IPV6 through pppoe (xs4all)

hda

…In particular, the lack of a globally routable IPv6 address means that pfSense cannot use IPv6 for its ntp daemon or the DNS resolver...

I'm a bit confused now. But the LAN is global, no ? And what about my DNS Resolver and NTP working well for pfSense and all LAN's ? My understanding is that pfSense is doing no public on WAN unless ISP-gateway is static thus part your delegated prefix ? , in the past @cmb wrote something like this IIRC… Anyway :)

showit.PNG_thumb

HiddenWolf

All right. I am running a pfsense 2.3 with David_W's patch.
Settings unchanged from above.

WAN: igb0 (PPPOE,igb0_vlan6) gets my IP4 and fe80::2a0:98ff:fed8:d431%pppoe
LAN: vnet0 (static 10.0.0.4, track interface WAN) gets 2001:984::d431
default gateway IPv6: fe80::2a0:a50f:fc78:5530
Local machines configured for IPv6 are getting assigned proper IP's

I can ping and ping6 from pfsense, and any machine in the network.
The interface has been up for a few hours now.

It works, I'd just expected to see a 2001:bla-like IP on WAN.

EDIT:
The overactive PPP is back. Gateway monitoring on/off doesn't seem to make a difference.


an 7 01:46:05	ppp		[wan_link0] Link: reconnection attempt 26 in 4 seconds
Jan 7 01:46:05	ppp		[wan_link0] LCP: Down event
Jan 7 01:46:05	ppp		[wan_link0] Link: DOWN event
Jan 7 01:46:05	ppp		[wan_link0] PPPoE connection timeout after 9 seconds
Jan 7 01:45:56	ppp		[wan_link0] PPPoE: Connecting to ''
Jan 7 01:45:56	ppp		[wan_link0] Link: reconnection attempt 25
Jan 7 01:45:53	ppp		[wan_link0] Link: reconnection attempt 25 in 3 seconds
Jan 7 01:45:53	ppp		[wan_link0] LCP: Down event
Jan 7 01:45:53	ppp		[wan_link0] Link: DOWN event
Jan 7 01:45:53	ppp		[wan_link0] PPPoE connection timeout after 9 seconds
Jan 7 01:45:44	ppp		[wan_link0] PPPoE: Connecting to ''
Jan 7 01:45:44	ppp		[wan_link0] Link: reconnection attempt 24
Jan 7 01:45:40	ppp		[wan_link0] Link: reconnection attempt 24 in 4 seconds

HiddenWolf

@David_W:

In /etc/inc/interfaces.inc, locate the command line for dhcp6c in interface_dhcpv6_configure() - at the time of writing it's line 3949 if you have no patches installed. Change -d (lower case d) to -D (upper case D) and save the file.

A Disconnect and Connect using Status -> Interfaces should retrigger dhcp6c with more verbose debugging enabled. Does the DHCP log provide any useful clues now about the lack of a globally routable IPv6 WAN address?

The fact that your downstream machines have IPv6 connectivity implies DHCP-PD (also handled by dhcp6c) is working.


Jan 7 01:41:20	dhcpd		exiting.
Jan 7 01:41:20	dhcpd		the README file.
Jan 7 01:41:20	dhcpd		send them to the appropriate mailing list as described in
Jan 7 01:41:20	dhcpd		help directly to the authors of this software - please
Jan 7 01:41:20	dhcpd		Please do not under any circumstances send requests for
Jan 7 01:41:20	dhcpd		submitting bug reports and requests for help.
Jan 7 01:41:20	dhcpd		mailing list, please read the section on the README about
Jan 7 01:41:20	dhcpd		If you intend to request help from the dhcp-bugs at isc.org
Jan 7 01:41:20	dhcpd		yet read the README, please read it before requesting help.
Jan 7 01:41:20	dhcpd		If you did get this software from ftp.isc.org and have not
Jan 7 01:41:20	dhcpd		requesting help.
Jan 7 01:41:20	dhcpd		get the latest from ftp.isc.org and install that before
Jan 7 01:41:20	dhcpd		If you did not get this software from ftp.isc.org, please
Jan 7 01:41:20	dhcpd		There's already a DHCP server running.
Jan 7 01:41:20	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:20	dhcpd		All rights reserved.
Jan 7 01:41:20	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:20	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:20	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:20	dhcpd		All rights reserved.
Jan 7 01:41:20	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:20	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:20	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:20	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:20	dhcpd		Bound to *:547
Jan 7 01:41:20	dhcpd		Wrote 0 leases to leases file.
Jan 7 01:41:20	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:20	dhcpd		All rights reserved.
Jan 7 01:41:20	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:20	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:20	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:20	dhcpd		All rights reserved.
Jan 7 01:41:20	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:20	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:19	dhcpd		exiting.
Jan 7 01:41:19	dhcpd		the README file.
Jan 7 01:41:19	dhcpd		send them to the appropriate mailing list as described in
Jan 7 01:41:19	dhcpd		help directly to the authors of this software - please
Jan 7 01:41:19	dhcpd		Please do not under any circumstances send requests for
Jan 7 01:41:19	dhcpd		submitting bug reports and requests for help.
Jan 7 01:41:19	dhcpd		mailing list, please read the section on the README about
Jan 7 01:41:19	dhcpd		If you intend to request help from the dhcp-bugs at isc.org
Jan 7 01:41:19	dhcpd		yet read the README, please read it before requesting help.
Jan 7 01:41:19	dhcpd		If you did get this software from ftp.isc.org and have not
Jan 7 01:41:19	dhcpd		requesting help.
Jan 7 01:41:19	dhcpd		get the latest from ftp.isc.org and install that before
Jan 7 01:41:19	dhcpd		If you did not get this software from ftp.isc.org, please
Jan 7 01:41:19	dhcpd		There's already a DHCP server running.
Jan 7 01:41:19	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:19	dhcpd		All rights reserved.
Jan 7 01:41:19	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:19	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:19	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:19	dhcpd		All rights reserved.
Jan 7 01:41:19	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:19	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:19	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:19	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:19	dhcpd		Bound to *:547
Jan 7 01:41:19	dhcpd		Wrote 0 leases to leases file.
Jan 7 01:41:19	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:19	dhcpd		All rights reserved.
Jan 7 01:41:19	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:19	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:19	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:19	dhcpd		All rights reserved.
Jan 7 01:41:19	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:19	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:18	dhcpd		exiting.
Jan 7 01:41:18	dhcpd		the README file.
Jan 7 01:41:18	dhcpd		send them to the appropriate mailing list as described in
Jan 7 01:41:18	dhcpd		help directly to the authors of this software - please
Jan 7 01:41:18	dhcpd		Please do not under any circumstances send requests for
Jan 7 01:41:18	dhcpd		submitting bug reports and requests for help.
Jan 7 01:41:18	dhcpd		mailing list, please read the section on the README about
Jan 7 01:41:18	dhcpd		If you intend to request help from the dhcp-bugs at isc.org
Jan 7 01:41:18	dhcpd		yet read the README, please read it before requesting help.
Jan 7 01:41:18	dhcpd		If you did get this software from ftp.isc.org and have not
Jan 7 01:41:18	dhcpd		requesting help.
Jan 7 01:41:18	dhcpd		get the latest from ftp.isc.org and install that before
Jan 7 01:41:18	dhcpd		If you did not get this software from ftp.isc.org, please
Jan 7 01:41:18	dhcpd		includes a bootp server.
Jan 7 01:41:18	dhcpd		are not running HP JetAdmin software, which
Jan 7 01:41:18	dhcpd		bootp in /etc/inetd.conf. Also make sure you
Jan 7 01:41:18	dhcpd		running and that there's no entry for dhcp or
Jan 7 01:41:18	dhcpd		Please make sure there is no other dhcp server
Jan 7 01:41:18	dhcpd		Can't bind to dhcp address: Address already in use
Jan 7 01:41:18	dhcpd		Sending on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:18	dhcpd		Listening on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:18	dhcpd		Can't install new lease database /var/db/dhcpd.leases.1452127278 to /var/db/dhcpd.leases: No such file or directory
Jan 7 01:41:18	dhcpd		Sending on Socket/fallback/fallback-net
Jan 7 01:41:18	dhcpd		Sending on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:18	dhcpd		Listening on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:18	dhcpd		Wrote 7 leases to leases file.
Jan 7 01:41:18	dhcpd		Wrote 0 new dynamic host decls to leases file.
Jan 7 01:41:18	dhcpd		Wrote 0 deleted host decls to leases file.
Jan 7 01:41:18	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:18	dhcpd		All rights reserved.
Jan 7 01:41:18	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:18	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:18	dhcpd		Wrote 7 leases to leases file.
Jan 7 01:41:18	dhcpd		Wrote 0 new dynamic host decls to leases file.
Jan 7 01:41:18	dhcpd		Wrote 0 deleted host decls to leases file.
Jan 7 01:41:18	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:18	dhcpd		All rights reserved.
Jan 7 01:41:18	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:18	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:18	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:18	dhcpd		All rights reserved.
Jan 7 01:41:18	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:18	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:18	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:18	dhcpd		All rights reserved.
Jan 7 01:41:18	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:18	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:17	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:17	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:41:17	dhcpd		Bound to *:547
Jan 7 01:41:17	dhcpd		Wrote 0 leases to leases file.
Jan 7 01:41:17	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:17	dhcpd		All rights reserved.
Jan 7 01:41:17	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:17	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:17	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:17	dhcpd		All rights reserved.
Jan 7 01:41:17	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:17	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:16	dhcpd		Sending on Socket/fallback/fallback-net
Jan 7 01:41:16	dhcpd		Sending on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:16	dhcpd		Listening on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 01:41:16	dhcpd		Wrote 7 leases to leases file.
Jan 7 01:41:16	dhcpd		Wrote 0 new dynamic host decls to leases file.
Jan 7 01:41:16	dhcpd		Wrote 0 deleted host decls to leases file.
Jan 7 01:41:16	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:16	dhcpd		All rights reserved.
Jan 7 01:41:16	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:16	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:16	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 01:41:16	dhcpd		All rights reserved.
Jan 7 01:41:16	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 01:41:16	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 01:41:14	dhcp6c	66276	skip opening control port
Jan 7 01:41:14	dhcp6c	66276	failed initialize control message authentication
Jan 7 01:41:14	dhcp6c	66276	failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Jan 7 01:40:40	dhcp6c	16320	exiting
Jan 7 01:40:40	dhcp6c	16320	no responses were received
Jan 7 01:40:25	dhcp6c	16320	transmit failed: Device not configured
Jan 7 01:40:18	dhcp6c	16320	transmit failed: Device not configured
Jan 7 02:38:37	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 02:38:37	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 02:38:37	dhcpd		Bound to *:547
Jan 7 02:38:37	dhcpd		Wrote 0 leases to leases file.
Jan 7 02:38:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:37	dhcpd		All rights reserved.
Jan 7 02:38:37	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:37	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:37	dhcpd		All rights reserved.
Jan 7 02:38:37	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:37	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:37	dhcpd		Sending on Socket/fallback/fallback-net
Jan 7 02:38:37	dhcpd		Sending on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 02:38:37	dhcpd		Listening on BPF/vtnet0/00:a0:98:d8:d4:31/10.0.0.0/24
Jan 7 02:38:37	dhcpd		Wrote 7 leases to leases file.
Jan 7 02:38:37	dhcpd		Wrote 0 new dynamic host decls to leases file.
Jan 7 02:38:37	dhcpd		Wrote 0 deleted host decls to leases file.
Jan 7 02:38:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:37	dhcpd		All rights reserved.
Jan 7 02:38:37	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:37	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:37	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:37	dhcpd		All rights reserved.
Jan 7 02:38:37	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:37	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:35	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 02:38:35	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 02:38:35	dhcpd		Bound to *:547
Jan 7 02:38:35	dhcpd		Wrote 0 leases to leases file.
Jan 7 02:38:35	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:35	dhcpd		All rights reserved.
Jan 7 02:38:35	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:35	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:35	dhcpd		For info, please visit https://www.isc.org/software/dhcp/
Jan 7 02:38:35	dhcpd		All rights reserved.
Jan 7 02:38:35	dhcpd		Copyright 2004-2015 Internet Systems Consortium.
Jan 7 02:38:35	dhcpd		Internet Systems Consortium DHCP Server 4.2.8
Jan 7 02:38:32	dhcp6c	16237	skip opening control port
Jan 7 02:38:32	dhcp6c	16237	failed initialize control message authentication
Jan 7 02:38:32	dhcp6c	16237	failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Jan 7 01:11:32	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:11:32	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:11:32	dhcpd		Bound to *:547
Jan 7 01:11:32	dhcpd		Can't install new lease database /var/db/dhcpd6.leases.1452125492 to /var/db/dhcpd6.leases: No such file or directory
Jan 7 01:11:32	dhcpd		Sending on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:11:32	dhcpd		Listening on Socket/5/vtnet0/2001:984:3f19::/64
Jan 7 01:11:32	dhcpd		Bound to *:547

hda

@HiddenWolf:

I'm out of my depth, but things appear to work now:
I haven't changed any settings since that last reboot, so apparently your patch made things work.
I just don't know how. both the gateway and the WAN ipv6 are set to a fe80::2a0:: IP.

Your connection problems seem independent from the patch I think. IPv6 Link-Local & IPv6 Address should be the same fe80::. And the Gateway should be another fe80:: number further upstream to ISP.

But some questions are:
Why do you use MAC spoofing in Interfaces-WAN ? May we see the Status-Dashboard & Status-Interfaces again ?
You have weird logs about dhcpd. Do you have other non-pfSense DHCP6-server active ?
What is it with PPP ? Are you not on a clean straight PPPoE link with XS4ALL and maybe talking through/using a Fritzbox or other ??

HiddenWolf

The WAN interface of pfsense is directly plugged into the MTU.
The Fritzbox has given me nothing but trouble. It is currently in use as an access point only, and located behind LAN.
I have not set up mac spoofing. I do not have an dhcp6-server active anywhere else on the network.
I have no idea about the ppp. I thought i'd fixed it by turning gateway monitoring off, but then it started up again.

attached are screenshots of:
assign interfaces
wan
lan
interfaces status

![Screen Shot 2016-01-07 at 11.06.58.png](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.06.58.png)
![Screen Shot 2016-01-07 at 11.06.58.png_thumb](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.06.58.png_thumb)
![Screen Shot 2016-01-07 at 11.07.54.png](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.07.54.png)
![Screen Shot 2016-01-07 at 11.07.54.png_thumb](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.07.54.png_thumb)
![Screen Shot 2016-01-07 at 11.08.11.png](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.08.11.png)
![Screen Shot 2016-01-07 at 11.08.11.png_thumb](/public/imported_attachments/1/Screen Shot 2016-01-07 at 11.08.11.png_thumb)

Screen.png_thumb

hda

OK straight into the fiber Network Termination Unit vLAN 6 for INET.
Why is PPPoE on both igb0 and igb0_vlan6, isn't only the last enough ?
The F!B is made a dumb AP allright ? Did you test without it connected on your hardware ?

HiddenWolf

@hda:

OK straight into the fiber Network Termination Unit vLAN 6 for INET.
Why is PPPoE on both igb0 and igb0_vlan6, isn't only the last enough ?
The F!B is made a dumb AP allright ? Did you test without it connected on your hardware ?

User error. Removing igb0 from pppoe seems to have resolved the ppp log spam.
The FB is a dumb access point. 'internet connectivity' is disconnected, and router functionality is disabled. it is connected on LAN2, which puts it in dumb mode.

hda

@HiddenWolf:

…User error...

Well, we are curious to know if you rebooted the box and then that solved the PPP racing and
did you solve the problem for the weird dhcpd logging about the "prefix/64" and "is other server running" ? :)

HiddenWolf

I have not rebooted the box today.
The ppp race was resolved by removing igb0 from the pppoe connection, just vlan6 now.

DHCPd logging is still off.

haarweg

@hda:

That is not necessarily a problem, you do not need an public address on the WAN.

and what if I do want a public v6 address on my WAN interface? Can you give me a hint to make that happen? Because I want to do HTTP and OpenVPN to my pfSense box (with XS4ALL fiber).

hda

@haarweg:

and what if I do want a public v6 address on my WAN interface? Can you give me a hint to make that happen? Because I want to do HTTP and OpenVPN to my pfSense box (with XS4ALL fiber).

You have public IPv6 on any of your LAN's or box's as public. Because IPv6 is public exposure with just a (un)block away on the WAN-firewall IP:portnumber.