Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 changes in 2.2.5

    Scheduled Pinned Locked Moved IPv6
    77 Posts 13 Posters 28.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      David_W
      last edited by

      @M_Devil:

      After uninstalling patch, again updated to newest (2.3.b 7-jan 2:26) version of pfSense refetch, apply en reboot IPv6 is working again. Also after several reboots

      Don't have a clue why it did't work te last attempt, maybe I made an configuration mistake (It was late on the evening…)

      It's good news that things are now stable with your IPv6 connectivity.

      It would be useful if you'd try the patch again. It hasn't changed since you last tried it.

      Please also give outline details of the connection - especially the settings for "IPv4 Configuration Type", "IPv6 Configuration Type" and "Use IPv4 connectivity as parent interface" (in the "DHCP6 Client Configuration" section).

      I hope to reach a point of having confidence in this patch so that I can submit a pull request. I'm confident in the work-round used for Issue 2 (a proper fix needs changes in mpd5). Though I now believe I understand Issue 1 well, I would like some additional user experience of the fix for Issue 1 before submitting a pull request because of the complexity of the underlying issues.

      1 Reply Last reply Reply Quote 0
      • D
        David_W
        last edited by

        I've posted a link to this thread in the 2.3-BETA forum, in the hope of further feedback on these issues.

        1 Reply Last reply Reply Quote 0
        • M
          maverick_slo
          last edited by

          Well thats odd…

          On 2.3 with or without patch pfsense can communicate via IPv6 with outside world but LAN clients cannot.

          What?

          1 Reply Last reply Reply Quote 0
          • H
            hda
            last edited by

            @maverick_slo:

            What?

            Your config & data could make it interesting ;)

            1 Reply Last reply Reply Quote 0
            • M
              maverick_slo
              last edited by

              Upgraded from 2.2.6 to 2.3 rebooted 2 times all was working.
              Then I just saved pppoe iface and now only pfsense can talk ipv6 hosts not.

              1 Reply Last reply Reply Quote 0
              • M
                maverick_slo
                last edited by

                Some screens of my config

                snip1.JPG
                snip1.JPG_thumb
                snip2.JPG
                snip2.JPG_thumb
                snip3.JPG
                snip3.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • D
                  David_W
                  last edited by

                  @maverick_slo:

                  Upgraded from 2.2.6 to 2.3 rebooted 2 times all was working.
                  Then I just saved pppoe iface and now only pfsense can talk ipv6 hosts not.

                  Your PPPoE configuration looks correct, assuming your ISP uses a similar configuration to mine (WAN IPv6 address allocated via SLAAC, static address allocation for local networks but you have to delegate the prefix from the ISP to install a route to that prefix) and you are allocating static IPv6 prefixes to your local networks from the correct prefix.

                  If this is what you are trying to do, you will need to enable Router Advertisements on your local networks unless you are installing a static route on each machine.

                  What is unclear is whether dhcp6c is running and, if so, what it is doing.

                  Can you run the four shell commands I introduced and explained earlier in this thread (either using SSH or Diagnostics -> Command Prompt), copying and pasting the results (as text) into a private message to me. These commands are:
                  clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                  ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                  ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                  clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40

                  If you get no output from the second command, the interface might be called pppoe rather than pppoe0.

                  It would also help if you save your configuration, open it in a text editor and include the section between <interfaces>and</interfaces> in your private message. This section will be fairly near the top of the file. That's the most concise and accurate way to let me see your full interface settings. The <dhcpdv6>to</dhcpdv6> section would also be useful - this contains the DHCPv6 server and Router Advertisement settings.

                  1 Reply Last reply Reply Quote 0
                  • M
                    maverick_slo
                    last edited by

                    I found the bug and it`s actually old one :) But upgraded :)

                    This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

                    GUI generates WRONG .conf file.

                    I used this:

                    interface pppoe0 {
                     send ia-pd 0; # request prefix delegation
                     request domain-name-servers;
                     request domain-name;
                     script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                    };
                    id-assoc pd 0 {
                    };
                    

                    And it`s working great now.

                    Gui generated this (WHICH IS GREAT BUT SEE BELOW)

                    interface pppoe0 {
                     send ia-pd 0; # request prefix delegation
                     request domain-name-servers;
                     request domain-name;
                     script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                    };
                    id-assoc pd 0 {
                    };
                    

                    After I click APPLY CHANGES on pppoe interface this OK conf dissapears and few seconds later newly generated config appears (below one).

                    
                    interface pppoe0 {
                    	request domain-name-servers;
                    	request domain-name;
                    	script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                    };
                    
                    

                    So GUI generates good config but apply button messes it up completley.
                    Just a heads up guys!

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      Can you try this in 2.3 and see if it happens there?

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • M
                        maverick_slo
                        last edited by

                        It happens only on 2.3

                        1 Reply Last reply Reply Quote 0
                        • D
                          David_W
                          last edited by

                          @maverick_slo:

                          I found the bug and it`s actually old one :) But upgraded :)

                          This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

                          GUI generates WRONG .conf file.

                          Good catch!

                          It would be worth comparing the entries in the relevant part of the <interfaces>to</interfaces> block of your configuration between the broken and working scenarios.

                          I'm unclear whether this was ever fixed in 2.2.x.

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                            Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo
                              last edited by

                              Already started it, Redmine later…

                              1 Reply Last reply Reply Quote 0
                              • D
                                David_W
                                last edited by

                                @jimp:

                                Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                                As I noted in the 2.3 board earlier today, the issues discussed in this thread relate to both 2.2.5/2.2.6 and 2.3. I'm not the original poster, so I can't change the thread title.

                                @jimp:

                                Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                                I'll leave that to maverick_slo - though there is already a post in the 2.3 board.

                                Hopefully fixing the bug maverick_slo has found will help in the process of validating my fixes for the two issues discussed in this thread, so that I can get on with submitting redmine bugs for those issues and pull requests for the fixes.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  maverick_slo
                                  last edited by

                                  Doing redmine right now :)

                                  EDIT:
                                  https://redmine.pfsense.org/issues/5747

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    Inq
                                    last edited by

                                    Hey guys, after testing the patch for 2 days on an 2.2.6 machine everything is rock solid.
                                    I'm connecting through a pppoe connection dynamic ipv4 and dhcp6 with a /64 PD (Use IPv4 connectivity as parent interface - check, Request only an IPv6 prefix - unckeck, DHCPv6 Prefix Delegation size - 64, Send IPv6 prefix hint - check).

                                    Here are some logs after rebooting or disconnecting pfsense with and without the patch applied:

                                    • First reboot without patch:no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:
                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 17:31:24 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 17:31:24 router ppp: [wan]   0000:0000:524d:a09a -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::524d:a09a%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root    9403   0.0  0.1  17136  2644  -  S     5:40PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root    9868   0.0  0.1  18876  2392  -  S     5:40PM  0:00.01 grep -E -e (dhcp6c|rtsold)
                                    root   25426   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   25642   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 17:31:27 router dhcp6c[25136]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:31:27 router dhcp6c[25368]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:31:27 router dhcp6c[25368]: failed initialize control message authentication
                                    Jan  8 17:31:27 router dhcp6c[25136]: failed initialize control message authentication
                                    Jan  8 17:31:27 router dhcp6c[25368]: skip opening control port
                                    Jan  8 17:31:27 router dhcp6c[25136]: skip opening control port
                                    Jan  8 17:31:27 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:31:43 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:32:01 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:32:36 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:33:44 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:35:40 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                    

                                    2nd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows and pending WAN_PPPOE gateway (WAN_DHCP6 is online):

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 17:47:06 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 17:47:06 router ppp: [wan]   0000:0000:524c:8625 -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::524c:8625%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   12192   0.0  0.1  12556  2256  -  Is    5:47PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   90918   0.0  0.1  17136  2644  -  S     5:50PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   91441   0.0  0.1  18876  2392  -  S     5:50PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:41:26 router dhcp6c[25642]: XID mismatch
                                    Jan  8 17:44:11 router dhcp6c[11975]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:44:11 router dhcp6c[11975]: failed initialize control message authentication
                                    Jan  8 17:44:11 router dhcp6c[11975]: skip opening control port
                                    Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:47:08 router dhcp6c[12168]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:47:08 router dhcp6c[12168]: failed initialize control message authentication
                                    Jan  8 17:47:08 router dhcp6c[12168]: skip opening control port
                                    Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                    

                                    3rd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 17:56:18 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 17:56:18 router ppp: [wan]   0000:0000:bc19:6dd4 -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::bc19:6dd4%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   24060   0.0  0.1  12556  2252  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   24449   0.0  0.1  12556  2248  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   53777   0.0  0.1  17136  2644  -  S     6:00PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   54136   0.0  0.1  18876  2392  -  S     6:00PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 17:56:19 router dhcp6c[23836]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:56:19 router dhcp6c[23963]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 17:56:19 router dhcp6c[23963]: failed initialize control message authentication
                                    Jan  8 17:56:19 router dhcp6c[23836]: failed initialize control message authentication
                                    Jan  8 17:56:19 router dhcp6c[23963]: skip opening control port
                                    Jan  8 17:56:19 router dhcp6c[23836]: skip opening control port
                                    Jan  8 17:56:20 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:56:36 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:56:53 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:57:28 router dhcp6c[24449]: XID mismatch
                                    Jan  8 17:58:37 router dhcp6c[24449]: XID mismatch
                                    Jan  8 18:00:33 router dhcp6c[24449]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                    

                                    Disconnect-Reconnect without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 18:03:23 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 18:03:23 router ppp: [wan]   0000:0000:bc19:6aee -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                                    	inet6 fe80::bc19:6aee%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   24060   0.0  0.1  12556  2252  -  Is    5:56PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   38145   0.0  0.1  12556  2344  -  Is    6:03PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   55182   0.0  0.1  17136  2644  -  S     6:09PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   55670   0.0  0.1  18876  2392  -  S     6:09PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 18:02:38 router dhcp6c[24449]: XID mismatch
                                    Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                                    Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                                    Jan  8 18:03:02 router dhcp6c[24449]: transmit failed: Device not configured
                                    Jan  8 18:03:03 router dhcp6c[24449]: transmit failed: Device not configured
                                    Jan  8 18:03:16 router dhcp6c[24449]: no responses were received
                                    Jan  8 18:03:18 router dhcp6c[24449]: no responses were received
                                    Jan  8 18:03:18 router dhcp6c[24449]: exiting
                                    Jan  8 18:03:26 router dhcp6c[38049]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:03:26 router dhcp6c[38049]: failed initialize control message authentication
                                    Jan  8 18:03:26 router dhcp6c[38049]: skip opening control port
                                    Jan  8 18:03:27 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:03:30 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:03:34 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:03:43 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:04:00 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:04:37 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                    

                                    First reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 18:16:13 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 18:16:13 router ppp: [wan]   0000:0000:bc19:8772 -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::bc19:8772%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root    9381   0.0  0.1  17136  2644  -  S     6:20PM 0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   10000   0.0  0.1  18876  2392  -  S     6:20PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                                    root   25667   0.0  0.1  12556  2248  -  Is    6:16PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                    Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                    Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                    

                                    2nd reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 18:23:56 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 18:23:56 router ppp: [wan]   0000:0000:bc19:a7cf -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::bc19:a7cf%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   10981   0.0  0.1  12556  2260  -  Is    6:23PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   44528   0.0  0.1  17136  2644  -  S     6:27PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   44974   0.0  0.1  18876  2392  -  S     6:27PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                    Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                    Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                                    Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                                    Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                    

                                    3rd reboot with patch applyed - 10/10 in http://test-ipv6.com/ (just becouse i rebooted the windows machine right after rebooting pfsense) :

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 18:30:12 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 18:30:12 router ppp: [wan]   0000:0000:524d:4e1d -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::524d:4e1d%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   23681   0.0  0.1  12556  2248  -  Is    6:30PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   57452   0.0  0.1  17136  2644  -  S     6:35PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   57889   0.0  0.1  18876  2392  -  S     6:35PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                    Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                    Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                                    Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                                    Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:30:15 router dhcp6c[23499]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:30:15 router dhcp6c[23499]: failed initialize control message authentication
                                    Jan  8 18:30:15 router dhcp6c[23499]: skip opening control port
                                    Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                    

                                    Disconnect-Reconnect with patch applyed - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                    $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                    Jan  8 18:38:19 router ppp: [wan] IPV6CP: LayerUp
                                    Jan  8 18:38:19 router ppp: [wan]   0000:0000:567f:9f6b -> 0000:0000:0000:0001
                                    --
                                    $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                    	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                                    	inet6 fe80::567f:9f6b%pppoe0 prefixlen 64 scopeid 0x7 
                                    	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                    $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                    root   42814   0.0  0.1  12556  2344  -  Is    6:38PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                    root   97484   0.0  0.1  17136  2644  -  S     6:40PM  0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                    root   97770   0.0  0.1  18876  2392  -  S     6:40PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                    --
                                    $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                    Jan  8 18:38:11 router dhcp6c[23681]: transmit failed: Device not configured
                                    Jan  8 18:38:18 router dhcp6c[23681]: transmit failed: No route to host
                                    Jan  8 18:38:19 router dhcp6c[23681]: transmit failed: No route to host
                                    Jan  8 18:38:22 router dhcp6c[42511]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                    Jan  8 18:38:22 router dhcp6c[42511]: failed initialize control message authentication
                                    Jan  8 18:38:22 router dhcp6c[42511]: skip opening control port
                                    Jan  8 18:38:22 router dhcp6c[23681]: XID mismatch
                                    Jan  8 18:38:23 router dhcp6c[23681]: XID mismatch
                                    Jan  8 18:38:26 router dhcp6c[23681]: XID mismatch
                                    Jan  8 18:38:30 router dhcp6c[23681]: XID mismatch
                                    Jan  8 18:38:32 router dhcp6c[23681]: no responses were received
                                    Jan  8 18:38:34 router dhcp6c[23681]: no responses were received
                                    Jan  8 18:38:34 router dhcp6c[23681]: exiting
                                    Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined
                                    Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                    

                                    The enable/disable thing in windows is strange other machines (linux, android, mac, ios) have no problem acquiring the new ipv6 address after reboot/disconnect-reconnect.
                                    WAN_PPPOE gateway in pending state must be apinger acting strange, it goes back online if i edit the gateway and save without changing anything.

                                    The problem with making something idiot proof is that the world keeps making better idiots.

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      maverick_slo
                                      last edited by

                                      @David_W:
                                      We indeed have identical config as far as IPv6 goes.
                                      BUT:

                                      Without your patch my IPv6 works perfect.
                                      With your patch my IPv6 works perfect.

                                      I tried:
                                      ISP modem power off and on.
                                      Unplog PPPoE iface.
                                      Disconnect/connect from iface status page.
                                      Reboot.

                                      In every scenario things worked 10/10 on test my IPv6 page.
                                      Sometimes I had to wait for RA packet and then it worked (no need to disable win/android/linux NIC).

                                      BR,
                                      Greg

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        David_W
                                        last edited by

                                        @maverick_slo:

                                        Without your patch my IPv6 works perfect.
                                        With your patch my IPv6 works perfect.

                                        That means that my patch causes no regressions on your system, which is my largest concern over Issue 1. Any patch touching that functionality needs to make at least some previously broken systems work whilst not breaking previously working ones.

                                        I expect your system will display Issue 2 without the patch, meaning your SLAAC IPv6 WAN address will have a random element on the first connection after boot. A predictable IPv6 WAN address is useful for uptime monitoring services that ping your WAN IPv6 address and/or if you use pfSense as an IPv6 VPN endpoint.

                                        It's certainly helpful that your efforts have shaken out Redmine #5747.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          maverick_slo
                                          last edited by

                                          Yeah but I`m lone rnger I guess.
                                          Nobody can repro it :(

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            cmb
                                            last edited by

                                            Since David hasn't been around in a bit and several of us have confirmed his 2.3 patch is good (both fixes broken scenarios, and doesn't harm anything), I went ahead and committed it. There already was a ticket for one of the issues here.
                                            https://redmine.pfsense.org/issues/5621

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.