Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 default route disappears

    Scheduled Pinned Locked Moved IPv6
    19 Posts 4 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      entrader
      last edited by entrader

      I've captured on the underlaying NIC which runs the WAN PPPoE connection.
      The pcap file is attached, I'm aware of the information exposed.

      Packet #59 carries a router advertisement with a lifetime of 1800s.
      It's the only RA I've seen.

      This seems to be related to my problem:
      Pinging a remote host via IPv6 fails after 30 minutes and the default route is gone.
      Route expired?

      And now the most confusing part:
      When opening the gateway settings and saving them, the default route for IPv6 is back.
      But the router hasn't sent any IPv6 packets.

      Help needed! :)

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        Yeah. Cox (American ISP) here also sends RAs with an 1800-second lifetime.

        They send an RA every 3 to 5 seconds.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • E
          entrader
          last edited by entrader

          Okay, my ISP seems to send RAs only in response to RSs...
          I've created a cron job as a workaround: "rtsol -DF pppoe" every minute.
          I'll check if this helps.
          Your two cents?

          Still two remaining questions:

          • Is there a way to trigger/cron RSs via GUI?
          • Why does the route reappear even it's expired?

          BTW: Thanks a lot for your support! :)

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by Derelict

            Your ISP is broken. They should fix their IPv6 deployment. Expecting a workaround for every way an ISP chooses break IPv6 is unreasonable.

            6.3.7.  Sending Router Solicitations
            
               When an interface becomes enabled, a host may be unwilling to wait
               for the next unsolicited Router Advertisement to locate default
               routers or learn prefixes.  To obtain Router Advertisements quickly,
               a host SHOULD transmit up to MAX_RTR_SOLICITATIONS Router
               Solicitation messages, each separated by at least
               RTR_SOLICITATION_INTERVAL seconds.  Router Solicitations may be sent
               after any of the following events:
            
                  - The interface is initialized at system startup time.
            
                  - The interface is reinitialized after a temporary interface
                    failure or after being temporarily disabled by system
                    management.
            
                  - The system changes from being a router to being a host, by
                    having its IP forwarding capability turned off by system
                    management.
            
                  - The host attaches to a link for the first time.
            
                  - The host re-attaches to a link after being detached for some
                    time.
            
            ***(are any of these conditions present based on the fact that the upstream simply stops sending Router Advertisements? No.)***
            
               A host sends Router Solicitations to the all-routers multicast
               address.  The IP source address is set to either one of the
               interface's unicast addresses or the unspecified address.  The Source
               Link-Layer Address option SHOULD be set to the host's link-layer
               address, if the IP source address is not the unspecified address.
            
               Before a host sends an initial solicitation, it SHOULD delay the
               transmission for a random amount of time between 0 and
               MAX_RTR_SOLICITATION_DELAY.  This serves to alleviate congestion when
               many hosts start up on a link at the same time, such as might happen
               after recovery from a power failure.  If a host has already performed
               a random delay since the interface became (re)enabled (e.g., as part
               of Duplicate Address Detection [ADDRCONF]), there is no need to delay
               again before sending the first Router Solicitation message.
            
               In some cases, the random delay MAY be omitted if necessary.  For
               instance, a mobile node, using [MIPv6], moving to a new link would
               need to discover such movement as soon as possible to minimize the
               amount of packet losses resulting from the change in its topological
               movement.  Router Solicitations provide a useful tool for movement
               detection in Mobile IPv6 as they allow mobile nodes to determine
               movement to new links.  Hence, if a mobile node received link-layer
               information indicating that movement might have taken place, it MAY
               send a Router Solicitation immediately, without random delays.  The
               strength of such indications should be assessed by the mobile node's
               implementation depending on the level of certainty of the link-layer
               hints, and it is outside the scope of this specification.  Note that
               using this mechanism inappropriately (e.g., based on weak or
               transient indications) may result in Router Solicitation storms.
               Furthermore, simultaneous mobility of a large number of mobile nodes
               that use this mechanism can result in a large number of solicitations
               sent simultaneously.
            
               Once the host sends a Router Solicitation, and receives a valid
               Router Advertisement with a non-zero Router Lifetime, the host MUST
               desist from sending additional solicitations on that interface, until
               the next time one of the above events occurs.  Moreover, a host
               SHOULD send at least one solicitation in the case where an
               advertisement is received prior to having sent a solicitation.
               Responses to solicited advertisements may contain more information
               than unsolicited advertisements.
            
               If a host sends MAX_RTR_SOLICITATIONS solicitations, and receives no
               Router Advertisements after having waited MAX_RTR_SOLICITATION_DELAY
               seconds after sending the last solicitation, the host concludes that
               there are no routers on the link for the purpose of [ADDRCONF].
               However, the host continues to receive and process Router
               Advertisements messages in the event that routers appear on the link.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            E 1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              I say again:

              Once the host sends a Router Solicitation, and receives a valid
              Router Advertisement with a non-zero Router Lifetime, the host MUST
              desist from sending additional solicitations on that interface, until
              the next time one of the above events occurs.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @Derelict
                last edited by

                @derelict said in IPv6 default route disappears:

                It might be a good idea to just capture all ICMPv6 and not limit it to ff02::1.

                I use the link local address for the WAN interface and ICMP6. That works well and catches both multicast and unicast packets.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • E
                  entrader @Derelict
                  last edited by

                  @derelict said in IPv6 default route disappears:

                  Your ISP is broken.

                  Yep, I've read the RFC and I think you're right.
                  I've opened a ticket and I hope they will fix it.

                  But my question remains: Why is the route reappearing after saving the settings page? :)
                  The router is not receiving a RA.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    I'll bet it is.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • E
                      entrader
                      last edited by

                      The ISP now sends RAs periodically, so this part is solved.

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        Does the route now stay? You actually got someone there to fix it?

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        E 1 Reply Last reply Reply Quote 0
                        • E
                          entrader @Derelict
                          last edited by

                          @derelict 2xYes!

                          1 Reply Last reply Reply Quote 0
                          • JeGrJ
                            JeGr LAYER 8 Moderator
                            last edited by

                            Almost unbelievable: an ISP that actually fixes its stuff? That indeed is noteworthy!

                            Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

                            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                            1 Reply Last reply Reply Quote 0
                            • E
                              entrader
                              last edited by

                              It's a small local (germany) ISP, offering FTTB for a reasonable price.
                              And you're right: You can talk directly with the technical staff, that's awesome! They're doing a great job!

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                I bookmarked this thread. Especially in light of the other "German ISPs are immovable objects" threads around here. Vote with your deutchemarks, people.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                JeGrJ 1 Reply Last reply Reply Quote 0
                                • JeGrJ
                                  JeGr LAYER 8 Moderator @Derelict
                                  last edited by JeGr

                                  @derelict said in IPv6 default route disappears:

                                  Vote with your deutchemarks, people.

                                  They are called Euros for years, ya' know? ๐Ÿ˜ธ

                                  Problem is, that those small little pearls are mostly local ISPs in specific regions or cities. Even if I'd wanted to go all out and "shut up and take my money", it won't get me far. In most non-crowded places you're happy if you can get DSL with PPPoE or Cable from the same few companies. There are only some like e.g. DG / Deutsche Glasfaser / "german fiber" that will get you FTTH or FTTB.
                                  So more often then not, voting with ones wallet isn't possible as no other/better service is available. ๐Ÿคท

                                  Don't forget to upvote ๐Ÿ‘ those who kindly offered their time and brainpower to help you!

                                  If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.