I did a fresh install with the 25.7-r1 DVD image in a test VM and upgraded it to -r2. The Router Advertisement service is not listed in the left side menu, nor in the list of running services on the Lobby Dashboard, however the 'radvd' package is installed according to System->Firmware->Packages.
During installation I had only configured IPv4 for WAN & LAN. After the setup wizard completed, DNSmasq was enabled for me by default for DHCP and Unbound for DNS (I chose it from the Wizard). The DNSmasq RA function was disabled, as is to be expected.
I then enabled IPv6 from Interface settings and chose "Allow manual adjustment..." in the LAN settings. At this point I expect to see the Router Advertisement service listed in the menu but it's not showing. Not sure if this is expected (?)
That seems like a real bug. Franco said something about not showing ISC DHCP if DNSmasq is enabled (https://forum.opnsense.org/index.php?msg=242094), maybe RADVD is not shown, then, as well.
Yet that would be wrong in a situation where RADVD is still used for RAs instead of DNSmasq.
Maybe you should try if it shows when you disable DNSmasq and file a bug report on Github.
I think that's a different problem scope, looking at that patch:
https://github.com/opnsense/core/commit/727967ed6
this change seems be the culprit:
if (!empty(filter_var($node->ipaddrv6, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) || !empty($node->{'track6-interface'})) {
Cheers,
Franco
I tested a bit and the menu item cannot disappear unless the tracking is completely disabled. That seems to check out with the code as well.
What am I missing?
Cheers,
Franco
I use RA without tracking.
I get my IPv6 over Wireguard from a VPN, so hopefully it will stay for that?
@franco:
I just checked again and now I see that I am unable to select a parent interface in the LAN IPv6 tracking (screen attached). This could be part of it, maybe.
Two things of note:
- This is just a quick & dirty test VM; not a proper setup. I don't have a DHCPv6 server to do IPv6 PD for the OPNsense test instance. I am just setting the VM's WAN to use SLAAC and the LAN to 'Track Interface' (though I know that shouldn't work in practice).
- I used to be able to do this in 25.1 and was able to see the RA service in the menu.
Maybe 25.7 has some more strict checks?
@meyergru:
No change when disabling DNSmasq. It's probably related to the inability to select the parent interface then, I'm guessing.
Did you have WAN set as SLAAC? That is no longer supported because it wasn't properly implemented. Otherwise I suspect IPv6 isn't enabled at all on WAN which means you do not need/cannot use radvd.
Cheers,
Franco
Yes, I had WAN as SLAAC.
If the support was removed then that explains the difference and why I was earlier able to do it. Thanks! Marking this as solved.
(FWIW, attaching a screen of the same setup on a 25.1.11 VM where the parent IF is still available.)
Actually, before I close- can you clarify:
Do you mean SLAAC on WAN is no longer supported? Or that tracking the WAN interface which is set to SLAAC is no longer supported?
I am still able to set WAN to use SLAAC in 25.7 and am getting a valid IPv6 GUA on that interface. It's only not letting me select it for tracking (which does make sense).
SLAAC itself must be supported since its required IPv6 behavior.
What was meant here is tracking an interface which is set to SLAAC.
Yes, SLAAC tracking was a defunct feature. It was added for an Israeli ISP a long time ago, but never fully matured and used a hardcoded IPv6 prefix.
Cheers,
Franco
Thanks!