[SOLVED] IPv6 connectivity issues

[espen]

Hi guys,

I recently discovered OPNsense and attempting to replace my existing pfsense installation to OPNsense instead but while IPv4 is running with no issues, I'm having some problems getting IPv6 up and running so I'm seeking some advice here.

Here are my installation details:

Code: [Select]

OPNsense 17.1.2-amd64
FreeBSD 11.0-RELEASE-p7
OpenSSL 1.0.2k 26 Jan 2017
On the WAN interface it is configured to use DHCPv6 with the following basic options for the client configuration:

Code: [Select]

Request only an IPv6 prefix (X)
DHCPv6 Prefix Delegation size [48]
Per my ISP instructions, the prefix delegation size is correct and a WAN address is optional.

The LAN interface is configured to track the WAN interface with a prefix of 0.

My problem is that when I reboot OPNsense, there is no IPv6 connectivity and I've been looking through logs but can find no trace of anything related to IPv6, no errors or any indication that dhcp6c has even attempted to run.

But if I SSH to the installation and run the following command from the shell

Code: [Select]

/usr/local/sbin/dhcp6c -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_vtnet0.pid vtnet0 then suddenly everything works, LAN and all the computers on the network assign themselves an IP using SLAAC.

I do not think there are any errors in the configuration on my part, it's mostly just mirrored from my already working pfsense configuration but I might be missing something.

[franco]

Hi Espen,

Welcome!

I remember this class of issues... Could it be the "Directly send SOLICIT" option that you need to set under Interfaces: [WAN]?


Cheers,
Franco

[espen]

Hi, and thank you, both for the welcome and the quick response.

And you were spot on with your suggestion. Checking it and attempting another reboot, the system came online with everything working!
I keep wondering now why I did not try it before, perhaps because I found no information that any authentication was required?

Anyway, case solved, thank you very much

/Espen

[franco]

Hi Espen,

This fix is relatively knew and not at all obvious. IPS tend to set up their own quirky version of IPv6 and users don't know what to do. In any case, happy this was easy to fix.


Cheers,
Franco