• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Unable to get DHCPv6 to work

Scheduled Pinned Locked Moved IPv6
30 Posts 4 Posters 3.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Z
    zingbats
    last edited by Mar 27, 2024, 5:10 PM

    I've been unable to get IPv6 via DHCPv6 to work on my UK vodafone PPPoE service, but it does work with the ISP provided router. As such, I have port mirrored and packet sniffed between the working router, and the pfSense router. I'm not technical enough to analyse these DHCPv6 packets and spot what pfSense configuration I might need. I have attached the wireshark logs below in case someone is able to look into this.
    I apologise if there any any sensitive IPv6 details within it! Many thanks.

    WireShark.zip

    P 1 Reply Last reply Mar 27, 2024, 6:05 PM Reply Quote 0
    • P
      pst @zingbats
      last edited by pst Mar 27, 2024, 6:19 PM Mar 27, 2024, 6:05 PM

      @zingbats One difference I can see is that pfSense does not include IPv6 Prefix Delegation in the request. Try changing the Interfaces / WAN / DHCP6 Client Configuration to
      8858f70d-07ce-473e-a481-4f944626adda-image.png

      Z 1 Reply Last reply Mar 27, 2024, 6:31 PM Reply Quote 0
      • Z
        zingbats @pst
        last edited by Mar 27, 2024, 6:31 PM

        @pst thanks for this. I had already tried it, but I've made some new logs. The shorter file name is just with your tickbox suggested as above, the second is with the additional tickbox of "Only request an IPv6 prefix, do not request an IPv6 address" ticked too, as some other users in these forums have had success with this with their ISP.

        Is it worth spoofing the ISP WAN mac address?WireShark.zip

        P 1 Reply Last reply Mar 27, 2024, 6:44 PM Reply Quote 0
        • P
          pst @zingbats
          last edited by Mar 27, 2024, 6:44 PM

          @zingbats Odd, neither of the new logs contains the Prefix Delegation element in the request. I wonder if the interface needs a restart before the configuration is applied? Try restart the WAN in Status / Interfaces and check if that makes a difference.

          Z 1 Reply Last reply Mar 27, 2024, 6:59 PM Reply Quote 0
          • Z
            zingbats @pst
            last edited by zingbats Mar 27, 2024, 7:09 PM Mar 27, 2024, 6:59 PM

            @pst I did a full reboot with just the prefix hint box. Log attached.

            I am also going to back up and do a factory reset to see if that works.
            EDIT: Factory reset did nothing.

            pfsense prefix hint after reboot.pcapng

            P 1 Reply Last reply Mar 27, 2024, 7:12 PM Reply Quote 0
            • P
              pst @zingbats
              last edited by Mar 27, 2024, 7:12 PM

              @zingbats nope, still the same.

              Z 1 Reply Last reply Mar 27, 2024, 7:14 PM Reply Quote 0
              • Z
                zingbats @pst
                last edited by Mar 27, 2024, 7:14 PM

                @pst Well the factory reset didn't help either. Any other ideas?

                P 1 Reply Last reply Mar 27, 2024, 7:19 PM Reply Quote 0
                • P
                  pst @zingbats
                  last edited by pst Mar 27, 2024, 7:20 PM Mar 27, 2024, 7:19 PM

                  @zingbats As you suggested, you could try the MAC spoofing. If that fixes the VF rejection, great but it still doesn't explain why pfSense doesn't include the Prefix Delegation hint when it has been configured to do so. Which version of pfSense are you running?

                  Z 1 Reply Last reply Mar 27, 2024, 7:24 PM Reply Quote 0
                  • Z
                    zingbats @pst
                    last edited by Mar 27, 2024, 7:24 PM

                    @pst when I did the factory reset I spoofed the mac in the wizard and it changed nothing.

                    Running latest pfSense CE (2.7.2), x86

                    P 3 Replies Last reply Mar 27, 2024, 7:35 PM Reply Quote 0
                    • P
                      pst @zingbats
                      last edited by Mar 27, 2024, 7:35 PM

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • P
                        pst @zingbats
                        last edited by Mar 27, 2024, 8:05 PM

                        @zingbats I'm out of ides for the moment. I need to pop out for a few hour, hopefully I have some new ideas when I get back.

                        1 Reply Last reply Reply Quote 0
                        • P
                          pst @zingbats
                          last edited by pst Mar 28, 2024, 9:48 AM Mar 28, 2024, 9:23 AM

                          @zingbats I am trying to understand how VF is configuring the IPv6 connection, postings on the net suggests they are in the process of rolling out native IPv6 support. Could you post the result of https://ipv6-test.com/ using the ISP router? It should indicate if you have native IPv6, or 6to4 (see https://forum.vodafone.co.uk/t5/Other-broadband-queries/ipv6-settings/td-p/2742474/page/2)

                          Z 1 Reply Last reply Mar 28, 2024, 10:06 AM Reply Quote 0
                          • Z
                            zingbats @pst
                            last edited by Mar 28, 2024, 10:06 AM

                            @pst I had already read up on the 6to4, but as I'm a new customer, I knew I'd be on the native. Here's the screenshot from the vodafone router

                            Vodafone ipv6.png

                            P 1 Reply Last reply Mar 28, 2024, 10:40 AM Reply Quote 0
                            • P
                              pst @zingbats
                              last edited by Mar 28, 2024, 10:40 AM

                              @zingbats good you've native, pity as it closes another avenue. With everything you've already tested it doesn't really leave much else to try. I still suspect VF is rejecting the DHCPv6 Request because pfSense is not sending the same parameters as the original router.

                              Here's what pfSense is sending

                              c4e7587d-6dd1-4d84-aa29-dff393df9127-image.png

                              Whereas the VF router sends additional information:

                              597183f2-4db4-4205-8c2d-5309169b6c61-image.png
                              2368d8cd-1153-4431-b384-147e6d160291-image.png

                              You could try adding the missing parameters (Option Request rDNS, Reconfigure Accept, Domain Name, and Prefix Delegation (which should have been included when setting Send Hint)) by enabling WAN / DHCP6 Client Configuration / Advanced Configuration, and then populate Advanced DHCP6 Client Configuration. I have never attemped this, and would not have much to contribute. There might be someone else though, that can provide the final pieces of this puzzle.

                              Z 1 Reply Last reply Mar 28, 2024, 12:31 PM Reply Quote 0
                              • Z
                                zingbats @pst
                                last edited by Mar 28, 2024, 12:31 PM

                                @pst I tried the advance options, but it seems like the manual that pfSense references does not support these DHCP6 options.

                                https://man.freebsd.org/cgi/man.cgi?query=dhcp6c.conf&apropos=0&sektion=0&manpath=FreeBSD+10.3-RELEASE+and+Ports&arch=default&format=html

                                I imagine that means it's game over sadly.

                                P 1 Reply Last reply Mar 28, 2024, 12:51 PM Reply Quote 0
                                • P
                                  pst @zingbats
                                  last edited by Mar 28, 2024, 12:51 PM

                                  @zingbats said in Unable to get DHCPv6 to work:

                                  I imagine that means it's game over sadly.

                                  Not yet, it might just be a little more complicated than first imagined :)

                                  Let's try and add one parameter:

                                  e94d63c7-c781-472e-b8e0-80525ac3f4cd-image.png

                                  I think this falls under the manual section

                                  b39f786d-7899-4cb7-9fa8-9368c9b94564-image.png

                                  In pfSense that would I guess translate into

                                  b1e497bb-368b-42ba-a5df-4eb101c4384a-image.png

                                  If that works we should see pfSense sending this parameter to the DHCP6 Request, and we can continue with the next parameter.

                                  Z 1 Reply Last reply Mar 28, 2024, 2:34 PM Reply Quote 0
                                  • Z
                                    zingbats @pst
                                    last edited by Mar 28, 2024, 2:34 PM

                                    @pst I have tried setting JUST this as requested, and replicating the complete default config file (which includes domain-name-servers) and I don't see any options passed in the packets.

                                    P 1 Reply Last reply Mar 28, 2024, 5:14 PM Reply Quote 0
                                    • P
                                      pst @zingbats
                                      last edited by Mar 28, 2024, 5:14 PM

                                      @zingbats I wonder if there's a bug in the 2.7.2 version of pfSense then. I did a test on my 23.09.1, adding sip-server-list as advanced configuration. I noticed that ONLY sip-server-list was requested, not DNS servers and other stuff which is usually asked for. The DHCPv6 Request was rejected and no IPv6 connectivity established. That seems to indicate that the Advanced DHCP6 configuration needs to be a complete configuration, AND that the DHCPv6 server might reject a Request that does not include everything it is expecting.

                                      That both the Advanced DHCP6 configuration and "Send IPv6 prefix hint" seems to be ignored by pfSense 2.7.2, suggests a bug IMHO.

                                      Z 1 Reply Last reply Mar 28, 2024, 5:35 PM Reply Quote 0
                                      • Z
                                        zingbats @pst
                                        last edited by Mar 28, 2024, 5:35 PM

                                        @pst luckily I'm in my 14 day cancellation window with my ISP so I'm moving to BT who seem to better support IPv6 without the need for non-standard options. Hopefully IPv6 will become more stable and configurable in pfsense soon, as it seems the dhcp6c is missing modern request options such as those required by vodafone.

                                        P 1 Reply Last reply Mar 28, 2024, 5:46 PM Reply Quote 0
                                        • P
                                          pst @zingbats
                                          last edited by Mar 28, 2024, 5:46 PM

                                          @zingbats said in Unable to get DHCPv6 to work:

                                          request options such as those required by vodafone

                                          or it could just be us not understanding what is needed...

                                          BTW, have you tried configuring SLAAC instead of DHCP6 on the WAN? (the last straw)

                                          Z 1 Reply Last reply Mar 29, 2024, 12:57 PM Reply Quote 0
                                          20 out of 30
                                          • First post
                                            20/30
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received