OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • Help with IPv6
« previous next »
  • Print
Pages: 1 ... 5 6 [7]

Author Topic: Help with IPv6  (Read 40393 times)

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #90 on: May 08, 2017, 12:53:14 pm »
A real one
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13695
  • Karma: 1177
    • View Profile
Re: Help with IPv6
« Reply #91 on: May 08, 2017, 01:12:52 pm »
This is confusing. I need a break. :/
Logged

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #92 on: May 08, 2017, 01:13:50 pm »
Welcome to my world :-)
Logged

djGrrr

  • Full Member
  • ***
  • Posts: 112
  • Karma: 22
    • View Profile
Re: Help with IPv6
« Reply #93 on: May 08, 2017, 03:37:50 pm »
Taomyn, can you try setting it to request ipv6 prefix only, and disable directly send solicit?

This should allow Router Advertisements to give you the IP, while letting dhcp6c to request the prefixes.

Make sure to reboot after making these changes to verify if they work.
« Last Edit: May 08, 2017, 03:53:20 pm by djGrrr »
Logged

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #94 on: May 08, 2017, 03:54:30 pm »
WAN ended up with just an FE80, the LANs with no IPv6. I rebooted the firewall as well. The log shows:

Code: [Select]
May 8 15:41:46 dhcp6c[53628]: exiting
May 8 15:41:45 dhcp6c[53628]: no responses were received
May 8 15:41:27 dhcp6c[53628]: transmit failed: Device not configured
May 8 15:41:27 dhcp6c[53628]: Sending Release
May 8 15:41:18 dhcp6c[53628]: transmit failed: Device not configured
May 8 15:41:18 dhcp6c[53628]: Sending Release
May 8 15:41:14 dhcp6c[53628]: transmit failed: Device not configured
May 8 15:41:14 dhcp6c[53628]: Sending Release
May 8 15:41:12 dhcp6c[53628]: transmit failed: Device not configured
May 8 15:41:12 dhcp6c[53628]: Sending Release
May 8 15:41:10 dhcp6c[53628]: remove an address 2a02:678:10:b01:XXX:XXXX:XXXX:XXXX/64 on em0
May 8 15:41:10 dhcp6c[53628]: remove an address 2a02:678:10:b02:XXX:XXXX:fXXXX:XXXX/64 on em3
May 8 15:41:10 dhcp6c[53628]: transmit failed: Can't assign requested address
May 8 15:41:10 dhcp6c[53628]: Sending Release
May 8 15:41:10 dhcp6c[53628]: Start address release
May 8 15:41:04 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:41:04 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:41:04 dhcp6c[53628]: Sending Request
May 8 15:41:03 dhcp6c[53628]: Sending Solicit
May 8 15:41:03 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:41:03 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:41:03 dhcp6c[53628]: Sending Request
May 8 15:41:02 dhcp6c[53628]: Sending Solicit
May 8 15:41:01 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:41:01 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:41:01 dhcp6c[53628]: Sending Request
May 8 15:41:00 dhcp6c[53628]: Sending Solicit
May 8 15:41:00 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:41:00 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:41:00 dhcp6c[53628]: Sending Request
May 8 15:40:59 dhcp6c[53628]: Sending Solicit
May 8 15:40:58 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:40:58 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:40:58 dhcp6c[53628]: Sending Request
May 8 15:40:57 dhcp6c[53628]: Sending Solicit
May 8 15:40:57 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:40:57 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:40:57 dhcp6c[53628]: Sending Request
May 8 15:40:56 dhcp6c[53628]: Sending Solicit
May 8 15:40:55 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:40:55 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:40:55 dhcp6c[53628]: Sending Request
May 8 15:40:54 dhcp6c[53628]: Sending Solicit
May 8 15:40:54 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:40:54 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:40:54 dhcp6c[53628]: Sending Request
May 8 15:40:53 dhcp6c[53628]: Sending Solicit
May 8 15:40:53 dhcp6c[53628]: status code for NA-0: no addresses
May 8 15:40:53 dhcp6c[53628]: dhcp6c Received REQUEST
May 8 15:40:53 dhcp6c[53628]: Sending Request
Logged

djGrrr

  • Full Member
  • ***
  • Posts: 112
  • Karma: 22
    • View Profile
Re: Help with IPv6
« Reply #95 on: May 08, 2017, 03:58:01 pm »
The log says that it seems to be still asking for an address, did you enable the request prefix only option? Perhaps the logs are from before?
Logged

djGrrr

  • Full Member
  • ***
  • Posts: 112
  • Karma: 22
    • View Profile
Re: Help with IPv6
« Reply #96 on: May 08, 2017, 03:58:25 pm »
Quote from: franco on May 08, 2017, 06:42:59 am
It sounds funny but I've seen this too. First boot is perfect, afterwards reconfigure takes a up to a minute or it fails. Next reboot is perfect again.

Taking up to a minute is likely due to having to wait for the next Router Advertisement when "Directly Send Solicit" is disabled. But when it completely fails, even with config that previously worked perfectly, it is some kind of bug.

Quote from: franco on May 08, 2017, 06:42:59 am
What I've also seen is that although LAN is tracking, reloading LAN doesn't have any effect other than removing the IPv6, so you always want to reload WAN or better yet use the console option 11 to fully cycle the interface configuration.

All that is required to fix that is to send the HUP signal to the dhcp6c process of the "Parent Interface" when reconfiguring a Track Interface interface. This will cause it to reconfigure.
« Last Edit: May 08, 2017, 04:07:49 pm by djGrrr »
Logged

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #97 on: May 08, 2017, 03:59:44 pm »
Quote from: djGrrr on May 08, 2017, 03:58:01 pm
The log says that it seems to be still asking for an address, did you enable the request prefix only option? Perhaps the logs are from before?
Logged

djGrrr

  • Full Member
  • ***
  • Posts: 112
  • Karma: 22
    • View Profile
Re: Help with IPv6
« Reply #98 on: May 08, 2017, 04:05:09 pm »
What happens if you set the WAN IPv6 config to SLAAC? do you get an ip address then?
Logged

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #99 on: May 08, 2017, 04:23:14 pm »
Nope, I even rebooted and waited 10 minutes - no IPv6 addresses anywhere
Logged

djGrrr

  • Full Member
  • ***
  • Posts: 112
  • Karma: 22
    • View Profile
Re: Help with IPv6
« Reply #100 on: May 08, 2017, 04:27:15 pm »
Then honestly, the only thing i can suggest is that your ISP has a misconfiguration somewhere, there is no reason why you shouldn't be able to request both a an address and a prefix at the same time.

Does routing work when you only have a prefix delegation?
Logged

Taomyn

  • Sr. Member
  • ****
  • Posts: 412
  • Karma: 19
    • View Profile
Re: Help with IPv6
« Reply #101 on: May 08, 2017, 04:39:46 pm »
Yes, routing is working as far as I can tell - I have performed some IPv6 testing internally and it appears to work.


I'll try to contact my ISP again, but they've been next to useless so far. They told me to connect my old FritzBox router and that that would work - which is all they officially support. Just getting them to enable IPv6 took me two months, and then they never told me until after I found out for myself.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13695
  • Karma: 1177
    • View Profile
Re: Help with IPv6
« Reply #102 on: May 11, 2017, 03:44:07 pm »
Quote from: djGrrr on May 08, 2017, 03:58:25 pm
Quote from: franco on May 08, 2017, 06:42:59 am
It sounds funny but I've seen this too. First boot is perfect, afterwards reconfigure takes a up to a minute or it fails. Next reboot is perfect again.

Taking up to a minute is likely due to having to wait for the next Router Advertisement when "Directly Send Solicit" is disabled. But when it completely fails, even with config that previously worked perfectly, it is some kind of bug.

Quote from: franco on May 08, 2017, 06:42:59 am
What I've also seen is that although LAN is tracking, reloading LAN doesn't have any effect other than removing the IPv6, so you always want to reload WAN or better yet use the console option 11 to fully cycle the interface configuration.

All that is required to fix that is to send the HUP signal to the dhcp6c process of the "Parent Interface" when reconfiguring a Track Interface interface. This will cause it to reconfigure.

master should be a lot better now. Reloading works reliably although the delay is there sometimes. Releasing WAN lease removes LAN track IPv6. Renewing WAN lease brings back LAN tracking. Reloading LAN brings back tracked IPv6.

I also think I found that HUP bug:

https://github.com/opnsense/core/commit/d0a94a5b

To be honest, there was not a lot of work done on this code area in a few years. ;)


Cheers,
Franco
Logged

  • Print
Pages: 1 ... 5 6 [7]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • Help with IPv6
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2