IPv6 stops working after about 30 mins
-
@Wholelottapfsense said in IPv6 stops working after about 30 mins:
There is no modem upstream of the pfSense box. pfSense makes a direct connection via PPPoE/DHCPv6.
PfSense has to connect to something. PPPoE is usually carried over ADSL and there's no way pfSense can deal with that on it's own. There should be a box somewhere, that converts the ADSL line to Ethernet, which pfSense then connects to.
-
@JKnott said in IPv6 stops working after about 30 mins:
@Wholelottapfsense said in IPv6 stops working after about 30 mins:
There is no modem upstream of the pfSense box. pfSense makes a direct connection via PPPoE/DHCPv6.
PfSense has to connect to something. PPPoE is usually carried over ADSL and there's no way pfSense can deal with that on it's own. There should be a box somewhere, that converts the ADSL line to Ethernet, which pfSense then connects to.
I have a fiber connection (FTTH, fiber to the home). Between the pfSense box and the fiber connection, there's a TP-LINK MC220L converter which, AFAIK, only converts the fiber signal to ethernet.
-
@Wholelottapfsense Have you tried DHCP instead of PPPoE?
-
@Bob-Dig
No, but at least for IPv4, my ISP required a PPPoE connection (on VLAN 35) with username and password. I'll re-check with my ISP regarding DHCP. -
@Wholelottapfsense said in IPv6 stops working after about 30 mins:
I have a fiber connection (FTTH, fiber to the home). Between the pfSense box and the fiber connection, there's a TP-LINK MC220L converter which, AFAIK, only converts the fiber signal to ethernet.
There's a bit more to it than that, but that is what I was referring to. Can it be put in gateway mode? ISPs love to blame customer gear for their problems, so you have to do what you can to determine where the problem is. So, if there is a gateway mode and it fails as well, then it's an ISP problem. As I mentioned, you can also try a computer connected directly to your Internet connection. If that fails too, it's not a pfSense problem. A big part of resolving problems is determining what works or not.
BTW, last year I went through a similar problem with my own ISP. I have a cable modem and even though I was able to show tier 2 support the problem was within their network, the people responsible for resolving the issue refused to do anything, as I had my own router. It took a lot of effort to get them to budge, even though I had a Wireshark capture that actually named the failing system. It took a senior tech to prove it to them. He brought his own modem to my home and it failed too. He then took his modem to the head end and tried with 4 different CMTS there. It only failed on the one I was connected to. Only then did the network guys fix their problem. I also found I had to teach the tier 2 support and senior tech a bit about IPv6, as I knew more about it than they did.
-
@Wholelottapfsense said in IPv6 stops working after about 30 mins:
@Bob-Dig
No, but at least for IPv4, my ISP required a PPPoE connection (on VLAN 35) with username and password. I'll re-check with my ISP regarding DHCP.I suspect PPPoE is used to establish the initial PPP connection to your ISP. Once that's set up, the PPP connection is then used to carry IPv6. You then use DHCPv6-PD to set up your local prefixes, etc..
-
@JKnott said in IPv6 stops working after about 30 mins:
I suspect PPPoE is used to establish the initial PPP connection to your ISP. Once that's set up, the PPP connection is then used to carry IPv6. You then use DHCPv6-PD to set up your local prefixes, etc..
Indeed. When I uncheck 'Use IPv4 Connectivity as Parent Interface', I don't get IPv6 addresses on my interfaces.
-
@JKnott said in IPv6 stops working after about 30 mins:
Can it be put in gateway mode?
From what I read here it seems to be a simple media converter without a user interface to change settings.
You're absolutely right about ISPs not being motivated to help you at all if you don't use their equipment (Fritzbox 5490 in the case of my ISP), unless you're a corporate customer with an expensive support plan.
At the time with the IPv4 connection, it also took numerous calls until someone told me about the VLAN 35 setting. I guess I'm in for the same fun with IPv6 ... -
@Wholelottapfsense said in IPv6 stops working after about 30 mins:
From what I read here it seems to be a simple media converter without a user interface to change settings.
I'd be surprised if it was just a converter with nothing else. I have set up media converters at business customers, but those boxes did much more than convert. It was also a place where the circuit could be managed and tested. For example, they were capable of QonQ VLAN, so that not only could the customer use VLANs through it, the carrier could also use VLANs to separate traffic. They also like to have a place to test to. A dumb converter won't do that.
BTW, even company owned equipment can be a problem. I have a rental water heater. On Saturday I found water on the floor and traced it back to a pinhole leak in a pipe elbow. I called their service number, described the problem and where it was. When the tech came out the next day, all he knew was water leak. He hadn't been told it was on a pipe, etc. and so was completely unprepared to do the work. He then told me he had to order a special(?) part. Since when are pipe elbows "special"? They're about $2 at the local hardware store. If the tank didn't have to be drained for the repair, I could have done it myself. Hopefully the person who's coming today knows what he's supposed to do.
-
Have you tried to traceroute the IPv6 address of one of your devices on your internal network?
You should do this when IPv6 is working and when it doesn't work so you can see if there are any differences.If you don't have access to an external host you can use a website like this: https://www.ultratools.com/tools/traceRoute6
Don't forget to set the firewall rules respectively.You can also try to check the following boxes on the interface configuration page:
Only request an IPv6 prefix, do not request an IPv6 address
Send an IPv6 prefix hint to indicate the desired prefix size for delegation -
Just wanted to give an update on the issue.
I wrote to my ISP explaining the problem. I didn't get an answer, but the following day, my IPv6 connection got miraculously rock solid (since 5 days now), whereas I hadn't touched the system.
A big thanks to all the people on this forum who helped trying to find a solution