[SOLVED]DHCPDv6 whining about no IPV6 address on an interface designated NO IPv6

[lrosenman]

2021-10-18T16:39:25   opnsense[32558]   /status_services.php: Warning! dhcpd_dhcp6_configure() found no suitable IPv6 address on opt1   
2021-10-18T16:39:25   opnsense[32558]   /status_services.php: Warning! dhcpd_dhcp6_configure() found no suitable IPv6 address on opt3   
2021-10-18T16:38:43   dhcp6c[52920]   child: exec failed: Bad address   
2021-10-18T16:38:43   opnsense[63681]   plugins_configure newwanip (execute task : webgui_configure_do(,opt5))   
2021-10-18T16:38:43   opnsense[63681]   plugins_configure newwanip (execute task : vxlan_configure_interface())   
2021-10-18T16:38:42   opnsense[63681]   plugins_configure newwanip (execute task : unbound_configure_do(,opt5))   
2021-10-18T16:38:42   opnsense[63681]   /usr/local/etc/rc.newwanipv6: Dynamic DNS: Not updating home.lerctr.org A record because the IP address has not changed.   
2021-10-18T16:38:42   opnsense[63681]   /usr/local/etc/rc.newwanipv6: Dynamic DNS: Not updating home-fw.lerctr.org A record because the IP address has not changed.

What else do I need to supply?

[lrosenman]

Any ideas on this?  It causes dhcpdv6 to die

[Greelan]

I’ll ask the obvious question - the DHCPv6 server is not enabled on that interface?

[lrosenman]

Not that's shown in the GUI. 

[Greelan]

Check under Services/DHCPv6 ?

[lrosenman]

It just shows the one interface that has IPv6 turned on.

[benyamin]

Just wondering:

Which interface has a static IPv6 address from which you are serving IPv6 DHCP leases?

Do you have a valid IPv6 address on opt5? The DHCP client appears to crash. Is there an IPv6 DHCP server (or a relay) configured on that network?

[franco]

> dhcp6c[52920]   child: exec failed: Bad address

What's going on here? DHCPv6 setup on WAN crashes. The rest is just follow-up errors.


Cheers,
Franco

[lrosenman]

@franco: I wish I knew.

This is ATT Fiber, BGW210-700 Gateway.  I do have an override config for that interface to get the 8 PD's.

What can I supply to help?

[franco]

There is a Log Level setting under Interfaces: Settings. Best to reboot to make sure debug level properly applied and grab dhcp6c specific lines from System: Log Files: General (most probably, but not around a GUI at the moment).


Cheers,
Franco

[lrosenman]

I've got the debug logs.  Is there a place on the system I can grab the files?  I have the circular logs turned off.

I'd like to get the files and have y'all look at them.

[benyamin]

My curiosity continues:

I noticed your work with Franco on dhcpc in 19.1...
Is this a new setup? Or did it once work and has since broken?

Is the BGW210 definitely getting a /60 delegated prefix on it's WAN?
And under the BGW210's DHCP config, both prefix delegation and address assignment are enabled?

On the override, I take it you are using the dhcp.conf override developed for pfSense in the netgate forums. I wasn't aware of one specifically for opnsense. Would there be any opnsense <-> pfSense oddities?

[franco]

Logs are in the /var/log/system/ ordered by date. Most important lines are probably those from "dhcp6c" itself.


Cheers,
Franco

[lrosenman]

It happened again this AM, so I grabbed a grep of dhcp6c from the logs, and also the config file.
attached as a tarball here.

Yes, the interface is getting the /60, and the PD's are happening.

I upgraded the NVG599 to the BGW210-700

I removed the "bypass" stuff, and am using the dhcp6c stuff from pfsense, there doesn't APPEAR to be any nonsense between them.

Any ideas gratefully appreciated.

[benyamin]

There appears to be some noise in the logs you provided. Potentially there's more happening around the dhcp6c entries than shown in your grep dump.

It might pay to clean up your config. I believe dhcpd is "sensitive" to whitespace, etc. I note that the comments often appear out of order in the log. I would remove all the comments to rule this out.

Also:

If you don't need any of these, I would remove those lines:

Code: [Select]

send rapid-commit; <-- particularly this one
request domain-name-servers;
request domain-name;
If you don't need a particular PD, don't include the send ia-pd X for that PD and remove the corresponding id-assoc pd X stanza.

On your VLAN interfaces (which you have commented out), you should probably restore the sla-len 0 and delete the second sla-id 0 and the prefix statement. When listing the VLAN prefix-interface you could try the OPT interface but you might need em0.<VLAN ID> as pfSense does, e.g. em0.8. For example:

Code: [Select]

id-assoc pd 1 {
   prefix-interface opt1 {
      sla-id 0;
      sla-len 0;
   };
};

OR

id-assoc pd 1 {
   prefix-interface em0.8 {
      sla-id 0;
      sla-len 0;
   };
};
Finally, check you only set the script up on the WAN (em4) interface, and set the other interfaces (em0, opt1, opt3, etc.) to track (then set the proper PD ID down below).

Maybe give that a go and see if things clear up...