Firewall ignores DHCPv6 address

Started by cj_duke, November 13, 2022, 12:37:24 AM

Previous topic - Next topic
November 13, 2022, 12:37:24 AM Last Edit: November 13, 2022, 12:39:08 AM by cj_duke
Hello everyone,

OPNsense setup as VM with a single LAN interface (VM for testing purposes). IPv4 static ip, DHCPv6 address (global, non link-local) assigned from local DHCPv6 server.

Following behavior is observed:
Ping Remote Host -> OPNsense with link-local address -> successful
Ping Remote Host -> OPNsense with DHCPv6 address -> host not reachable
Ping Remote Host -> OPNsense with DHCPv6 address (firewall allow any/any) -> host not reachable
Ping Remote Host -> OPNsense with DHCPv6 address (firewall disabled via settings) -> successful
Ping Remote Host -> OPNsense with static global v6 address -> successful
(Remote Host is either a local Win10 or Linux machine)

It seems to me the firewall does not recognise the assigned DHCPv6 address and the packet is drop somewhere(?). I could not find the dropped packet in the firewall live view. Packet sniffing on LAN shows the received ICMP packet. Firewall diagnostics/aliases show for LANnet the static ipv4 and dhcpv6 address.

Any suggestions on this topic?

Thanks for the help.