Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [solved]IPv6 connectivity stops working on interface

    Scheduled Pinned Locked Moved IPv6
    15 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @Bob.Dig
      last edited by

      @Bob-Dig

      Well, it might help if you provided some info. For example, does the WAN connection still work? If yes, and the LAN fails, it could be a routing issue by the ISP. I ran into that problem last year. Do you see the router advertisements on your LAN? You can use Packet Capture to find out. Filter on ICMP6. You can download the packet captures and use Wireshark to examine them.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      Bob.DigB 1 Reply Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8 @JKnott
        last edited by Bob.Dig

        @JKnott Na, it is pfsense on that interface. Tested on two different machines on that interface. Probably another bug...

        Capture.PNG

        1 Reply Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8
          last edited by Bob.Dig

          I delegated that prefix back to LAN and there is no problem.
          Edit: broken again. Dynamic IPv6 seems broken.
          Edit2: Probably my vSwitch-Setup in hyper-v is not working as intended. So i guess, dynamic IPv6 is working most of the time.

          H 1 Reply Last reply Reply Quote 0
          • H
            HG @Bob.Dig
            last edited by

            @Bob-Dig Do you still have the issue? If yes, what does "netsh interface ipv6 show addresses" show on your Windows? Does it show multiple GUAs of the same type, especially multiple "Preferred" ones?

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @HG
              last edited by Bob.Dig

              @HG Checked again, issue seems gone.

              H 1 Reply Last reply Reply Quote 0
              • H
                HG @Bob.Dig
                last edited by HG

                @Bob-Dig OK. But I have just already seen your screenshot and I'm wondering why you don't have a Temporary Preferred, but many Temporary Deprecated, that's still a bit strange. I don't know what happens in this case.

                I usually have the problem, when my public prefix changes from the ISP, the clients get new addresses (Public and Temporary) via SLAAC, but the old ones still stay until their Preferred Life is over which usually breaks the IPv6 connectivity during this time, because the old address isn't routed any more but still used by programs.

                If it happens again, use traceroute with -S to explicitly select a source address that is within your current prefix in case you have multiple addresses.

                JKnottJ 1 Reply Last reply Reply Quote 1
                • W
                  winklevos
                  last edited by winklevos

                  I might be having issues similar, I have a framed /128 for WAN and /56 delegation from my ISP.

                  I have configured WAN interface for DHCP6 and LAN static to a /64 subnet. It seems to work fine everything reports up, however if I reboot the WAN interface will not get IPv6 address, LAN is fine as it is static, (not routing out though).

                  If I then edit the WAN interface but not change anything after applying IPv6 is back up? ifconfig <dev> down / up doesn't force it to work though.

                  Will start a new thread, think it is different

                  JKnottJ 1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @HG
                    last edited by

                    @HG said in IPv6 connectivity stops working on interface:

                    I usually have the problem, when my public prefix changes from the ISP

                    Do you have Do not allow PD/Address release selected?

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @winklevos
                      last edited by

                      @winklevos said in IPv6 connectivity stops working on interface:

                      I have a framed /128 for WAN

                      What do you mean by "framed? A /128 is entirely normal for the WAN interface.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      W 1 Reply Last reply Reply Quote 0
                      • W
                        winklevos @JKnott
                        last edited by

                        @JKnott Sorry just ISP wording on it "A static /128 framed IPv6 address will be assigned to your WAN session."

                        I started another thread, these are probably different https://forum.netgate.com/topic/153182/ipv6-not-working-on-boot-but-after-editing-wan-interface

                        1 Reply Last reply Reply Quote 0
                        • Bob.DigB
                          Bob.Dig LAYER 8
                          last edited by Bob.Dig

                          I didn't test it anymore because I changed my firewall rules.

                          Screenshot_2020-05-03 pfSense localdomain - Firewall Rules LAN.png

                          I just made an exception for ipv6-test.com and from now on, I will look closer, if the problem still persist.

                          Bob.DigB 1 Reply Last reply Reply Quote 0
                          • Bob.DigB
                            Bob.Dig LAYER 8 @Bob.Dig
                            last edited by Bob.Dig

                            @Bob-Dig Did some more testing and the problem was probably an interface problem with hyper-v, everything is good now.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.