Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 Wan rtsold premission denied

    Scheduled Pinned Locked Moved IPv6
    12 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      CoinTos
      last edited by

      WAN igb0:
      DHCP and DHCP6
      Defaults for both them expect i changed 64 to 56 on DHCP6
      Block private and Bogon is enabled

      LAN is a router on a stick setup.
      LAN proper is management due to Ubiquiti Unfi equipment.

      LAN igb1:
      |- VLAN11 - wired lan (has the xbox on it)
      |- VLAN31 - wireless
      |- VLAN41 - guest wireless
      Everything is defaults for Static IPv4 on each interface except IPv4 address. Haven't moved on to Track Interface yet since i couldn't even pull an IPv6 address for the WAN itself and found the permission error.

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott
        last edited by

        Take a capture of the configuration so that we can see exactly what you have.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • C
          CoinTos
          last edited by

          Sorry to sound like an idiot but by configuration do you mean screenshot of the interfaces etc or is there something that provide a summary of the configuration that would be more helpful?

          On a sidenote because I have been fiddling with it:
          If I turn 'Do not wait for RA' on, I no longer the rtsold error but an error from the DHCP log.
          Apr 14 16:48:46 dhcp6c 93655 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
          Apr 14 16:48:46 dhcp6c 93655 failed initialize control message authentication
          Apr 14 16:48:46 dhcp6c 93655 skip opening control port
          Apr 14 16:48:47 dhcp6c 93862 Sending Solicit
          Apr 14 16:48:47 dhcp6c 93862 transmit failed: Permission denied

          Thanks again for taking the time to look at this thread JKnott.

          1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott
            last edited by

            Just post a screen capture.  It's hard to know what your problem is, if we don't know your configuration.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • C
              CoinTos
              last edited by

              Ok, here's a screenshot of my dashboard.

              pfs-screenshot.jpg
              pfs-screenshot.jpg_thumb

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott
                last edited by

                What we need are the WAN and LAN interfaces.  That's where the configuration info is.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • C
                  CoinTos
                  last edited by

                  My apologies for the previous mix up on my part, I have attached the screenshots requested. Thanks.

                  pfs-assignment.png
                  pfs-assignment.png_thumb
                  pfs-lan.png
                  pfs-lan.png_thumb
                  pfs-vlan11.png
                  pfs-vlan11.png_thumb
                  pfs-vlan31.png
                  pfs-vlan31.png_thumb
                  pfs-vlan41.png
                  pfs-vlan41.png_thumb
                  pfs-wan.png
                  pfs-wan.png_thumb

                  1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott
                    last edited by

                    Well, for starters, you don't appear to have IPv6 enabled on the LAN side.
                    In IPv6 configuration type, select Track Interface.  After you do that, you'll see some more IPv6 stuff.
                    Under Track IPv6 Interface, for IPv6 Interface, select WAN and Prefix ID 0,  I see you've done that on VLAN11.  When you use more than 1 /64, you have to choose a different prefix ID.  With a /56 prefix, the range is 0-ff.

                    On the WAN page, under DHCP6 Client configuration, select:
                    Use IPv4 connectivity as parent interface - Request a IPv6 prefix/information through the IPv4 connectivity link, Send IPv6 prefix hint - Send an IPv6 prefix hint to indicate the desired prefix size for delegation
                    Do not wait for a RA - Required by some ISPs, especially those not using PPPoE
                    Do not allow PD/Address release - dhcp6c will send a release to the ISP on exit, some ISPs then release the allocated address or prefix. This option prevents that signal ever being sent

                    The above works with Rogers.  I assume it will also work with Cogeco.

                    BTW, I see you have 3 VLANs.  It's best to get the main LAN up first, to make sure everything is working, then add VLANs, following the LAN as an example, but choosing a different Prefix ID.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 1
                    • C
                      CoinTos
                      last edited by

                      So I selected the options on the WAN, set the vlan11 back to none and tried the Track Interface settings on my main LAN (technically my management lan for my unifi equipment since they don't allow a vlan for management). I rebooted and I no longer receive a rtsold error in the main log but in the dhcp log i receive the following:

                      Apr 14 23:12:01 dhcp6c 42309 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                      Apr 14 23:12:01 dhcp6c 42309 failed initialize control message authentication
                      Apr 14 23:12:01 dhcp6c 42309 skip opening control port
                      Apr 14 23:12:01 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:01 dhcp6c 42491 transmit failed: Permission denied
                      Apr 14 23:12:03 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:03 dhcp6c 42491 transmit failed: Permission denied
                      Apr 14 23:12:05 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:05 dhcp6c 42491 transmit failed: Permission denied
                      Apr 14 23:12:09 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:09 dhcp6c 42491 transmit failed: Permission denied
                      Apr 14 23:12:17 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:17 dhcp6c 42491 transmit failed: Permission denied
                      Apr 14 23:12:33 dhcp6c 42491 Sending Solicit
                      Apr 14 23:12:33 dhcp6c 42491 transmit failed: Permission denied

                      As per your guidance I don't plan to add the vlans and set different prefix til i figure out the main so they are all set to none for IPv6 Configuration Type.

                      Edit:

                      If I go into System –> Advance --> Networking and check All IPv6 traffic will be blocked by the firewall unless this box is checked. It works. So I am guessing something firewall related I screwed up on somewhere.

                      1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott
                        last edited by

                        So I am guessing something firewall related I screwed up on somewhere.

                        One thing I've often found is it's better to start from scratch, as something might have been set that shouldn't have been.  Also, as I mentioned, keep things simple at first, to get it going, then go from there.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.