new ISP's IPv6 seems to have delegation, but router doesn't take it

[jithatsonei]

Hello!

I've recently switched from a cable ISP to one on what seems to be G.fast or some kind of RJ45 link to their node on the side of my MDU - No modem or anything just my router connected straight into their node essentially.

The IPv4 worked fine over usual DHCP but I am struggling with dual-stack which I have usually been able to get to work with no problems on two different cable providers. However with this one I get an address assigned with a /64 len - but no prefix delegation. I've tried multiple DHCPv6 options including prefix hint and different sizes, but packet captures reveal that the router seems to be offering a /64 prefix via RA. Even switching to SLAAC wouldn't resolve this.

LAN bridge mirrors what's worked before for me, the basic track interface with manual settings for my own DHCPv6 server minor settings (DNS, etc). One other thing of note is that the IP is that the IP assigned does not appear to be routable, but if I dhclient another IP which assigns me a /128 address - that one is and im able to ping out.

Packet capture:

Code: [Select]

20:59:53.836665 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 16) fe80::62be:b4ff:fe07:9aa3 > ff02::2: [icmp6 sum ok] ICMP6, router solicitation, length 16
          source link-address option (1), length 8 (1): 60:be:b4:07:9a:a3
            0x0000:  60be b407 9aa3
20:59:53.839257 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 64) fe80::d272:dcff:fe8a:a910 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 64
        hop limit 64, Flags [managed, other stateful], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
          source link-address option (1), length 8 (1): d0:72:dc:8a:a9:10
            0x0000:  d072 dc8a a910
          mtu option (5), length 8 (1):  9198
            0x0000:  0000 0000 23ee
          prefix info option (3), length 32 (4): 2600:6401:9c46:8d00::/64, Flags [onlink, auto], valid time 2592000s, pref. time 604800s
            0x0000:  40c0 0027 8d00 0009 3a80 0000 0000 2600
            0x0010:  6401 9c46 8d00 0000 0000 0000 0000
20:59:53.983867 IP6 (hlim 1, next-header UDP (17) payload length: 44) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 inf-req (xid=2b7caf (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (elapsed-time 0) (option-request DNS-server DNS-search-list))
20:59:54.669328 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) :: > ff02::1:ff07:9aa3: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3
          unknown option (14), length 8 (1):
            0x0000:  fe51 4cd8 f0c1
20:59:55.019722 IP6 (hlim 1, next-header UDP (17) payload length: 44) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 inf-req (xid=2b7caf (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (elapsed-time 103) (option-request DNS-server DNS-search-list))
20:59:57.098994 IP6 (hlim 1, next-header UDP (17) payload length: 44) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 inf-req (xid=2b7caf (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (elapsed-time 311) (option-request DNS-server DNS-search-list))
21:00:01.159330 IP6 (hlim 1, next-header UDP (17) payload length: 44) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 inf-req (xid=2b7caf (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (elapsed-time 717) (option-request DNS-server DNS-search-list))
21:00:02.843595 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::62be:b4ff:fe07:9aa3 > fe80::d272:dcff:fe8a:a910: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::d272:dcff:fe8a:a910
          source link-address option (1), length 8 (1): 60:be:b4:07:9a:a3
            0x0000:  60be b407 9aa3
21:00:02.848118 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::d272:dcff:fe8a:a910 > fe80::62be:b4ff:fe07:9aa3: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::d272:dcff:fe8a:a910, Flags [router, solicited]
21:00:07.892395 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::d272:dcff:fe8a:a910 > fe80::62be:b4ff:fe07:9aa3: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::62be:b4ff:fe07:9aa3
          source link-address option (1), length 8 (1): d0:72:dc:8a:a9:10
            0x0000:  d072 dc8a a910
#ping
21:02:55.756267 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 0
21:02:56.760053 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 1
21:02:57.765416 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 2
21:02:58.775245 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 3
21:02:58.986213 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::62be:b4ff:fe07:9aa3 > fe80::d272:dcff:fe8a:a910: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::d272:dcff:fe8a:a910
          source link-address option (1), length 8 (1): 60:be:b4:07:9a:a3
            0x0000:  60be b407 9aa3
21:02:58.990727 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::d272:dcff:fe8a:a910 > fe80::62be:b4ff:fe07:9aa3: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::d272:dcff:fe8a:a910, Flags [router, solicited]
21:02:59.785301 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 4
21:03:00.795509 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 5
21:03:01.800778 IP6 (hlim 64, next-header ICMPv6 (58) payload length: 16) 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3 > 2606:4700:4700::1111: [icmp6 sum ok] ICMP6, echo request, seq 6

^ what piqued my interest was in the RA of what appeared to be the prefix advert here:

Code: [Select]

prefix info option (3), length 32 (4): 2600:6401:9c46:8d00::/64, Flags [onlink, auto], valid time 2592000s, pref. time 604800s
Their router also sent a few solicitations during those pings making me worry that I am not even in their NDP table, to which I advertised, so if its their fault that'd be good to know also! (I bet yall can find out who it is w/ what I've given so far  )

Would appreciate any questions/advice/criticisms - and greatly appreciate yalls time!

[Maurice]

Have a look at the dhcp6c log whether they actually offer prefix delegation (or DHCPv6 at all).
The /64 advertised via RA is only for numbering your WAN interface, it's not a prefix delegation. PD only works via DHCPv6.

Cheers
Maurice

[jithatsonei]

Have a look at the dhcp6c log whether they actually offer prefix delegation (or DHCPv6 at all).
The /64 advertised via RA is only for numbering your WAN interface, it's not a prefix delegation. PD only works via DHCPv6.

Cheers
Maurice

Couldn't find any hard logs apart from the rtsold script SIGHUPing it for reload - I ended up doing a packet capture which showed nothing using dhcp6c, but oddly with my (ghettoly) installed dual-dhclient it was able to pickup a response

Code: [Select]

08:44:58.057245 IP6 fe80::62be:b4ff:fe07:9aa3.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 confirm
08:44:58.073484 IP6 fe80::d272:dcff:fe8a:a910.dhcpv6-server > fe80::62be:b4ff:fe07:9aa3.dhcpv6-client: dhcp6 reply
08:44:58.079665 IP6 :: > ff02::1:ff64:c26a: ICMP6, neighbor solicitation, who has 2600:6401:9c46:8d00:0:ff70:7964:c26a, length 32
08:44:58.082695 IP6 fe80::62be:b4ff:fe07:9aa3.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 renew
08:44:58.096234 IP6 fe80::d272:dcff:fe8a:a910.dhcpv6-server > fe80::62be:b4ff:fe07:9aa3.dhcpv6-client: dhcp6 reply
08:45:01.857487 IP6 fe80::62be:b4ff:fe07:9aa3.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 inf-req
and also appears to maybe offer a prefix?

Code: [Select]

PRC: Confirming active lease (INIT-REBOOT).
XMT: Forming Confirm, 0 ms elapsed.
XMT:  X-- IA_NA b4:07:9a:a3
XMT:  | X-- Confirm Address 2600:6401:9c46:8d00:0:ff70:7964:c26a
XMT:  V IA_NA appended.
XMT: Confirm on igc3, interval 990ms.
RCV: Reply message on igc3 from fe80::d272:dcff:fe8a:a910.
RCV:  X-- Server ID: 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74
message status code Success: "All addresses still on link."
PRC: Bound to lease 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74.
PRC: Renewal event scheduled in -3153 seconds, to run for 21600 seconds.
PRC: Depreference scheduled in -39153 seconds.
PRC: Expiration scheduled in 40047 seconds.
PRC: Renewing lease on igc3.
XMT: Forming Renew, 0 ms elapsed.
XMT:  X-- IA_NA b4:07:9a:a3
XMT:  | X-- Requested renew  +3600
XMT:  | X-- Requested rebind +5400
XMT:  | | X-- IAADDR 2600:6401:9c46:8d00:0:ff70:7964:c26a
XMT:  | | | X-- Preferred lifetime +7200
XMT:  | | | X-- Max lifetime +7500
XMT:  V IA_NA appended.
XMT: Renew on igc3, interval 9860ms.
PRC: Address 2600:6401:9c46:8d00:0:ff70:7964:c26a depreferred.
PRC: Rebind event scheduled in 18447 seconds, to run for 21600 seconds.
PRC: Expiration scheduled in 40047 seconds.
RCV: Reply message on igc3 from fe80::d272:dcff:fe8a:a910.
RCV:  X-- IA_NA b4:07:9a:a3
RCV:  | X-- starts 1689428698
RCV:  | X-- t1 - renew  +0
RCV:  | X-- t2 - rebind +0
RCV:  | X-- [Options]
RCV:  | | X-- IAADDR 2600:6401:9c46:8d00:0:ff70:7964:c26a
RCV:  | | | X-- Preferred lifetime 7200.
RCV:  | | | X-- Max lifetime 86400.
RCV:  X-- Server ID: 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74
PRC: Bound to lease 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74.
PRC: Renewal event scheduled in 43200 seconds, to run for 21600 seconds.
PRC: Depreference scheduled in 7200 seconds.
PRC: Expiration scheduled in 86400 seconds.

^ this is the /128 that is routable and pings for me

[Maurice]

Okay, so there is a DHCPv6 server and it gives dual-dhclient an address (/128 IA_NA). But there is nothing about prefix delegation (IA_PD) in the dual-dhclient log. You probably didn't configure it to request a prefix?

The dhcp6c log in OPNsense can be found in 'System: Log Files: General'. Set the level to 'Notice' or lower, search for 'prefix', 'IA_PD', 'dhcp6c'.

The packet capture in your first post shows dhcp6 inf-req packets (probably from dhcp6c), but no requests for an address or prefix. Did you set the WAN to SLAAC when making this packet capture? As mentioned, PD only works in DHCPv6 mode.

Why the /64 SLAAC WAN address isn't working is a different question and not strictly related. That might be a configuration error on your ISP's side.

[jithatsonei]

And you'd be right - -P allows for PD requests in dhclient (dhclient isn't entirely supported I know, but easier for me to diag with this lol)

Code: [Select]

# /usr/local/sbin/dhclient -6 -P -N -d -v igc3
Internet Systems Consortium DHCP Client 4.4.3-P1
Copyright 2004-2022 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/

Listening on Socket/igc3
Sending on   Socket/igc3
PRC: Confirming active lease (INIT-REBOOT).
XMT: Forming Rebind, 0 ms elapsed.
XMT:  X-- IA_NA b4:07:9a:a3
XMT:  | X-- Requested renew  +3600
XMT:  | X-- Requested rebind +5400
XMT:  | | X-- IAADDR 2600:6401:9c46:8d00:0:ff70:7964:c26a
XMT:  | | | X-- Preferred lifetime +7200
XMT:  | | | X-- Max lifetime +7500
XMT:  V IA_NA appended.
XMT:  X-- IA_PD b4:07:9a:a3
XMT:  | X-- Request renew in  +3600
XMT:  | X-- Request rebind in +5400
XMT: Rebind on igc3, interval 1070ms.
RCV: Reply message on igc3 from fe80::d272:dcff:fe8a:a910.
RCV:  X-- IA_NA b4:07:9a:a3
RCV:  | X-- starts 1689432968
RCV:  | X-- t1 - renew  +0
RCV:  | X-- t2 - rebind +0
RCV:  | X-- [Options]
RCV:  | | X-- IAADDR 2600:6401:9c46:8d00:0:ff70:7964:c26a
RCV:  | | | X-- Preferred lifetime 2930.
RCV:  | | | X-- Max lifetime 82130.
RCV:  X-- IA_PD b4:07:9a:a3
RCV:  | X-- starts 1689432968
RCV:  | X-- t1 - renew  +0
RCV:  | X-- t2 - rebind +0
RCV:  | X-- [Options]
RCV:  | | X-- IAPREFIX 2600:6401:9c46:8d8f::/64
RCV:  | | | X-- Preferred lifetime 53937.
RCV:  | | | X-- Max lifetime 86337.
RCV:  X-- Server ID: 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74
PRC: Bound to lease 00:01:00:01:21:5c:00:4c:00:25:90:f1:82:74.
Prefix REBIND6 old= new=2600:6401:9c46:8d8f::/64
it appears to take a /64 prefix here

Re: PCAP's yes I did, apologies for not setting it back properly! Here is a proper one:

Code: [Select]

10:04:47.939781 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 16) fe80::62be:b4ff:fe07:9aa3 > ff02::2: [icmp6 sum ok] ICMP6, router solicitation, length 16
          source link-address option (1), length 8 (1): 60:be:b4:07:9a:a3
            0x0000:  60be b407 9aa3
10:04:47.945157 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 64) fe80::d272:dcff:fe8a:a910 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 64
        hop limit 64, Flags [managed, other stateful], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
          source link-address option (1), length 8 (1): d0:72:dc:8a:a9:10
            0x0000:  d072 dc8a a910
          mtu option (5), length 8 (1):  9198
            0x0000:  0000 0000 23ee
          prefix info option (3), length 32 (4): 2600:6401:9c46:8d00::/64, Flags [onlink, auto], valid time 2592000s, pref. time 604800s
            0x0000:  40c0 0027 8d00 0009 3a80 0000 0000 2600
            0x0010:  6401 9c46 8d00 0000 0000 0000 0000
10:04:48.060021 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 0) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
10:04:48.411855 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) :: > ff02::1:ff07:9aa3: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2600:6401:9c46:8d00:62be:b4ff:fe07:9aa3
          unknown option (14), length 8 (1):
            0x0000:  b447 2520 a9f6
10:04:49.161420 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 115) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
10:04:51.197551 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 318) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
10:04:55.229256 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 722) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
10:05:02.318444 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::62be:b4ff:fe07:9aa3 > fe80::d272:dcff:fe8a:a910: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::d272:dcff:fe8a:a910
          source link-address option (1), length 8 (1): 60:be:b4:07:9a:a3
            0x0000:  60be b407 9aa3
10:05:02.322999 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::d272:dcff:fe8a:a910 > fe80::62be:b4ff:fe07:9aa3: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::d272:dcff:fe8a:a910, Flags [router, solicited]
10:05:03.178971 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 1517) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
10:05:07.410647 IP6 (class 0xe0, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::d272:dcff:fe8a:a910 > fe80::62be:b4ff:fe07:9aa3: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::62be:b4ff:fe07:9aa3
          source link-address option (1), length 8 (1): d0:72:dc:8a:a9:10
            0x0000:  d072 dc8a a910
10:05:07.410671 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::62be:b4ff:fe07:9aa3 > fe80::d272:dcff:fe8a:a910: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::62be:b4ff:fe07:9aa3, Flags [router, solicited]
10:05:19.289682 IP6 (hlim 1, next-header UDP (17) payload length: 76) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=af0541 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 3128) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0))
And as for the system logs I am not really seeing anything useful for dhcp6c apart from "RTSOLD script - Sending SIGHUP to dhcp6c" - I've already set them to debug (gotta use up that 256GB ssd right?!) and was looking from /var/log/system/latest.log

[Maurice]

So the DHCPv6 server works, gives dhclient a /128 WAN address and a /64 delegated prefix. (/64 is the absolute bare minimum. You could try explicitly requesting a different PD size, but most ISPs don't support that.)

Did you set the dhcp6c log level to at least 'Info' in 'Interfaces: Settings'? The default 'Standard' isn't sufficient for troubleshooting.

The proper packet capture shows OPNsense sending dhcp6 solicits, asking for an address and a prefix. But there doesn't seem to be a response. Maybe your ISP doesn't like something about dhcp6c's solicits? You could try a 1:1 comparison of a dhcp6c vs. dhclient solicit packet.

Or maybe you have to release dhclient's lease before requesting one with dhcp6c?

[CJ]

I had to check Send IPv6 prefix hint before I got my ISP to recognize my delegation size request.

[jithatsonei]

So the DHCPv6 server works, gives dhclient a /128 WAN address and a /64 delegated prefix. (/64 is the absolute bare minimum. You could try explicitly requesting a different PD size, but most ISPs don't support that.)

Did you set the dhcp6c log level to at least 'Info' in 'Interfaces: Settings'? The default 'Standard' isn't sufficient for troubleshooting.

The proper packet capture shows OPNsense sending dhcp6 solicits, asking for an address and a prefix. But there doesn't seem to be a response. Maybe your ISP doesn't like something about dhcp6c's solicits? You could try a 1:1 comparison of a dhcp6c vs. dhclient solicit packet.

Or maybe you have to release dhclient's lease before requesting one with dhcp6c?

Doh! I'm pretty sure you mentioned that before too my apologies! I believe this maybe of more use 

Code: [Select]

<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="322"] a new XID (708fe7) is generated
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="323"] set client ID (len 14)
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="324"] set identity association
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="325"] set elapsed time (len 2)
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="326"] set option request (len 4)
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="327"] set IA_PD prefix
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="328"] set IA_PD
<27>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="329"] transmit failed: Can't assign requested address
<29>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="330"] reset a timer on igc3, state=SOLICIT, timeo=0, retrans=1091
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="331"] set client ID (len 14)
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="332"] set identity association
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="333"] set elapsed time (len 2)
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="334"] set option request (len 4)
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="335"] set IA_PD prefix
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="336"] set IA_PD
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="337"] send solicit to ff02::1:2%igc3
<29>1 2023-07-15T17:38:54-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="338"] reset a timer on igc3, state=SOLICIT, timeo=1, retrans=2083
<13>1 2023-07-15T17:38:54-05:00 lan.trash.network opnsense 267 - [meta sequenceId="339"] /usr/local/etc/rc.bootup: plugins_configure monitor (1,null,1)
<13>1 2023-07-15T17:38:54-05:00 lan.trash.network opnsense 267 - [meta sequenceId="340"] /usr/local/etc/rc.bootup: plugins_configure monitor (execute task : dpinger_configure_do(1,null,1))
<13>1 2023-07-15T17:38:54-05:00 lan.trash.network kernel - - [meta sequenceId="341"] <118>Starting Unbound DNS...done.
<13>1 2023-07-15T17:38:54-05:00 lan.trash.network kernel - - [meta sequenceId="342"] <118>Setting up gateway monitors...done.
<13>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 95796 - [meta sequenceId="343"] RTSOLD script - Sending SIGHUP to dhcp6c
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="344"] removing an event on igc3, state=SOLICIT
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="345"] <3>[interface] (9)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="346"] <5>[igc3] (4)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="347"] <3>begin of closure [{] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="348"] <3>[send] (4)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="349"] <3>[ia-na] (5)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="350"] <3>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="351"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="352"] <3>comment [# request stateful address] (26)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="353"] <3>[send] (4)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="354"] <3>[ia-pd] (5)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="355"] <3>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="356"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="357"] <3>comment [# request prefix delegation] (27)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="358"] <3>[request] (7)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="359"] <3>[domain-name-servers] (19)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="360"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="361"] <3>[request] (7)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="362"] <3>[domain-name] (11)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="363"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="364"] <3>[script] (6)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="365"] <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="366"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="367"] <3>comment [# we'd like some nameservers please] (35)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="368"] <3>end of closure [}] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="369"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="370"] <3>[id-assoc] (8)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="371"] <13>[na] (2)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="372"] <13>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="373"] <13>begin of closure [{] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="374"] <3>end of closure [}] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="375"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="376"] <3>[id-assoc] (8)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="377"] <13>[pd] (2)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="378"] <13>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="379"] <13>begin of closure [{] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="380"] <3>[prefix] (6)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="381"] <3>[::] (2)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="382"] <3>[/] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="383"] <3>[64] (2)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="384"] <3>[infinity] (8)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="385"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="386"] <3>[prefix-interface] (16)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="387"] <5>[bridge0] (7)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="388"] <3>begin of closure [{] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="389"] <3>[sla-id] (6)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="390"] <3>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="391"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="392"] <3>[sla-len] (7)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="393"] <3>[0] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="394"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="395"] <3>end of closure [}] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="396"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="397"] <3>end of closure [}] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="398"] <3>end of sentence [;] (1)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="399"] called
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="400"] duplicated interface: igc3
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="401"] called
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="402"] reset a timer on igc3, state=INIT, timeo=0, retrans=118
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="403"] a new XID (a13789) is generated
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="404"] set client ID (len 14)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="405"] set identity association
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="406"] set elapsed time (len 2)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="407"] set option request (len 4)
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="408"] set IA_PD prefix
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="409"] set IA_PD
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="410"] send solicit to ff02::1:2%igc3
<29>1 2023-07-15T17:38:55-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="411"] reset a timer on igc3, state=SOLICIT, timeo=0, retrans=1025
<13>1 2023-07-15T17:38:55-05:00 lan.trash.network opnsense 267 - [meta sequenceId="412"] /usr/local/etc/rc.bootup: plugins_configure vpn (1)
<13>1 2023-07-15T17:38:55-05:00 lan.trash.network opnsense 267 - [meta sequenceId="413"] /usr/local/etc/rc.bootup: plugins_configure vpn (execute task : ipsec_configure_do(1))
<13>1 2023-07-15T17:38:55-05:00 lan.trash.network kernel - - [meta sequenceId="414"] <118>Configuring firewall.......done.
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="415"] set client ID (len 14)
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="416"] set identity association
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="417"] set elapsed time (len 2)
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="418"] set option request (len 4)
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="419"] set IA_PD prefix
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="420"] set IA_PD
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="421"] send solicit to ff02::1:2%igc3
<29>1 2023-07-15T17:38:56-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="422"] reset a timer on igc3, state=SOLICIT, timeo=1, retrans=2075
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="423"] /usr/local/etc/rc.bootup: plugins_configure vpn (execute task : openvpn_configure_do(1))
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="424"] /usr/local/etc/rc.bootup: Resyncing OpenVPN instances.
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="425"] /usr/local/etc/rc.bootup: plugins_configure bootup (1)
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="426"] /usr/local/etc/rc.bootup: plugins_configure bootup (execute task : miniupnpd_configure_do(1))
<11>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="427"] /usr/local/etc/rc.bootup: miniupnpd: Could not resolve real interface for lan
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="428"] /usr/local/etc/rc.bootup: plugins_configure bootup (execute task : ntpd_configure_do(1))
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="429"] /usr/local/etc/rc.bootup: plugins_configure bootup (execute task : opendns_configure_do(1))
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network opnsense 267 - [meta sequenceId="430"] /usr/local/etc/rc.bootup: plugins_configure bootup (execute task : unbound_configure_do(1))
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network kernel - - [meta sequenceId="431"] <118>Syncing OpenVPN settings...done.
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network kernel - - [meta sequenceId="432"] <118>Starting UPnP service...done.
<13>1 2023-07-15T17:38:57-05:00 lan.trash.network kernel - - [meta sequenceId="433"] <118>Starting NTP service...done.
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="434"] set client ID (len 14)
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="435"] set identity association
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="436"] set elapsed time (len 2)
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="437"] set option request (len 4)
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="438"] set IA_PD prefix
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="439"] set IA_PD
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="440"] send solicit to ff02::1:2%igc3
<29>1 2023-07-15T17:38:58-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="441"] reset a timer on igc3, state=SOLICIT, timeo=2, retrans=4058
What piques my interest here is

Code: [Select]

<27>1 2023-07-15T17:38:53-05:00 lan.trash.network dhcp6c 52301 - [meta sequenceId="329"] transmit failed: Can't assign requested address - this log was taken directly from when the machine was booting up, so no dhclient interfering

and now to compare

dhcp6c:

Code: [Select]

17:35:46.279322 IP6 (hlim 1, next-header UDP (17) payload length: 105) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=f772ba (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:0 T1:0 T2:0) (elapsed-time 332) (option-request DNS-server DNS-search-list) (IA_PD IAID:0 T1:0 T2:0 (IA_PD-prefix ::/64 pltime:4294967295 vltime:4294967295)))
dhclient

Code: [Select]

17:54:26.794474 IP6 (hlim 1, next-header UDP (17) payload length: 68) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=b6a499 (client-ID hwaddr/time type 1 time 742776852 60beb4079aa3) (elapsed-time 1396) (IA_NA IAID:3020397219 T1:3600 T2:5400) (IA_PD IAID:3020397219 T1:3600 T2:5400))
17:54:26.803150 IP6 (class 0xe0, hlim 255, next-header UDP (17) payload length: 137) fe80::d272:dcff:fe8a:a910.547 > fe80::62be:b4ff:fe07:9aa3.546: [udp sum ok] dhcp6 advertise (xid=b6a499 (IA_NA IAID:3020397219 T1:0 T2:0 (IA_ADDR 2600:6401:9c46:8d00:0:ff70:7964:6f20 pltime:54000 vltime:86400)) (IA_PD IAID:3020397219 T1:0 T2:0 (IA_PD-prefix 2600:6401:9c46:8d8e::/64 pltime:54000 vltime:86400)) (client-ID hwaddr/time type 1 time 742776852 60beb4079aa3) (server-ID hwaddr/time type 1 time 559677516 002590f18274))
which seems to be the same apart from differents IDs and T1 and T2 times for IA_NA and PD - any suggestions?

edit: so I was playing with the dhcp6c to essentially get the same packet as dhclient but still no joy

Packet comparison - dhcp6c is top, dhclient bottom

Code: [Select]

18:16:45.069095 IP6 (hlim 1, next-header UDP (17) payload length: 68) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=d4cbb0 (client-ID hwaddr/time type 1 time 729430816 60beb4079aa0) (IA_NA IAID:3020397219 T1:0 T2:0) (elapsed-time 319) (IA_PD IAID:3020397219 T1:0 T2:0))
17:54:26.794474 IP6 (hlim 1, next-header UDP (17) payload length: 68) fe80::62be:b4ff:fe07:9aa3.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=b6a499 (client-ID hwaddr/time type 1 time 742776852 60beb4079aa3) (elapsed-time 1396) (IA_NA IAID:3020397219 T1:3600 T2:5400) (IA_PD IAID:3020397219 T1:3600 T2:5400))

dhcp6c console output:

Code: [Select]

# dhcp6c -c /var/etc/dhcp6.conf -dDf igc3
Jul/15/2023 18:16:40: extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:2b:7a:3b:20:60:be:b4:07:9a:a0
Jul/15/2023 18:16:40: <3>[interface] (9)
Jul/15/2023 18:16:40: <5>[igc3] (4)
Jul/15/2023 18:16:40: <3>begin of closure [{] (1)
Jul/15/2023 18:16:40: <3>[send] (4)
Jul/15/2023 18:16:40: <3>[ia-na] (5)
Jul/15/2023 18:16:40: <3>[3020397219] (10)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>comment [# request stateful address] (26)
Jul/15/2023 18:16:40: <3>[send] (4)
Jul/15/2023 18:16:40: <3>[ia-pd] (5)
Jul/15/2023 18:16:40: <3>[3020397219] (10)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>comment [# request prefix delegation] (27)
Jul/15/2023 18:16:40: <3>[script] (6)
Jul/15/2023 18:16:40: <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>comment [# we'd like some nameservers please] (35)
Jul/15/2023 18:16:40: <3>end of closure [}] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>[id-assoc] (8)
Jul/15/2023 18:16:40: <13>[na] (2)
Jul/15/2023 18:16:40: <13>[3020397219] (10)
Jul/15/2023 18:16:40: <13>begin of closure [{] (1)
Jul/15/2023 18:16:40: <3>end of closure [}] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>[id-assoc] (8)
Jul/15/2023 18:16:40: <13>[pd] (2)
Jul/15/2023 18:16:40: <13>[3020397219] (10)
Jul/15/2023 18:16:40: <13>begin of closure [{] (1)
Jul/15/2023 18:16:40: <3>[prefix-interface] (16)
Jul/15/2023 18:16:40: <5>[bridge0] (7)
Jul/15/2023 18:16:40: <3>begin of closure [{] (1)
Jul/15/2023 18:16:40: <3>[sla-id] (6)
Jul/15/2023 18:16:40: <3>[0] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>[sla-len] (7)
Jul/15/2023 18:16:40: <3>[0] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>end of closure [}] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: <3>end of closure [}] (1)
Jul/15/2023 18:16:40: <3>end of sentence [;] (1)
Jul/15/2023 18:16:40: called
Jul/15/2023 18:16:40: called
Jul/15/2023 18:16:40: reset a timer on igc3, state=INIT, timeo=0, retrans=891
Jul/15/2023 18:16:41: Sending Solicit
Jul/15/2023 18:16:41: a new XID (d4cbb0) is generated
Jul/15/2023 18:16:41: set client ID (len 14)
Jul/15/2023 18:16:41: set identity association
Jul/15/2023 18:16:41: set elapsed time (len 2)
Jul/15/2023 18:16:41: set IA_PD
Jul/15/2023 18:16:41: send solicit to ff02::1:2%igc3
Jul/15/2023 18:16:41: reset a timer on igc3, state=SOLICIT, timeo=0, retrans=1091
Jul/15/2023 18:16:42: Sending Solicit
Jul/15/2023 18:16:42: set client ID (len 14)
Jul/15/2023 18:16:42: set identity association
Jul/15/2023 18:16:42: set elapsed time (len 2)
Jul/15/2023 18:16:42: set IA_PD
Jul/15/2023 18:16:42: send solicit to ff02::1:2%igc3
Jul/15/2023 18:16:42: reset a timer on igc3, state=SOLICIT, timeo=1, retrans=2083
Jul/15/2023 18:16:45: Sending Solicit
Jul/15/2023 18:16:45: set client ID (len 14)
Jul/15/2023 18:16:45: set identity association
Jul/15/2023 18:16:45: set elapsed time (len 2)
Jul/15/2023 18:16:45: set IA_PD
Jul/15/2023 18:16:45: send solicit to ff02::1:2%igc3
Jul/15/2023 18:16:45: reset a timer on igc3, state=SOLICIT, timeo=2, retrans=3982
Jul/15/2023 18:16:49: Sending Solicit
Jul/15/2023 18:16:49: set client ID (len 14)
Jul/15/2023 18:16:49: set identity association
Jul/15/2023 18:16:49: set elapsed time (len 2)
Jul/15/2023 18:16:49: set IA_PD
Jul/15/2023 18:16:49: send solicit to ff02::1:2%igc3
Jul/15/2023 18:16:49: reset a timer on igc3, state=SOLICIT, timeo=3, retrans=8065
^CJul/15/2023 18:16:56: removing an event on igc3, state=SOLICIT

[jithatsonei]

I've cracked it Jim! The DUID was completely wrong for some reason, no idea how but dhcp6c was using the DUID for my first interface, not the last one my WAN is in. Double checked configs and cleared DUID and still was just stuck on that - so I swapped WAN to first interface and BOOM I got my prefix!

But it still wouldnt ping out of course, further investigation revealed SLAAC was shoving that /64 down my throat whether I wanted it or not. Only way I found to make the routing happy was to instantanously delete the address via ifconfig whilst in the middle of opnsense running through its renew scripts - that gets everything routing properly (for the most part) and I can PING OUT FROM MY PC!

BUT one question remains, is there anyway to configure opnsense to completely ignore that autoconf /64 address?

[Maurice]

Congrats! 🎉

But I have to point out it's not the default DUID being wrong, it's your ISP being silly. The DUID identifies the device, not the interface (that's what the IAID is for). The DUID is the same for all interfaces of a device, even in a multi WAN setup. Which interface's MAC address the DUID is based on doesn't matter - OPNsense just uses the first one. Your ISP requiring the DUID to match the MAC address of the requesting interface just shows they don't know what they're doing (which they have already proven by delegating a lousy /64 and not routing SLAAC addresses). Let's hope it doesn't go downhill from here.

Btw, you wouldn't have had to change the interface assignment - you can change the DUID in Interfaces: Settings. I wonder what happens when using a DUID type not based on a MAC address...

As for disabling SLAAC, I don't think that's possible without rejecting Router Advertisements altogether. Correct me if I'm wrong. Better ask your ISP to fix their RAs (clear the A flag).

Have a good one!

[franco]

Unfortunately "accept_rtadv" flag is hardcoded since some ISPs require it for IPv6 to function at all

https://github.com/opnsense/core/blob/4acc838e4dc19e87affeb4f5a22d9a7dfe0470f6/src/etc/inc/interfaces.inc#L2305

Opt-out may be possible but adding more knobs to IPv6 is not my favourite past time activity and leads to more support cases later on.


Cheers,
Franco

[Maurice]

@Franco Makes sense.
Being able to selectively disable SLAAC without completely ignoring RAs would be nice for some use cases. I've done that on hosts with other OSs, but can't remember having seen such a feature in FreeBSD. I think it's simply not supported.

Cheers
Maurice

[jithatsonei]

Unfortunately "accept_rtadv" flag is hardcoded since some ISPs require it for IPv6 to function at all

https://github.com/opnsense/core/blob/4acc838e4dc19e87affeb4f5a22d9a7dfe0470f6/src/etc/inc/interfaces.inc#L2305

Opt-out may be possible but adding more knobs to IPv6 is not my favourite past time activity and leads to more support cases later on.


Cheers,
Franco

And of course when I patched accept RA's out it did take out the prefix, but also gave me the added benefit of "setup your own routes chump" since it doesn't accept RA - and I didn't really feel like going through all of that so I just left it on and added a bit into a script that just removes the alias before opnsense catches it

But honestly I am pretty happy where its at now, the fun part begins on finding the right dept in my ISP and begging them to unscrew this Cisco so that I can have a normal config  - I am curious on what would happen if I tried plugging in a normal TP-Link router into it - probably fire 

Just want to thanks to all who helped get me on the right path also!

[Maurice]

I wouldn't be surprised if some random consumer router actually did a decent job here. These are often optimized for maximum ISP compatibility and deal with all kinds of shenanigans automagically. I mean, they must have tested this with something. And that something probably "just worked", so it's all good, right?

If you want to stick with patching out accept_rtadv (or maybe blocking RAs with a firewall rule might work, too?): Setting up the default route manually is straightforward. Create a gateway, enter the link-local address of your ISPs gateway, done.

[jithatsonei]

I wouldn't be surprised if some random consumer router actually did a decent job here. These are often optimized for maximum ISP compatibility and deal with all kinds of shenanigans automagically. I mean, they must have tested this with something. And that something probably "just worked", so it's all good, right?

If you want to stick with patching out accept_rtadv (or maybe blocking RAs with a firewall rule might work, too?): Setting up the default route manually is straightforward. Create a gateway, enter the link-local address of your ISPs gateway, done.

youd think itd be easy until you spend 2 hours on it just to realize you needed to reboot to get the route and NDP tables really flushed from the RA crap lol - all good now though!