NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

kwolf's avatar
kwolf
Guide
May 20, 2016
Solved

IPv6 ICMP Filtered

Doing the test on http://ipv6-test.com/ results in "Filtered" for ICMP, even if you disable "port scan and ddos protection" and enable "respond to ping on wan port".

 

The problem was discussed before and, despite what a couple users posted, it is actually not possible to get a passing score on ipv6-test because the R7000 stock firmware is filtering ICMP:  https://community.netgear.com/t5/Nighthawk-WiFi-Routers/R-7000-and-IPv6-Test/td-p/494908/page/2

 

This works fine if you flash XVortext Asus WRT firmware, but I can't use that due to broken QoS on IPv6.  This also proves it is a problem with the stock firmware.

 

Is this ever going to be fixed?  It's been an issue on every firmware version, even the latest "pulled" one (1.0.6.40)

  • Jim769's avatar
    Jim769
    May 21, 2016

    As I have mentioned in other threads here I worked with Netgear for months last year trying to get them to simply stop filtering the ICMP/v6 packets by changing a firewall rule and they have refused saying its a security risk. I don't understand why the network engineers at Netgear don't get that these packets must NOT be filtered for IPv6 to work properly. 

     

    Anyways it became like beating a dead horse and I finally gave up returned the Netgear router and bought an Asus RT-AC3100 and all problems were instantly solved. So the bottom line I doubt there will be any fix for this in the foreseeable future and IPv6 will continue not to work the way it was intended for Netgear routers. If you want or need a router that has real working IPv6 then you will need to buy from a different manufacture.

18 Replies

  • Retired_Member's avatar
    Retired_Member

    kwolf wrote:

     

    Is this ever going to be fixed?  It's been an issue on every firmware version, even the latest "pulled" one (1.0.6.40)


    In order to fix it you'd first have to admit it's a problem.

    • Jim769's avatar
      Jim769
      Luminary

      As I have mentioned in other threads here I worked with Netgear for months last year trying to get them to simply stop filtering the ICMP/v6 packets by changing a firewall rule and they have refused saying its a security risk. I don't understand why the network engineers at Netgear don't get that these packets must NOT be filtered for IPv6 to work properly. 

       

      Anyways it became like beating a dead horse and I finally gave up returned the Netgear router and bought an Asus RT-AC3100 and all problems were instantly solved. So the bottom line I doubt there will be any fix for this in the foreseeable future and IPv6 will continue not to work the way it was intended for Netgear routers. If you want or need a router that has real working IPv6 then you will need to buy from a different manufacture.

      • kwolf's avatar
        kwolf
        Guide

        Thanks m8, I'll keep ASUS in mind for my next router purchase.

         

        Honestly, if the Netgear engineers are too dense to understand the extremely basic FACT that ICMP in IPv6 is a fundamental requirement of the protocol, I wonder what else is overlooked in the router firmware.  This certainly doesn't bode well for future firmware releases.  No wonder the past few firmwares have been completely botched, with this caliber of "engineers" working on them...