[SOLVED] IPv6 has stopped working for LAN Clients

Started by CraigHead, January 13, 2020, 02:26:45 AM

Previous topic - Next topic
January 13, 2020, 02:26:45 AM Last Edit: January 13, 2020, 07:36:09 AM by CraigHead
Hi all,

For some reason IPv6 has stopped working for LAN clients.

I am on OPNsense 19.7.9_1 and really nothing has changed except updating to 19.7.9_1 (from 19.7.8).
I have my WAN set to DHCP6 and LAN set to Tracking.

Previously I was able to hit IPv6 targets fine but now I get nothing.
I've tried the ol' toggle "Enable IPv6" in the Firewall -> Settings -> Advanced but that doesn't seem to help.
Perhaps a firewall rule is mucked up now?

My LAN rules related to IPv6 are only 1 in number:
IPv6 *    LAN net    *    *    *    *    *
Which shows IPV6-ICMP being blocked by the "Default Deny" rule.

I've tried setting this too no avail too:
IPv6 *    *    *    *    *    *    *
Which actually shows nothing in the live view / flat logs.

I am able to ping IPv6 addresses (typically only testing with ipv6.google.com) using the OPNSense ping diagnostic tools and am able to ping addresses from both the LAN and WAN nics.

Can anyone help / verify / sanity check? I am pretty sure my settings are correct ... (Comcast - Consumer).

Thanks!

*** EDIT
Filtered dhcp6c System -> Log Files General

Jan 12 19:43:36 dhcp6c[47703]: no responses were received
Jan 12 19:43:34 dhcp6c[47703]: no responses were received
Jan 12 19:43:21 dhcp6c[47703]: Sending Release
Jan 12 19:43:20 dhcp6c[47703]: Sending Release
Jan 12 19:43:13 dhcp6c[47703]: Sending Release
Jan 12 19:43:13 dhcp6c[47703]: Sending Release
Jan 12 19:43:10 dhcp6c: dhcp6c REQUEST on bge0 - running newipv6
Jan 12 19:43:10 dhcp6c[47703]: add an address 2001:558:60**:**:**:**:**:**/128 on bge0
Jan 12 19:43:10 dhcp6c[47703]: add an address 2601:281:82**:**:**:**:**:**/64 on bge1
Jan 12 19:43:10 dhcp6c[47703]: Received REPLY for REQUEST
Jan 12 19:43:10 dhcp6c[47703]: Sending Request

Hmm ... I checked "Send IPv6 prefix hint" and that seemed to resolve my problem. Now my LAN clients are able to communicate with external hosts. Wow, I wonder if something got unchecked during the upgrade?