Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense DHCP6 Client does not pick up address offered on WAN from ISP

    Scheduled Pinned Locked Moved IPv6
    3 Posts 2 Posters 73 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cb831
      last edited by cb831

      If this is a repeat post I appologize - I tried to scan the forum and found other somewhat similar issues that did not cover my problem.

      I configured my WAN interface for both IPv4 and IPv6 DHCP. IPv4 works fine, but DHCP6 never manages to set WAN interface address to the address offered from ISP.

      The ISP reply look like this (edited slightly for privacy)

      Frame 51: 227 bytes on wire (1816 bits), 227 bytes captured (1816 bits)
      Ethernet II, Src: 8a:12:34:56:78:6a (8a:12:34:56:78:6a), Dst: 00:12:34:56:78:28 (00:12:34:56:78:28)
      Internet Protocol Version 6, Src: fe80::88ce:87ff:fec6:156a, Dst: fe80::278:2aff:fee8:3428
      User Datagram Protocol, Src Port: 547, Dst Port: 546
      Source Port: 547
      Destination Port: 546
      Length: 173
      Checksum: 0x0070 [unverified]
      [Checksum Status: Unverified]
      [Stream index: 1]
      [Timestamps]
      UDP payload (165 bytes)
      DHCPv6
      Message type: Reply (7)
      Transaction ID: 0x8b142e
      Client Identifier
      Option: Client Identifier (1)
      Length: 14
      DUID: 000100012b8f816a207c14a1bf06
      DUID Type: link-layer address plus time (1)
      Hardware type: Ethernet (1)
      DUID Time: Feb 27, 2023 15:57:46.000000000 Romance Standard Time
      Link-layer address: 20:7c:14:a1:bf:06
      Link-layer address (Ethernet): Qotom_a1:bf:06 (20:7c:14:a1:bf:06)
      Server Identifier
      Option: Server Identifier (2)
      Length: 14
      DUID: 00010001215639ccfa323734e39f
      DUID Type: link-layer address plus time (1)
      Hardware type: Ethernet (1)
      DUID Time: Sep 21, 2017 10:50:20.000000000 Romance Summer Time
      Link-layer address: fa:32:37:34:e3:9f
      Link-layer address (Ethernet): fa:32:37:34:e3:9f (fa:32:37:34:e3:9f)
      Identity Association for Non-temporary Address
      Option: Identity Association for Non-temporary Address (3)
      Length: 40
      IAID: 00000001
      T1: 1000
      T2: 2000
      IA Address
      Option: IA Address (5)
      Length: 24
      IPv6 address: 2a06:4000:8888:ffff::2
      Preferred lifetime: 3000
      Valid lifetime: 4000
      DNS recursive name server
      Option: DNS recursive name server (23)
      Length: 32
      1 DNS server address: 2a06:4000:0:6::6
      2 DNS server address: 2a06:4000:0:6::5
      Identity Association for Prefix Delegation
      Option: Identity Association for Prefix Delegation (25)
      Length: 41
      IAID: 00000001
      T1: 1000
      T2: 2000
      IA Prefix
      Option: IA Prefix (26)
      Length: 25
      Preferred lifetime: 3000
      Valid lifetime: 4000
      Prefix length: 48
      Prefix address: 2a06:4000:8888::

      And the interface correctly pick up the prefix and the DNS servers but NOT the IP address which means there is no traffic on the interface except for ICMP attempts from each side.

      If however I manually define 2a06:4000:8888:ffff::2 as a Virtual IP address on the WAN everything works correctly.

      I played with 'Do not wait for a RA' and 'Non-Temporary Address Allocation' on the WAN interface, but it did not change anything.

      Is this expected behavior or can I avoid this hack ?

      Thanks

      PS: I'm a chicken and is still running 2.7.2-RELEASE

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @cb831
        last edited by

        @cb831

        You've tested with this option set :

        c4867bed-fd4e-4ce0-b65f-92ede7413103-image.png

        ?

        You'll see the dhcpv6 client logging under Status > System Logs > DHCP

        @cb831 said in pfSense DHCP6 Client does not pick up address offered on WAN from ISP:

        I'm a chicken and is still running 2.7.2-RELEASE

        2.8.0 has issues solved.
        Maybe this one also ^^

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        C 1 Reply Last reply Reply Quote 0
        • C
          cb831 @Gertjan
          last edited by

          @Gertjan Yes I'm running in debug mode

          Jul 11 16:29:49 dhcp6c 82560 extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:2b:8f:81:6a:20:7c:14:a1:bf:06
          Jul 11 16:29:49 dhcp6c 82560 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
          Jul 11 16:29:49 dhcp6c 82560 failed initialize control message authentication
          Jul 11 16:29:49 dhcp6c 82560 skip opening control port
          Jul 11 16:29:49 dhcp6c 82560 <3>[interface] (9)
          Jul 11 16:29:49 dhcp6c 82560 <5>[igb0] (4)
          Jul 11 16:29:49 dhcp6c 82560 <3>begin of closure [{] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>[script] (6)
          Jul 11 16:29:49 dhcp6c 82560 <3>["/var/etc/dhcp6c_wan_dhcp6withoutra_script.sh"] (46)
          Jul 11 16:29:49 dhcp6c 82560 <3>end of sentence [;] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>end of closure [}] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>end of sentence [;] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>[id-assoc] (8)
          Jul 11 16:29:49 dhcp6c 82560 <13>[na] (2)
          Jul 11 16:29:49 dhcp6c 82560 <13>[1] (1)
          Jul 11 16:29:49 dhcp6c 82560 <13>begin of closure [{] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>end of closure [}] (1)
          Jul 11 16:29:49 dhcp6c 82560 <3>end of sentence [;] (1)
          Jul 11 16:29:49 dhcp6c 82560 called
          Jul 11 16:29:49 dhcp6c 82560 some IA configuration defined but not used
          Jul 11 16:29:49 dhcp6c 82560 called
          Jul 11 16:29:49 dhcp6c 82642 reset a timer on igb0, state=INIT, timeo=0, retrans=891
          Jul 11 16:29:49 dhcp6c 82642 Sending Solicit
          Jul 11 16:29:49 dhcp6c 82642 a new XID (93ca57) is generated
          Jul 11 16:29:49 dhcp6c 82642 set client ID (len 14)
          Jul 11 16:29:49 dhcp6c 82642 set elapsed time (len 2)
          Jul 11 16:29:49 dhcp6c 82642 send solicit to ff02::1:2%igb0
          Jul 11 16:29:49 dhcp6c 82642 reset a timer on igb0, state=SOLICIT, timeo=0, retrans=1091
          Jul 11 16:29:49 dhcp6c 82642 receive advertise from fe80::88ce:87ff:fec6:156a%igb0 on igb0
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option client ID, len 14
          Jul 11 16:29:49 dhcp6c 82642 DUID: 00:01:00:01:2b:8f:81:6a:20:7c:14:a1:bf:06
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option server ID, len 14
          Jul 11 16:29:49 dhcp6c 82642 DUID: 00:01:00:01:21:56:39:cc:fa:32:37:34:e3:9f
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option identity association, len 40
          Jul 11 16:29:49 dhcp6c 82642 IA_NA: ID=1, T1=1000, T2=2000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA address, len 24
          Jul 11 16:29:49 dhcp6c 82642 IA_NA address: 2a06:4000:8888:ffff::2 pltime=3000 vltime=4000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option DNS, len 32
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA_PD, len 41
          Jul 11 16:29:49 dhcp6c 82642 IA_PD: ID=1, T1=1000, T2=2000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA_PD prefix, len 25
          Jul 11 16:29:49 dhcp6c 82642 IA_PD prefix: 2a06:4000:8888::/48 pltime=3000 vltime=1546855634413031328
          Jul 11 16:29:49 dhcp6c 82642 server ID: 00:01:00:01:21:56:39:cc:fa:32:37:34:e3:9f, pref=-1
          Jul 11 16:29:49 dhcp6c 82642 reset timer for igb0 to 0.958394
          Jul 11 16:29:49 dhcp6c 82642 receive advertise from fe80::88ce:87ff:fec6:156a%igb0 on igb0
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option client ID, len 14
          Jul 11 16:29:49 dhcp6c 82642 DUID: 00:01:00:01:2b:8f:81:6a:20:7c:14:a1:bf:06
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option server ID, len 14
          Jul 11 16:29:49 dhcp6c 82642 DUID: 00:01:00:01:21:5a:37:e1:96:96:78:4c:ae:6d
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option identity association, len 40
          Jul 11 16:29:49 dhcp6c 82642 IA_NA: ID=1, T1=1000, T2=2000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA address, len 24
          Jul 11 16:29:49 dhcp6c 82642 IA_NA address: 2a06:4000:8888:ffff::2 pltime=3000 vltime=4000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option DNS, len 32
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA_PD, len 41
          Jul 11 16:29:49 dhcp6c 82642 IA_PD: ID=1, T1=1000, T2=2000
          Jul 11 16:29:49 dhcp6c 82642 get DHCP option IA_PD prefix, len 25
          Jul 11 16:29:49 dhcp6c 82642 IA_PD prefix: 2a06:4000:8888::/48 pltime=3000 vltime=1546855634413031328
          Jul 11 16:29:49 dhcp6c 82642 server ID: 00:01:00:01:21:5a:37:e1:96:96:78:4c:ae:6d, pref=-1
          Jul 11 16:29:50 dhcp6c 82642 picked a server (ID: 00:01:00:01:21:56:39:cc:fa:32:37:34:e3:9f)
          Jul 11 16:29:50 dhcp6c 82642 Sending Request
          Jul 11 16:29:50 dhcp6c 82642 a new XID (61396e) is generated
          Jul 11 16:29:50 dhcp6c 82642 set client ID (len 14)
          Jul 11 16:29:50 dhcp6c 82642 set server ID (len 14)
          Jul 11 16:29:50 dhcp6c 82642 set elapsed time (len 2)
          Jul 11 16:29:50 dhcp6c 82642 send request to ff02::1:2%igb0
          Jul 11 16:29:50 dhcp6c 82642 reset a timer on igb0, state=REQUEST, timeo=0, retrans=909
          Jul 11 16:29:50 dhcp6c 82642 receive reply from fe80::88ce:87ff:fec6:156a%igb0 on igb0
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option client ID, len 14
          Jul 11 16:29:50 dhcp6c 82642 DUID: 00:01:00:01:2b:8f:81:6a:20:7c:14:a1:bf:06
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option server ID, len 14
          Jul 11 16:29:50 dhcp6c 82642 DUID: 00:01:00:01:21:56:39:cc:fa:32:37:34:e3:9f
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option identity association, len 40
          Jul 11 16:29:50 dhcp6c 82642 IA_NA: ID=1, T1=1000, T2=2000
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option IA address, len 24
          Jul 11 16:29:50 dhcp6c 82642 IA_NA address: 2a06:4000:8888:ffff::2 pltime=3000 vltime=4000
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option DNS, len 32
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option IA_PD, len 41
          Jul 11 16:29:50 dhcp6c 82642 IA_PD: ID=1, T1=1000, T2=2000
          Jul 11 16:29:50 dhcp6c 82642 get DHCP option IA_PD prefix, len 25
          Jul 11 16:29:50 dhcp6c 82642 IA_PD prefix: 2a06:4000:8888::/48 pltime=3000 vltime=1546855634413031328
          Jul 11 16:29:50 dhcp6c 82642 dhcp6c Received REQUEST
          Jul 11 16:29:50 dhcp6c 82642 nameserver[0] 2a06:4000:0:6::6
          Jul 11 16:29:50 dhcp6c 82642 nameserver[1] 2a06:4000:0:6::5
          Jul 11 16:29:50 dhcp6c 82642 executes /var/etc/dhcp6c_wan_dhcp6withoutra_script.sh
          Jul 11 16:29:50 dhcp6c 36281 dhcp6c REQUEST on igb0 - running rtsold
          Jul 11 16:29:50 dhcp6c 82642 script "/var/etc/dhcp6c_wan_dhcp6withoutra_script.sh" terminated
          Jul 11 16:29:50 dhcp6c 82642 removing an event on igb0, state=REQUEST
          Jul 11 16:29:50 dhcp6c 82642 removing server (ID: 00:01:00:01:21:56:39:cc:fa:32:37:34:e3:9f)
          Jul 11 16:29:50 dhcp6c 82642 removing server (ID: 00:01:00:01:21:5a:37:e1:96:96:78:4c:ae:6d)
          Jul 11 16:29:50 dhcp6c 82642 got an expected reply, sleeping.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.