Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware)

    Scheduled Pinned Locked Moved IPv6
    29 Posts 2 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Katan @JKnott
      last edited by Katan

      @JKnott
      Unfortunatly, I only have a 24 port procurve switch that is on the lan side.

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @Katan
        last edited by

        @Katan

        Still, Packet Capture showed what was happening on the WAN side and it doesn't look right to me. I just glanced at the computer where I'm running Wireshark and still haven't seen anything happening in over an hour.

        Also, those 5 port managed switches are cheap. I keep mine in my computer bag, so that it will be handy when I need it. It's just part of my toolkit, along with my Ethernet cable tester and punch tools.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @JKnott
          last edited by

          @JKnott

          One other thing I've noticed. You're requesting and receiving a /64 prefix. Is that all your ISP provides? It shouldn't cause a problem though.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          K 1 Reply Last reply Reply Quote 0
          • K
            Katan @JKnott
            last edited by

            @JKnott said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

            @JKnott

            One other thing I've noticed. You're requesting and receiving a /64 prefix. Is that all your ISP provides? It shouldn't cause a problem though.

            They provide a /56, but for their router, and it delegates in turn /64 prefixes.
            Unfortunetly it does not have the option to run as bridge (at least with the user provided with the router).

            For IPv4 I have to live with a double NAT.

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @Katan
              last edited by

              @Katan

              ????

              How are you getting a prefix for your LAN? That's normally done with DHCPv6-PD, but that's generally not provided by gateways.

              However, that might explain the strange things in your packet capture. Your prefix is 2804:d57:4b04:6200::. Is your WAN address within that range?

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • K
                Katan
                last edited by Katan

                @JKnott
                just restarted the firewall.

                69fb86ad-a982-48ad-ade0-bcf0c113ace6-image.png

                the "OI" is my wan in this case

                1 Reply Last reply Reply Quote 0
                • K
                  Katan
                  last edited by

                  @JKnott

                  Changed some settings at the gateway and now got this
                  e05c498b-8a4b-4440-a0bb-7a0938e3e4cc-image.png

                  But still lost connectivity after the lease expires...
                  The same on the capture, no responde to RENEW, REBIND and SOLICIT after the interface is UP.

                  JKnottJ 1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @Katan
                    last edited by

                    @Katan said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

                    But still lost connectivity after the lease expires...

                    That's because something strange is happening when those renews start. I haven't seen those before but, then again, I haven't looked. I've been leaving my notebook running Wireshark all day and having seen anything since the original DHCP sequence when I rebooted my firewall this morning. I expect I'll see something happen in the middle of the night tomorrow. As I mentioned, Packet Capture times out long before that, so I have to use my "data tap" and notebook computer to watch for that. What's the lease time for IPv4 DHCP? One hour seems short.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @JKnott
                      last edited by

                      @JKnott

                      I just got something a little over a half hour ago. I see 2 renews and 2 replies, all within about 1/10 second, with both the renews and replies using my link local address.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • K
                        Katan
                        last edited by

                        @JKnott

                        I changed last night the gateway from OPT1 to WAN port (mvneta1 to mvneta2) and the dhcp client seem to be working on this port, dhcpv6 is using link-local address and is getting responses for SOLICIT and RENEW at least, without restarting the interface.

                        Looks like it´s something related to the OPT1 port.

                        now the computers no LAN side get a global IP of the provided prefix, but does not have connectivity.

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott @Katan
                          last edited by

                          @Katan

                          Next you have to look at filters and routing. IIRC, only the interface you originally configure as WAN works out of the box. Beyond that, you have to configure to allow the traffic to pass.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          1 Reply Last reply Reply Quote 0
                          • K
                            Katan
                            last edited by

                            @JKnott

                            Here is my gateway config
                            ca499aa8-ebf5-4fea-81b9-fb3bee08697f-image.png
                            and firewall rules
                            54975910-9d5a-45cc-88c9-fd91a8ee5835-image.png
                            a01a9c8c-6a91-46ca-98e3-f1d35c47a616-image.png

                            Am I missing something?

                            JKnottJ 1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @Katan
                              last edited by

                              @Katan

                              One thing that caught my eye is that fe80::1 gateway. Is that actually what you're supposed to use? My ISP uses a regular link local address.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              K 1 Reply Last reply Reply Quote 0
                              • K
                                Katan @JKnott
                                last edited by

                                @JKnott said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

                                @Katan

                                One thing that caught my eye is that fe80::1 gateway. Is that actually what you're supposed to use? My ISP uses a regular link local address.

                                That´s what came from DHCPv6, but I can change the HG8245Q2 link-local address.

                                If I run a Ping from PFSense interface to ipv6.google.com ir works, but not from LAN.

                                And thanks for your help so far.

                                JKnottJ 1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @Katan
                                  last edited by

                                  @Katan said in Loosing IPV6 connectivity after 1 hour with HG8245Q2 (OI Firmware):

                                  And thanks for your help so far.

                                  I don't know what you've done so far, but sometimes it's easier to start from scratch,rather than try to find the cause of a problem, particularly if you've been trying a lot of things.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.