IPv6 testing

m4rcu5

Hi all,

I'm still getting stuck setting up the IPv6 part.
I can create the GIF0 interface without any problems, but as soon as i assign an interface to it (in my case opt5) the system will not boot anymore.
It does bring up the WAN and GiF0 interface, but it skips the lagg/opt/lan interfaces and starts the rc scripts for the packages.

My setup:
3 interfaces, WAN and 2x intel as Lagg0
on Lagg0 i have 3 vlans; ORANGE, BLUE and GREEN
And a OpenVPN client as OVPNC2

Packages:
OpenVPN
Snort
Nut

I cannot imagine how this could interfere with the IPv6, so i an really hoping for your help.

-m4rcu5

gnhb

hello,
I just got ipv6 working on my home router (ALIX). Nice work databeestje.

I currently have my LAN configured as 'bridge0' so I ran into the problem of the bridge0 interface not having a link local address.

I added it manually with this command: ifconfig bridge0 inet6 add fe80::73:d1:c3:e0/64

As others have reported previously, the following doesn't work (which is attempted in the services.inc functions to set up dhcp6):
[2.0-RC1-IPv6][root@pfsense]/root(10):ifconfig bridge0 inet6 add fe80::/64 eui64
ifconfig: could not determine link local address

Also, I noticed that on the services_dhcpv6 page you can not 'Save' when selecting 'Unmanaged' in the "Operating Mode" field
because the error checking code is still requiring a DHCP begin and end value in the "Range" field.

And the DNS Server value is saved to config.xml but not repopulated when you reload the page.

Again, nice work so far. It's coming along really well.

GB

databeestje

New images posted on http://iserv.nl/files/pfsense/ipv6/rc1/

These are snapshots built today.
I've added a function that should manually generate a link-local address for the bridge. Although I'm not sure if that works yet.

The javascript on the services_dhcpv6.php page is a work in progress. We'll need to fix that.

Cino

Thanks databeestje!! Quick question, do you know when there will be another merge with the mainline code? Last one happen on March 27 and there seems to a lot of changes to it. Thanks in advance!!

MrKoen

I just gitsynced with the latest smos gitsync. The webinterface no longer works now. The error shown when browsing to the webinterface:

Parse error: syntax error, unexpected ']' in /etc/inc/services.inc on line 623

morbus

Remove the "]" from 623 and all is fine again
eg

$dnscfgv6 .= " option dhcp6.name-servers " . join(",", $dns_arrv6]) . ";";

becomes

$dnscfgv6 .= " option dhcp6.name-servers " . join(",", $dns_arrv6) . ";";

MrKoen

Works morbus, thanks!

MrKoen

@Databeestje, I've found a bug in the diagnostics DNS lookup page located at /diag_dns.php. The first time I try to resolve a hostname by an IPv6 address, it works. When I click the DNS Lookup button again, it shows no result. When I click it again, it does show the result. When I click it again it shows no results, etc. When entering an IPv4 address, it does work okay every time.

Should I enter bugs like this through the redmine form?

pfSenseDoesResolve.png_thumb

pfSenseDoesNotResolve.png_thumb

GrandmasterB

@GrandmasterB:

Hi,

I found a small error on this page: services_dhcpv6.php?if=lan

If I fill the DNS servers entry on this page, the setting is saved correctly.
But when I want the edit again, the setting does nog show up and is blank again. The input-field is not correctly filled with the setting.

Hi Databeestje,

I found the bug described above. The DNSserver field on the DHCPv6 settingspage was not showing correctly.
With the extra code below it does load ok.

please insert this patch:


153d152
<       list($pconfig['dns1'],$pconfig['dns2']) = $config['dhcpdv6'][$if]['dnsserver'];

databeestje

@Koen:

@Databeestje, I've found a bug in the diagnostics DNS lookup page located at /diag_dns.php. The first time I try to resolve a hostname by an IPv6 address, it works. When I click the DNS Lookup button again, it shows no result. When I click it again, it does show the result. When I click it again it shows no results, etc. When entering an IPv4 address, it does work okay every time.

Should I enter bugs like this through the redmine form?

Feel free to keep posting them here for a while. Until the code is merged into the normal git tree we'll keep it here. It is sufficiently quiet here that it's easy to keep up on.

Some of the other boards are so crowded that it becomes hard to follow. If you do create redmine tickets please assign them to smos.

nuclear

I've noticed line 167 of system_firmware_settings.php disables gitsync in web gui on platforms such as nanobsd. Since there are nanobsd IPv6 images and as far as I can tell it works fine on nanobsd…is there some other reason this feature is disabled on the web gui?

databeestje

You'll have to ask that in a embbeded board. No idea.

jimp

@nuclear:

I've noticed line 167 of system_firmware_settings.php disables gitsync in web gui on platforms such as nanobsd. Since there are nanobsd IPv6 images and as far as I can tell it works fine on nanobsd…is there some other reason this feature is disabled on the web gui?

Probably because when that was first implemented, it didn't work on NanoBSD, and I'd still be inclined to not do a gitsync on NanoBSD in general, since the large number of CF writes involved would be detrimental to the lifetime of the CF.

databeestje

openvpn with ipv6 support is now included, it will slowly be integrated over the next few weeks.

The biggest issue is that most clients do not support it yet.

Cino

@databeestje:

openvpn with ipv6 support is now included, it will slowly be integrated over the next few weeks.

The biggest issue is that most clients do not support it yet.

I gitsync and updated my snapshot. I'm seeing this error in my OpenVPN logs and my RoadWarrior service wont start:


Apr 25 19:58:40 	openvpn[5266]: Use --help for more information.
Apr 25 19:58:40 	openvpn[5266]: Options error: --tun-ipv6 cannot be used with --mode server

I was able to get it running by manually editing the server1.conf file, removing the tun-ipv6 entry

databeestje

You have a old openvpn binary, you need to update.

MrKoen

@databeestje:

The javascript on the services_dhcpv6.php page is a work in progress. We'll need to fix that.

Can I help with this issue Databeestje?

MrKoen

@Databeestje, I believe I have found a bug caused by a change you did last week in the DHCPv6 service. I also believe to have found the solution for it. I have described it in this forum post:

http://forum.pfsense.org/index.php/topic,33955.msg187311.html#msg187311

Could you have a look at it?

alexis.olivier

Hello everybody,

I just reported a bug into pfSense bugtracker (http://redmine.pfsense.org/issues/1555) about DHCPv6 and "Deny unknown clients" options and there is the same bug in the v6 version but i don't know where to report it.

In line 736, you should change :

$dhcpdv6conf .= "            deny unknown clients;\n";

by

$dhcpdv6conf .= "            deny unknown-clients;\n";

By the way, i can't do failover in v6… Does anyone knows more about it ?

databeestje

From the specifications you can assign priorities to different dhcp servers. Not sure if this works yet.