Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense gets addresses, clients don't!?

    Scheduled Pinned Locked Moved 2.5 Development Snapshots (Retired)
    39 Posts 7 Posters 5.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      motific @kiokoman
      last edited by

      @kiokoman - At this point anything is worth checking but as the packet capture was from my pfSense box I'd expect outbound blocked content not to show up (unless there's some 'gotcha' I don't know about).

      I've just done a capture from a client, that is seeing ICMPv6 messages btw.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Wow pretty impressive email, and they delegate a /48 nice!!

        You understand none of that actually means anything if your wanting to hand out dhcpv6 on your lan and that is not working.. Forget about the the delegation or any of that until figure out why when you set a static on your lan, and enable dhcpv6 your not sending back anything..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        M 1 Reply Last reply Reply Quote 1
        • M
          motific @johnpoz
          last edited by

          @johnpoz - I get that entirely. I was just about to point that out.

          Interestingly, stateless addresses aren't working either... feel free to correct me if I'm wrong here - as I understand it if the RA messages are getting out then in that mode the clients should be giving themselves addresses via Stateless/SLAAC, right?

          I'm going back to the packet captures and go through them in more detail. I'll let you know what I find.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            So here is the thing if there was something wrong with 2.5 and clients being to get ipv6 behind it... The boards would be just on fire with posts about it...

            We need to figure out what is unique to your setup that is the problem... Doesn't matter if you get a delegation from your isp or what is on our wan... If you setup an ipv6 on your lan, then that is what your clients should get be it auto, dhcpv6, whatever.. Your wan is out of the picture..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 1
            • M
              motific
              last edited by motific

              @johnpoz - That's a good point, there would be noise about it if it were purely a 2.5 issue. My IPv6 on LAN is set completely manually, so WAN is now completely irrelevant as you say.

              It looks like the problem runs deeper than I originally thought, looking back at the packet capture I'm seeing as well as not responding to DHCPv6 Solicit requests there is no ICMPv6 NDP traffic leaving on the LAN interface at all, it's all inbound.

              radvd appears to be running etc.

              I think at this point I'm going to wipe this box, reconfigure and see what happens rather than spend any more time trying to figure out what has happened to it. I'll get back to you all either way on how that goes.

              1 Reply Last reply Reply Quote 0
              • kiokomanK
                kiokoman LAYER 8
                last edited by kiokoman

                this is what i found, specific configuration for Zen uk and ipv6, i hope it can be useful for you.

                WAN
                IPv6 using DHCP, select DHCP6 in the IPv6 connection
                DHCPv6 Prefix Delegation size /48
                Use IPv4 connectivity as parent interface

                LAN
                Select Interfaces ‣ [LAN] and set the IPv6 Configuration Type to ‘Track Interface’
                set the Track IPv6 Interface to WAN,
                set the IPv6 Prefix ID to 0.

                Reboot the system

                DHCPv6 LAN server should be set automatically with subnet mask /64
                range from *:0000:0001 to *:ffff:ffff:ffff

                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                Please do not use chat/PM to ask for help
                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                M 1 Reply Last reply Reply Quote 0
                • GrimsonG
                  Grimson Banned
                  last edited by

                  Make sure this: https://docs.netgate.com/pfsense/en/latest/book/config/advanced-networking.html#allow-ipv6 is enabled.

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    motific @kiokoman
                    last edited by

                    @kiokoman - read what johnpoz wrote above.

                    1 Reply Last reply Reply Quote 0
                    • M
                      motific @Grimson
                      last edited by

                      @Grimson - very funny. 😆

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK
                        kiokoman LAYER 8
                        last edited by

                        @motific it was only so that, if you wipe your machine and start over, you have a summary of the step needed

                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                        Please do not use chat/PM to ask for help
                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                        M 1 Reply Last reply Reply Quote 1
                        • M
                          motific @kiokoman
                          last edited by

                          @kiokoman - thanks, looks like apart from doing the DHCP request via IP4 it was all preset and ready to go out of the box. :)

                          Having wiped the machine the problem seems to be sorted.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.