CARP IP not replying to NDP solicitations.
-
I have a ipv6 net assigned by my ISP, they gave me a /125 with 3 ip's to route the /48 to. Issue is pfsense is not replying to the NDP solicitations for the CARP IP. This seems very similar to the issue in this thread Routed ipv6 and Carp cluster But I have recreated the CARP VIP with no leading 0 shortening and no change. Pcaps show
17:44:42.489151 IP6 fe80:XXXX:0:8::75 > ff02::X:XXXX:71: ICMP6, neighbor solicitation, who has 2607:XXXX:0:8::71, length 32
and that box has that ip up and running as a CARP VIP in master and does not reply to the NDP solicitation.
lagg0.100: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
ether ac:1f:6b:cc:xx:xx
inet6 fe80::ae1f:XXXX:feac:3326%lagg0.100 prefixlen 64 scopeid 0xc
inet6 2607:XXXX:0:8::72 prefixlen 125
inet6 2607:XXXX:0:8::71 prefixlen 125 vhid 253
inet 66.xx.xx.66 netmask 0xfffffff8 broadcast 66.35.32.71
inet 66.xx.xx.65 netmask 0xfffffff8 broadcast 66.35.32.71 vhid 254
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
media: Ethernet autoselect
status: active
vlan: 100 vlanpcp: 0 parent interface: lagg0
carp: MASTER vhid 254 advbase 1 advskew 0
carp: MASTER vhid 253 advbase 1 advskew 0
groups: vlanI have spent a day on this and a few hours trying to find the redmine issue he mentions. Has anyone seen this?
-
Of course as soon as I post this I redid it with a new vhid and a FULLY expanded ipv6 address. No :: no :0: and no :3: was done, that fixed it and my routes came up with the upstream router.
I still would like to find that redmine issue so I can track the fix. If anyone knows the # I would appreciate it.
Thanks