DHCP lease not renewing on Orange FR

[skool]

Code: [Select]

2023-04-11T19:21:36 Notice dhcp6c dhcp6c REQUEST on igb0_vlan832 - running newipv6
2023-04-11T19:21:34 Notice dhcp6c RTSOLD script - Sending SIGHUP to dhcp6c
2023-04-10T12:04:53 Notice dhcp6c dhcp6c REQUEST on igb0_vlan832 - running newipv6
2023-04-10T12:04:51 Error dhcp6c transmit failed: Can't assign requested address
2023-04-10T12:04:50 Notice dhcp6c RTSOLD script - Starting dhcp6 client


I dont have this error
you can see on /var/log/system/*.log if it's present in the past days

[nivek1612]

I only have yesterday's log (updated yesterday) but the error was there then as well. Could have been there a while. BUT all seems to be working well.

Franco any clues about where to look at what address it's trying to assign?

[franco]

I have this too with dhcp6c, but it seems this is mostly a hiccup during SIGHUP reload of the configuration (initiated via GUI or by a link even on the WAN interface).

Thanks for testing. I'll merge to development version and fix possibly remaining issues there and we have a fix for 23.1.6 


Cheers,
Franco

[nivek1612]

Just renewed on time no issues with the new patch.

19/20 score on https://ipv6-test.com/

[Sisyphe]

The latest patch worked also for me. I have the dhcp6c error in my logs.

Thank you Franco!

[franco]

No thank you guys for helping this over the finish line

Just one missing internal review for the rules and then it'll be merged.


Cheers,
Franco

[Tol Phobos]

# opnsense-patch 2e4a1ea98d74

This patch works on my side to. 3 days uptime without problem.
I have the dhcp6c error in my logs.

[franco]

Thanks, it was merged to stable and we are ready for 23.1.6. Just need to remember updating the documentation if no one beats me to it?


Cheers,
Franco

[zibloon]

I confirm that adding a firewall rule to re-tag priority to 6 for DHCP packets (outgoing UDP packets to 67 and 546, ipv4 and ipv6) fix the issue.

As I read on other forum, it seems this problem is also present on Mikrotik equipment, that probably use the same dhclient app.

So the bug is that dhclient dont use vlan-pcp 6 when renewing a lease.
I dont know if someone is possible on opnsense side or if we need to check with dhclient team.

Hello all. I am on:
  OPNsense 22.7.11_1-amd64
  FreeBSD 13.1-RELEASE-p5
  OpenSSL 1.1.1s 1 Nov 2022

And I face the exact same issue: I need to reboot every day to get the Orange France connection to work again...
I am using IPv4 only (no IPv6). Could you please explain how to add this firewall rule (via the GUI if possible, or via command line)?
Thanks for any help!

[franco]

I would just recommend updating to 23.1.6 and adding the VLAN Priority for DHCPv4 as well in your WAN settings.


Cheers,
Franco

[zibloon]

Hello Franco and thanks for your answer.

Do you mean 23.1.6 fixed this issue entirely? If not, I'd like to wait before upgrading because I have another opnsense router in another location and I will update both at the same time when I am ready (I like to keep both on same version)

So at the moment, I am still on 22.7.11_1 and I do have "vlan-pcp 6" in the "Option Modifiers" of the IPv4 WAN settings. All works flawlessly but only for ~24 hours (just like what skool described in his first post).

For a moment, I was wondering if you were talking about the setting in Interfaces -> Other types -> VLAN -> igb0_vlan832 -> VLAN priority. So I briefly set it to "Internetwork Control (6)" instead of "Best effort (0)" but the connection was much slower so I had to revert.

Regarding Skool's solution:

I confirm that adding a firewall rule to re-tag priority to 6 for DHCP packets (outgoing UDP packets to 67 and 546, ipv4 and ipv6) fix the issue.

It looks like an easy fix (in case 23.1.6 doesn't fix entirely) but I am not sure how to add this rule. Could you please explain how to add this firewall rule (via the GUI if possible, or via command line)?

Thanks for any help!

[franco]

> So at the moment, I am still on 22.7.11_1 and I do have "vlan-pcp 6" in the "Option Modifiers" of the IPv4 WAN settings. All works flawlessly but only for ~24 hours (just like what skool described in his first post).

Yes you are late to the party. The fix is only in 23.1.6 OR you add the firewall rule yourself.

The fix has been confirmed by multiple people in this thread before 23.1.6 came out so we can be 100% sure it works in 23.1.6.

The power of the community.


Cheers,
Franco

[zibloon]

OK understood. I will update both my routers to 23.1.6 and I will report here

[zibloon]

Hello Franco.

I upgraded to 23.1.6 but I am still facing the same problem unfortunately (it works for ~24H only)

- The release notes at https://forum.opnsense.org/index.php?topic=33643.0 mentions

Orange FR users be aware that your ISP now requires strict VLAN PCP on all DHCPv4 requests so please do set 'Use VLAN priority' interface setting for both DHCPv4 and DHCPv6.  The 'Option Modifiers' override for "vlan-pcp" in DHCPv4 can be removed and the documentation was updated accordingly.

- The documentation at https://docs.opnsense.org/manual/how-tos/orange_fr_fttp.html mentions

Some areas of France require that the DHCP and DHCP6 requests are made with a VLAN-PCP of 6. If you are in one of these regions then this can be done via ‘Use VLAN priority’ interface settings. Make sure to set this for both DHCP and DHCP6 at the same time.

I am a bit confused because the pictures in the documentation still show "vlan pcp 6" in the "Option Modifiers" and a pcp of "0" in VLAN priority

So where should I set the VLAN priority of 6 exactly? Note I use IPv4 only and I already tried to setup the VLAN priority as "Internetwork Control (6)" in "Interfaces:Other types:VLAN -> igb0_vlan832 -> VLAN priority" but the connection was much slower so I didn't let it run for ~24 hours

[nivek1612]

@zibloon

No set this option for both DHCP and DHCPv6 on the interface settings INTERFACES-->WAN