No IPv6 on WAN

[jarif]

I'm a consumer client for Telia in Finland. I have a VDSL2 modem/router from them, and it is in routing mode, and has both IPv4 and IPv6 addresses. One of the LAN ports of it is in DMZ mode, and my OPNsense firewall is connected to that.

And OPNsense does not get IPv6 no matter how I configure the DHCP6 setting. It is currently in DHCPv6 and no IPv6 address, If I set it to 6to4-tunnel it gets IPv6 address but still http://test-ipv6.com claims I do not have IPv6.

Any ideas?

[bartjsmit]

What is the size of the delegation from your ISP? I would pick a /64 and assign static IP's for the WAN and LAN interfaces of OPNsense.

Bart...

[Space]

Hi,

can you post the output of  the following command?

Code: [Select]

sockstat -l | grep ':546'
Best regards,

    Jochen

[jarif]

Code: [Select]

root@wellington:~ # sockstat -l | grep ':546'
root     dhcp6c     34498 8  udp6   *:546                 *:*
root     dhcp6c     29911 7  udp6   *:546                 *:*


[jarif]

Code: [Select]

root@wellington:~ # ifconfig
bge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=80098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LINKSTATE>
ether 00:15:60:a4:f9:a4
inet 192.168.1.115 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::215:60ff:fea4:f9a4%bge0 prefixlen 64 scopeid 0x1
inet6 2001:2003:fbbe:1e40:215:60ff:fea4:f9a4 prefixlen 64 autoconf
nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
xl0: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
options=82008<VLAN_MTU,WOL_MAGIC,LINKSTATE>
ether 00:04:75:80:a8:d1
inet6 fe80::1:1%xl0 prefixlen 64 scopeid 0x2
inet 86.115.203.6 netmask 0xfffff000 broadcast 86.115.207.255
nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
enc0: flags=0<> metric 0 mtu 1536
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: enc
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: lo
pflog0: flags=100<PROMISC> metric 0 mtu 33160
groups: pflog
pfsync0: flags=0<> metric 0 mtu 1500
groups: pfsync
syncpeer: 0.0.0.0 maxupd: 128 defer: off
wan_stf: flags=4001<UP,LINK2> metric 0 mtu 1280
inet6 2002:5673:cb06:: prefixlen 16 tentative
nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
groups: stf


[Space]

Code: [Select]

root@wellington:~ # sockstat -l | grep ':546'
root     dhcp6c     34498 8  udp6   *:546                 *:*
root     dhcp6c     29911 7  udp6   *:546                 *:*


Ok, no other process is listening on that port ... then I have no idea ... maybe a network trace helps  to see if the provider really offers you a prefix ...

Best regards,

     Jochen

[jarif]

How can I do such a network trace?

[Space]

Interfaces -> Diagnostics -> Packet Capture --> Select WAN Interface, Protocol should be ICMPv6 (I think) ... then press start and wait for a couple of minutes. Then download the trace and check it with Wireshark.

Best regards,

   Space