odd ipv6 routing issue
-
The usual method is to start the capture, run ping for several cycles and then stop the capture. If you're capturing ICMP6, as you appear to be doing, then you should see some pings in the capture.
-
@techpro2004 said in odd ipv6 routing issue:
not sure why it did not show up.
Because from the trace you show that it can not talk to the gateway, has no mac address for what it thinks it gateway is. So it can not send a ping without anyplace to send it.
-
so how do I fix it.
-
and why did pfsense supply that info to some of my systems but not the others.
-
Just rechecked my config. only lan has an ipv6 address not opt* however lan and opt* are bridged. Does this matter?
-
@techpro2004 said in odd ipv6 routing issue:
and why did pfsense supply that info to some of my systems but not the others.
What is different about these systems? Are they connected different, wifi or wired? Do you have any sort of bridge setup..
What exactly is the pfsense IP address for this network? What is the IP address of the system no working.. I see devices asking for this fe80::3eec:efff:fe3c:e916
12:44:10.193935 IP6 2600:4040:9afe:9c00:a0f1:7778:958f:e558 > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32 12:44:10.704596 IP6 2600:4040:9afe:9c00:7954:fcee:8a9f:bb6c > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32 12:44:11.198181 IP6 2600:4040:9afe:9c00:a0f1:7778:958f:e558 > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32Which I assume is pfsense, since the address would seem to be the link local of what is being sent to in your trace that works..
fe3c:e916
however lan and opt* are bridged. Does this matter?
Why would you have anything bridged?
-
it is bridged as my entire house is wired for ethernet so I have cables going to each room and I did not want to use a switch so I built a 12port router out of an old server and 3x i350-t4 nics and installed pfsense on it.
-
not working system: 2600:4040:9afe:9c00:a0f1:7778:958f:e558 and 2600:4040:9afe:9c00:7954:fcee:8a9f:bb6c
pfsense lan: 2600:4040:9afe:9c00:3eec:efff:fe3c:e916
all systems are wired with gs108 and gs108ev3 and gs116 switches.
-
@techpro2004 said in odd ipv6 routing issue:
I did not want to use a switch
Well that was a bad solution to a non issue. bridging is not switching, while it can somewhat act like a switch - its not a switch..
If you want switch ports, get a switch.. Bridging has its own complexity and issues, and again its not a switch.. And users almost always have issues with its setup.. especially when on a firewall.
My suggestion would be to get a switch.. You can get a 16 port switch for very reasonable price, even smart switches that do vlans with 16 ports are reasonable.
How much did you pay for the i350-t4 nics interfaces? Can pretty much promise you could of gotten an actual switch with more ports for less than what those cost.
-
I will know that for next time I wire a house. in the mean time, pfsense has been working fine for 5 years like this, it is just ipv6 that is giving me trouble and I am not investing in a switch/router/firewall over this so how do we make this work.
-
@techpro2004 said in odd ipv6 routing issue:
this so how do we make this work.
your machine need to be able to find the mac of their gateway.. Why that works on some machines and not others could have something to do with the bridge?
And you say it works just fine with IPv4.. Wouldn't be a firewall issue, because you can still arp and NDP even with firewall..
Did you mention these machines are multihomed? Have more than 1 interface?
What is the IP address of pfsense, both GUA, and the link-local. What does your client show for its gateway route print, what does it show in its neighbors table?
netsh int ipv6 show neighbors
-
I may have fixed it, not sure if it will survive a reboot.
I edited my bridge, clicked on advanced and put a check mark next to "enable ipv6 auto linklocal". and rebooted pfsense
thanks for all of your help.
will post back if it acts up again.
-
so I had ipv6 working but then I rebooted my win 11 machine and I am back where I was.
-
the system I currently am testing on has 2 nics
-
ipv6 address: 2600:4040:9afe:9c00:3eec:efff:fe3c:e916
lan kink local: e80::1:1%igb2
wan link local: fe80::3eec:efff:fe3c:e917%igb3
this may be interesting:
wan gateway: fe80::3e61:4ff:fe04:2cb4%igb3
-
@techpro2004 said in odd ipv6 routing issue:
so I built a 12port router out of an old server and 3x i350-t4 nics and installed pfsense on it.
Ouch!!!
Get a proper switch.
-
@techpro2004 so you have this box with 2 nics plugged into 2 different interfaces on pfsense that are bridged?
-
correct but the other box with trouble only has 1 nic
-
IT appears to me that when I reboot the windows 11 machines, pfsense is not detecting they went down and then trying to reuse the same data when reconnecting and failing. Is there a down time out setting I can adjust?
-
@techpro2004 said in odd ipv6 routing issue:
detecting they went down and then trying to reuse the same data when reconnecting and
Doesn't work that way.. What data do you think it would continue to use exactly?
For starters why would you plug the same machine into a bridge? That is just asking for problems - even if you don't just create a huge loop.
Here is what I would suggest, if your saying IPv4 works fine - then just forget IPv6.. It really has no valid use case currently anyway. Unless your behind a IPv4 nat and need it to host services to the part of the planet that does have IPv6.
Get a switch... I see a tplink 16 port smart switch on amazon for $80.. You could prob find a dumb 16 gig for like 60.. I see a 24 port tplink gig smart switch for $100..
You messing around with this you prob have burned thru way more than $100 of your time already. Prob sell 1 of those nics and pay for the switch ;)
