Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    If internet goes down, IPV6 won't work until reboot

    Scheduled Pinned Locked Moved IPv6
    29 Posts 10 Posters 4.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      ahxcjay @Gertjan
      last edited by

      @gertjan ..done.

      IPv4 WAN setup ?

      Ethernet to [Nokia] Fibre ONT [Verizon US]

      Multi WAN or not ?

      Single WAN.

      What is your IPv6 setup ?

      Configuration Type: DHCP6
      Prefix: /56
      Send IPv6 prefix hint: enabled
      Do not wait for RA: Enabled.
      Do not allow PD/Address release: Enabled

      A 1 Reply Last reply Reply Quote 0
      • ?
        A Former User @JacktheSmack
        last edited by A Former User

        @jackthesmack Not sure if this will help but I've had issues which led me to the ppp-linkdown script file. If this is being called to bring your connection down, it doesn't remove the signpost files for IPv6, this can make it look like IPv6 is still up even if it isn't.

        I've attached a modified ppp_linkdown script, see if it helps.

        You can update this script using Diagnostics - Edit File then browse to /usr/local/sbin/ppp-linkdown (take a copy of all the existing script so you can easily go back) and paste over the script from below and click Save. This file is modified to remove the IPv6 pointer files from the tmp folder.

        #!/bin/sh
        #
        # ppp-linkdown
        #
        # part of pfSense (https://www.pfsense.org)
        # Copyright (c) 2004-2013 BSD Perimeter
        # Copyright (c) 2013-2016 Electric Sheep Fencing
        # Copyright (c) 2014-2022 Rubicon Communications, LLC (Netgate)
        # All rights reserved.
        #
        # Licensed under the Apache License, Version 2.0 (the "License");
        # you may not use this file except in compliance with the License.
        # You may obtain a copy of the License at
        #
        # http://www.apache.org/licenses/LICENSE-2.0
        #
        # Unless required by applicable law or agreed to in writing, software
        # distributed under the License is distributed on an "AS IS" BASIS,
        # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
        # See the License for the specific language governing permissions and
        # limitations under the License.
        
        IF="${1}"
        PROTOCOL="${2}"
        LOCAL_IP="${3}"
        
        if [ -f /tmp/${IF}up ] && [ -f /conf/${IF}.log ]; then
        	seconds=$((`date -j +%s` - `/usr/bin/stat -f %m /tmp/${IF}up`))
        	/usr/local/sbin/ppp-log-uptime.sh $seconds ${IF} &
        fi
        
        if echo "${IF}" | /usr/bin/egrep -qv "ppp[0-9]+"; then
        	/etc/rc.kill_states ${IF} ${LOCAL_IP}
        fi
        
        if [ "${PROTOCOL}" == "inet" && -s "/tmp/${IF}_defaultgw" ]; then
        	GW=`head -n 1 /tmp/${IF}_defaultgw`
        	DGW=`/sbin/route -n get -inet default | /usr/bin/awk '/gateway:/ {print $2}'`
        	# Only remove the default gateway if it matches the gateway for this interface. See redmine #1837
        	if [ "${GW}" = "${DGW}" ]; then
        		/sbin/route -q delete default ${GW}
        	fi
        fi
        
        if [ "${PROTOCOL}" == "inet6" ]; then
        	/usr/local/sbin/ppp-ipv6 ${IF} down
        fi
        # delete the node just in case mpd cannot do that
        /usr/sbin/ngctl shutdown ${IF}:
        if [ -f "/var/etc/nameserver_${IF}" ]; then
        	# Remove old entries
        	for nameserver in `cat /var/etc/nameserver_${IF}`; do
        		/sbin/route -q delete ${nameserver} >/dev/null 2>&1
        	done
        	/bin/rm -f /var/etc/nameserver_${IF}
        fi
        # Do not remove gateway used during filter reload.
        # Remove tmp signpost files
        if [ "${PROTOCOL}" == "inet" ]; then
        	if [ -f "/tmp/${IF}_router" ]; then
        		/bin/mv /tmp/${IF}_router /tmp/${IF}_router.last
        	fi	
        	/bin/rm -f /tmp/${IF}up
        	/bin/rm -f /tmp/${IF}_ip
        fi
        
        if [ "${PROTOCOL}" == "inet6" ]; then
        	if [ -f "/tmp/${IF}_routerv6" ]; then
        		/bin/mv /tmp/${IF}_routerv6 /tmp/${IF}_routerv6.last
        	fi	
        	/bin/rm -f /tmp/${IF}upv6
        	/bin/rm -f /tmp/${IF}_ipv6
        fi
        
        /usr/local/sbin/pfSctl -c 'service reload dns'
        
        
        
        1 Reply Last reply Reply Quote 1
        • A
          ahxcjay @ahxcjay
          last edited by

          Is there any way to re-initiate a dhcp6c request for an address without rebooting?

          A 1 Reply Last reply Reply Quote 1
          • C
            cetteup
            last edited by

            This post is deleted!
            1 Reply Last reply Reply Quote 0
            • A
              ahxcjay @ahxcjay
              last edited by

              @stephenw10 Hi - any way to get this moving internally? The redmine - https://redmine.pfsense.org/issues/13555 - has plenty of others able to replicate the issue. The issue does need fixing, please.

              1 Reply Last reply Reply Quote 1
              • kohenkatzK
                kohenkatz
                last edited by

                I ran into this yesterday - I unplugged my fiber ONT (Nokia/Alcatel I-211M-L on Verizon Fios) in order to put in a new battery backup. When I plugged it back in again, my pfSense box did not have any IPv6 connectivity at all until I rebooted. I plan to do some tests of the new battery to make sure it is wired properly and to see how long it will last in an outage, but I don't want to have to reboot pfSense multiple times to restore IPv6 access each time.

                A 1 Reply Last reply Reply Quote 0
                • A
                  ahxcjay @kohenkatz
                  last edited by

                  @kohenkatz said in If internet goes down, IPV6 won't work until reboot:

                  but I don't want to have to reboot pfSense multiple times to restore IPv6 access each time.

                  ..but you will. It's a bug, and one that is not being prioritised or picked up by Netgate engineers (unfortunately), despite others experiencing the exact same issue.

                  1 Reply Last reply Reply Quote 0
                  • E
                    em_gerber
                    last edited by

                    I have the same issue. As soon as the bridge goes down pfSense completely removes IPv6. I was able to implement a "workaround". I added a switch between the bridge and pfSense. Now, if the bridge goes down IPv6 remains. For me it seems somehow L2 related, pfSense removes IPv6 completely if the port goes down...

                    But I agree, this bug should defenitely prioritised and fixed.

                    A 1 Reply Last reply Reply Quote 1
                    • A
                      ahxcjay @em_gerber
                      last edited by

                      @em_gerber good grief - just tried it. Adding a switch between ONT & FW resolves ip6 not recovering.

                      JKnottJ 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @ahxcjay
                        last edited by

                        @ahxcjay said in If internet goes down, IPV6 won't work until reboot:

                        good grief - just tried it. Adding a switch between ONT & FW resolves ip6 not recovering.

                        If you put a managed switch there, you can use it to monitor the traffic, using Wireshark. PfSense has Packet Capture, but I find it much better to use Wireshark. Five port managed switches are cheap and you can configure one to act as a data tap.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          ahxcjay @JKnott
                          last edited by

                          If you put a managed switch there, you can use it to monitor the traffic, using Wireshark. PfSense has Packet Capture, but I find it much better to use Wireshark. Five port managed switches are cheap and you can configure one to act as a data tap.

                          Really? You can actually tap off a managed switch? Blimey. I had no idea.

                          Any other basic tips to pass on in a forum full of mostly networking experts..?

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @ahxcjay
                            last edited by

                            @ahxcjay said in If internet goes down, IPV6 won't work until reboot:

                            Really? You can actually tap off a managed switch? Blimey. I had no idea.

                            The only caution is with connection speeds approaching 1 Gb and in both directions if on fibre, you could run into overflow problems, where there's more data than the switch can pass to the monitor computer, unless you get a faster switch and NIC on the computer. My own connection is 1 Gb down (actually 1.5 Gb but limited by hardware) and 50 up, so I'm OK for now.

                            BTW, I first came across that monitor function over 15 years ago, when I was working with Adtran switches.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • J
                              JacktheSmack
                              last edited by JacktheSmack

                              OK now I am having a new problem related to this. IPV6 addresses are all set and everything, but I have 100% packet loss. If I reboot the router, it's still stuck.

                              82f5c505-a3f8-4834-b5a3-bcc424cf785c-image.png

                              But if I turn off the router and modem, wait 10 seconds, then turn the both back on, then IPV6 works, with one caveat: The gateway display shows 100% packet loss for IPV4, even though it works perfectly fine.

                              66323a8d-f185-46e0-9b51-789aceb62700-image.png

                              582e962a-e35c-4aa6-b5b6-b511051f2094-image.png

                              If I reboot the router, I once again get 100% packet loss with IPV6 and it doesn't work for the router or any devices on the network.

                              One interesting quirk is initially, for the first second or two, there is no packet loss, but then there is full packet loss after that. Which is why in my screenshot it's not 100%, because of the initial packets that get through. But eventually it works its way up to 100%.

                              Also I just tried turning off just the router (not the modem), waiting 10 seconds, then turning it back on. Now both work, but there was 10-15% packet loss for the first few minutes. But now it's settled down to 5-10%, which is still bad.

                              0e183f6e-273c-4e8d-a953-c45f49af9519-image.png

                              Speed test seems fine though.

                              b69b7895-b590-46b3-956e-e02295029836-image.png

                              Same with videogames

                              4c9cb6c4-2aa4-490e-afca-a9ce6f3a7f1a-image.png

                              J 1 Reply Last reply Reply Quote 0
                              • J
                                JacktheSmack @JacktheSmack
                                last edited by

                                7 hours later packet loss is now at 0%. Issue still remains: Rebooting the router breaks IPV6

                                1 Reply Last reply Reply Quote 0
                                • J
                                  JacktheSmack
                                  last edited by JacktheSmack

                                  My ipv6 stopped working again and all the above attempts did not fix it. I learned that since I am using the CE version of pfSense, even if this is fixed I won't be seeing any updates. That's unfortunate. I had to stop using pfSense because my internet would not fully work and it kept randomly breaking. I'm sorry.

                                  johnpozJ 1 Reply Last reply Reply Quote 1
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @JacktheSmack
                                    last edited by

                                    @JacktheSmack said in If internet goes down, IPV6 won't work until reboot:

                                    even if this is fixed I won't be seeing any updates

                                    Where do people get such stuff from? CE isn't going anywhere, the next version 2.8 is being worked on

                                    https://redmine.pfsense.org/projects/pfsense/roadmap

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    GertjanG J 2 Replies Last reply Reply Quote 1
                                    • GertjanG
                                      Gertjan @johnpoz
                                      last edited by

                                      @johnpoz said in If internet goes down, IPV6 won't work until reboot:

                                      Where do people get such stuff from?

                                      Tic-toc ?
                                      Still, strange. Installing and using a core system that you know of will be the latest version with neither follow up or maintenance.

                                      No "help me" PM's please. Use the forum, the community will thank you.
                                      Edit : and where are the logs ??

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @Gertjan
                                        last edited by

                                        @Gertjan said in If internet goes down, IPV6 won't work until reboot:

                                        Tic-toc ?

                                        hahah - yeah the definitive source for tech news ;)

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          JacktheSmack @johnpoz
                                          last edited by

                                          @johnpoz said in If internet goes down, IPV6 won't work until reboot:

                                          Where do people get such stuff from? CE isn't going anywhere, the next version 2.8 is being worked on

                                          https://docs.netgate.com/pfsense/en/latest/releases/versions.html The release cadence has slowed down significantly from when I started using pfSense in 2014 or 2015.

                                          johnpozJ 1 Reply Last reply Reply Quote 1
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @JacktheSmack
                                            last edited by johnpoz

                                            @JacktheSmack said in If internet goes down, IPV6 won't work until reboot:

                                            The release cadence has slowed down significantly from when I started using pfSense in 2014 or 2015.

                                            Slow down doesn't mean going away.. The product has come a long way since then, lots more to it.. Plus there is + and TNSR, their release schedule has always been when it ready really.

                                            If you want faster releases, move to plus.. ;)

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.