DCHP6 Enabled on WAN but no address
-
Hello,
I am trying to setup IPV6 on pfsense 2.1, i have enabled it on the interface and set it to DHCP but i do not get an address at all. I do not know much about IPV6 so maybe i am doing something wrong. I do know that my ISP does support IPV6 so it should work.
Thanks a lot in advance.
-
I do know that my ISP does support IPV6 so it should work.
ISP supporting IPv6 does not mean it is going to get delivered via DHCPv6. Impossible to advise without further info.
(If you are really sure it should work via DHCP, uncheck "Block Bogon Networks" under the WAN interface configuration and try again.)
-
I do know that my ISP does support IPV6 so it should work.
ISP supporting IPv6 does not mean it is going to get delivered via DHCPv6. Impossible to advise without further info.
(If you are really sure it should work via DHCP, uncheck "Block Bogon Networks" under the WAN interface configuration and try again.)
i know its not a problem with the ISP, they provide a router with the service and that router is able to get an IP6 address from their servers. The bogon network box has already been unchecked.
Is there a service that i might need to manually start or something like that?
-
Once again, there are multiple ways to deliver IPv6 to WAN. Without details about the ISP, we are not going to move anywhere.
-
Once again, there are multiple ways to deliver IPv6 to WAN. Without details about the ISP, we are not going to move anywhere.
Thanks for the response. What details do you need to know?
Thanks.
-
Well, obviously at least the ISP name and country. Frankly, they should provide the information somewhere on their website, or give their support a call about proper setup.
-
Well, obviously at least the ISP name and country. Frankly, they should provide the information somewhere on their website, or give their support a call about proper setup.
The ISP is Google Fiber in the USA, their support won't help with this type of thing because they want you to use the router that they provide for you.
-
The ISP is Google Fiber in the USA, their support won't help with this type of thing because they want you to use the router that they provide for you.
Try SLAAC, not DHCP6. Reference.
-
The ISP is Google Fiber in the USA, their support won't help with this type of thing because they want you to use the router that they provide for you.
Try SLAAC, not DHCP6. Reference.
SLAAC appears to have the same result, no IPv6 address. Thanks.
-
The SLAAC comment on the Google forums appears to assume that you're actually using the router they provide.
Have you tried running a packet capture on the WAN interface?
-
The SLAAC comment on the Google forums appears to assume that you're actually using the router they provide.
Have you tried running a packet capture on the WAN interface?
Yes, i have ran packet captures on the WAN interface before, it doesn't seem like they're sending me a IP6 address at all.
-
Atlantisman: I know this might not be much, but I might have some info you can use.
Well, first of all, try to take whatever IPv6 (global unicast) address e.g. your computer might have within your google routers IPv6 network.
Then visit e.g.:
http://ipduh.com/ipv6/whois/
or
https://www.ultratools.com/tools/ipv6InfoResultAnd then copy/paste your IPv6 address and see what subnet prefix (length) you get returned (as well as your ISPs /32 route).
Now what is interesting is if the subnet prefix is e.g. /48, /56, /60 or something else. Because even though the google router might give your LAN a /64 prefix it is probably to let SLAAC work. Your actually provided network might be larger e.g. a /56 subnet prefix.
What you then could do is to setup your pfsense box manually without any fancy configuration but where you just configure your WAN address to be the wan address of your google router (even though you are not going to use the google router of course)
Your google routers WAN might have a /64 subnet. But the actual provided network to you might be larger e.g. /48 or /56.
If you are not provided with the WAN address e.g. by a google manual or a web interface then simply try to:traceroute6 google.comThe first print out is likely the address of your own router/the google router (your LAN subnet). Then right after this subnet the WAN address of your WAN gateway (not your google router, but the gateway your google router uses) is printed.
It might have an address that ends with ::1. Then you are likely to use the same subnet address, but instead it should probably end with ::2 - anyway it does not matter a lot if the WAN subnet is /64 - but it could be /127 - in that case i am not sure how well pfsense works.
(pfsense 2.1 does not seem to support /127 addresses when configuring static routes on the LAN site - but that is a whole other story.)Thereafter try to setup your LAN. Now if you want to use SLAAC in your LAN you have to use /64 prefix which means you limit your network e.g. if the entire network provided is e.g. /48 or /56. But anyway - you can try to see if it works taking the lower /64 part of the larger network. If it works you can try to take the next /64 prefix and see if that also works and let you have traffic route out and into your network.
Remember to set https://your_router/services_router_advertisements.php?if=lan (Services DHCPv6 Server/RA - Router Advertisements) to either Managed or assisted (depending on what you want).
Else you might want to use wireshark again on the WAN interface but this time searching for http://wiki.wireshark.org/ICMPv6 ICMPv6 packets regarding http://en.wikipedia.org/wiki/Neighbor_Discovery_Protocol#Technical_details .
If some of it works then fine else try to see if your google router has a web interface (located as the default route address - perhaps some:address::1 ) with some configuration info.
E.g. if the google router uses PPP. Actually here is a site that has a PPP example with ICMPv6 with a screen shot from something that looks like wireshark:
https://sites.google.com/site/amitsciscozone/home/ppp/ipv6-ipv4-over-pppHopy you can use at least some of it :-)
Cheers
Anders