Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.4.4 IPv6 is strange

    Scheduled Pinned Locked Moved IPv6
    16 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      Looks like they are sending you a /62 prefix and not a /56.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        mrsunfire
        last edited by

        But why? After 3 reboots of pfSense I now got my IPv6 connectivity back with /56 on WAN. Also with /62 it should be possible to get an IPv6 on my LAN side from the same net.

        Netgate 6100 MAX

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          I may have been misreading that log as it does say earlier in the log that it has a /56. (Reverse order logs are evil)

          How exactly were you attempting to trigger an update of the addresses? When using tracked interfaces it works kind of weird. The dhcp6c client itself is what applies a tracked address to a tracking interface, but the dhcp6c client only runs on the interface being tracked.

          So if you touch LAN in a way that makes the IPv6 address go away, then you have to save/apply on WAN to kick dhcp6c into reapplying the addresses.

          That should happen on any reboot, though. It shouldn't have taken three, certainly. Maybe it wasn't given enough time.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • M
            mrsunfire
            last edited by

            I did apply WAN many times and LAN as well. Sometimes dhcp6c doesn't do anything to obtain an IPv6 adress. You can't see anything in the DHCP logs. After reboot it starts again but with the errors above. Reboot, reboot, reboot maybe then it works flawless without touching anything.

            I know it's strange, but it makes crazy.

            Netgate 6100 MAX

            1 Reply Last reply Reply Quote 0
            • M
              mrsunfire
              last edited by mrsunfire

              OK right now IPv6 magically stopped working again! The interfaces still have IPv6 addresses and clients as well, but I can't get any connectivity over IPv6 from clients!

              Here the logs while it happened:

              Oct 9 09:16:03	php-fpm	40667	/rc.newwanipv6: rc.newwanipv6: on (IP address: 2a02:xxx) (interface: wan) (real interface: igb0).
Oct 9 09:16:03	php-fpm	40667	/rc.newwanipv6: rc.newwanipv6: Info: starting on igb0.
Oct 9 09:16:03	php-fpm	52600	/rc.newwanip: Removing static route for monitor 2001:4860:4860::8888 and adding a new route through fe80::100:100:3e9b:f6aa%pppoe0
Oct 9 09:16:03	php-fpm	52600	/rc.newwanip: Removing static route for monitor 8.8.4.4 and adding a new route through 62.155.xxx
Oct 9 09:16:03	php-fpm	52600	/rc.newwanip: Removing static route for monitor fe80::201:5cff:fe6b:e046 and adding a new route through fe80::201:5cff:fe6b:e046%igb0
Oct 9 09:16:03	php-fpm	52600	/rc.newwanip: Removing static route for monitor 4.2.2.1 and adding a new route through 37.209.64.1
Oct 9 09:16:02	php-fpm	40667	/rc.newwanipv6: rc.newwanipv6: No IPv6 address found for interface WAN [wan].
Oct 9 09:16:02	php-fpm	40667	/rc.newwanipv6: rc.newwanipv6: Info: starting on igb0.
Oct 9 09:16:02	php-fpm	52600	/rc.newwanip: Keep current gateway, its already part of the group members.
Oct 9 09:16:02	rtsold		RTSOLD Lock in place - sending SIGHUP to dhcp6c
Oct 9 09:16:02	rtsold		Received RA specifying route fe80::201:5cff:fe6b:e046 for interface wan(igb0)
Oct 9 09:16:02	php-fpm	52600	/rc.newwanip: Keep current gateway, its already part of the group members.
Oct 9 09:16:02	php-fpm	52600	/rc.newwanip: Keep current gateway, its already part of the group members.
Oct 9 09:16:00	php-fpm	52600	/rc.newwanip: Starting rtsold process
Oct 9 09:16:00	php-fpm	52600	/rc.newwanip: Accept router advertisements on interface igb0
Oct 9 09:16:00	php-fpm	52600	/rc.newwanip: rc.newwanip: on (IP address: 37.209.xxx) (interface: WAN[wan]) (real interface: igb0).
Oct 9 09:16:00	php-fpm	52600	/rc.newwanip: rc.newwanip: Info: starting on igb0.
Oct 9 09:15:59	check_reload_status		rc.newwanip starting igb0
Oct 9 09:15:58	kernel		arpresolve: can't allocate llinfo for 37.209.64.1 on igb0
Oct 9 09:15:58	kernel		arpresolve: can't allocate llinfo for 37.209.64.1 on igb0
Oct 9 09:15:57	kernel		arpresolve: can't allocate llinfo for 37.209.64.1 on igb0
Oct 9 09:15:57	kernel		arpresolve: can't allocate llinfo for 37.209.64.1 on igb0

              Oct 9 09:16:03	dhcp6c	34431	executes /var/etc/dhcp6c_wan_script.sh
Oct 9 09:16:03	dhcp6c	34431	add an address 2a02:xxx/128 on igb0
Oct 9 09:16:03	dhcp6c	34431	create an address 2a02:xxx pltime=604800, vltime=12172054805695591680
Oct 9 09:16:03	dhcp6c	34431	make an IA: NA-0
Oct 9 09:16:03	dhcp6c	34431	add an address 2a02:xxx/64 on igb2
Oct 9 09:16:03	dhcp6c	34431	create a prefix 2a02:xxx::/56 pltime=604800, vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	make an IA: PD-0
Oct 9 09:16:03	dhcp6c	34431	nameserver[1] 2a02:908:2:b::1
Oct 9 09:16:03	dhcp6c	34431	nameserver[0] 2a02:908:2:a::1
Oct 9 09:16:03	dhcp6c	34431	dhcp6c Received REQUEST
Oct 9 09:16:03	dhcp6c	34431	preference: 255
Oct 9 09:16:03	dhcp6c	34431	get DHCP option preference, len 1
Oct 9 09:16:03	dhcp6c	34431	get DHCP option DNS, len 32
Oct 9 09:16:03	dhcp6c	34431	IA_PD prefix: 2a02:xxx::/56 pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD prefix, len 25
Oct 9 09:16:03	dhcp6c	34431	IA_PD: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD, len 41
Oct 9 09:16:03	dhcp6c	34431	IA_NA address: 2a02:xxx pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA address, len 24
Oct 9 09:16:03	dhcp6c	34431	IA_NA: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option identity association, len 40
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:15:b9:82:b6:00:18:51:df:80:41
Oct 9 09:16:03	dhcp6c	34431	get DHCP option server ID, len 14
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:23:3b:cb:f4:40:62:31:00:03:a5
Oct 9 09:16:03	dhcp6c	34431	get DHCP option client ID, len 14
Oct 9 09:16:03	dhcp6c	34431	receive reply from fe80::201:5cff:fe6b:e046%igb0 on igb0
Oct 9 09:16:03	dhcp6c	34431	reset a timer on igb0, state=REQUEST, timeo=0, retrans=937
Oct 9 09:16:03	dhcp6c	34431	send request to ff02::1:2%igb0
Oct 9 09:16:03	dhcp6c	34431	set IA_PD
Oct 9 09:16:03	dhcp6c	34431	set IA_PD prefix
Oct 9 09:16:03	dhcp6c	34431	set option request (len 4)
Oct 9 09:16:03	dhcp6c	34431	set elapsed time (len 2)
Oct 9 09:16:03	dhcp6c	34431	set identity association
Oct 9 09:16:03	dhcp6c	34431	set IA address
Oct 9 09:16:03	dhcp6c	34431	set server ID (len 14)
Oct 9 09:16:03	dhcp6c	34431	set client ID (len 14)
Oct 9 09:16:03	dhcp6c	34431	a new XID (b16eb7) is generated
Oct 9 09:16:03	dhcp6c	34431	Sending Request
Oct 9 09:16:03	dhcp6c	34431	server ID: 00:01:00:01:15:b9:82:b6:00:18:51:df:80:41, pref=255
Oct 9 09:16:03	dhcp6c	34431	get DHCP option DNS, len 32
Oct 9 09:16:03	dhcp6c	34431	preference: 255
Oct 9 09:16:03	dhcp6c	34431	get DHCP option preference, len 1
Oct 9 09:16:03	dhcp6c	34431	IA_PD prefix: 2a02:xxx::/56 pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD prefix, len 25
Oct 9 09:16:03	dhcp6c	34431	IA_PD: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD, len 41
Oct 9 09:16:03	dhcp6c	34431	IA_NA address: 2a02:xxx pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA address, len 24
Oct 9 09:16:03	dhcp6c	34431	IA_NA: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option identity association, len 40
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:15:b9:82:b6:00:18:51:df:80:41
Oct 9 09:16:03	dhcp6c	34431	get DHCP option server ID, len 14
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:23:3b:cb:f4:40:62:31:00:03:a5
Oct 9 09:16:03	dhcp6c	34431	get DHCP option client ID, len 14
Oct 9 09:16:03	dhcp6c	34431	receive advertise from fe80::201:5cff:fe6b:e046%igb0 on igb0
Oct 9 09:16:03	dhcp6c	34431	reset timer for igb0 to 0.780427
Oct 9 09:16:03	dhcp6c	34431	server ID: 00:01:00:01:1a:7b:db:22:00:18:51:3b:5e:e8, pref=0
Oct 9 09:16:03	dhcp6c	34431	get DHCP option DNS, len 32
Oct 9 09:16:03	dhcp6c	34431	preference: 0
Oct 9 09:16:03	dhcp6c	34431	get DHCP option preference, len 1
Oct 9 09:16:03	dhcp6c	34431	IA_PD prefix: 2a02:xxx::/56 pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD prefix, len 25
Oct 9 09:16:03	dhcp6c	34431	IA_PD: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA_PD, len 41
Oct 9 09:16:03	dhcp6c	34431	IA_NA address: 2a02:xxx pltime=604800 vltime=1209600
Oct 9 09:16:03	dhcp6c	34431	get DHCP option IA address, len 24
Oct 9 09:16:03	dhcp6c	34431	IA_NA: ID=0, T1=302400, T2=483840
Oct 9 09:16:03	dhcp6c	34431	get DHCP option identity association, len 40
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:1a:7b:db:22:00:18:51:3b:5e:e8
Oct 9 09:16:03	dhcp6c	34431	get DHCP option server ID, len 14
Oct 9 09:16:03	dhcp6c	34431	DUID: 00:01:00:01:23:3b:cb:f4:40:62:31:00:03:a5
Oct 9 09:16:03	dhcp6c	34431	get DHCP option client ID, len 14
Oct 9 09:16:03	dhcp6c	34431	receive advertise from fe80::201:5cff:fe6b:e046%igb0 on igb0
Oct 9 09:16:03	dhcp6c	34431	reset a timer on igb0, state=SOLICIT, timeo=0, retrans=1045
Oct 9 09:16:03	dhcp6c	34431	send solicit to ff02::1:2%igb0
Oct 9 09:16:03	dhcp6c	34431	set IA_PD
Oct 9 09:16:03	dhcp6c	34431	set option request (len 4)
Oct 9 09:16:03	dhcp6c	34431	set elapsed time (len 2)
Oct 9 09:16:03	dhcp6c	34431	set identity association
Oct 9 09:16:03	dhcp6c	34431	set client ID (len 14)
Oct 9 09:16:03	dhcp6c	34431	a new XID (268338) is generated
Oct 9 09:16:03	dhcp6c	34431	Sending Solicit
Oct 9 09:16:02	dhcp6c	34431	got an expected reply, sleeping.
Oct 9 09:16:02	dhcp6c	34431	removing an event on igb0, state=RELEASE
Oct 9 09:16:02	dhcp6c	34431	script "/var/etc/dhcp6c_wan_script.sh" terminated
Oct 9 09:16:02	dhcp6c		dhcp6c EXIT or RELEASE on igb0 running rc.newwanipv6
Oct 9 09:16:02	dhcp6c	34431	executes /var/etc/dhcp6c_wan_script.sh
Oct 9 09:16:02	dhcp6c	34431	status code: success
Oct 9 09:16:02	dhcp6c	34431	dhcp6c Received RELEASE
Oct 9 09:16:02	dhcp6c	34431	status code: success
Oct 9 09:16:02	dhcp6c	34431	get DHCP option status code, len 21
Oct 9 09:16:02	dhcp6c	34431	DUID: 00:01:00:01:15:b9:82:b6:00:18:51:df:80:41
Oct 9 09:16:02	dhcp6c	34431	get DHCP option server ID, len 14
Oct 9 09:16:02	dhcp6c	34431	DUID: 00:01:00:01:23:3b:cb:f4:40:62:31:00:03:a5
Oct 9 09:16:02	dhcp6c	34431	get DHCP option client ID, len 14
Oct 9 09:16:02	dhcp6c	34431	receive reply from fe80::201:5cff:fe6b:e046%igb0 on igb0
Oct 9 09:16:02	dhcp6c	34431	reset a timer on igb0, state=INIT, timeo=0, retrans=752
Oct 9 09:16:02	dhcp6c	34431	removing an event on igb0, state=INIT
Oct 9 09:16:02	dhcp6c	34431	removing an event on igb0, state=INIT
Oct 9 09:16:02	dhcp6c	34431	reset a timer on igb0, state=INIT, timeo=0, retrans=243
Oct 9 09:16:02	dhcp6c	34431	remove an address 2a02:xxx/64 on igb2
Oct 9 09:16:02	dhcp6c	34431	remove a site prefix 2a02:xxx::/56
Oct 9 09:16:02	dhcp6c	34431	remove an IA: PD-0
Oct 9 09:16:02	dhcp6c	34431	send release to ff02::1:2%igb0
Oct 9 09:16:02	dhcp6c	34431	set IA_PD
Oct 9 09:16:02	dhcp6c	34431	set IA_PD prefix
Oct 9 09:16:02	dhcp6c	34431	set elapsed time (len 2)
Oct 9 09:16:02	dhcp6c	34431	set server ID (len 14)
Oct 9 09:16:02	dhcp6c	34431	set client ID (len 14)
Oct 9 09:16:02	dhcp6c	34431	a new XID (221c9a) is generated
Oct 9 09:16:02	dhcp6c	34431	Sending Release
Oct 9 09:16:02	dhcp6c	34431	reset a timer on igb0, state=RELEASE, timeo=0, retrans=1071
Oct 9 09:16:02	dhcp6c	34431	release an IA: PD-0
Oct 9 09:16:02	dhcp6c	34431	Start address release
Oct 9 09:16:02	dhcp6c	34431	reset a timer on igb0, state=INIT, timeo=0, retrans=843
Oct 9 09:16:02	dhcp6c	34431	remove an address 2a02:xxx/128 on igb0
Oct 9 09:16:02	dhcp6c	34431	remove an address 2a02:xxx
Oct 9 09:16:02	dhcp6c	34431	remove an IA: NA-0
Oct 9 09:16:02	dhcp6c	34431	send release to ff02::1:2%igb0
Oct 9 09:16:02	dhcp6c	34431	set elapsed time (len 2)
Oct 9 09:16:02	dhcp6c	34431	set identity association
Oct 9 09:16:02	dhcp6c	34431	set IA address
Oct 9 09:16:02	dhcp6c	34431	set server ID (len 14)
Oct 9 09:16:02	dhcp6c	34431	set client ID (len 14)
Oct 9 09:16:02	dhcp6c	34431	a new XID (99ed1) is generated
Oct 9 09:16:02	dhcp6c	34431	Sending Release
Oct 9 09:16:02	dhcp6c	34431	reset a timer on igb0, state=RELEASE, timeo=0, retrans=928
Oct 9 09:16:02	dhcp6c	34431	release an IA: NA-0
Oct 9 09:16:02	dhcp6c	34431	Start address release
Oct 9 09:16:02	dhcp6c	34431	restarting
Oct 9 09:15:59	dhclient		Creating resolv.conf
Oct 9 09:15:59	dhclient		/sbin/route add default 37.209.64.1
Oct 9 09:15:59	dhclient		Adding new routes to interface: igb0
Oct 9 09:15:59	dhclient		New Routers (igb0): 37.209.64.1
Oct 9 09:15:59	dhclient		New Broadcast Address (igb0): 255.255.255.255
Oct 9 09:15:59	dhclient		New Subnet Mask (igb0): 255.255.252.0
Oct 9 09:15:59	dhclient		New IP Address (igb0): 37.209.xxx
Oct 9 09:15:59	dhclient		ifconfig igb0 inet 37.209.xxx netmask 255.255.252.0 broadcast 255.255.255.255
Oct 9 09:15:59	dhclient		Starting add_new_address()
Oct 9 09:15:59	dhclient		BOUND
Oct 9 09:15:59	dhclient		ARPCHECK
Oct 9 09:15:57	dhclient		ARPSEND
Oct 9 09:15:57	dhclient		PREINIT
Oct 9 09:15:57	dhclient		Deleting old routes
Oct 9 09:15:57	dhclient		EXPIRE

              Remember: igb0 is WAN, igb2 is LAN.

              After reboot I still have no IPv6 connectivity. Even LAN doesn't get an IPv6 assigned :(

              Netgate 6100 MAX

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @mrsunfire said in 2.4.4 IPv6 is strange:

                Oct 9 09:16:03 dhcp6c 34431 add an address 2a02:xxx/128 on igb0
                Oct 9 09:16:03 php-fpm 40667 /rc.newwanipv6: rc.newwanipv6: on (IP address: 2a02:xxx) (interface: wan) (real interface: igb0).

                It added an address to WAN

                Oct 9 09:16:03 dhcp6c 34431 add an address 2a02:xxx/64 on igb2

                And to LAN

                If IPv6 works from the firewall at that point, but not clients, it could be upstream routing somehow, like maybe the ISP didn't actually route the prefix to you.

                Have you tried doing traceroutes to see how far IPv6 traffic is getting?

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • M
                  mrsunfire
                  last edited by

                  I did a packetcapture and got "No prefix available on Link 'de-mhg01a-cr08". This is the router on my ISP. After doing nothing for an hour, the IPv6 came back and everything works.

                  I don't know why this happend the second day in follow, after it worked for months.

                  Netgate 6100 MAX

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    It's entirely possible that it's an ISP problem, and when it works maybe you luck into pulling a prefix that is actually properly configured upstream. When it doesn't, maybe it's from a block they have not properly configured a few hops away.

                    Maybe keep track of the prefixes that work and the ones that don't, see if there is a difference. Though for an issue this weird, good luck getting an ISP tech on the phone that knows what the heck you're talking about. I do not envy that conversation.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 1
                    • M
                      mrsunfire
                      last edited by

                      I don't know if I remember right, but now under Networking my DUID is set to DUID-LLT. Is that correct for dynamic Prefix via DHCPv6?

                      Netgate 6100 MAX

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        That's the pfSense default, yes. If your provider requires something different (which would be strange) they need to say so.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • M
                          mrsunfire
                          last edited by mrsunfire

                          Maybe my DUID changed because of some reasons. I was replicating the error right now by setting another DUID. After that no IPv6 appeard on LAN and I got the NoPrefixAvail error. Back to DUID-LLT and it works again after around 15 minutes trying to assign an IPv6.

                          How can I set the DUID for my WAN interface static?

                          That's my setup right now:

                          alt text

                          Netgate 6100 MAX

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            The way you have it is saved in the configuration and is "static."

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 2
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.