Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - ozboss

#1
Quote from: Rob_H on May 01, 2022, 02:13:25 PM
I was having a similar issue. Clients weren't getting an IPv6 address from my bridged LAN interface. Solved it by going to bridge settings, turning on Enable link-local address, reboot, and it works.  :)
You are a hero  :D Thank you Rob that fixed it for me as well.
Does anybody know why this is required?
#2
Quote from: meyergru on April 21, 2022, 08:46:44 PM
... The difference you may be expecting may be one between older and newer kernels were something subtle gets handled differently.
That is not to say that the upgrade from 21.x to 22.1 was not responsible for your specific problem, but it probably would not even arise if you did not use a bridge.
I'd like to first make sure that everything else works properly before blaming the kernel. Disabling the bridge would be last resort. I do not want to add an additional switch just to leave the other ports on my firewall unused.

Quote from: robgnu on April 21, 2022, 10:01:41 PM
Hi,
the problem seems to be solved for now. One more reboot after the update from 22.1 to 22.1.6 solved the issues with the vlans. ...interesting... :)

Bye
Robert.
Thanks Robert.
FYI me the problem persists after rebooting  ::)

I had a deeper look in the logs and noticed this message:
/usr/local/etc/rc.bootup: Warning! dhcpd_radvd_configure(auto) found no suitable IPv6 address on bridge0

When I look in 'Interfaces > Overview' I can see that there is a proper IPv6 address assigned. How is it not 'suitable'?
Are there any more logs that I can provide? Any way to enable more debug information?
How is radvd even being executed on OPNsense? I see it listed as a service on the web interface but running 'service -e' does not return radvd.
#3
Quote from: meyergru on April 21, 2022, 07:04:32 PM
Yup. That might well be the case. Look here (and read the whole thread). For starters: Does your bridge interface have a MAC? Is it needed for SLAAC to work?
Yes my bridge interface has a MAC and also not a blank one as seems to have been the case for you.

Quote from: meyergru on April 21, 2022, 07:04:32 PM
Since the time of that thread, even the quoted "unconfigured VLAN master" requirement has changed. Also, the settings "net.link.bridge.pfil_bridge = 1" and "net.link.bridge.pfil_member = 0" (plus a reboot) are recommended.
I'm not (yet) using any VLANs. All the member interfaces have configuration type 'None' for both IPv4 and IPv6. I also enabled those two tunables. Basically I followed this guide for the creation of the bridge: https://docs.opnsense.org/manual/how-tos/lan_bridge.html
Also IPv6 was working with v21, I have not changed any settings since then.
#4
Quote from: Greelan on April 20, 2022, 11:30:08 PM
OP: what RA mode is set under Services/Router Advertisements? ... I use "Unmanaged" (for SLAAC only) and it works absolutely fine.
I have tried 'Stateless' before as I also want the DNS server to be advertised. Without success, same for 'Unmanaged'.
Anyway the default should be fine for me, as I think it is basically 'Stateless'. Therefore I disabled 'Manual configuration' again for the interface.

Quote from: meyergru on April 21, 2022, 12:07:41 AM
@ozboss: You should login to your box and look at /var/etc/radvd.conf to see if there are any prefixes.

Ah so that's where the config file is stored :D
This looks interesting. It does have a prefix (the prefix delegated to my WAN interface with size /64), and the interface is the one assigned to my LAN interface: bridge0
So I'm running everything over a bridge, could this be the problem? Should radvdump not also advertise this interface instead of igb0?
#5
Since the upgrade to OPNsense 22 my clients do not get an IPv6 address anymore.
I'm now on 22.1.6, with OPNsense 21 everything was working fine.

For the setup I followed this guide: https://docs.opnsense.org/manual/how-tos/ipv6_dsl.html
My WAN interface has a prefix delegation size of 56.
The IPv6 configuration type of the LAN interface is 'Track Interface' with WAN as 'IPv6 Interface' and 'IPv6 Prefix ID' 0 (I also tried 1 as I read somewhere that 0 might cause issues but that didn't fix it).
With these settings my LAN interface gets one of the public IPv6 subnets (public IPv6 with prefix size 64).
Still none of my clients get an IPv6 address.

I ran radvdump and this is the result:

#
# radvd configuration generated by radvdump 2.19
# based on Router Advertisement from fe80::1
# received by interface igb0
#

interface igb0
{
AdvSendAdvert on;
# Note: {Min,Max}RtrAdvInterval cannot be obtained with radvdump
AdvManagedFlag on;
AdvOtherConfigFlag on;
AdvReachableTime 0;
AdvRetransTimer 0;
AdvCurHopLimit 64;
AdvDefaultLifetime 120;
AdvHomeAgentFlag off;
AdvDefaultPreference medium;
AdvSourceLLAddress on;
AdvLinkMTU 1500;
}; # End of interface definition


There is no prefix being advertised...
I'm kind of lost on this and not really sure on how to even start debugging this.
I would be great if somebody could help me out  :)
#6
I still don't have IPv6 on my clients since the upgrade to OPNsense 22, even with 22.1.5.

My WAN interface has a prefix delegation size of 56.
The IPv6 configuration type of the LAN interface is 'Track Interface' with WAN as 'IPv6 Interface' and 'IPv6 Prefix ID' 0 (I also tried 1 as I read somewhere that 0 might cause issues but that didn't fix it).
With these settings my LAN interface gets one of the public IPv6 subnets (public IPv6 with prefix size 64).

Still none of my clients get an IPv6 address.
Did I miss something?