AP Networking Exam PrepBuild • Secure • Troubleshoot • Verify
Free networking guide • Worked examples • Practice labs

IPv6 Addressing & Troubleshooting Guide

Read IPv6 addresses without guessing, find out how devices get an address, and work through the exact checks that help you locate an IPv6 connection problem.

Independent AP Networking study resource • Updated September 25, 2026
Start with IPv6 basicsPractice 24 free flashcards
Packet-loss rule: first find where loss begins, then classify the mechanism before choosing the fix.
Practice with Flashcards
Start here

What IPv6 actually changes

IPv4 and IPv6 both move packets between networks. IPv6 uses 128-bit addresses, normally written as eight groups of hexadecimal digits. The longer address is not the hard part; the real skill is knowing whether the device has an address, a router, working name resolution and a route to the destination.

Use the AP Networking IPv6 and Neighbor Discovery Practice Test after reviewing IPv6 notation to diagnose control and path state. The 75 questions separate Router Advertisement fields, SLAAC formation, neighbor resolution, address lifetimes, source selection, and default-router availability.

Work through this guide in order if IPv6 is new to you. If you already have a failed connection, jump to the troubleshooting checklist or the worked cases.

Swipe to see the rest →

IPv4 habitIPv6 equivalentWhat to inspect
Read the IP address and maskRead the address and prefix lengthDoes the address belong to the intended network?
Find the default gatewayFind the default router learned from Router AdvertisementsIs there a usable default route?
Use ARP to resolve a local peerUse Neighbor Discovery (ICMPv6)Does the neighbor have a reachable link-layer address?
Test DNS A recordsTest DNS AAAA recordsIs the hostname resolving to a usable IPv6 address?
Addressing basics

How to read an IPv6 address

Each group contains up to four hexadecimal digits (0–9 and a–f). A full IPv6 address contains eight groups separated by colons. You may drop leading zeros inside a group and replace one consecutive run of zero groups with ::.

Worked example

2001:0db8:0000:0000:0000:0000:0042:0001

Remove leading zeros: 2001:db8:0:0:0:0:42:1

Compress the longest zero run: 2001:db8::42:1

2001:db8::/32 is reserved for documentation, so these examples do not point to a real public network.

Common mistake: :: can appear only once in a valid IPv6 address. Two compressed runs would leave the missing group count ambiguous.
Know what you are looking at

Global, link-local, loopback and multicast addresses

Swipe to see the rest →

Address or rangeMeaningTroubleshooting use
2000::/3Current global unicast allocation rangeMay be routable beyond the local network, subject to routing and policy
fe80::/10Link-local unicastCommunicates only on the local link; often appears as the next-hop router
fc00::/7Unique local unicastInternal addressing; not intended for global internet routing
::1LoopbackTest the local IPv6 software stack
::Unspecified addressA device has not selected a source address yet
ff00::/8MulticastUsed by IPv6 control and group communication

A device can have several IPv6 addresses on one interface. Seeing both fe80:: and a global address is normal.

Prefix math

Understand /64 without counting every bit

A prefix identifies the network portion of an address. On a common /64 LAN, the first 64 bits—the first four full groups—identify the subnet. The remaining 64 bits identify an interface within that subnet.

Same subnet or different subnet?

2001:db8:42:10::5/64 and 2001:db8:42:10::99/64 share the first four groups: same /64.

2001:db8:42:11::99/64 changes the fourth group: different /64.

Do not confuse a device’s /64 on-link prefix with the shorter prefix an organization might receive from an ISP. For example, a /56 allocation can be divided into multiple /64 LANs.

Free practice

Try three quick prefix decisions

  1. Do 2001:db8:aa:7::1/64 and 2001:db8:aa:7::fe/64 share a subnet? Yes.
  2. Does 2001:db8:aa:8::fe/64 share that subnet? No.
  3. How many /64 networks fit inside a /60? 16, because four additional prefix bits select the subnet.
A /64 is the usual SLAAC LAN prefix, not a rule that every IPv6 interface or route must use /64.
How addresses appear

SLAAC: the device can build its own address

With Stateless Address Autoconfiguration (SLAAC), a router advertises a network prefix. The device combines that prefix with an interface identifier, checks for a duplicate address and can begin using the address when it is valid. Many devices also create temporary privacy addresses for outgoing connections.

Interface comes upLink-local addressRouter SolicitationRouter AdvertisementAddress + duplicate check

The Router Advertisement can tell the host which prefix is on-link, whether SLAAC is allowed and which router can forward off-link traffic. A host can have a link-local address even if it never receives a usable Router Advertisement.

For a deeper look at what packets prove, see our free packet-capture practice lab.

Configuration options

SLAAC versus DHCPv6: what each one supplies

Swipe to see the rest →

ConfigurationHow the host gets itWhat to remember
SLAACRouter Advertisement supplies an autonomous prefix; host forms its own addressNo DHCPv6 address server is required
Stateful DHCPv6DHCPv6 server assigns the addressRouter Advertisements still normally supply the default-router information
Stateless DHCPv6SLAAC supplies the address; DHCPv6 may supply other settingsAddress and DNS configuration can come from different places
RDNSS in RARouter Advertisement carries recursive DNS server informationSupported by many modern hosts

A missing DHCPv6 lease does not automatically explain a missing default route. Check the Router Advertisement and routing table separately.

How devices find neighbors

Neighbor Discovery replaces ARP in IPv6

IPv6 uses ICMPv6 Neighbor Discovery rather than IPv4 ARP. A device sends a Neighbor Solicitation to discover the link-layer address of a neighbor; a Neighbor Advertisement can supply the answer. Routers use Router Advertisements to announce themselves and network information.

Swipe to see the rest →

ICMPv6 messageTypeTypical purpose
Router Solicitation133Ask a router to advertise its information
Router Advertisement134Announce router, prefix and other network information
Neighbor Solicitation135Resolve a neighbor or check for duplicate addresses
Neighbor Advertisement136Respond with neighbor information or announce a change
Echo Request / Reply128 / 129Test reachability with ping

If the neighbor entry stays incomplete, look at VLAN membership, wireless isolation, multicast handling and local firewall rules before blaming the remote website.

Essential protocol

Why blocking all ICMPv6 breaks IPv6

ICMPv6 is not just a ping tool. IPv6 depends on it for Neighbor Discovery and error reporting. Path MTU Discovery also needs Packet Too Big messages when a router cannot forward a packet of a given size.

For a classroom firewall exercise, compare a policy that permits necessary ICMPv6 types with one that drops every ICMPv6 packet. Ask which basic IPv6 functions the second policy would disrupt. See our network troubleshooting guide for a broader test sequence.

Get the evidence

IPv6 commands on Windows, macOS and Linux

Run these commands on a device you own or have permission to test. Interface names and command output vary by system.

Swipe to see the rest →

QuestionWindowsmacOSLinux
Which IPv6 addresses do I have?ipconfig /allifconfigip -6 addr
Is there an IPv6 default route?route print -6netstat -rn -f inet6ip -6 route
Can I reach a known IPv6 address?ping -6 ADDRESSping6 ADDRESSping -6 ADDRESS
What path does IPv6 take?tracert -6 ADDRESStraceroute6 ADDRESStracepath -6 ADDRESS
Does DNS return AAAA?nslookup -type=AAAA NAMEdig AAAA NAMEdig AAAA NAME

Link-local detail: testing a fe80:: address may require an interface scope identifier. A Windows address might use %12; Linux often uses %eth0.

Use this order

A six-step IPv6 troubleshooting checklist

  1. Scope: Does IPv4 work? Does IPv6 fail on one device or every device? Record the exact error.
  2. Interface: Is IPv6 enabled? Is there a fe80:: address? If not, start with the local interface.
  3. Address: Is there a valid global or unique-local address appropriate for the target? Check prefix and address state.
  4. Default route: Is a router advertised and a usable ::/0 route present? A global address alone does not prove internet access.
  5. Local neighbor: Can the device reach its next-hop router? Inspect Neighbor Discovery if it cannot.
  6. DNS and path: Does an AAAA record exist? Can you reach the destination address directly? Use traceroute and capture evidence to narrow the fault.
Evidence rule: a failed ping alone does not prove the host is down. A firewall may block echo requests while another service remains reachable.
See the packets

Wireshark filters for IPv6 diagnosis

Use a capture only on a network where you have permission. The following display filters narrow the view; they do not change the traffic being recorded.

Swipe to see the rest →

FilterWhat you will see
ipv6IPv6 packets
icmpv6IPv6 control and error messages
icmpv6.type == 134Router Advertisements
icmpv6.type == 135Neighbor Solicitations
icmpv6.type == 136Neighbor Advertisements
dns.qry.type == 28DNS AAAA queries

Try our interactive Wireshark packet-capture exercises to practice separating observations from assumptions.

Worked investigation 1

A device has only a link-local address

What the technician sees

fe80::b1a2:3c4d:5e6f is present, but no global address appears. The route table has no usable default route.

What this proves: the IPv6 stack created a link-local address. It does not prove the router is sending a usable prefix or default route.

Next test: capture Router Solicitations and Router Advertisements, or inspect the router’s IPv6 LAN settings. If advertisements appear, check the advertised prefix and flags. If they do not, investigate the router, VLAN and multicast path.

Daily classroom warm-ups

Start class with an IPv6 question

Use a quick bell ringer to check whether students can spot a link-local address, read a /64 prefix or choose the next troubleshooting test. The 300 Bell Ringers save teachers from writing a new warm-up every morning.

300 AP Networking Bell Ringers
$74.99
BUY TEACHER PACK →See sample bell ringers and what is included →
Instant Access • Full-Year Teacher Resource
Worked investigation 2

IPv6 address is present, but no websites load

Evidence

A laptop has 2001:db8:42:10::51/64, but its routing table has no ::/0 route.

Likely area to inspect: Router Advertisements and the default-router lifetime. Do not change DNS yet; a correct DNS answer will not repair a missing route.

Verification: confirm a usable default route, reach the local router, then test an external IPv6 destination.

Worked investigation 3

An AAAA record exists, but the connection fails

Evidence

A DNS lookup returns an AAAA record. A TCP connection to that IPv6 address times out, but IPv4 works.

What the AAAA record proves: DNS supplied an IPv6 address. It does not prove that a route, firewall rule or server is working.

Next tests: compare IPv6 route and traceroute output; check whether the server listens on IPv6 and whether the path allows the intended port. Use a packet capture to see whether a reply reaches the client.

Browser-based troubleshooting

Give students more troubleshooting practice

After the IPv6 labs, let students practice the same habit on other network failures: inspect the evidence, choose one useful test and explain what the result rules out.

AP Networking Browser Troubleshooting Simulator
$29.99
120 Missions • 60 Failure Patterns • Offline Copy
GET THE SIMULATOR →Explore the simulator and its free preview →
Worked investigation 4

Small connections work; large transfers stall

When an IPv6 connection opens but a large response hangs, consider Path MTU Discovery. Routers do not fragment IPv6 packets in transit; the sender needs to learn when a packet is too large for the path.

Check: whether ICMPv6 Packet Too Big messages can return, whether a tunnel changes the effective MTU and whether the problem follows a particular path. Avoid lowering the MTU everywhere before gathering evidence.

Free lab 1

Identify addresses and prefixes on your own device

Time: 15 minutes. Tools: your own laptop or a simulated command output.

  1. Record the link-local IPv6 address and interface name.
  2. Look for a global IPv6 address. If none exists, record that observation rather than inventing one.
  3. Find the prefix length and default route.
  4. Write two sentences: what your output proves, and what it does not prove.

Paper option: use the fictional addresses in the worked examples instead of a live device.

Longer exam practice

Practice switching between networking topics

IPv6 makes more sense when students can connect it to routing, DNS, security and packet analysis. The Exam Prep Vault provides additional mixed practice with answer explanations.

AP Networking Complete Exam Prep Vault
$39.99
GET THE EXAM PREP VAULT →Read about the Exam Prep Vault before buying →
4 Practice Exams • 320 MCQs • 60 Artifact Labs
Free lab 2

Diagnose a broken Router Advertisement

Scenario: A classroom VLAN has working IPv4. Every student device shows fe80:: but no global IPv6 address. The router was replaced this morning.

  1. What shared component should you check first? The router’s IPv6 LAN configuration and advertised prefix.
  2. Which packet would be useful? Router Advertisement, ICMPv6 type 134.
  3. Would restarting every laptop prove the cause? No. It might change symptoms without testing the shared dependency.
  4. What confirms the repair? A valid address, default route and successful reachability test.
Free lab 3

Trace an IPv6 DNS failure

Scenario: A student can reach a known IPv6 address but cannot open a hostname. The AAAA query times out.

  1. Verify the configured DNS server address.
  2. Check whether the DNS server is reachable over the expected IP family.
  3. Test a known hostname and compare the DNS response with a direct-address test.
  4. Write the next test you would perform before changing settings.

For a wider review, visit our 12 free home networking labs.

Written explanations • teacher tool

Make written troubleshooting answers easier to review

Have students explain which IPv6 clue mattered and which test they would run next. The Artifact Analysis Grading Copilot helps teachers review those evidence-based explanations against a consistent standard.

AP Networking Artifact Analysis Grading Copilot
$49.99
8 Criteria • 5 Task Modes • Offline Premium Copy
GET THE GRADING COPILOT →See the public Copilot overview →
For teachers

A 50-minute IPv6 evidence lesson

Give students a fictional address table, a route table and three short packet-capture excerpts. Ask them to identify the first missing dependency rather than guessing which device is broken.

Swipe to see the rest →

MinutesClassroom activityEvidence collected
0–8Identify global, link-local and multicast addressesMarked-up address cards
8–18Compare /64 prefixes and route tablesTwo short written decisions
18–33Investigate a missing Router AdvertisementClaim, supporting evidence and next test
33–43Analyze a DNS-versus-routing caseOne paragraph with a rejected alternative
43–50Exit ticket and peer checkTwo-sentence explanation

Assessment (20 points): address identification 4; prefix reasoning 4; evidence interpretation 6; next test 4; verification 2.

For parents

How to help a student learn IPv6 at home

You do not need to know every command. Ask your student to show you a real or fictional IPv6 address and explain what the first four groups mean on a /64 network. Then ask why a device might have a link-local address but no internet access.

For a complete independent practice routine, use our AP Networking self-study guide. If your student is new to hands-on networking, begin with the home-lab guide before changing any network settings.

Full-year classroom planning

Fit IPv6 into your full-year teaching plan

The 180-Day Teacher Curriculum provides daily lessons and classroom work across the course. Use this free IPv6 guide as a follow-up lesson or a targeted review when students need extra help.

AP Networking Complete 180-Day Teacher Curriculum
$199.99
180 Lessons • 180 Daily Simulators • 36 Teaching Weeks
GET THE 180-DAY CURRICULUM →See the public curriculum overview and examples →
Check understanding

Eight questions with answers

1. What does /64 tell you?

The first 64 bits identify the prefix; the remaining 64 bits identify the interface portion on a typical /64 LAN.

2. What is the purpose of fe80::/10?

Link-local communication on the local link, including communication with neighboring routers.

3. Which message advertises a default router?

An ICMPv6 Router Advertisement.

4. Does DHCPv6 normally provide the default router?

No. Router Advertisements normally supply default-router information.

5. What does an AAAA record contain?

An IPv6 address associated with a hostname.

6. What replaces ARP for IPv6?

ICMPv6 Neighbor Discovery.

7. Why might large transfers stall?

A Path MTU Discovery problem, such as blocked Packet Too Big messages, is one possibility.

8. What is the first useful step in a network fault?

Record the scope and the last successful checkpoint before making changes.

Free interactive practice

24 free IPv6 flashcards

Study address types, prefixes, SLAAC, Neighbor Discovery, DNS and troubleshooting. Filter by topic, flip each card and shuffle the deck. No account required.

Card 1 of 24Plan

Free to use in class or at home. No login required.

Common questions

IPv6 FAQ

Is IPv6 harder than IPv4?

IPv6 addresses look longer, but the same troubleshooting habits apply: check the local interface, default route, DNS, and the next hop. IPv6 adds Router Advertisements, SLAAC and Neighbor Discovery.

Does a link-local IPv6 address mean internet access works?

No. An fe80:: address supports communication on the local link. Check for a usable global address, a default route, working DNS and a reachable destination.

Do I need DHCPv6 if I use SLAAC?

Not always. SLAAC can create an address from a router-advertised prefix. Some networks also use DHCPv6 for addresses or other configuration. Router Advertisements still supply the default-router information.

Can I block ICMPv6 to make a network safer?

Blocking all ICMPv6 breaks essential functions such as Neighbor Discovery and can disrupt Path MTU Discovery. Use a considered firewall policy rather than blocking every ICMPv6 message.

Does IPv6 always use a /64 prefix?

A /64 is the normal size for SLAAC-enabled LANs, but IPv6 networks can use other prefix lengths in different roles. Do not assume every route or interface uses /64.

Keep learning

Related AP Networking lessons and official standards

IPv4 addressing fundamentalsAP Networking study guideNetwork troubleshooting guideWireshark packet-capture practice12 free home labsSelf-study planFree practice questionsTeacher resources

Primary technical references: RFC 8200 (IPv6), RFC 4291 (addressing), RFC 4861 (Neighbor Discovery), RFC 4862 (SLAAC) and RFC 4443 (ICMPv6).

These activities are independent practice, not official College Board exam questions. Check the published course framework for current assessed topics.