Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to find WAN (em0) DUID for ipv6

    Scheduled Pinned Locked Moved IPv6
    21 Posts 6 Posters 7.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ Offline
      JKnott
      last edited by

      I just verified /var/db/dhcp6c_duid contains the same DUID as shown in Wireshark.  Also, it was created in Dec, which, IIRC, was when I installed the version that allowed retaining the same prefix.  I used to have a DUID from last May, when I first started running pfSense.  One other thing I noticed is the byte order, in each 16 bits is reversed.  For example, where the file shows "d3f2", Wireshark displays "f2d3".  Also, that file contains 16 bytes, but one 14 are displayed in Wireshark, with the remaining 2 bytes in the length field, and in the same byte order

      So the OP can either copy that file or use the results of that command to get the DUID for the ISP.

      Still, it's strange the ISP requires that.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • D Offline
        DonZalmrol
        last edited by

        So this is what I'm talking about.
        My ISP does give you a IPv6 address, but that's a DHCP lease.

        If you want a permanent IPv6 address, you need to enter your routers (pfsense) WAN DUID address so they can grant you permanent fixed one.

        Untitled.png
        Untitled.png_thumb

        1 Reply Last reply Reply Quote 0
        • JKnottJ Offline
          JKnott
          last edited by

          Are they charging €28 for IPv6? (the €28 is all I understood of that quote)  My ISP provides a /56 prefix (256 x /64) for no extra cost over what I pay for a single IPv4 address.  In fact, when I changed to a plan that provided the modem needed for IPv6, my bill dropped by about $50/month (TV, Internet & home phone bundle). What size prefix are they providing for that?  Also, for 6 years, prior to my ISP offering native IPv6, I used a 6in4 tunnel, with a /56 prefix at absolutely no cost.  Another tunnel provider offers a /48 (65536 x /64) for free.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • B Offline
            bimmerdriver
            last edited by

            If you use pfsense 2.4 beta, the DUID is displayed in System / Advanced / Networking / IPv6 Options / DHCP6 DUID. It's a DUID-LLT format.

            1 Reply Last reply Reply Quote 1
            • NogBadTheBadN Offline
              NogBadTheBad
              last edited by

              @NogBadTheBad:

              It does make me wonder if my pfSense virtual machines that I've cloned then renamed are trying to use the same DUID.

              Had a play and cloned a VM today, changed the mac addresses and they both seem to use the same DUID.

              If you delete /var/db/dhcp6c_duid a new version with a different DUID is created after a reboot.

              Andy

              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

              1 Reply Last reply Reply Quote 0
              • I Offline
                Inq
                last edited by

                In Interfaces/WAN check "Start DHCP6 client in debug mode" and watch the DHCP tab in system logs at reconnect.

                The problem with making something idiot proof is that the world keeps making better idiots.

                1 Reply Last reply Reply Quote 0
                • D Offline
                  DonZalmrol
                  last edited by

                  Thank you all for the tips, I will check this out.
                  Upgrading to a beta is not something I wish to do as last (stable) upgrade made my pfsense unbootable…

                  I will wait for the latest version and watch for my DUID or try one of the other tests to see what I can gather.

                  About my provider. I have a fixed IP already as it's included in my business account.
                  The price you see is for a non-business user to get one.

                  What they do is basicly map a static to your device through address reservation ( MAC and/ or DUID).

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    DonZalmrol
                    last edited by

                    So I've upgraded to 2.3.4 and I do not see the IPv6 DUID listed under Advanced / Networking / IPv6.
                    Attached are screenshots of my version and IPv6 view.

                    1.PNG
                    1.PNG_thumb
                    2.PNG
                    2.PNG_thumb

                    1 Reply Last reply Reply Quote 0
                    • I Offline
                      Inq
                      last edited by

                      You have to upgrade to 2.4 beta to see the DUID in GUI. In 2.3.x you either have to decode the /var/db/dhcp6c_duid file, snif it or start the dhcp6 client in debug mode and watch the logs. IMO starting the dhcp6 client in debug mode seems the sensible solution.

                      The problem with making something idiot proof is that the world keeps making better idiots.

                      1 Reply Last reply Reply Quote 0
                      • ? This user is from outside of this forum
                        Guest
                        last edited by

                        @bimmerdriver:

                        If you use pfsense 2.4 beta, the DUID is displayed in System / Advanced / Networking / IPv6 Options / DHCP6 DUID. It's a DUID-LLT format.

                        As Bimmnerdriver says.

                        Use version 2.4B. The DUID is then stored in the config file and will never change. Earlier pfSense versions can lose the DUID, especially if you are using a RAM disk. Goto System / Advanced / Networking / IPv6 Options / DHCP6 DUID and click SAVE.

                        If you use an earlier version then the DUID is created by the dhcp6c client, and is created in /var/db, it goes by the name pf dhcp6c_duid. It's a binary file so you would need to read it in a hex editor.

                        However, as I have said, if you use and earlier version than 2.4B you run the risk of the DUID changing.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.