Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 changes in 2.2.5

    Scheduled Pinned Locked Moved IPv6
    77 Posts 13 Posters 28.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      David_W
      last edited by

      @maverick_slo:

      Upgraded from 2.2.6 to 2.3 rebooted 2 times all was working.
      Then I just saved pppoe iface and now only pfsense can talk ipv6 hosts not.

      Your PPPoE configuration looks correct, assuming your ISP uses a similar configuration to mine (WAN IPv6 address allocated via SLAAC, static address allocation for local networks but you have to delegate the prefix from the ISP to install a route to that prefix) and you are allocating static IPv6 prefixes to your local networks from the correct prefix.

      If this is what you are trying to do, you will need to enable Router Advertisements on your local networks unless you are installing a static route on each machine.

      What is unclear is whether dhcp6c is running and, if so, what it is doing.

      Can you run the four shell commands I introduced and explained earlier in this thread (either using SSH or Diagnostics -> Command Prompt), copying and pasting the results (as text) into a private message to me. These commands are:
      clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
      ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
      ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
      clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40

      If you get no output from the second command, the interface might be called pppoe rather than pppoe0.

      It would also help if you save your configuration, open it in a text editor and include the section between <interfaces>and</interfaces> in your private message. This section will be fairly near the top of the file. That's the most concise and accurate way to let me see your full interface settings. The <dhcpdv6>to</dhcpdv6> section would also be useful - this contains the DHCPv6 server and Router Advertisement settings.

      1 Reply Last reply Reply Quote 0
      • M
        maverick_slo
        last edited by

        I found the bug and it`s actually old one :) But upgraded :)

        This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

        GUI generates WRONG .conf file.

        I used this:

        interface pppoe0 {
         send ia-pd 0; # request prefix delegation
         request domain-name-servers;
         request domain-name;
         script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
        };
        id-assoc pd 0 {
        };
        

        And it`s working great now.

        Gui generated this (WHICH IS GREAT BUT SEE BELOW)

        interface pppoe0 {
         send ia-pd 0; # request prefix delegation
         request domain-name-servers;
         request domain-name;
         script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
        };
        id-assoc pd 0 {
        };
        

        After I click APPLY CHANGES on pppoe interface this OK conf dissapears and few seconds later newly generated config appears (below one).

        
        interface pppoe0 {
        	request domain-name-servers;
        	request domain-name;
        	script "/var/etc/dhcp6c_opt2_script.sh"; # we'd like some nameservers please
        };
        
        

        So GUI generates good config but apply button messes it up completley.
        Just a heads up guys!

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          Can you try this in 2.3 and see if it happens there?

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • M
            maverick_slo
            last edited by

            It happens only on 2.3

            1 Reply Last reply Reply Quote 0
            • D
              David_W
              last edited by

              @maverick_slo:

              I found the bug and it`s actually old one :) But upgraded :)

              This is it: https://forum.pfsense.org/index.php?topic=90699.msg501975#msg501975

              GUI generates WRONG .conf file.

              Good catch!

              It would be worth comparing the entries in the relevant part of the <interfaces>to</interfaces> block of your configuration between the broken and working scenarios.

              I'm unclear whether this was ever fixed in 2.2.x.

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • M
                  maverick_slo
                  last edited by

                  Already started it, Redmine later…

                  1 Reply Last reply Reply Quote 0
                  • D
                    David_W
                    last edited by

                    @jimp:

                    Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

                    As I noted in the 2.3 board earlier today, the issues discussed in this thread relate to both 2.2.5/2.2.6 and 2.3. I'm not the original poster, so I can't change the thread title.

                    @jimp:

                    Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

                    I'll leave that to maverick_slo - though there is already a post in the 2.3 board.

                    Hopefully fixing the bug maverick_slo has found will help in the process of validating my fixes for the two issues discussed in this thread, so that I can get on with submitting redmine bugs for those issues and pull requests for the fixes.

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      Doing redmine right now :)

                      EDIT:
                      https://redmine.pfsense.org/issues/5747

                      1 Reply Last reply Reply Quote 0
                      • I
                        Inq
                        last edited by

                        Hey guys, after testing the patch for 2 days on an 2.2.6 machine everything is rock solid.
                        I'm connecting through a pppoe connection dynamic ipv4 and dhcp6 with a /64 PD (Use IPv4 connectivity as parent interface - check, Request only an IPv6 prefix - unckeck, DHCPv6 Prefix Delegation size - 64, Send IPv6 prefix hint - check).

                        Here are some logs after rebooting or disconnecting pfsense with and without the patch applied:

                        • First reboot without patch:no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:
                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 17:31:24 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 17:31:24 router ppp: [wan]   0000:0000:524d:a09a -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::524d:a09a%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root    9403   0.0  0.1  17136  2644  -  S     5:40PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root    9868   0.0  0.1  18876  2392  -  S     5:40PM  0:00.01 grep -E -e (dhcp6c|rtsold)
                        root   25426   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   25642   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 17:31:27 router dhcp6c[25136]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:31:27 router dhcp6c[25368]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:31:27 router dhcp6c[25368]: failed initialize control message authentication
                        Jan  8 17:31:27 router dhcp6c[25136]: failed initialize control message authentication
                        Jan  8 17:31:27 router dhcp6c[25368]: skip opening control port
                        Jan  8 17:31:27 router dhcp6c[25136]: skip opening control port
                        Jan  8 17:31:27 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:31:43 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:32:01 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:32:36 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:33:44 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:35:40 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                        

                        2nd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows and pending WAN_PPPOE gateway (WAN_DHCP6 is online):

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 17:47:06 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 17:47:06 router ppp: [wan]   0000:0000:524c:8625 -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::524c:8625%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   12192   0.0  0.1  12556  2256  -  Is    5:47PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   90918   0.0  0.1  17136  2644  -  S     5:50PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   91441   0.0  0.1  18876  2392  -  S     5:50PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:41:26 router dhcp6c[25642]: XID mismatch
                        Jan  8 17:44:11 router dhcp6c[11975]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:44:11 router dhcp6c[11975]: failed initialize control message authentication
                        Jan  8 17:44:11 router dhcp6c[11975]: skip opening control port
                        Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:47:08 router dhcp6c[12168]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:47:08 router dhcp6c[12168]: failed initialize control message authentication
                        Jan  8 17:47:08 router dhcp6c[12168]: skip opening control port
                        Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                        

                        3rd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 17:56:18 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 17:56:18 router ppp: [wan]   0000:0000:bc19:6dd4 -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::bc19:6dd4%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   24060   0.0  0.1  12556  2252  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   24449   0.0  0.1  12556  2248  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   53777   0.0  0.1  17136  2644  -  S     6:00PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   54136   0.0  0.1  18876  2392  -  S     6:00PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 17:56:19 router dhcp6c[23836]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:56:19 router dhcp6c[23963]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 17:56:19 router dhcp6c[23963]: failed initialize control message authentication
                        Jan  8 17:56:19 router dhcp6c[23836]: failed initialize control message authentication
                        Jan  8 17:56:19 router dhcp6c[23963]: skip opening control port
                        Jan  8 17:56:19 router dhcp6c[23836]: skip opening control port
                        Jan  8 17:56:20 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:56:36 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:56:53 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:57:28 router dhcp6c[24449]: XID mismatch
                        Jan  8 17:58:37 router dhcp6c[24449]: XID mismatch
                        Jan  8 18:00:33 router dhcp6c[24449]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                        

                        Disconnect-Reconnect without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 18:03:23 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 18:03:23 router ppp: [wan]   0000:0000:bc19:6aee -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                        	inet6 fe80::bc19:6aee%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   24060   0.0  0.1  12556  2252  -  Is    5:56PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   38145   0.0  0.1  12556  2344  -  Is    6:03PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   55182   0.0  0.1  17136  2644  -  S     6:09PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   55670   0.0  0.1  18876  2392  -  S     6:09PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 18:02:38 router dhcp6c[24449]: XID mismatch
                        Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                        Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
                        Jan  8 18:03:02 router dhcp6c[24449]: transmit failed: Device not configured
                        Jan  8 18:03:03 router dhcp6c[24449]: transmit failed: Device not configured
                        Jan  8 18:03:16 router dhcp6c[24449]: no responses were received
                        Jan  8 18:03:18 router dhcp6c[24449]: no responses were received
                        Jan  8 18:03:18 router dhcp6c[24449]: exiting
                        Jan  8 18:03:26 router dhcp6c[38049]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:03:26 router dhcp6c[38049]: failed initialize control message authentication
                        Jan  8 18:03:26 router dhcp6c[38049]: skip opening control port
                        Jan  8 18:03:27 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:03:30 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:03:34 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:03:43 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:04:00 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:04:37 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
                        

                        First reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 18:16:13 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 18:16:13 router ppp: [wan]   0000:0000:bc19:8772 -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::bc19:8772%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root    9381   0.0  0.1  17136  2644  -  S     6:20PM 0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   10000   0.0  0.1  18876  2392  -  S     6:20PM 0:00.00 grep -E -e (dhcp6c|rtsold)
                        root   25667   0.0  0.1  12556  2248  -  Is    6:16PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                        Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                        Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                        

                        2nd reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 18:23:56 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 18:23:56 router ppp: [wan]   0000:0000:bc19:a7cf -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::bc19:a7cf%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   10981   0.0  0.1  12556  2260  -  Is    6:23PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   44528   0.0  0.1  17136  2644  -  S     6:27PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   44974   0.0  0.1  18876  2392  -  S     6:27PM 0:00.01 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                        Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                        Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                        Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                        Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                        

                        3rd reboot with patch applyed - 10/10 in http://test-ipv6.com/ (just becouse i rebooted the windows machine right after rebooting pfsense) :

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 18:30:12 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 18:30:12 router ppp: [wan]   0000:0000:524d:4e1d -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::524d:4e1d%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   23681   0.0  0.1  12556  2248  -  Is    6:30PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   57452   0.0  0.1  17136  2644  -  S     6:35PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   57889   0.0  0.1  18876  2392  -  S     6:35PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
                        Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
                        Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
                        Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
                        Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
                        Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:30:15 router dhcp6c[23499]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:30:15 router dhcp6c[23499]: failed initialize control message authentication
                        Jan  8 18:30:15 router dhcp6c[23499]: skip opening control port
                        Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                        

                        Disconnect-Reconnect with patch applyed - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

                        $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
                        Jan  8 18:38:19 router ppp: [wan] IPV6CP: LayerUp
                        Jan  8 18:38:19 router ppp: [wan]   0000:0000:567f:9f6b -> 0000:0000:0000:0001
                        --
                        $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
                        	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
                        	inet6 fe80::567f:9f6b%pppoe0 prefixlen 64 scopeid 0x7 
                        	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
                        $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
                        root   42814   0.0  0.1  12556  2344  -  Is    6:38PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
                        root   97484   0.0  0.1  17136  2644  -  S     6:40PM  0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
                        root   97770   0.0  0.1  18876  2392  -  S     6:40PM  0:00.00 grep -E -e (dhcp6c|rtsold)
                        --
                        $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
                        Jan  8 18:38:11 router dhcp6c[23681]: transmit failed: Device not configured
                        Jan  8 18:38:18 router dhcp6c[23681]: transmit failed: No route to host
                        Jan  8 18:38:19 router dhcp6c[23681]: transmit failed: No route to host
                        Jan  8 18:38:22 router dhcp6c[42511]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                        Jan  8 18:38:22 router dhcp6c[42511]: failed initialize control message authentication
                        Jan  8 18:38:22 router dhcp6c[42511]: skip opening control port
                        Jan  8 18:38:22 router dhcp6c[23681]: XID mismatch
                        Jan  8 18:38:23 router dhcp6c[23681]: XID mismatch
                        Jan  8 18:38:26 router dhcp6c[23681]: XID mismatch
                        Jan  8 18:38:30 router dhcp6c[23681]: XID mismatch
                        Jan  8 18:38:32 router dhcp6c[23681]: no responses were received
                        Jan  8 18:38:34 router dhcp6c[23681]: no responses were received
                        Jan  8 18:38:34 router dhcp6c[23681]: exiting
                        Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined
                        Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
                        

                        The enable/disable thing in windows is strange other machines (linux, android, mac, ios) have no problem acquiring the new ipv6 address after reboot/disconnect-reconnect.
                        WAN_PPPOE gateway in pending state must be apinger acting strange, it goes back online if i edit the gateway and save without changing anything.

                        The problem with making something idiot proof is that the world keeps making better idiots.

                        1 Reply Last reply Reply Quote 0
                        • M
                          maverick_slo
                          last edited by

                          @David_W:
                          We indeed have identical config as far as IPv6 goes.
                          BUT:

                          Without your patch my IPv6 works perfect.
                          With your patch my IPv6 works perfect.

                          I tried:
                          ISP modem power off and on.
                          Unplog PPPoE iface.
                          Disconnect/connect from iface status page.
                          Reboot.

                          In every scenario things worked 10/10 on test my IPv6 page.
                          Sometimes I had to wait for RA packet and then it worked (no need to disable win/android/linux NIC).

                          BR,
                          Greg

                          1 Reply Last reply Reply Quote 0
                          • D
                            David_W
                            last edited by

                            @maverick_slo:

                            Without your patch my IPv6 works perfect.
                            With your patch my IPv6 works perfect.

                            That means that my patch causes no regressions on your system, which is my largest concern over Issue 1. Any patch touching that functionality needs to make at least some previously broken systems work whilst not breaking previously working ones.

                            I expect your system will display Issue 2 without the patch, meaning your SLAAC IPv6 WAN address will have a random element on the first connection after boot. A predictable IPv6 WAN address is useful for uptime monitoring services that ping your WAN IPv6 address and/or if you use pfSense as an IPv6 VPN endpoint.

                            It's certainly helpful that your efforts have shaken out Redmine #5747.

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo
                              last edited by

                              Yeah but I`m lone rnger I guess.
                              Nobody can repro it :(

                              1 Reply Last reply Reply Quote 0
                              • C
                                cmb
                                last edited by

                                Since David hasn't been around in a bit and several of us have confirmed his 2.3 patch is good (both fixes broken scenarios, and doesn't harm anything), I went ahead and committed it. There already was a ticket for one of the issues here.
                                https://redmine.pfsense.org/issues/5621

                                1 Reply Last reply Reply Quote 0
                                • D
                                  David_W
                                  last edited by

                                  Thanks, Chris.

                                  I've been really ill with a respiratory virus on top of my neuromuscular condition, which means my energy has had to remain focused on staying alive and is why I disappeared from the forum. My cough reflex doesn't work and my cough is ineffective, so it's a case of trying not to drown.

                                  I'm not recovered yet and am still stuck in bed very breathless, but I'm much better than I was. It's now a case of hoping that my strength returns and I don't get a secondary infection of bacterial pneumonia. Bacterial pneumonia is never good news and, in my case, may well eventually take my life. I have been warned that another serious bout of pneumonia could require an ICU admission, which is something I'd rather avoid.

                                  The patch was in a feature branch on GitHub ready for a pull request, then my health failed before I submitted the pull request. The important thing is that it has been merged - thanks. I'll leave the feature branch up for a while just in case you want to revert the flat merge and pull from the branch to include the commit history.

                                  I've created a pull request for the RELENG_2_2 version of the patch. Whilst another 2.2 release seems unlikely, these fixes have been tested and were already in a GitHub feature branch. To my mind, it makes more sense to merge them than delete the feature branch.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    maverick_slo
                                    last edited by

                                    David, take care of yourself, health comes first!
                                    I (and all of community) really appreciate what you did here, and wish you good luck!

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      cmb
                                      last edited by

                                      Wow, very sorry to hear, David. Definitely take care of yourself! I was hoping it was just everyday life/day job that was consuming you for a bit, figured you'd be back. Wish that's all it was.

                                      I know pneumonia is no joke, I was in the hospital 5 days with it about a decade ago. It was no fun as a normally healthy 25 year old, can't imagine having other complications to deal with as well. I couldn't even sit up without supplemental oxygen. Even after that experience it still took me a decade past that to finally quit smoking, but been smoke-free for over 7 months now. Those of us who have our health tend to take it for granted.

                                      Take care, hope to see you around here for many years to come.

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        raymondjansen
                                        last edited by

                                        @David_W:

                                        2.2.6 (or, possibly, 2.2.5)

                                        Revert the RFC 4638 patch, if you have that installed.

                                        Revert any previous patch from this thread.

                                        Install the System Patches package (if you haven't done so already) and create a patch as follows. If you are updating from an older version of the patch, the URL has changed, so you need to use this new URL and blank the Patch Contents box.

                                        | Field | Contents |
                                        | Description | PPP IPv6 fixes |
                                        | URL/Commit ID | https://github.com/pfsense/pfsense/compare/RELENG_2_2…davidjwood:RELENG_2_2-ppp-ipv6-new.diff |
                                        | Patch Contents | (leave blank) |
                                        | Path Strip Count | 1 |
                                        | Base Directory | / |
                                        | Ignore Whitespace | (checked) |
                                        | Auto Apply | (unchecked) |

                                        Press the Save button, then, if necessary, press 'Fetch' next to the patch. At this point, the option to 'Apply' should appear, so press 'Apply'.

                                        Apply the RFC 4638 patch, if you are using that.

                                        Execute the sysctl command at the top of this section or reboot.

                                        Hi,

                                        If I follow the link for 2.2.6 I get nothing. The link for 2.3 is working fine. Does anybody have a correct link for 2.2.6 for me please?

                                        Thanks,
                                        Ray

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          hda
                                          last edited by

                                          2.2.6. "Patch Contents" for pasting.

                                          IPv6_pppoe_DWpatch4.txt

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            David_W
                                            last edited by

                                            @raymondjansen:

                                            If I follow the link for 2.2.6 I get nothing. The link for 2.3 is working fine. Does anybody have a correct link for 2.2.6 for me please?

                                            The URL for 2.2.6 displays nothing because the patch was merged to the RELENG_2_2 branch of pfsense/pfsense. Instead of the URL, try the commit ID ec0643f7f1537ab6a18ed05fc015ecba598fcffc

                                            The patch for 2.3 still displays but is obsolete, as the patch was merged (without commit history) into the master branch of pfsense/pfsense. It has been part of all 2.3 builds for over a month.

                                            The full instructions are therefore:

                                            | Field | Contents |
                                            | Description | PPP IPv6 fixes (incorporated in pfSense releases after 2.2.6) |
                                            | URL/Commit ID | ec0643f7f1537ab6a18ed05fc015ecba598fcffc |
                                            | Patch Contents | (leave blank) |
                                            | Path Strip Count | 1 |
                                            | Base Directory | / |
                                            | Ignore Whitespace | (checked) |
                                            | Auto Apply | (unchecked) |

                                            Press the Save button, then, if necessary, press 'Fetch' next to the patch. At this point, the option to 'Apply' should appear, so press 'Apply'.

                                            Reboot pfSense.

                                            N.B. I haven't tested this method of applying the patch - the other alternative is to use the version hda posted.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.