Messages

151

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 04, 2020, 11:49:48 am »

Hi,

thanks for anwerting.
found it.
Can you tell me, how it is filled best for me?



Greets

Byte

152

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 04, 2020, 06:22:59 am »

My PC [LAN] get a IPv6-Address, but shows "no internet connection". And internet site test to ipv6 failed.
On PC field "IPv6-Gateway" is empty! So there is no ipv6 Gateway set (router itself).
When I set it manualy to Interface IPv6, it works.
But why it isn´t set automatically?

my actual settings:
Interfaces->
[LAN] IPv6 address xxx:xx:xxx:8000:201:2eff:fe92:8584 / 64
[Kamera] IPv6 address xxx:xx:xxx:8001:201:2eff:fe92:8584 / 64
[Gast] IPv6 address xxx:xx:xxx:8002:201:2eff:fe92:8584 / 64

Service->DHCPv6
[LAN]
Subnet xxxx:xx:xxx:8000::
Subnet mask  64 bits
Current LAN IPv6 prefix xxxx:xx:xxx:8000::
Available prefix delegation size  57
Available range xxxx:xx:xxx:8000:: - xxxx:xx:xxx:8000:ffff:ffff:ffff:ffff                                       
Prefix subnet will be prefixed to the available range.
Range: ::1000 to ::2000

[Kamera]
Subnet xxxx:xx:xxx:8000::
Subnet mask  64 bits
Current LAN IPv6 prefix xxxx:xx:xxx:8001::
Available prefix delegation size  57
Available range xxxx:xx:xxx:8001:: - xxxx:xx:xxx:8001:ffff:ffff:ffff:ffff                                       
Prefix subnet will be prefixed to the available range.
Range: ::1000 to ::2000

[Gast]
Subnet xxxx:xx:xxx:8002::
Subnet mask  64 bits
Current LAN IPv6 prefix xxxx:xx:xxx:8002::
Available prefix delegation size  57
Available range xxxx:xx:xxx:8002:: - xxxx:xx:xxx:8002:ffff:ffff:ffff:ffff                                       
Prefix subnet will be prefixed to the available range.
Range: ::1000 to ::2000


Greets

Byte

153

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 09:49:41 pm »

Thanks. I will test.

But actually I have one device (NAS) with 2 LAN (each VLAN) that doesn´t get any ipv6 Adress.
I don´t know why, before my settings, it works (but with wrong ipv6-adresses).

Any ideas?


Greets

Byte

154

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 06:38:24 pm »

Hi,

I try, but it seems to work!
I set it now Prefix size to 56.

I get a dynamic ipv6, how can I set the Range?
I try to set it
::1 to :ffff:ffff:ffff:fff
but this is wrong...

Greets

Byte

155

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 04:52:43 pm »

Hi,

OK, I choose Interface->WAN->Prefix delegation size "60" because I only need 5-6 subnet for me.
When I change my setup and OPNSense is behind another router, I can´t get size "56".

Please say me, wich size I should choose.

On Interface I choose
Interfaces->
[LAN]->Track Interface->IPv6 Interface WAN
                                   -> IPv6 Prefix ID 0x0  (so I think, its only an ID)
                                    -> allow manual adjustment of DHCPv6 and Router Advertisements  checked

[Kamera]->Track Interface->IPv6 Interface WAN
                                   -> IPv6 Prefix ID 0x1
                                    -> allow manual adjustment of DHCPv6 and Router Advertisements  checked
[Gast]->Track Interface->IPv6 Interface WAN
                                   -> IPv6 Prefix ID 0x2
                                    -> allow manual adjustment of DHCPv6 and Router Advertisements  checked
Overview->
   [LAN] -> IPv6 address    xxx:xx:xxx:8b00:xxx:xxxx:fe92:8584 / 60
   [Kamera]-> IPv6 address    xxx:xx:xxx:8b01:xxx:xxxx:fe92:8584 / 60
   [Gast] ->IPv6 address    xxx:xx:xxx:8b02:xxx:xxxx:fe92:8584 / 60

Service->DHCPv6

[LAN]->
Subnet xxxx:xx:xxx:8b00::
Subnet mask    60 bits
Current LAN IPv6 prefix    xxxx:xx:xxx:8b00::
Available prefix delegation size    61
Available range    2003:c7:746:8b00:: - 2003:c7:746:8b0f:ffff:ffff:ffff:ffff
Range: xxxx:xx:xxx:8b00:: -  xxxx:xx:xxx:8b00:ffff:ffff:ffff:ffff

[Kamera]->
Subnet xxxx:xx:xxx:8b00::
Subnet mask    60 bits
Current LAN IPv6 prefix    xxxx:xx:xxx:8b01::
Available prefix delegation size    61
Available range    2003:c7:746:8b00:: - 2003:c7:746:8b0f:ffff:ffff:ffff:ffff
Range: xxxx:xx:xxx:8b01:: -  xxxx:xx:xxx:8b01:ffff:ffff:ffff:ffff

[Gast]->
Subnet xxxx:xx:xxx:8b00::
Subnet mask    60 bits
Current LAN IPv6 prefix    xxxx:xx:xxx:8b02::
Available prefix delegation size    61
Available range    2003:c7:746:8b00:: - 2003:c7:746:8b0f:ffff:ffff:ffff:ffff
Range: xxxx:xx:xxx:8b02:: -  xxxx:xx:xxx:8b02:ffff:ffff:ffff:ffff

As you see, there is ALWAYS Subnet 8b00 for ALL Interfaces set...?!
And you see, that I try to set the Interfaces Range to 8b00, 8b01b, 8b02, ...

Now my PC in [LAN] gets an IP from [Gast] wich is shown in Leases Interface [Gast]?!?!
Need help please...


Greets

Byte

156

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 11:46:57 am »

OK, see now OPNSense Service->DHCPv6->LAN

I clicked  Allow manual adjustment of DHCPv6 and Router Advertisements  on Interface...

I test and write here now...

Greets

Byte

157

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 11:41:37 am »

Hi,

first question:
On my OPNSense Service->DHCPv6 there is only Relay and Leases, nothing else (e.g. [LAN],[VLAN1], etc.).
Is this different to you??
DHCPv6 Configuration is in Interfaces->[LAN]->Track Interface...

And second:
No, my OPNSense is directly over PPOE on VigorModem on Telekom with /56 aviable.
But I only need 3-5 Subnet.
So I decide to choose /60.
Actually I test with 2 subnet.
[LAN]    -> IPv6 Prefix ID 0x0
[VLAN1]->IPv6 Prefix ID 0x1.
There are no subnet delegated!
Only one router (OPNSense) with DHCP and gateway.

The interfaces get the RIGHT ipv6 Adress vom DHCPv6.
But all others in network gets right ipv4 but ipv6 from ONE subnet (I think its last/first configured).
And as you see, the automatic generated /var/dhcpd/etc/dhcpdv6.conf from OPNSense looks wrong...
So I did not know, what I am doing wrong.
There is not much things, you could enter wrong.
When I use only one subnet [LAN] all works fine.

I don´t know, if its a bug. But I think, when it´s one, many people before me had seen this....
So it could be my fault, but I don´t know, what I had to do to correct it....

Greets

Byte

158

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 03, 2020, 08:23:25 am »

Oh, I´ve seen something strange:

when I look at /var/dhcpd/etc/dhcpdv6.conf
when I use 2 tracking interfaces for ipv6

two times subnet6 xx:xx:xx:8b00::/60 {

Code: [Select]

subnet6 xx:xx:xx:8b00::/60 {
  range6 xx:xx:xx:8b00::xxx xx:xx:xxx:8b00::xxx;
  option dhcp6.name-servers xxx;
  prefix6 xx:xx:xx:8b08:: xx:xx:xx:8b0c::/63;
}

subnet6 xx:xx:xx:8b00::/60 {
  range6 2003:c7:746:8b01::1000 xx:xx:xxx:8b01::2000;
  option dhcp6.name-servers xx:xx:xx:8b01:xx:xx:xx:5672;
  prefix6 xx:xx:xx:8b08:: xx:xx:xx:8b0c::/63;
}

It seems, the second entry for subnet6 has wrong headline!!
Must there not be 08b01 ??
When I change it and restart dhcpv6 the wrong one is set!

On one Interface Tracking IPv6 it seems to work, but when I use more, it gives wrong IP-Ranges and config-File looks strange...
It seems, that DHCPv6 only take first used TrackInterface and insert this adress in every subnet?!?!

Additional question: where can I set/delete static leases (mac->ip) like dhcpv4?
                              it seems, that is a little different from ipv4

BUG??

Greets

Byte

159

20.7 Legacy Series / Re: IPv6 DHCP gives IP to wrong VLAN ?

« on: May 02, 2020, 10:23:21 pm »

No,
you can see vlan adress on interface ipv6 adress.
And now al, ipv6 is given to one vlan! And my devices are not in this vlan.
You can see this also in leases of ipv6. There is only one id and also shown one, false, interface!!
Crazy


Greers

Byte

160

20.7 Legacy Series / IPv6 DHCP gives IP to wrong VLAN ?

« on: May 02, 2020, 04:39:43 pm »

Hi,

I activate IPv6. I´ve set my LAN to PrefixID 0 and other VLAN to PrefixID 1.
But my computer in LAN get´s a lease from DHCP with IPv6 from VLAN !

PrefixLength is /60
LAN   ::e300::
VLAN :: e301::

What is going wrong?

Greets

Byte

161

20.7 Legacy Series / Re: DynamicDNS Custom(v6) doesn´t work?

« on: May 02, 2020, 04:37:01 pm »

OK, it seems to be an "Reply" Error?!
When I disable checking, it works fine

162

20.7 Legacy Series / DynamicDNS Custom(v6) doesn´t work?

« on: May 01, 2020, 11:27:26 pm »

Hi,

it seems, custom (v6) doesn´t work for me.
In Log there is...

Code: [Select]

2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS: (Error) Result did not match.
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS (): Current Service: custom-v6
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS (): _checkStatus() starting.
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS ( via Custom (v6)): _update() starting.
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS (): running dyndns_failover_interface for wan. found pppoe0
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS (): ***IPhere*** extracted
2020-05-01T23:23:24 opnsense: /services_dyndns_edit.php: Dynamic DNS: updatedns() starting

When I put the updateUrl with the extracted IP in the browser, it works fine, but in OPenDNS Service it doesn´t work?!

Custom v4 works fine...

Greets

Byte

163

Intrusion Detection and Prevention / Re: Intrusion Detection worst my network traffic?

« on: April 24, 2020, 11:37:46 am »

No, its actually set to "Leave default".

Should I turn it to "Disable VLAN Hardware Filtering" and then it works on my intern LAN device?

Greets

Byte

164

Intrusion Detection and Prevention / Re: Intrusion Detection worst my network traffic?

« on: April 24, 2020, 10:06:28 am »

OK,
I think it´s VLAN on that adapter. When I connect USB-LAN Adapter without VLAN it seems to work.

Greets

Byte

165

20.7 Legacy Series / Show current client activity ?

« on: April 24, 2020, 10:05:32 am »

Is there a way to show current client activity?

Greets

Byte