Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    odd ipv6 routing issue

    Scheduled Pinned Locked Moved IPv6
    36 Posts 3 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      techpro2004
      last edited by

      so how do I fix it.

      1 Reply Last reply Reply Quote 0
      • T
        techpro2004
        last edited by

        and why did pfsense supply that info to some of my systems but not the others.

        johnpozJ 1 Reply Last reply Reply Quote 0
        • T
          techpro2004
          last edited by

          Just rechecked my config. only lan has an ipv6 address not opt* however lan and opt* are bridged. Does this matter?

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @techpro2004
            last edited by johnpoz

            @techpro2004 said in odd ipv6 routing issue:

            and why did pfsense supply that info to some of my systems but not the others.

            What is different about these systems? Are they connected different, wifi or wired? Do you have any sort of bridge setup..

            What exactly is the pfsense IP address for this network? What is the IP address of the system no working.. I see devices asking for this fe80::3eec:efff:fe3c:e916

            12:44:10.193935 IP6 2600:4040:9afe:9c00:a0f1:7778:958f:e558 > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32
            12:44:10.704596 IP6 2600:4040:9afe:9c00:7954:fcee:8a9f:bb6c > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32
            12:44:11.198181 IP6 2600:4040:9afe:9c00:a0f1:7778:958f:e558 > ff02::1:ff3c:e916: ICMP6, neighbor solicitation, who has fe80::3eec:efff:fe3c:e916, length 32
            

            Which I assume is pfsense, since the address would seem to be the link local of what is being sent to in your trace that works..

            fe3c:e916

            however lan and opt* are bridged. Does this matter?

            Why would you have anything bridged?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • T
              techpro2004
              last edited by

              it is bridged as my entire house is wired for ethernet so I have cables going to each room and I did not want to use a switch so I built a 12port router out of an old server and 3x i350-t4 nics and installed pfsense on it.

              johnpozJ JKnottJ 2 Replies Last reply Reply Quote 0
              • T
                techpro2004
                last edited by

                not working system: 2600:4040:9afe:9c00:a0f1:7778:958f:e558 and 2600:4040:9afe:9c00:7954:fcee:8a9f:bb6c

                pfsense lan: 2600:4040:9afe:9c00:3eec:efff:fe3c:e916

                all systems are wired with gs108 and gs108ev3 and gs116 switches.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @techpro2004
                  last edited by

                  @techpro2004 said in odd ipv6 routing issue:

                  I did not want to use a switch

                  Well that was a bad solution to a non issue. bridging is not switching, while it can somewhat act like a switch - its not a switch..

                  If you want switch ports, get a switch.. Bridging has its own complexity and issues, and again its not a switch.. And users almost always have issues with its setup.. especially when on a firewall.

                  My suggestion would be to get a switch.. You can get a 16 port switch for very reasonable price, even smart switches that do vlans with 16 ports are reasonable.

                  How much did you pay for the i350-t4 nics interfaces? Can pretty much promise you could of gotten an actual switch with more ports for less than what those cost.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • T
                    techpro2004
                    last edited by

                    I will know that for next time I wire a house. in the mean time, pfsense has been working fine for 5 years like this, it is just ipv6 that is giving me trouble and I am not investing in a switch/router/firewall over this so how do we make this work.

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @techpro2004
                      last edited by

                      @techpro2004 said in odd ipv6 routing issue:

                      this so how do we make this work.

                      your machine need to be able to find the mac of their gateway.. Why that works on some machines and not others could have something to do with the bridge?

                      And you say it works just fine with IPv4.. Wouldn't be a firewall issue, because you can still arp and NDP even with firewall..

                      Did you mention these machines are multihomed? Have more than 1 interface?

                      What is the IP address of pfsense, both GUA, and the link-local. What does your client show for its gateway route print, what does it show in its neighbors table?

                      netsh int ipv6 show neighbors

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • T
                        techpro2004
                        last edited by

                        I may have fixed it, not sure if it will survive a reboot.

                        I edited my bridge, clicked on advanced and put a check mark next to "enable ipv6 auto linklocal". and rebooted pfsense

                        thanks for all of your help.

                        will post back if it acts up again.

                        1 Reply Last reply Reply Quote 0
                        • T
                          techpro2004
                          last edited by

                          so I had ipv6 working but then I rebooted my win 11 machine and I am back where I was.

                          1 Reply Last reply Reply Quote 0
                          • T
                            techpro2004
                            last edited by

                            the system I currently am testing on has 2 nics

                            route.txt neighbors.txt

                            1 Reply Last reply Reply Quote 0
                            • T
                              techpro2004
                              last edited by

                              ipv6 address: 2600:4040:9afe:9c00:3eec:efff:fe3c:e916

                              lan kink local: e80::1:1%igb2

                              wan link local: fe80::3eec:efff:fe3c:e917%igb3

                              this may be interesting:

                              wan gateway: fe80::3e61:4ff:fe04:2cb4%igb3

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @techpro2004
                                last edited by

                                @techpro2004 said in odd ipv6 routing issue:

                                so I built a 12port router out of an old server and 3x i350-t4 nics and installed pfsense on it.

                                Ouch!!!

                                Get a proper switch.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @techpro2004
                                  last edited by

                                  @techpro2004 so you have this box with 2 nics plugged into 2 different interfaces on pfsense that are bridged?

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    techpro2004
                                    last edited by

                                    correct but the other box with trouble only has 1 nic

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      techpro2004
                                      last edited by

                                      IT appears to me that when I reboot the windows 11 machines, pfsense is not detecting they went down and then trying to reuse the same data when reconnecting and failing. Is there a down time out setting I can adjust?

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @techpro2004
                                        last edited by

                                        @techpro2004 said in odd ipv6 routing issue:

                                        detecting they went down and then trying to reuse the same data when reconnecting and

                                        Doesn't work that way.. What data do you think it would continue to use exactly?

                                        For starters why would you plug the same machine into a bridge? That is just asking for problems - even if you don't just create a huge loop.

                                        Here is what I would suggest, if your saying IPv4 works fine - then just forget IPv6.. It really has no valid use case currently anyway. Unless your behind a IPv4 nat and need it to host services to the part of the planet that does have IPv6.

                                        Get a switch... I see a tplink 16 port smart switch on amazon for $80.. You could prob find a dumb 16 gig for like 60.. I see a 24 port tplink gig smart switch for $100..

                                        You messing around with this you prob have burned thru way more than $100 of your time already. Prob sell 1 of those nics and pay for the switch ;)

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          techpro2004
                                          last edited by

                                          I really am not fond of the switch idea as switches fail more often then my i350-t4 nics in pfsense. (if it was in windows, I would say the nics fail more often) I do have a x540-t2 lying around, so if you can recommend a cheap system (i5 or xeon) to put that in along with a single port intel pcie nic, I would be open to that. I would need 3 nics wan,lan and isolation. thanks.

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @techpro2004
                                            last edited by

                                            @techpro2004 said in odd ipv6 routing issue:

                                            really am not fond of the switch idea as switches

                                            Well good luck.. Anyone that thinks its ok to bridge what like 10 to 8 interfaces together to make what they think is a working network.. Yeah good luck with that..

                                            Been in the business for some 30 years, before there was even switches. Guess how many I have seen fail ;) hahahah.. Sure all things fail - but if that is your logic in running some 10 port bridge with interfaces vs a switch... Yeah have fun..

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            JKnottJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.