you require.

[b1ink3red]

Thanks you all for your replies and I am in the process of whitelisting the EE IPv6 address ranges.  Looking at my applictaion logs after a week, it seems that my EE mobile internet seems to be using them.  Do  anybody know whether this is going to be the norm (UK wide) ?

[bert6667]

ee mobile will be in the 2a00:23ee::/32 range, your individual allocation may change around because it's a dynamic assignment but all ee mobile customers nationally will be inside of this range.

You will have a whole /64 assigned to your phone at any one time, and your phone / any tethered devices will be in this range.

The larger range 2a00:2380::/25 is for all of BT, including ee mobile and bt home broadband.

IPv6 is a lot easier than legacy ip, one large range for the whole isp instead of a hideous mess of fragmented ranges.

You can see the BGP announcements here: https://bgp.he.net/AS2856#_prefixes6

[TrickyT]

I have been doing some messing around with my UDM-SE and iPV6 addresses.

To get IPv6 to work I have to enable SLAAC with a prefix delegation of 64, then enable IPv6 in each individual VLAN I have, but this can be hit and miss as it seems to drop the IPv6 address.

If I enable SLAAC with a single network, choosing my main network, then enabling  IPv6 on that associated VLAN, I have no issues.

[bert6667]

With a prefix delegation of /64 you only have enough address space to create a single vlan.

try requesting a prefix delegation of /56 then you should have enough for up to 256 vlans, you definitely can get /56 on fibre but I’m not sure how things are configured for 5g.. 

the idea is you receive a /56 delegation from the isp, then split that into a /64 for each vlan you have.

[TrickyT]

I have tried configuring it several different ways.  

IPv6 connection - SLAAC with a prefix delegation of 56.   It then allocates an IPv6 address to the WAN, but as soon as I enable IPv6 in the network, the IPv6 address in the WAN drops.

The only way I can get an IPv6 address is doing as I previously posted. 

[bert6667]

What type of connection? What's the UDM-SE physically connected to?

Unifi stuff has pretty lousy IPv6 support btw, they are a long way behind other vendors...