Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
23.1 Legacy Series
»
Virtual IP breaks Router Advertisements
« previous
next »
Print
Pages: [
1
]
Author
Topic: Virtual IP breaks Router Advertisements (Read 1269 times)
TechHome
Newbie
Posts: 18
Karma: 1
Virtual IP breaks Router Advertisements
«
on:
March 25, 2023, 11:10:48 pm »
Heyy,
my virtual IP setting causes the in virtual IP configured IP to get advertised. That's a problem because the virtualIP I set isn't intended for that use.
In "Services: Router Advertisements" under the "Source Address" field, the only option is "Automatic". Not very helpful.
And help is appreciated!
Logged
franco
Administrator
Hero Member
Posts: 17661
Karma: 1611
Re: Virtual IP breaks Router Advertisements
«
Reply #1 on:
March 27, 2023, 09:14:06 pm »
The report is relatively vague. What Virtual IP are you setting it to? It can't be a link local otherwise it would show up in the list? In order to do ULA addressing for clients radvd needs to pick up the VIP subnet in order for clients to connect... I don't see a problem at first glance.
Cheers,
Franco
Logged
TechHome
Newbie
Posts: 18
Karma: 1
Re: Virtual IP breaks Router Advertisements
«
Reply #2 on:
March 28, 2023, 08:27:20 am »
Hi Franco,
sorry for being uncertain.
I set the following address in virtualIP: 2a02:FFFF:1d:5200::e/64
I use it to reach the HAProxy on the OPNsense. It works.
However when I restart radvd after adding the VirtualIP, it gets announced to the clients in the 2a02:FFFF:1d:5200/64 subnet. That's the thing I'd like to prevent.
Logged
franco
Administrator
Hero Member
Posts: 17661
Karma: 1611
Re: Virtual IP breaks Router Advertisements
«
Reply #3 on:
March 28, 2023, 09:57:56 am »
Enable "Deny service binding" in the VIP's settings.
Cheers,
Franco
Logged
TechHome
Newbie
Posts: 18
Karma: 1
Re: Virtual IP breaks Router Advertisements
«
Reply #4 on:
March 28, 2023, 12:06:35 pm »
I enabled the option. Now the RAs are correct, but Internet stiill does not work :/
If I remove the VirtualIP, it directly works again.
Logged
TechHome
Newbie
Posts: 18
Karma: 1
Re: Virtual IP breaks Router Advertisements
«
Reply #5 on:
March 31, 2023, 09:15:26 am »
Wireguard with IPv6 configured also breaks RA.
root@matrix-synapse:~# ip -6 neigh
2a02:XXXX:1d:5200::f:3 dev eth0 FAILED
fe80::7e2b:e1ff:fe13:982e dev eth0 lladdr 7c:2b:e1:13:98:2e router STALE
2a02:XXXX:1d:5200:7e2b:e1ff:fe13:982e dev eth0 lladdr 7c:2b:e1:13:98:2e router STALE
2a02:XXXX:1d:5200::f:4 dev eth0 FAILED
2a02:XXXX:1d:5200::e dev eth0 FAILED
2a02:XXXX:1d:5200::e -> Virtual IP with deny service binding configured
2a02:XXXX:1d:5200::f:4 -> Wireguard Endpoint IP
2a02:XXXX:1d:5200::f:3 -> Wireguard Endpoint IP
Logged
bimbar
Sr. Member
Posts: 435
Karma: 25
Re: Virtual IP breaks Router Advertisements
«
Reply #6 on:
March 31, 2023, 10:04:10 am »
I don't think you can have the same network on wireguard and eth0.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
23.1 Legacy Series
»
Virtual IP breaks Router Advertisements