Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 changes in 2.2.5

    Scheduled Pinned Locked Moved IPv6
    77 Posts 13 Posters 28.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      David_W
      last edited by

      I've posted a link to this thread in the 2.3-BETA forum, in the hope of further feedback on these issues.

      1 Reply Last reply Reply Quote 0
      • M
        maverick_slo
        last edited by

        Well thats odd…

        On 2.3 with or without patch pfsense can communicate via IPv6 with outside world but LAN clients cannot.

        What?

        1 Reply Last reply Reply Quote 0
        • H
          hda
          last edited by

          @maverick_slo:

          What?

          Your config & data could make it interesting ;)

          1 Reply Last reply Reply Quote 0
          • M
            maverick_slo
            last edited by

            Upgraded from 2.2.6 to 2.3 rebooted 2 times all was working.
            Then I just saved pppoe iface and now only pfsense can talk ipv6 hosts not.

            1 Reply Last reply Reply Quote 0
            • M
              maverick_slo
              last edited by

              Some screens of my config

              snip1.JPG
              snip1.JPG_thumb
              snip2.JPG
              snip2.JPG_thumb
              snip3.JPG
              snip3.JPG_thumb

              1 Reply Last reply Reply Quote 0
              • D
                David_W
                last edited by

                @maverick_slo:

                Upgraded from 2.2.6 to 2.3 rebooted 2 times all was working.
                Then I just saved pppoe iface and now only pfsense can talk ipv6 hosts not.

                Your PPPoE configuration looks correct, assuming your ISP uses a similar configuration to mine (WAN IPv6 address allocated via SLAAC, static address allocation for local networks but you have to delegate the prefix from the ISP to install a route to that prefix) and you are allocating static IPv6 prefixes to your local networks from the correct prefix.

                If this is what you are trying to do, you will need to enable Router Advertisements on your local networks unless you are installing a static route on each machine.

                What is unclear is whether dhcp6c is running and, if so, what it is doing.

                Can you run the four shell commands I introduced and explained earlier in this thread (either using SSH or Diagnostics -> Command Prompt), copying and pasting the results (as text) into a private message to me. These commands are:
                clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40

                If you get no output from the second command, the interface might be called pppoe rather than pppoe0.

                It would also help if you save your configuration, open it in a text editor and include the section between <interfaces>and</interfaces> in your private message. This section will be fairly near the top of the file. That's the most concise and accurate way to let me see your full interface settings. The <dhcpdv6>to</dhcpdv6> section would also be useful - this contains the DHCPv6 server and Router Advertisement settings.

                1 Reply Last reply Reply Quote 0
                • M
                  maverick_slo
                  last edited by

                  I found the bug and it`s actually old one :) But upgraded :)

                  This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

                  GUI generates WRONG .conf file.

                  I used this:

                  interface pppoe0 {
                   send ia-pd 0; # request prefix delegation
                   request domain-name-servers;
                   request domain-name;
                   script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                  };
                  id-assoc pd 0 {
                  };
                  

                  And it`s working great now.

                  Gui generated this (WHICH IS GREAT BUT SEE BELOW)

                  interface pppoe0 {
                   send ia-pd 0; # request prefix delegation
                   request domain-name-servers;
                   request domain-name;
                   script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                  };
                  id-assoc pd 0 {
                  };
                  

                  After I click APPLY CHANGES on pppoe interface this OK conf dissapears and few seconds later newly generated config appears (below one).

                  
                  interface pppoe0 {
                  	request domain-name-servers;
                  	request domain-name;
                  	script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
                  };
                  
                  

                  So GUI generates good config but apply button messes it up completley.
                  Just a heads up guys!

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    Can you try this in 2.3 and see if it happens there?

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      It happens only on 2.3

                      1 Reply Last reply Reply Quote 0
                      • D
                        David_W
                        last edited by

                        @maverick_slo:

                        I found the bug and it`s actually old one :) But upgraded :)

                        This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

                        GUI generates WRONG .conf file.

                        Good catch!

                        It would be worth comparing the entries in the relevant part of the <interfaces>to</interfaces> block of your configuration between the broken and working scenarios.

                        I'm unclear whether this was ever fixed in 2.2.x.

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                          Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • M
                            maverick_slo
                            last edited by

                            Already started it, Redmine later…

                            1 Reply Last reply Reply Quote 0
                            • D
                              David_W
                              last edited by

                              @jimp:

                              Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                              As I noted in the 2.3 board earlier today, the issues discussed in this thread relate to both 2.2.5/2.2.6 and 2.3. I'm not the original poster, so I can't change the thread title.

                              @jimp:

                              Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                              I'll leave that to maverick_slo - though there is already a post in the 2.3 board.

                              Hopefully fixing the bug maverick_slo has found will help in the process of validating my fixes for the two issues discussed in this thread, so that I can get on with submitting redmine bugs for those issues and pull requests for the fixes.

                              1 Reply Last reply Reply Quote 0
                              • M
                                maverick_slo
                                last edited by

                                Doing redmine right now :)

                                EDIT:
                                https://redmine.pfsense.org/issues/5747

                                1 Reply Last reply Reply Quote 0
                                • I
                                  Inq
                                  last edited by

                                  Hey guys, after testing the patch for 2 days on an 2.2.6 machine everything is rock solid.
                                  I'm connecting through a pppoe connection dynamic ipv4 and dhcp6 with a /64 PD (Use IPv4 connectivity as parent interface - check, Request only an IPv6 prefix - unckeck, DHCPv6 Prefix Delegation size - 64, Send IPv6 prefix hint - check).

                                  Here are some logs after rebooting or disconnecting pfsense with and without the patch applied:

                                  • First reboot without patch:no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:
                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 17:31:24 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 17:31:24 router ppp: [wan]   0000:0000:524d:a09a -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::524d:a09a%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root    9403   0.0  0.1  17136  2644  -  S     5:40PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root    9868   0.0  0.1  18876  2392  -  S     5:40PM  0:00.01 grep -E -e (dhcp6c|rtsold)
                                  root   25426   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   25642   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 17:31:27 router dhcp6c[25136]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:31:27 router dhcp6c[25368]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:31:27 router dhcp6c[25368]: failed initialize control message authentication
                                  Jan  8 17:31:27 router dhcp6c[25136]: failed initialize control message authentication
                                  Jan  8 17:31:27 router dhcp6c[25368]: skip opening control port
                                  Jan  8 17:31:27 router dhcp6c[25136]: skip opening control port
                                  Jan  8 17:31:27 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:31:43 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:32:01 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:32:36 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:33:44 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:35:40 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                  

                                  2nd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows and pending WAN_PPPOE gateway (WAN_DHCP6 is online):

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 17:47:06 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 17:47:06 router ppp: [wan]   0000:0000:524c:8625 -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::524c:8625%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   12192   0.0  0.1  12556  2256  -  Is    5:47PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   90918   0.0  0.1  17136  2644  -  S     5:50PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   91441   0.0  0.1  18876  2392  -  S     5:50PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:41:26 router dhcp6c[25642]: XID mismatch
                                  Jan  8 17:44:11 router dhcp6c[11975]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:44:11 router dhcp6c[11975]: failed initialize control message authentication
                                  Jan  8 17:44:11 router dhcp6c[11975]: skip opening control port
                                  Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:47:08 router dhcp6c[12168]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:47:08 router dhcp6c[12168]: failed initialize control message authentication
                                  Jan  8 17:47:08 router dhcp6c[12168]: skip opening control port
                                  Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                  

                                  3rd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 17:56:18 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 17:56:18 router ppp: [wan]   0000:0000:bc19:6dd4 -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::bc19:6dd4%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   24060   0.0  0.1  12556  2252  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   24449   0.0  0.1  12556  2248  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   53777   0.0  0.1  17136  2644  -  S     6:00PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   54136   0.0  0.1  18876  2392  -  S     6:00PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 17:56:19 router dhcp6c[23836]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:56:19 router dhcp6c[23963]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 17:56:19 router dhcp6c[23963]: failed initialize control message authentication
                                  Jan  8 17:56:19 router dhcp6c[23836]: failed initialize control message authentication
                                  Jan  8 17:56:19 router dhcp6c[23963]: skip opening control port
                                  Jan  8 17:56:19 router dhcp6c[23836]: skip opening control port
                                  Jan  8 17:56:20 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:56:36 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:56:53 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:57:28 router dhcp6c[24449]: XID mismatch
                                  Jan  8 17:58:37 router dhcp6c[24449]: XID mismatch
                                  Jan  8 18:00:33 router dhcp6c[24449]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                  

                                  Disconnect-Reconnect without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 18:03:23 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 18:03:23 router ppp: [wan]   0000:0000:bc19:6aee -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                                  	inet6 fe80::bc19:6aee%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   24060   0.0  0.1  12556  2252  -  Is    5:56PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   38145   0.0  0.1  12556  2344  -  Is    6:03PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   55182   0.0  0.1  17136  2644  -  S     6:09PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   55670   0.0  0.1  18876  2392  -  S     6:09PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 18:02:38 router dhcp6c[24449]: XID mismatch
                                  Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                                  Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                                  Jan  8 18:03:02 router dhcp6c[24449]: transmit failed: Device not configured
                                  Jan  8 18:03:03 router dhcp6c[24449]: transmit failed: Device not configured
                                  Jan  8 18:03:16 router dhcp6c[24449]: no responses were received
                                  Jan  8 18:03:18 router dhcp6c[24449]: no responses were received
                                  Jan  8 18:03:18 router dhcp6c[24449]: exiting
                                  Jan  8 18:03:26 router dhcp6c[38049]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:03:26 router dhcp6c[38049]: failed initialize control message authentication
                                  Jan  8 18:03:26 router dhcp6c[38049]: skip opening control port
                                  Jan  8 18:03:27 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:03:30 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:03:34 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:03:43 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:04:00 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:04:37 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                                  

                                  First reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 18:16:13 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 18:16:13 router ppp: [wan]   0000:0000:bc19:8772 -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::bc19:8772%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root    9381   0.0  0.1  17136  2644  -  S     6:20PM 0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   10000   0.0  0.1  18876  2392  -  S     6:20PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                                  root   25667   0.0  0.1  12556  2248  -  Is    6:16PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                  Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                  Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                  

                                  2nd reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 18:23:56 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 18:23:56 router ppp: [wan]   0000:0000:bc19:a7cf -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::bc19:a7cf%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   10981   0.0  0.1  12556  2260  -  Is    6:23PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   44528   0.0  0.1  17136  2644  -  S     6:27PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   44974   0.0  0.1  18876  2392  -  S     6:27PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                  Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                  Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                                  Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                                  Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                  

                                  3rd reboot with patch applyed - 10/10 in http://test-ipv6.com/ (just becouse i rebooted the windows machine right after rebooting pfsense) :

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 18:30:12 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 18:30:12 router ppp: [wan]   0000:0000:524d:4e1d -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::524d:4e1d%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   23681   0.0  0.1  12556  2248  -  Is    6:30PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   57452   0.0  0.1  17136  2644  -  S     6:35PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   57889   0.0  0.1  18876  2392  -  S     6:35PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                                  Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                                  Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                                  Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                                  Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:30:15 router dhcp6c[23499]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:30:15 router dhcp6c[23499]: failed initialize control message authentication
                                  Jan  8 18:30:15 router dhcp6c[23499]: skip opening control port
                                  Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                  

                                  Disconnect-Reconnect with patch applyed - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                                  $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                                  Jan  8 18:38:19 router ppp: [wan] IPV6CP: LayerUp
                                  Jan  8 18:38:19 router ppp: [wan]   0000:0000:567f:9f6b -> 0000:0000:0000:0001
                                  --
                                  $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                                  	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                                  	inet6 fe80::567f:9f6b%pppoe0 prefixlen 64 scopeid 0x7 
                                  	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                                  $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                                  root   42814   0.0  0.1  12556  2344  -  Is    6:38PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                                  root   97484   0.0  0.1  17136  2644  -  S     6:40PM  0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                                  root   97770   0.0  0.1  18876  2392  -  S     6:40PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                                  --
                                  $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                                  Jan  8 18:38:11 router dhcp6c[23681]: transmit failed: Device not configured
                                  Jan  8 18:38:18 router dhcp6c[23681]: transmit failed: No route to host
                                  Jan  8 18:38:19 router dhcp6c[23681]: transmit failed: No route to host
                                  Jan  8 18:38:22 router dhcp6c[42511]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                  Jan  8 18:38:22 router dhcp6c[42511]: failed initialize control message authentication
                                  Jan  8 18:38:22 router dhcp6c[42511]: skip opening control port
                                  Jan  8 18:38:22 router dhcp6c[23681]: XID mismatch
                                  Jan  8 18:38:23 router dhcp6c[23681]: XID mismatch
                                  Jan  8 18:38:26 router dhcp6c[23681]: XID mismatch
                                  Jan  8 18:38:30 router dhcp6c[23681]: XID mismatch
                                  Jan  8 18:38:32 router dhcp6c[23681]: no responses were received
                                  Jan  8 18:38:34 router dhcp6c[23681]: no responses were received
                                  Jan  8 18:38:34 router dhcp6c[23681]: exiting
                                  Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined
                                  Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                                  

                                  The enable/disable thing in windows is strange other machines (linux, android, mac, ios) have no problem acquiring the new ipv6 address after reboot/disconnect-reconnect.
                                  WAN_PPPOE gateway in pending state must be apinger acting strange, it goes back online if i edit the gateway and save without changing anything.

                                  The problem with making something idiot proof is that the world keeps making better idiots.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    maverick_slo
                                    last edited by

                                    @David_W:
                                    We indeed have identical config as far as IPv6 goes.
                                    BUT:

                                    Without your patch my IPv6 works perfect.
                                    With your patch my IPv6 works perfect.

                                    I tried:
                                    ISP modem power off and on.
                                    Unplog PPPoE iface.
                                    Disconnect/connect from iface status page.
                                    Reboot.

                                    In every scenario things worked 10/10 on test my IPv6 page.
                                    Sometimes I had to wait for RA packet and then it worked (no need to disable win/android/linux NIC).

                                    BR,
                                    Greg

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      David_W
                                      last edited by

                                      @maverick_slo:

                                      Without your patch my IPv6 works perfect.
                                      With your patch my IPv6 works perfect.

                                      That means that my patch causes no regressions on your system, which is my largest concern over Issue 1. Any patch touching that functionality needs to make at least some previously broken systems work whilst not breaking previously working ones.

                                      I expect your system will display Issue 2 without the patch, meaning your SLAAC IPv6 WAN address will have a random element on the first connection after boot. A predictable IPv6 WAN address is useful for uptime monitoring services that ping your WAN IPv6 address and/or if you use pfSense as an IPv6 VPN endpoint.

                                      It's certainly helpful that your efforts have shaken out Redmine #5747.

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        maverick_slo
                                        last edited by

                                        Yeah but I`m lone rnger I guess.
                                        Nobody can repro it :(

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          cmb
                                          last edited by

                                          Since David hasn't been around in a bit and several of us have confirmed his 2.3 patch is good (both fixes broken scenarios, and doesn't harm anything), I went ahead and committed it. There already was a ticket for one of the issues here.
                                          https://redmine.pfsense.org/issues/5621

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            David_W
                                            last edited by

                                            Thanks, Chris.

                                            I've been really ill with a respiratory virus on top of my neuromuscular condition, which means my energy has had to remain focused on staying alive and is why I disappeared from the forum. My cough reflex doesn't work and my cough is ineffective, so it's a case of trying not to drown.

                                            I'm not recovered yet and am still stuck in bed very breathless, but I'm much better than I was. It's now a case of hoping that my strength returns and I don't get a secondary infection of bacterial pneumonia. Bacterial pneumonia is never good news and, in my case, may well eventually take my life. I have been warned that another serious bout of pneumonia could require an ICU admission, which is something I'd rather avoid.

                                            The patch was in a feature branch on GitHub ready for a pull request, then my health failed before I submitted the pull request. The important thing is that it has been merged - thanks. I'll leave the feature branch up for a while just in case you want to revert the flat merge and pull from the branch to include the commit history.

                                            I've created a pull request for the RELENG_2_2 version of the patch. Whilst another 2.2 release seems unlikely, these fixes have been tested and were already in a GitHub feature branch. To my mind, it makes more sense to merge them than delete the feature branch.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.