Messages

1

23.7 Legacy Series / Second WAN strange behaviour / offline

« on: August 23, 2023, 06:40:28 am »

Hello,

I've set up two WAN connections for failover. They worked well during tests. If one connection failed, the other took over and vice-versa.

But, I noticed something odd during setup. When I connected the second WAN, a regular router with the address 192.168.0.1, I could reach it from my LAN. I changed its IP to 172.20.0.1/24. After this, I couldn't access it from the LAN. However, WAN2 on OPNSense got an IP (172.20.0.100) from the router. Using the OPNSense diagnostics, I could ping 172.20.0.1, but not from the LAN. After turning the interface/gateway (I don't remember what exactly I switched) off and on, everything worked. i could access the WAN2 router from the LAN.

But, a day later, Monit told me WAN2 went offline (it was pinging 8.8.4.4). It hasn’t come back online till now. I’m facing the same issue – I can't access 172.20.0.1 from the LAN, but OPNSense can ping it. And now nothing helps. When I connect to the  WAN2 router directly to test, it's working just fine with internet connection being functional there.

Any ideas on where to start troubleshooting? Thanks!

2

23.1 Legacy Series / Re: IPv6 through VLAN-tagged WAN

« on: July 31, 2023, 05:10:10 pm »

Problem solved. After 2 hours on the phone with the ISP they figured out to tell me that 1) I needed to do DHCPv6 over IPv4 connection, 2) set VLAN Priority to 7 (!)

3

23.1 Legacy Series / IPv6 through VLAN-tagged WAN

« on: July 30, 2023, 10:08:59 pm »

Hello,

I have an ISP with PPPOE connection that requires VLAN-tagging.

Currently I have following configuration:

1) VLAN interface connected to igb0
2) PtP interface connected to VLAN
3) WAN interface assigned to PtP

This works perfectly fine and WAN interface gets IPv4 address properly, but IPv6 is link-local (fe80::/7).
ISP claims they are assigning IPv6 range... In the log of the PtP interface I could find this:

Code: [Select]

2023-07-25T12:08:34 Informational ppp [wan] IFACE: Rename interface ng0 to pppoe1
2023-07-25T12:08:34 Informational ppp [wan] IFACE: Up event
2023-07-25T12:08:34 Informational ppp [wan]   266e:96ff:fe56:e315 -> 0200:5eff:fe00:01d7
2023-07-25T12:08:34 Informational ppp [wan] IPV6CP: LayerUp
2023-07-25T12:08:34 Informational ppp [wan] IPV6CP: state change Ack-Sent --> Opened
2023-07-25T12:08:34 Informational ppp [wan] IPV6CP: rec'd Configure Ack #1 (Ack-Sent)
2023-07-25T12:08:34 Informational ppp [wan]   SECDNS 0.0.0.0
2023-07-25T12:08:34 Informational ppp [wan]   PRIDNS 0.0.0.0
2023-07-25T12:08:34 Informational ppp [wan]   IPADDR 0.0.0.0

Those IPv6 ranges (if they are /64 ranges) look very strange for me. Can you guys suggest whether I am doing something wrong or do I have to keep pushing the ISP?