Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - CraigHead

#1
Hi all,

For some reason IPv6 has stopped working for LAN clients.

I am on OPNsense 19.7.9_1 and really nothing has changed except updating to 19.7.9_1 (from 19.7.8).
I have my WAN set to DHCP6 and LAN set to Tracking.

Previously I was able to hit IPv6 targets fine but now I get nothing.
I've tried the ol' toggle "Enable IPv6" in the Firewall -> Settings -> Advanced but that doesn't seem to help.
Perhaps a firewall rule is mucked up now?

My LAN rules related to IPv6 are only 1 in number:
IPv6 *    LAN net    *    *    *    *    *
Which shows IPV6-ICMP being blocked by the "Default Deny" rule.

I've tried setting this too no avail too:
IPv6 *    *    *    *    *    *    *
Which actually shows nothing in the live view / flat logs.

I am able to ping IPv6 addresses (typically only testing with ipv6.google.com) using the OPNSense ping diagnostic tools and am able to ping addresses from both the LAN and WAN nics.

Can anyone help / verify / sanity check? I am pretty sure my settings are correct ... (Comcast - Consumer).

Thanks!

*** EDIT
Filtered dhcp6c System -> Log Files General

Jan 12 19:43:36 dhcp6c[47703]: no responses were received
Jan 12 19:43:34 dhcp6c[47703]: no responses were received
Jan 12 19:43:21 dhcp6c[47703]: Sending Release
Jan 12 19:43:20 dhcp6c[47703]: Sending Release
Jan 12 19:43:13 dhcp6c[47703]: Sending Release
Jan 12 19:43:13 dhcp6c[47703]: Sending Release
Jan 12 19:43:10 dhcp6c: dhcp6c REQUEST on bge0 - running newipv6
Jan 12 19:43:10 dhcp6c[47703]: add an address 2001:558:60**:**:**:**:**:**/128 on bge0
Jan 12 19:43:10 dhcp6c[47703]: add an address 2601:281:82**:**:**:**:**:**/64 on bge1
Jan 12 19:43:10 dhcp6c[47703]: Received REPLY for REQUEST
Jan 12 19:43:10 dhcp6c[47703]: Sending Request
#2
Like many of you, I was having trouble with the .img files for 16.7 and 17.x to install (or even boot for that matter).


It wasn't until I realized that it's probably easier to install the FreeBSD Release Mini-Memstick image and once that's finished simply follow the Opnsense-Bootstrap instructions here.
https://github.com/opnsense/update/blob/master/README.md

This method worked well and was very "Easy". I figured this out only after many hours trying to get the provided opnsense .img files (and .iso CDROM image) to boot. I wish I would had known about this to begin with because this process only took 30 minutes from start to finish with a OOB opnsense install.

Anyone else do it this way too?