Topics

Hi all,

I'm having an issue in which I lose WAN connectivity seemingly at random every few days. OPNsense web GUI and SSH are still accessible and WAN interface link is up with both IPv4 and IPv6 addresses. In fact, everything looks fine in the web console other than no traffic getting in from or out to the Internet. I try pinging google.com by name and IP address from interface diagnostics, and it doesn't work. Also, tried releasing/renewing WAN IP and restarting various services. Nothing. Eventually I have to reboot OPNsense to get connectivity back.

I looked at various logs under /var/system and found nothing obvious except in dmesg where I see a bunch of messages like:

cannot forward from 2601:190:402:89d1:9465:5aff:fee3:9bd4 to fe80:b::c4c7:78ff:fe35:1b3b nxt 58 received on bridge0
cannot forward from fe80:b::603a:46ff:fefd:b9e4 to fe80:b::6892:2aff:fe98:7c53 nxt 58 received on bridge0
cannot forward from fe80:b::603a:46ff:fefd:b9e4 to fe80:b::6892:2aff:fe98:7c53 nxt 58 received on bridge0
cannot forward from 2601:190:402:89d1:9465:5aff:fee3:9bd4 to fe80:b::c4c7:78ff:fe35:1b3b nxt 58 received on bridge0
cannot forward from fe80:b::9465:5aff:fee3:9bd4 to fe80:b::c4c7:78ff:fe35:1b3b nxt 58 received on bridge0
[...]


Seems like this is a symptom, though, not a cause.

Any suggestions on things to try or places to look next?

Hi all.

I followed this guide to set up IPv6 with my Comcast Xfinity ISP. On the WAN side, I'm using a prefix delegation size of 60. On the LAN side, I've got IPv6 configuration set to Track Interface (WAN) and I turned on RA ("Assisted") and DHCPv6 server. The WAN is getting an IPv6 address and a delegated prefix from the ISP, and the LAN interface is getting an IPv6 address with that prefix. In the diagnostics, ping6 works. All this is great and wonderful!

Now, the problem: None of my clients on the LAN are getting IPv6 addresses (other than link-local). I can see the solicitations go out from one of my Linux hosts, but there is no reply from the router. If I manually configure the host with an IPv6 address in the range, it works fine (19 out of 20 tests pass on https://ipv6-test.com) so it seems to be just the DHCP and/or RA service that's not working. What can I look at to troubleshoot?

Thank you!