cancel
Showing results for 
Search instead for 
Did you mean: 
1

Ask

2

Reply

3

Solution

Possible IPV6 bug in Vodafone Wifi hub that impacts Android devices

VodMatt
2: Seeker
2: Seeker

Hi. I think I've found a bug in the IPV6 implementation in the Vodafone Wifi Hub that seems to only impact Android phones, that has been cause lots of connectivity problems on the Android devices connected to my home network. The connectivity issues have been driving me nuts since December when Vodafone started issue me an IPV6 address for my home broadband. I've also come up with a work around solution that allows me to keep IPV6 enabled on my network. but no longer impacts my Android phones. I'm writing this so that hopefully someone at Vodafone will see this and can investigate the router firmware, but also so that it might help others out if they experience a similar issue. Okay, so here goes...

So Vodafone allocate a /56 IPV6 address space to my home broadband connection, such as 3c4d:abcd:1234:f900::/56. That isn't the actual IPV6 address I've been allocated, but will do for this example.

Out of that /56 block, the router allocates 3 iPV6 subnets as /64 blocks:

3c4d:abcd:1234:f900::/64 - This is used for the WAN inferface for the global IP addresses
3c4d:abcd:1234:f901::/64 - This is allocated to the main internal network
3c4d:abcd:1234:f902::/64 - This is allocated to the Wifi 2 network, ie. the guest network

I actually have Wifi disabled in the router, as I instead have a seperate set of Wifi access points plugged into the ethernet port of the router. My Android devices connect to the Wifi access points and so all traffic is coming into the router via Ethernet. However even though Wifi is disabled, the router still allocates all 3 subnets internal, from what I can see on the Status page when logged into the router.

So when my Android devices first connect to the network, they get 2 IPV6 address in the subnet 3c4d:abcd:1234:f901::/64 for the main network. I know Android uses SLAAC for IPV6 allocation, so it isn't strictly the router handing out the addresses, but it does provide the subnet prefix. Anyway, every thing is okay so far.

However a few minutes later, the Android devices also get 2 extra IPV6 addresses in the Wifi 2 subnet of 3c4d:abcd:1234:f902::/64. This even though they are only connected to the main network (via my Wifi access point and ethernet into the router itself) and I have all Wifi on the router itself disable. This is when the Android devices start having connectivity issues. I believe this is because then the Android devices are trying to use that extra set of IPV6 address for the connections they are making. The router would obviously only route traffic coming back to IP addresses in the subnet to the Wifi 2 network, and so the Android devices don't see the returning traffic hence causing the connectivity issues.

My work around that I discovered last night is to go into the router settings and go to the Settings --> Local Network page. On there I disable IPV6 just on the Wifi 2 section and then save that change. If I then disconnect my Android devices from the Wifi and reconnect, they get allocated the first set of IP address on the 3c4d:abcd:1234:f901::/64 subnet, but the second allocation, that used to happen a few minutes later, for the subnet 3c4d:abcd:1234:f902::/64 that is supposed to be for the Wifi 2 network, then never happens. Everything then appears happy.

I'm not quite sure why, if when IPV6 is enable on the Wifi 2 network, this allocation of IP address on the 3c4d:abcd:1234:f902::/64 subnet only seems to happen on Android devices. We have 2 Android devices on our home network and it happens to both of them. My Windows devices and iOS device aren't impacted. They always only get IP address on the main network 3c4d:abcd:1234:f901::/64 subnet.

But I think it is a router firmware bug, as I don't think that a device connected to the main network, whether by Wifi or by Ethernet should even know about the Wifi 2 network 3c4d:abcd:1234:f902::/64 subnet.

Anyway, I hope this helps someone at Vodafone to dig deeper, or for others having a similar issue.

28 REPLIES 28

bappity
2: Seeker
2: Seeker

when I enable ipv6 on either network, android phones and my quest VR headsets experience super slow image loading times at random points in time every 5 minutes at least.

I was screaming my head off trying to figure out what was going wrong but all my issues disappeared after disabling ipv6. weird stuff

(Settings -> Local Network -> IPv6)

ocker
1: Seeker

I would build a pfsense box and run that as your router along with a seperate vm for openvpn and nextcloud.

What will your connection speed be? Most consumer routers have slow VPN speeds due to the cpu power encryption requires.

Ripshod
16: Advanced member
16: Advanced member

Reported. 

zb
3: Seeker
3: Seeker

But I think it is a router firmware bug, as I don't think that a device connected to the main network, whether by Wifi or by Ethernet should even know about the Wifi 2 network 3c4d:abcd:1234:f902::/64 subnet.


@VodMatt , thanks for sharing your report. 👍 You’re right, what you have observed would be a firmware bug, and a security issue too as the hub was leaking configuration details across networks that are supposed to be isolated from each other.

The potential good news is that the issue may have been fixed in some firmware update, because I switched to Vodafone recently and I have not observed this issue. As in your report, my Vodafone Power Hub also assigns /64 IPv6 prefixes ending in 0, 1 and 2 for the WAN, local network (WiFi + Ethernet) and guest WiFi network respectively, but I have not seen prefixes being leaked across the networks. My Android phone on the local network (WiFi) sees only the local network prefix; a Linux box connected by cable to one of the hub’s LAN Ethernet ports also sees only the local network prefix; and a Raspberry Pi connected to the guest WiFi network sees only the guest network prefix. All as it should be. I am using the Power Hub’s own WiFi rather than separate access points, but it shouldn’t matter.

If you’re still with Vodafone, try reverting your workaround (reenabling IPv6 on the guest WiFi network) to confirm that the issue was fixed!

I don't have a Power Hub. I have one of the Vodafone Vox3.0 routers. I've checked the firmware and it is still the same version and when I originally reported the issue.

Ripshod
16: Advanced member
16: Advanced member

@zb wrote:

 

As in your report, my Vodafone Power Hub also assigns /64 IPv6 prefixes ending in 0, 1 and 2 for the WAN, local network (WiFi + Ethernet) and guest WiFi network respectively

 That's an interesting point, piqued my interest somewhat. Are you sure WAN is assigned /64, as on my fully working Asus router I'm assinged /56 to the WAN. If you are being assigned /64 that could indeed be the root of the problem - the "bug" as it's being described.

 

Are you sure WAN is assigned /64, as on my fully working Asus router I'm assinged /56 to the WAN. If you are being assigned /64 that could indeed be the root of the problem - the "bug" as it's being described.

 

The Power Hub also separately acknowledges the /56 prefix, as in the following extract from its Status & Support tab:
 
Internet (WAN) IPv6 Prefix from DHCPv6 2abc:1234:5678:9000::/56
Internet (WAN) IPv6 Prefix 2abc:1234:5678:9000::/64
Local Network (LAN) IPv6 Prefix 2abc:1234:5678:9001::/64
Guest WiFi IPv6 Prefix2abc:1234:5678:9002::/64
 
This matches @VodMatt’s original report that the /56 block is subdivided in three /64 subnets: WAN, LAN and Guest WiFi. (In my case, using CityFibre FTTP’s infrastructure — the Power Hub’s WAN side is connected to an ONT box through an Ethernet cable.)
 
@Ripshod, your message of 30 June 2024 in this thread reads “Reported.”  Out of interest, how have you reported it? I have come across this Vodafone Submit Vulnerability Report page and form, but it gives the impression that it only applies to Vodafone websites as opposed to broadband routers.
 

Ripshod
16: Advanced member
16: Advanced member

 

You'll see a few of those around the forum. I reported a spam post with a dodgy link which was later removed. More recently I've been adding a better description when it happens 😁

 

addyrazz
4: Newbie

the dreaded IPV6 and vodafone, I disabled IPV6 on the useless Ultra Hub and was still causing problems, so I ditched the Ultra Hub router and purchased my own mesh network, all is perfect now, apart from we still dont have IPV6