By default, the XBee Hive for Wi-SUN is configured to allow IPv6 traffic to pass between the Wi-SUN network and other network interfaces, enabling communication between connected networks. However, this alone does not inform other devices on your network how to reach the Wi-SUN network. Distributing this routing information is a separate step that must be done manually if you are not using DHCPv6 Prefix Delegation.

IPv6 networks typically rely on DHCPv6 Prefix Delegation and Router Advertisements to automatically distribute routing information. If your network does not support these features, devices may not know how to reach your Wi-SUN network. As a result, some traffic may be dropped, preventing proper communication. To resolve this, you must manually define static routes elsewhere on your network.

Step 1: Configure Border Router packet filtering

When accessing the device configuration through the local web UI or Digi Remote Manager, the packet filtering rules can be found in Firewall > Packet filtering.

When accessing the device configuration through the local command line, under config, the packet filtering rules can be found in firewall filter.

The default XBee Hive for Wi-SUN configuration includes the following firewall packet filtering rules.

Allow all outgoing IPv6 traffic from Wi-SUN

If this rule is disabled or removed, Wi-SUN nodes will not be able to initiate connections to other IPv6 hosts.

Field Value Description

Enable

True (enabled)

This packet filtering rule is enabled.

Action

Accept

Allow matching network connections.

IP version

IPv6

This rule matches only IPv6 traffic. Wi-SUN networks are IPv6-only.

Protocol

Any

This rule matches any IPv6 protocol (TCP, UDP, ICMPv6).

Source zone

Wi-SUN

This rule matches connections from network interfaces which are members of this firewall zone — in other words, connections originating from the Wi-SUN network.

Destination zone

Any

This rule applies to all matching network connections.

Allow incoming IPv6 traffic from trusted networks to Wi-SUN

If this rule is disabled or removed, other IPv6 hosts will not be able to initiate connections to Wi-SUN nodes.

Field Value Description

Enable

True (enabled)

This packet filtering rule is enabled.

Action

Accept

Allow matching network connections.

IP version

IPv6

This rule matches only IPv6 traffic. Wi-SUN networks are IPv6-only.

Protocol

Any

This rule matches any IPv6 protocol (TCP, UDP, ICMPv6).

Source zone

Internal

This rule matches connections from network interfaces which are members of this firewall zone.

Destination zone

Wi-SUN

This rule matches any network connection going to the Wi-SUN network.

Step 2: Configure static routing from other hosts

If possible to do so, configure the default router/gateway of your local network with a static route directing traffic for the IPv6 prefix of the Wi-SUN network (default: fd12::/64) to the Wi-SUN Border Router.

Otherwise, configure a static route directly on the other IPv6 host. The instructions for this will vary by operating system and are out of scope for this guide.

Step 3: Test communication

For this example, we will assume that you have direct serial access to an XBee for Wi-SUN module which is connected to the Border Router’s network.

If your Wi-SUN network nodes are another type of device, consult your device manufacturer’s documentation for instructions to perform IPv6 communication.

  1. Identify the address of the IPv6 host you will be communicating with.

    1. For example, on a Linux host, run ip -6 address show and find the network interface through which the XBee Hive for Wi-SUN can be reached.

    2. Disregard any IPv6 addresses beginning with fe80:; these are link-local addresses, and will not be reachable from the Wi-SUN network.

  2. On the XBee:

    1. Identify the IPv6 address of the XBee by running the command ATMY.

    2. Send an ICMPv6 ping to the IPv6 host by running the command ATPG with the IPv6 host’s address. For example:

      ATPG 2001:db8::5f1:1234

      This command returns the number of milliseconds that the ping request took to complete.

  3. On the IPv6 host, send an ICMPv6 ping to the XBee.

Troubleshooting

ATPG returns ERROR

  • Verify that the "Allow all outgoing IPv6 traffic from Wi-SUN" packet filtering rule is enabled.

  • Check that the IPv6 address given to ATPG is correct.

  • Check the XBee Hive for Wi-SUN system log for any messages indicating ICMPv6 packets are being dropped.

  • Check the system or firewall logs on the IPv6 host for any messages indicating ICMPv6 packets are being dropped.

    • The instructions for this will vary by operating system and are out of scope for this guide.

Ping from IPv6 host to XBee times out

  • Verify that the "Allow incoming IPv6 traffic from trusted networks to Wi-SUN" packet filtering rule is enabled.

  • Check that the correct IPv6 address is being used as the destination address for the ping.

  • Check the system or firewall logs on the IPv6 host for any messages indicating ICMPv6 packets are being dropped.

    • The instructions for this will vary by operating system and are out of scope for this guide.

  • Check the XBee Hive for Wi-SUN system log for any messages indicating ICMPv6 packets are being dropped.