Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 works fine to internet from pfsense, but not from LAN devices.

    Scheduled Pinned Locked Moved IPv6
    11 Posts 5 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @S_D
      last edited by

      @s_d said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

      LAN is set to an address in the PD network.

      It should be "Track Interface".

      S 1 Reply Last reply Reply Quote 0
      • S
        S_D @Bob.Dig
        last edited by

        @bob-dig said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

        @s_d said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

        LAN is set to an address in the PD network.

        It should be "Track Interface".

        Thank you!

        May I ask why? It used to work before when set to static IP and that's the way I saw it on a good YouTube tutorial this afternoon when I was sanity checking everything again...

        Bob.DigB 1 Reply Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @S_D
          last edited by Bob.Dig

          @s_d If WAN has to be set to DHCP, then "Track Interface" is the usual way of doing it. Give it a try.

          S 1 Reply Last reply Reply Quote 0
          • S
            S_D @Bob.Dig
            last edited by

            @bob-dig said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

            @s_d If WAN has to be set to DHCP, then "Track Interface" is the usual way of doing it. Give it a try.

            OK unfortunately that's worse. With the Lan set to 'track' the LAN doesn't get a GUA at all. I've checked the DHCPv6 Prefix Delegation size is set to 48, as per Zen's allocation to me. Obviously with no GUA on the LAN my DHCPv6 server and RA don't work on my LAN network either, so no clients are getting a GUA.

            NogBadTheBadN 1 Reply Last reply Reply Quote 0
            • NogBadTheBadN
              NogBadTheBad @S_D
              last edited by NogBadTheBad

              @s_d I'm with Zen too and also had issues with IPv6 on my local lans today

              Did your WAN IPv6 address change and it was still in the /64 ND range, mine did.

              I could ping the WAN IPv6 from the internet but not any of my LAN IPv6 addresses.

              I'm sure I previously had the DHCPv6 Prefix Delegation size set to /48.

              ND Prefix: 2a02:xxxx:xxxx:d8::/64
              PD Prefix: 2a02:zzzz:zzzz::/48

              I have my LANs set as static /64's and now seem to have resolved the issue with the following, I still don't think it's right though.

              Screenshot 2022-06-07 at 20.27.37.png

              @Bob-Dig It should be "Track Interface", no it doesn't have to be set to "Track Interface"

              Andy

              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

              S Bob.DigB 2 Replies Last reply Reply Quote 0
              • S
                S_D @NogBadTheBad
                last edited by

                @nogbadthebad said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

                @s_d I'm with Zen too and also had issues with IPv6 on my local lans today

                Did your WAN IPv6 address change and it was still in the /64 ND range, mine did.

                I could ping the WAN IPv6 from the internet but not any of my LAN IPv6 addresses.

                I'm sure I previously had the DHCPv6 Prefix Delegation size set to /48.

                ND Prefix: 2a02:xxxx:xxxx:d8::/64
                PD Prefix: 2a02:zzzz:zzzz::/48

                I have my LANs set as static /64's and now seem to have resolved the issue with the following, I still don't think it's right though.

                Screenshot 2022-06-07 at 20.27.37.png

                @Bob-Dig It should be "Track Interface", no it doesn't have to be set to "Track Interface"

                BOOM!

                Amazing! THANK YOU. That setting 'dhcp6c will send a release to the ISP on exit, some ISPs then release the allocated address or prefix. This option prevents that signal ever being sent' fixed it for me! Didn't need Dhcp debug mode, but setting this release option then flapping the WAN interface manually brought everything up nicely. Now my IPv6 is working again! Woot!

                NogBadTheBadN Z 2 Replies Last reply Reply Quote 1
                • Bob.DigB
                  Bob.Dig LAYER 8 @NogBadTheBad
                  last edited by Bob.Dig

                  @nogbadthebad said in IPv6 works fine to internet from pfsense, but not from LAN devices.:

                  @Bob-Dig It should be "Track Interface", no it doesn't have to be set to "Track Interface"

                  Until something changes... Track should be the safer setting for DHCPv6 in my opinion.

                  1 Reply Last reply Reply Quote 0
                  • NogBadTheBadN
                    NogBadTheBad @S_D
                    last edited by

                    @s_d Think Zen may have had an issue with the DHCP6 DUID.

                    Changed the DUID type, did a save then changed the DUID type back, effectively creating a new DUID-LLT and its now working as it should with the PD set to /48.

                    Screenshot 2022-06-07 at 21.10.16.png

                    Andy

                    1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                    1 Reply Last reply Reply Quote 0
                    • Z
                      zennb1 @S_D
                      last edited by zennb1

                      @s_d would someone mind sharing what other settings are required to get clients to pick up an address. I seem to have a valid address on the wan side but my lan clients aren't getting anything. Any help appreciated. Thanks (zen customer too)

                      JKnottJ 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @zennb1
                        last edited by

                        @zennb1

                        Clients rely on router advertisements to learn the LAN prefix and they append the suffix to it. Run Packet Capture, filtering on icmpv6, to see if you have them. You could also run Wireshark on a computer to do the same thing.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.