Messages

Tried everything, IPv6 still goes off :/

I had a similar issue where IPv6 would stop working after sometime. Clients on the network dropped IPv6 address altogether. Did a fair bit of digging and found out that Suricata was the culprit. SID 2030387 (ET EXPLOIT Possible CVE-2020-11899 Multicast out-of-bound read). Looks like packets relating to IPV6 was being blocked by suricata. Disabled SID 2030387 and the problem went away.

I was trying to follow your instructions and I accidentally unticked Request an IPv6 prefix only, and IPv6 started working. To verify that was the issue, I ticked Request an IPv6 prefix only, unplugged the WAN cable and IPv6 would not work. Strange.

I am from New Zealand. My broadband provider is 2degrees. I am trying to get IPv6 working on Opnsense 24.1.6 with no luck. IPv6 previously worked on opnsense 23.xx but stopped working after an update somewhere around March 2023. Since then I have tried multiple times with different Opnsense versions with no success. Clients on LAN receive IPv6, but cannot access any IPv6 websites on internet. Pinging IPv6 hosts on internet fails with  timeout. I can ping any IPv6 address within LAN but not on the Internet.

IPv6 works fine with pfsense, with the same internet provider, but not with opnsense. given below is the relevant selected options to enable IPv6 in opnsense.

[WAN]
IPv4 configuration type: DHCP
IPv6 Configuration Type: DHCPv6
Prefix Delegation size: 56
Use IPv4 connectivity: Yes

[LAN]
IPv4 Configuration type: Static IPv4
IPv6 Configuration Type: Track Interface

Track IPv6 Interface
IPv6 Interface: WAN
IPv6 Prefix ID: 0
Allow manual adjustment of DHCPv6 and Router Advertisements: Yes

Services:Router Advertisements[LAN]
Router Advertisements: Unmanaged (I have tried other options as well)
Advertise Default Gateway: Yes
Use the DNS configuration of the DHCPv6 server: Yes

I have tried almost everything that has been suggested on the internet for similar issue, with no luck. Please note that IPv6 works flawlessly on pfsense.

Also my ISP requires vlan tagging. Hence, my WAN interface is assigned to vlan01(parent: igc0, tag: 10)
vlan is configured with parent igc0 and VLAN tag: 10

A fix for this issue was implemented as per https://github.com/opnsense/core/issues/7202, I think. However, at least for me the issue persists.

Apologies if I am confusing you.

Any help will be appreciated.

maybe its an isp issue.
ssh into your opnsense and try to ping ipv6.google.com.

Highly unlikely..My brother is with the same ISP as I..he has no issues with IPV6.

There is an unfixed bug at this time such that sometimes, radvd does not assign IPv6 to clients. You can try if that is your problem by restarting radvd from the dashboard.

Tried it...still the same. Clients on the local network are receiving ipv6 and pinging them within the network works fine.

maybe its an isp issue.
ssh into your opnsense and try to ping ipv6.google.com.

Tried it. ipv6 address is resolved however no ping replies.

I seem to have lost IPv6 Connectivity sometimes after an update...somewhere in the month of May 2023 maybe..not sure when...

I realized yesterday that my opnsense updates where not working...I was on 23.1.9 and Changelog showed that the latest update was 23.1.11. When I manually tried to check for updates, it took for ever and repositories showed orphaned packages. Pinging pkg.opnsense.org did not return any response. However pinging any ipv4 address on the internet worked. I enabled the option "Prefer to use ipv4 even if ipv6 is available" and the updates started working again. Now I am on 23.1.11 now.However the issue with IPv6 persists. pings to internal ipv6 address works.
I obtain IPv6 from my ISP thru DHCPV6. I get an IPv6 gateway and the gateway is also showing in the default routes.

Does anyone has any solutions or workaround?

Doing a complete power cycle resolved the issue. very weird.

I already rebooted twice. Still the same.

I upgraded to OPNsense 23.1.8. However, clicking on "click to check for updates" in Lobby->Dashboard, shows message "your device is rebooting". It does the same if I go into System->Firmware and click on any of the option.  Attached screenshot of the message. Has anyone had similar issue and resolved it?