Can I get switched to IPv4 only? (Connect Box 3 Fiber)

Juewephiequ22

Hi, I have Sunrise fiber with the Connect Box 3 Fiber and I want to turn off IPv6 and just run IPv4. Is that possible and how do I request it?

Reason: I run my own DNS filtering at home on a raspberry pi (basically a pi-hole) to block some stuff for the household. Over IPv4 it works fine, but my devices grab the ISP’s ipv6 DNS and go straight out over IPv6, so they skip the pi and nothing gets filtered.

I already checked the router and theres nothing that helps. no way to disable IPv6, no field for my own IPv6 DNS, and I can turn off the DHCPv4 server but not the DHCPv6 one. So from what I read the only fix is Sunrise switching my line to IPv4 on your end

I did call support but the guy didn’t really get it, he said I’m “already on IPv4” but my devices clearly have an ipv6 adress from Sunrise.

Thank you in advance

mikitil

Juewephiequ22
This should be easy to do by the hotline 0800 707 707

Or hey @Sunrise_Team could you please check if its on IPv4

Cosmo24

Welcome to the Community, Juewephiequ22

It is best to call the hotline (0800 707 707) again and explicitly ask for a switch from IPv6 to IPv4. You can also check your modem settings. If the DMZ function is visible and available, the switch to IPv4 should already be active.

Otherwise the support can trigger this switch normally pretty quickly. If that does not work we should wait until next week when Daniele from Sunrise is back. Just let me know if another call worked out for you.

Cheerio cosmo

Juewephiequ22

Thank you guys for the fast reply.

Called again but got the same answer again “You are already switched to IPv4”

But I can test this on my side that this is not the case. My devices still get a public IPv6 adress (starts with 2001:1708).
I also tested this on my macbook, the moment I turned IPv6 off on in the wifi settings my DNS filtering started working again and the sites I block got blocked. But when I turn IPv6 back on and its bypassed again. So IPv6 is definitly still active on my line and thats what’s going around my pi.

I don’t want to disable IPv6 by hand on every single device though, I want it off for the whole line.

Juewephiequ22

I just checked, I see the DMZ setting, it’s currently disabled.
“DMZ (Demilitarized Zone) allows you to expose a specific device on your network to the internet for unrestricted access. Typically used for gaming consoles, servers, or similar devices.”

Is this the one you meant @Cosmo24 ?

I just want to make sure I’m clear, I want IPv6 completely disabled / removed or whatever is possible from your side. It should not be active parallel to IPv4, it should be completely turned off.

Cosmo24

Juewephiequ22

Yes, that is exactly the setting I meant. Since you can see this DMZ option, the hotline was actually correct and your line is already switched to IPv4 on the backend.

I have attached a screenshot of how an IPv4 status page looks. The fe80 address at the top is just for internal networking and completely normal. The important part is further down where you see your public IPv4 address starting with 31. The public IPv6 fields will become blank.

If it does not look like this on your side yet please try to unplug the power cord of your box for about 30 seconds and plug it back in. A hard reboot forces the modem to reload the profile from the server.

Cosmo24

Juewephiequ22

Oh, and I think there was one more thing, which is an important note for your Pi-hole setup. The Connect Box 3 does not allow you to change the DNS server directly in the router settings.

Once you are fully switched to IPv4 you can simply disable the DHCP server on your Connect Box. You can then activate the DHCP server inside your Pi-hole settings instead.

This ensures that all your devices in your home network will use the Pi-hole for DNS filtering.

Juewephiequ22

So I cut the power to the box twice, first for 30s and then plugged it back in, then checked:
The public IPv4 is not starting with 31 and the public IPv6 is still filled.

Second power cut I did was for exactly two minutes and plugged it back in, checked the info page again and still everything is not like you described (so same as above)
I’m a bit confused about the fibre boxes behavior.

here are two screenshots from the info page how it currently looks:

And here so that you see the DMZ setting is available:

Juewephiequ22

DHCPv4 server is disabled and enabled on the pihole and this chain works as expected.

The DHCPv6 server on the other hand I can’t disable, there is only the settings to make something either stateful or stateless.

Cosmo24

Juewephiequ22

To be honest, I am not a big network expert myself. But after checking everything, the problem seems to be that active public IPv6 address starting with 2001.

The hotline probably activated your IPv4, but they did not complete the process. A hardware reboot cannot fix an uncompleted profile on the server.

Alternatively, @Daniele_Sunrise will be back next week. He can check your profile and correct it if necessary.

Juewephiequ22

Ok thanks for the info. I hope @Daniele_Sunrise can fix this..

Daniele_Sunrise

Juewephiequ22 You’re currently using DualStack, meaning both IPv4 and IPv6. Unfortunately, the IPv6 DHCP server cannot be disabled. Our technicians are working on a solution, but this will likely continue into 2027. Until then, I recommend disabling IPv6 on your device if possible.

Greetings
Daniele

Juewephiequ22

That is a bit unfortunate. Thank you for clarifying.