1
21.1 Legacy Series / Hyperoptic IPv6 woes (no NDP advertisements received from upstream router)
« on: June 25, 2021, 08:52:19 am »
Hey there,
Does anyone here use Opnsense with Hyperoptic in the UK?
IPv4 works great, but in the past I've had some trouble with IPv6 (see https://forum.opnsense.org/index.php?topic=19600.msg90614#msg90614). Despite this, IPv6 randomly started working one day and has been fine ever since...until now :-(.
The other day Hyper upgraded my package to a faster speed, and since then IPv6 seems to have gotten broken.
I've tried pinging the ISP's upstream gateway, but without success. Running tcpdump in another session, you can see that there are NDP solicitations being sent but I do not receive a reply advertisement from the ISP gateway:
$ ping6 'fe80::fa98:efff:fe73:892b'%igb0
...
$ tcpdump ip6
07:47:37.629209 IP6 fe80::xxxxxxx > ff02::1:ff73:892b: ICMP6, neighbor solicitation, who has fe80::fa98:efff:fe73:892b, length 32
The ISP supplied router seems to work fine with IPv6. Also if I connect my Mac directly to the ISP ethernet socket, then I can successfully ping6 the ISP upstream gateway, and I can see that neighbor advertisements are received correctly via wireshark.
Has anyone seen anything like this before? Are there any settings or tweaks that I could try making?
Note: As in my previous post, I'm still suspicious as I do not see any MLDv2 packets being sent from opnsense (and these are being sent from the Mac) - I'm not sure if this might have any effect on my ability to receive NDP replies?
Any help anyone can offer would be much appreciated as this is driving my nuts!
thanks
Matt.
Does anyone here use Opnsense with Hyperoptic in the UK?
IPv4 works great, but in the past I've had some trouble with IPv6 (see https://forum.opnsense.org/index.php?topic=19600.msg90614#msg90614). Despite this, IPv6 randomly started working one day and has been fine ever since...until now :-(.
The other day Hyper upgraded my package to a faster speed, and since then IPv6 seems to have gotten broken.
I've tried pinging the ISP's upstream gateway, but without success. Running tcpdump in another session, you can see that there are NDP solicitations being sent but I do not receive a reply advertisement from the ISP gateway:
$ ping6 'fe80::fa98:efff:fe73:892b'%igb0
...
$ tcpdump ip6
07:47:37.629209 IP6 fe80::xxxxxxx > ff02::1:ff73:892b: ICMP6, neighbor solicitation, who has fe80::fa98:efff:fe73:892b, length 32
The ISP supplied router seems to work fine with IPv6. Also if I connect my Mac directly to the ISP ethernet socket, then I can successfully ping6 the ISP upstream gateway, and I can see that neighbor advertisements are received correctly via wireshark.
Has anyone seen anything like this before? Are there any settings or tweaks that I could try making?
Note: As in my previous post, I'm still suspicious as I do not see any MLDv2 packets being sent from opnsense (and these are being sent from the Mac) - I'm not sure if this might have any effect on my ability to receive NDP replies?
Any help anyone can offer would be much appreciated as this is driving my nuts!
thanks
Matt.