Loss of IPv6 connectivity from LAN to Internet v2.3.1



  • Hi everyone.  It seems that I'm having a similar problem to the one mentioned in this thread:  https://forum.pfsense.org/index.php?topic=102262.msg577069#msg577069

    My IPv6 connectivity from my LAN will occasionally stop working when trying to reach anything beyond the firewall to the internet.  Pinging the FW's LAN interface works fine however.  From within the FW, I can ping both external sites and all of my LAN via IPv6 without any issue.

    Is there any kind of troubleshooting or commands I can run that can help figure out why this is happening?  Rebooting the firewall always resolves the problem but it's a temporary fix and it can last either days or weeks until the same problem returns.

    Let me know if you need more details about my setup.

    LoboTiger



  • Could you try to sniff the Router Advertisements and look if they look ok? I happened to have some problems with OpenWrt of sending router lifetimes of 0, which signalize your end device to give up the default route. Without such route it won't work.

    Might be a shot, but could as well be something else. Take a look into Neighbor Discovery and router advertisement messages.



  • Did some packet captures and the ND packets seemed to look ok to me.  I don't think that it has to do with not knowing the default gateway as the PCs all know to go to the pfsense to get to their destinations based on the traceroutes to external sites all stopping at the FW.  This time the FW lasted 6 days and 17 hours before having to be rebooted to fix IPv6 connectivity.

    LoboTiger



  • So when your connectivity gets broken you need to reboot your machine in order to get it running again?

    Do you see any drops in the firewalls filter log.
    What kind of ICMPv6 messages does your firewall return to non working client computer?
    Can you provoke such behavior? That would be delightful for error searching  8)

    Maybe you can simultaneously sniff packets on the LAN interface in one screen and in the other one sniff the WAN iface in circumstance of error.



  • Yes, in order to restore IPv6 connectivity through the firewall I have to reload the pfsense machine.

    I see no IPv6 errors in the firewall logs and I did a capture from the LAN interface when trying to tracert -6 to www.google.com

    PS C:\Users\Lobo> tracert -6 www.google.com

    Tracing route to www.google.com [2607:f8b0:400b:807::2004]
    over a maximum of 30 hops:

    1    <1 ms    1 ms    <1 ms  lazerbeak.decepticon.com [2607:f2c0:f00f:bf00::1]
      2    *        *        *    Request timed out.
      3    *        *        *    Request timed out.
      4    *        *        *    Request timed out.
      5    *        *        *    Request timed out.
      6
    PS C:\Users\Lobo> ^C

    09:53:55.682376 IP6 fe80::201:2eff:fe5a:779d > ff02::1: ICMP6, router advertisement, length 136
    09:53:56.424245 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.50447 > 2607:f2c0:f00f:bf00::1.53: UDP, length 32
    09:53:56.432436 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.50447: UDP, length 60
    09:53:56.439901 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 146, length 72
    09:53:56.439988 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19: ICMP6, time exceeded in-transit for 2607:f8b0:400b:807::2004, length 120
    09:53:56.440953 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 147, length 72
    09:53:56.440984 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19: ICMP6, time exceeded in-transit for 2607:f8b0:400b:807::2004, length 120
    09:53:56.441402 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 148, length 72
    09:53:56.441432 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19: ICMP6, time exceeded in-transit for 2607:f8b0:400b:807::2004, length 120
    09:53:56.442103 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.49506 > 2607:f2c0:f00f:bf00::1.53: UDP, length 90
    09:53:56.442458 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.49506: UDP, length 128
    09:53:56.971144 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19: ICMP6, neighbor solicitation, who has 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19, length 32
    09:53:56.971996 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f2c0:f00f:bf00::1: ICMP6, neighbor advertisement, tgt is 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19, length 32
    09:53:57.445016 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 149, length 72
    09:54:00.966334 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 150, length 72
    09:54:03.864375 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.65496 > 2607:f2c0:f00f:bf00::1.53: UDP, length 34
    09:54:03.864742 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19.65496: UDP, length 34
    09:54:04.966885 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 151, length 72
    09:54:08.967130 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 152, length 72
    09:54:09.857351 IP6 fe80::201:2eff:fe5a:779d > ff02::1: ICMP6, router advertisement, length 136
    09:54:12.966151 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 153, length 72
    09:54:16.967112 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 154, length 72
    09:54:20.970929 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 155, length 72
    09:54:24.966825 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 156, length 72
    09:54:28.950381 IP6 fe80::201:2eff:fe5a:779d > ff02::1: ICMP6, router advertisement, length 136
    09:54:28.966258 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:807::2004: ICMP6, echo request, seq 157, length 72

    And here's from the WAN:

    09:58:31.786254 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45183, length 8
    09:58:31.793282 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45183, length 8
    09:58:32.287274 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45184, length 8
    09:58:32.294792 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45184, length 8
    09:58:32.789285 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45185, length 8
    09:58:32.796648 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45185, length 8
    09:58:33.291131 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45186, length 8
    09:58:33.298524 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45186, length 8
    09:58:33.792277 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45187, length 8
    09:58:33.799507 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45187, length 8
    09:58:34.294277 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45188, length 8
    09:58:34.301315 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45188, length 8
    09:58:34.796105 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45189, length 8
    09:58:34.803286 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45189, length 8
    09:58:35.297288 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45190, length 8
    09:58:35.304468 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45190, length 8
    09:58:35.799279 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45191, length 8
    09:58:35.807463 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45191, length 8
    09:58:36.301245 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45192, length 8
    09:58:36.308983 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45192, length 8
    09:58:36.584147 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6830 > 2001:4860:4860::8888.53: UDP, length 39
    09:58:36.584249 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6830 > 2001:4860:4860::8844.53: UDP, length 39
    09:58:36.584689 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.50908 > 2001:4860:4860::8888.53: UDP, length 39
    09:58:36.584752 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.50908 > 2001:4860:4860::8844.53: UDP, length 39
    09:58:36.614979 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6830: UDP, length 94
    09:58:36.615019 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6830: UDP, length 94
    09:58:36.615291 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.50908: UDP, length 143
    09:58:36.617041 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.50908: UDP, length 143
    09:58:36.669779 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.29144 > 2001:4860:4860::8888.53: UDP, length 35
    09:58:36.669818 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.29144 > 2001:4860:4860::8844.53: UDP, length 35
    09:58:36.670029 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10906 > 2001:4860:4860::8888.53: UDP, length 35
    09:58:36.670064 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10906 > 2001:4860:4860::8844.53: UDP, length 35
    09:58:36.695476 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2528 > 2001:4860:4860::8888.53: UDP, length 35
    09:58:36.695531 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2528 > 2001:4860:4860::8844.53: UDP, length 35
    09:58:36.712706 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10906: UDP, length 123
    09:58:36.715072 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.29144: UDP, length 74
    09:58:36.719453 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10906: UDP, length 123
    09:58:36.736506 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.29144: UDP, length 74
    09:58:36.778320 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2528: UDP, length 74
    09:58:36.802253 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45193, length 8
    09:58:36.815545 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45193, length 8
    09:58:36.908739 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2528: UDP, length 74
    09:58:37.040089 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6109 > 2001:4860:4860::8888.53: UDP, length 32
    09:58:37.040144 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6109 > 2001:4860:4860::8844.53: UDP, length 32
    09:58:37.073990 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6109: UDP, length 60
    09:58:37.077083 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.6109: UDP, length 60
    09:58:37.304091 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45194, length 8
    09:58:37.311468 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45194, length 8
    09:58:37.805245 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45195, length 8
    09:58:37.812350 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45195, length 8
    09:58:38.064068 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 174, length 72
    09:58:38.307116 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45196, length 8
    09:58:38.315723 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45196, length 8
    09:58:38.808276 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45197, length 8
    09:58:38.815579 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45197, length 8
    09:58:39.310274 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45198, length 8
    09:58:39.321579 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45198, length 8
    09:58:39.812255 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45199, length 8
    09:58:39.819588 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45199, length 8
    09:58:40.313273 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45200, length 8
    09:58:40.321143 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45200, length 8
    09:58:40.815293 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45201, length 8
    09:58:40.822390 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45201, length 8
    09:58:41.317278 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45202, length 8
    09:58:41.324905 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45202, length 8
    09:58:41.819101 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45203, length 8
    09:58:41.827372 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45203, length 8
    09:58:41.958281 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 175, length 72
    09:58:42.320277 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45204, length 8
    09:58:42.337454 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45204, length 8
    09:58:42.822275 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45205, length 8
    09:58:42.829903 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45205, length 8
    09:58:43.324290 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45206, length 8
    09:58:43.331714 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45206, length 8
    09:58:43.826276 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45207, length 8
    09:58:43.834140 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45207, length 8
    09:58:44.328277 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45208, length 8
    09:58:44.336156 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45208, length 8
    09:58:44.830278 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45209, length 8
    09:58:44.837414 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45209, length 8
    09:58:45.332276 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45210, length 8
    09:58:45.341315 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45210, length 8
    09:58:45.834289 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45211, length 8
    09:58:45.841825 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45211, length 8
    09:58:45.958249 IP6 2607:f2c0:f00f:bf00:847e:da57:e6da:8e19 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 176, length 72
    09:58:46.336277 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45212, length 8
    09:58:46.344429 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45212, length 8
    09:58:46.838276 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45213, length 8
    09:58:46.845442 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45213, length 8
    09:58:47.340250 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45214, length 8
    09:58:47.348115 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45214, length 8
    09:58:47.842276 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45215, length 8
    09:58:47.849605 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45215, length 8
    09:58:48.344103 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45216, length 8
    09:58:48.351352 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45216, length 8
    09:58:48.845281 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45217, length 8
    09:58:48.852861 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45217, length 8
    09:58:49.347101 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45218, length 8
    09:58:49.355733 IP6 fe80::2a0:a500:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 45218, length 8
    09:58:49.848280 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a500:7b:9152: ICMP6, echo request, seq 45219, length 8

    Things are broken at the moment which is odd considering that the FW only has an uptime of 2 days.  I don't think my IPv6 settings should make a difference but I can provide those if it will help.  BTW, this problem was also occurring with the older 2.2.x code but I think 2.2.4 was the last stable version that never had this problem.

    LoboTiger



  • Since you're getting "time exceeded in transit" it might tell us that either your routing table gets messed up or the TTL is set too low. I suspect the former, i.e. routing table.
    Could you please spot if there are any differences in the routing table of your firewall during the error and when everything works fine.



  • Sure, are there specific commands I should run from the CLI on pfsense that might help?

    LoboTiger



  • Well, ipv6 traffic stopped working through the fw again so I rebooted and now that it's working I did the same traceroutes to www.google.com just to see if there's anything you guys can see.

    PS C:\Users\Lobo> tracert -6 www.google.com

    Tracing route to www.google.com [2607:f8b0:400b:80b::2004]
    over a maximum of 30 hops:

    1    <1 ms    <1 ms    <1 ms  lazerbeak.decepticon.com [2607:f2c0:f00f:bf00::1]
      2    7 ms    7 ms    7 ms  node-4stuntjjinixfi60poh.ipv6.teksavvy.com [2607:f2c0:a000:1a1::1]
      3    8 ms    7 ms    9 ms  ae0-2140-bdr01-tor.teksavvy.com [2607:f2c0:1:2140::10]
      4    7 ms    7 ms    7 ms  2001:4860:1:1:0:160d:0:1
      5    7 ms    7 ms    7 ms  2001:4860::1:0:713a
      6    7 ms    7 ms    8 ms  2001:4860:0:1::71d
      7    8 ms    9 ms    9 ms  yyz08s14-in-x04.1e100.net [2607:f8b0:400b:80b::2004]

    Trace complete.
    PS C:\Users\Lobo>

    LAN interface:

    14:48:18.546562 IP6 2607:f8b0:400d:c01::84.443 > 2607:f2c0:f00f:bf00::2.50699: tcp 63
    14:48:18.546603 IP6 2607:f8b0:400d:c01::84.443 > 2607:f2c0:f00f:bf00::2.50699: tcp 0
    14:48:18.547030 IP6 2607:f2c0:f00f:bf00::2.50699 > 2607:f8b0:400d:c01::84.443: tcp 0
    14:48:18.547138 IP6 2607:f2c0:f00f:bf00::2.50699 > 2607:f8b0:400d:c01::84.443: tcp 0
    14:48:18.580409 IP6 2607:f8b0:400d:c01::84.443 > 2607:f2c0:f00f:bf00::2.50699: tcp 0
    14:48:18.853693 IP6 2607:f8b0:400d:c06::71.443 > 2607:f2c0:f00f:bf00::2.50695: tcp 63
    14:48:18.853730 IP6 2607:f8b0:400d:c06::71.443 > 2607:f2c0:f00f:bf00::2.50695: tcp 0
    14:48:18.853855 IP6 2607:f2c0:f00f:bf00::2.50695 > 2607:f8b0:400d:c06::71.443: tcp 0
    14:48:18.853962 IP6 2607:f2c0:f00f:bf00::2.50695 > 2607:f8b0:400d:c06::71.443: tcp 0
    14:48:18.886669 IP6 2607:f8b0:400d:c06::71.443 > 2607:f2c0:f00f:bf00::2.50695: tcp 0
    14:48:19.096875 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.16780 > 2607:f2c0:f00f:bf00::1.53: UDP, length 35
    14:48:19.135616 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:8c:9b39:dd8:b4ea: ICMP6, neighbor solicitation, who has 2607:f2c0:f00f:bf00:8c:9b39:dd8:b4ea, length 32
    14:48:19.139129 IP6 2607:f2c0:f00f:bf00:8c:9b39:dd8:b4ea > 2607:f2c0:f00f:bf00::1: ICMP6, neighbor advertisement, tgt is 2607:f2c0:f00f:bf00:8c:9b39:dd8:b4ea, length 24
    14:48:19.151781 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.16780: UDP, length 206
    14:48:20.971253 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00:b9:b780:6065:1a8b: ICMP6, neighbor solicitation, who has 2607:f2c0:f00f:bf00:b9:b780:6065:1a8b, length 32
    14:48:21.021008 IP6 2607:f2c0:f00f:bf00:b9:b780:6065:1a8b > 2607:f2c0:f00f:bf00::1: ICMP6, neighbor advertisement, tgt is 2607:f2c0:f00f:bf00:b9:b780:6065:1a8b, length 24
    14:48:21.325589 IP6 2607:f2c0:f00f:bf00::2.57962 > 2607:f2c0:f00f:bf00::1.53: UDP, length 32
    14:48:21.334025 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00::2.57962: UDP, length 60
    14:48:21.339937 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 38, length 72
    14:48:21.340057 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:21.340501 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 39, length 72
    14:48:21.340584 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:21.340992 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 40, length 72
    14:48:21.341022 IP6 2607:f2c0:f00f:bf00::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:21.341738 IP6 2607:f2c0:f00f:bf00::2.59421 > 2607:f2c0:f00f:bf00::1.53: UDP, length 90
    14:48:21.342104 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00::2.59421: UDP, length 128
    14:48:21.999851 IP6 2607:f2c0:f00f:bf00::2.50764 > 2607:f8b0:400d:c0c::65.443: tcp 1
    14:48:22.033897 IP6 2607:f8b0:400d:c0c::65.443 > 2607:f2c0:f00f:bf00::2.50764: tcp 0
    14:48:22.345566 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 41, length 72
    14:48:22.380871 IP6 2607:f2c0:a000:1a1::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:22.383065 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 42, length 72
    14:48:22.390212 IP6 2607:f2c0:a000:1a1::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:22.392000 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 43, length 72
    14:48:22.399212 IP6 2607:f2c0:a000:1a1::1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:23.402410 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 44, length 72
    14:48:23.409894 IP6 2607:f2c0:1:2140::10 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:23.411840 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 45, length 72
    14:48:23.419368 IP6 2607:f2c0:1:2140::10 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:23.421262 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 46, length 72
    14:48:23.428875 IP6 2607:f2c0:1:2140::10 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:24.145221 IP6 fe80::6ead:f8ff:fe9b:fb46 > 2607:f2c0:f00f:bf00::1: ICMP6, neighbor solicitation, who has 2607:f2c0:f00f:bf00::1, length 32
    14:48:24.145330 IP6 fe80::201:2eff:fe5a:779d > fe80::6ead:f8ff:fe9b:fb46: ICMP6, neighbor advertisement, tgt is 2607:f2c0:f00f:bf00::1, length 24
    14:48:24.430589 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 47, length 72
    14:48:24.437895 IP6 2001:4860:1:1:0:160d:0:1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:24.439734 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 48, length 72
    14:48:24.447408 IP6 2001:4860:1:1:0:160d:0:1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:24.449211 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 49, length 72
    14:48:24.456897 IP6 2001:4860:1:1:0:160d:0:1 > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:24.459511 IP6 2607:f2c0:f00f:bf00::2.54441 > 2607:f2c0:f00f:bf00::1.53: UDP, length 90
    14:48:24.521546 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00::2.54441: UDP, length 90
    14:48:25.550146 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 50, length 72
    14:48:25.557624 IP6 2001:4860::1:0:713a > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:25.559574 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 51, length 72
    14:48:25.569905 IP6 2001:4860::1:0:713a > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:25.571734 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 52, length 72
    14:48:25.579284 IP6 2001:4860::1:0:713a > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:25.581818 IP6 2607:f2c0:f00f:bf00::2.64119 > 2607:f2c0:f00f:bf00::1.53: UDP, length 90
    14:48:25.644568 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00::2.64119: UDP, length 90
    14:48:25.980062 IP6 2607:f8b0:400d:c06::8a.443 > 2607:f2c0:f00f:bf00::2.50694: tcp 63
    14:48:25.980099 IP6 2607:f8b0:400d:c06::8a.443 > 2607:f2c0:f00f:bf00::2.50694: tcp 0
    14:48:25.980492 IP6 2607:f2c0:f00f:bf00::2.50694 > 2607:f8b0:400d:c06::8a.443: tcp 0
    14:48:25.980598 IP6 2607:f2c0:f00f:bf00::2.50694 > 2607:f8b0:400d:c06::8a.443: tcp 0
    14:48:26.014190 IP6 2607:f8b0:400d:c06::8a.443 > 2607:f2c0:f00f:bf00::2.50694: tcp 0
    14:48:26.672445 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 53, length 72
    14:48:26.680224 IP6 2001:4860:0:1::71d > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:26.682245 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 54, length 72
    14:48:26.689659 IP6 2001:4860:0:1::71d > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:26.691654 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 55, length 72
    14:48:26.699206 IP6 2001:4860:0:1::71d > 2607:f2c0:f00f:bf00::2: ICMP6, time exceeded in-transit for 2607:f8b0:400b:80b::2004, length 120
    14:48:26.701962 IP6 2607:f2c0:f00f:bf00::2.52391 > 2607:f2c0:f00f:bf00::1.53: UDP, length 90
    14:48:26.763681 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00::2.52391: UDP, length 90
    14:48:27.095308 IP6 2607:f8b0:4006:80f::2002.80 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42485: tcp 0
    14:48:27.144765 IP6 fe80::201:2eff:fe5a:779d > ff02::1: ICMP6, router advertisement, length 136
    14:48:27.208039 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42485 > 2607:f8b0:4006:80f::2002.80: tcp 0
    14:48:27.639591 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 1228
    14:48:27.639670 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 1228
    14:48:27.639688 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 1228
    14:48:27.639704 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 1228
    14:48:27.639718 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 1228
    14:48:27.639733 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 289
    14:48:27.676491 IP6 2607:f8b0:400d:c00::5f.443 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856: tcp 0
    14:48:27.678295 IP6 2607:f8b0:400d:c00::5f.443 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856: tcp 0
    14:48:27.679497 IP6 2607:f8b0:400d:c00::5f.443 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856: tcp 0
    14:48:27.701660 IP6 2607:f8b0:400d:c00::5f.443 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856: tcp 533
    14:48:27.701698 IP6 2607:f8b0:400d:c00::5f.443 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856: tcp 224
    14:48:27.719923 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.42856 > 2607:f8b0:400d:c00::5f.443: tcp 0
    14:48:27.789584 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 56, length 72
    14:48:27.798077 IP6 2607:f8b0:400b:80b::2004 > 2607:f2c0:f00f:bf00::2: ICMP6, echo reply, seq 56, length 72
    14:48:27.800023 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 57, length 72
    14:48:27.807222 IP6 2607:f8b0:400b:80b::2004 > 2607:f2c0:f00f:bf00::2: ICMP6, echo reply, seq 57, length 72
    14:48:27.808940 IP6 2607:f2c0:f00f:bf00::2 > 2607:f8b0:400b:80b::2004: ICMP6, echo request, seq 58, length 72
    14:48:27.816076 IP6 2607:f8b0:400b:80b::2004 > 2607:f2c0:f00f:bf00::2: ICMP6, echo reply, seq 58, length 72
    14:48:28.409584 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.3247 > 2607:f2c0:f00f:bf00::1.53: UDP, length 33
    14:48:28.446277 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.3247: UDP, length 123
    14:48:28.450141 IP6 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.3101 > 2607:f2c0:f00f:bf00::1.53: UDP, length 33
    14:48:28.487125 IP6 2607:f2c0:f00f:bf00::1.53 > 2607:f2c0:f00f:bf00:211f:2e28:9e6a:47bf.3101: UDP, length 111
    14:48:28.851463 IP6 2607:f2c0:f00f:bf00:244f:a52f:e363:fffc.50703 > 2607:f8b0:400d:c0c::8b.443: tcp 1
    14:48:28.885570 IP6 2607:f8b0:400d:c0c::8b.443 > 2607:f2c0:f00f:bf00:244f:a52f:e363:fffc.50703: tcp 0
    14:48:29.144619 IP6 fe80::201:2eff:fe5a:779d > fe80::6ead:f8ff:fe9b:fb46: ICMP6, neighbor solicitation, who has fe80::6ead:f8ff:fe9b:fb46, length 32
    14:48:29.148470 IP6 fe80::6ead:f8ff:fe9b:fb46 > fe80::201:2eff:fe5a:779d: ICMP6, neighbor advertisement, tgt is fe80::6ead:f8ff:fe9b:fb46, length 24

    WAN interface:

    14:49:31.525445 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6432, length 8
    14:49:31.532933 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6432, length 8
    14:49:31.582256 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.26540 > 2001:4860:4860::8888.53: UDP, length 45
    14:49:31.582311 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.26540 > 2001:4860:4860::8844.53: UDP, length 45
    14:49:31.617820 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.26540: UDP, length 61
    14:49:31.617941 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.26540: UDP, length 61
    14:49:31.685279 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.24897 > 2001:4860:4860::8888.53: UDP, length 39
    14:49:31.685334 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.24897 > 2001:4860:4860::8844.53: UDP, length 39
    14:49:31.691078 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.62982 > 2001:4860:4860::8888.53: UDP, length 39
    14:49:31.691116 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.62982 > 2001:4860:4860::8844.53: UDP, length 39
    14:49:31.711651 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10035 > 2001:4860:4860::8888.53: UDP, length 40
    14:49:31.711700 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10035 > 2001:4860:4860::8844.53: UDP, length 40
    14:49:31.756745 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.62982: UDP, length 177
    14:49:31.758960 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.24897: UDP, length 220
    14:49:31.759444 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.24897: UDP, length 220
    14:49:31.759472 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10035: UDP, length 56
    14:49:31.778593 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.62982: UDP, length 177
    14:49:31.793425 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.10035: UDP, length 56
    14:49:32.026618 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6433, length 8
    14:49:32.033597 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6433, length 8
    14:49:32.075400 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2277 > 2001:4860:4860::8888.53: UDP, length 39
    14:49:32.075432 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2277 > 2001:4860:4860::8844.53: UDP, length 39
    14:49:32.075628 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25371 > 2001:4860:4860::8888.53: UDP, length 39
    14:49:32.075655 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25371 > 2001:4860:4860::8844.53: UDP, length 39
    14:49:32.128953 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2277: UDP, length 220
    14:49:32.131694 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25371: UDP, length 177
    14:49:32.133177 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.2277: UDP, length 220
    14:49:32.180840 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25371: UDP, length 177
    14:49:32.382271 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.51467 > 2001:4860:4860::8888.53: UDP, length 40
    14:49:32.382324 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.51467 > 2001:4860:4860::8844.53: UDP, length 40
    14:49:32.382544 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.40725 > 2001:4860:4860::8888.53: UDP, length 40
    14:49:32.382581 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.40725 > 2001:4860:4860::8844.53: UDP, length 40
    14:49:32.428202 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.51467: UDP, length 150
    14:49:32.428669 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.40725: UDP, length 199
    14:49:32.436695 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.40725: UDP, length 199
    14:49:32.450594 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.51467: UDP, length 150
    14:49:32.528622 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6434, length 8
    14:49:32.542098 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6434, length 8
    14:49:32.587001 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25428 > 2001:4860:4860::8888.53: UDP, length 45
    14:49:32.587056 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25428 > 2001:4860:4860::8844.53: UDP, length 45
    14:49:32.622932 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25428: UDP, length 95
    14:49:32.623427 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.25428: UDP, length 95
    14:49:33.030591 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6435, length 8
    14:49:33.038233 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6435, length 8
    14:49:33.531600 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6436, length 8
    14:49:33.538969 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6436, length 8
    14:49:34.032634 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6437, length 8
    14:49:34.039970 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6437, length 8
    14:49:34.534590 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6438, length 8
    14:49:34.543598 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6438, length 8
    14:49:35.036465 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6439, length 8
    14:49:35.044880 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6439, length 8
    14:49:35.073880 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49209 > 2a03:2880:f011:3:face:b00c:0:1.443: tcp 31
    14:49:35.097271 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49209 > 2a03:2880:f011:3:face:b00c:0:1.443: tcp 31
    14:49:35.112594 IP6 2a03:2880:f011:3:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49209: tcp 0
    14:49:35.135598 IP6 2a03:2880:f011:3:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49209: tcp 0
    14:49:35.178929 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283 > 2a03:2880:f011:1:face:b00c:0:1.443: tcp 46
    14:49:35.191613 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283 > 2a03:2880:f011:1:face:b00c:0:1.443: tcp 31
    14:49:35.214059 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283 > 2a03:2880:f011:1:face:b00c:0:1.443: tcp 0
    14:49:35.215995 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.36421 > 2001:4860:4860::8888.53: UDP, length 33
    14:49:35.216051 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.36421 > 2001:4860:4860::8844.53: UDP, length 33
    14:49:35.216277 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.39367 > 2001:4860:4860::8888.53: UDP, length 33
    14:49:35.216314 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.39367 > 2001:4860:4860::8844.53: UDP, length 33
    14:49:35.217724 IP6 2a03:2880:f011:1:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283: tcp 0
    14:49:35.230406 IP6 2a03:2880:f011:1:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283: tcp 0
    14:49:35.241971 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.43454 > 2001:4860:4860::8888.53: UDP, length 33
    14:49:35.242025 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.43454 > 2001:4860:4860::8844.53: UDP, length 33
    14:49:35.242241 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.20702 > 2001:4860:4860::8888.53: UDP, length 33
    14:49:35.242282 IP6 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.20702 > 2001:4860:4860::8844.53: UDP, length 33
    14:49:35.246254 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288 > 2a03:2880:f011:8:face:b00c:0:1.443: tcp 46
    14:49:35.246300 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288 > 2a03:2880:f011:8:face:b00c:0:1.443: tcp 31
    14:49:35.250472 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288 > 2a03:2880:f011:8:face:b00c:0:1.443: tcp 0
    14:49:35.252470 IP6 2a03:2880:f011:1:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49283: tcp 0
    14:49:35.254224 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.36421: UDP, length 76
    14:49:35.254714 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.39367: UDP, length 88
    14:49:35.256002 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 1240
    14:49:35.256025 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 75
    14:49:35.256041 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 46
    14:49:35.256966 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.39367: UDP, length 88
    14:49:35.257485 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.36421: UDP, length 76
    14:49:35.277750 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.43454: UDP, length 88
    14:49:35.277802 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 0
    14:49:35.278469 IP6 2001:4860:4860::8888.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.20702: UDP, length 76
    14:49:35.278720 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.20702: UDP, length 76
    14:49:35.278733 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 46
    14:49:35.280471 IP6 2001:4860:4860::8844.53 > 2607:f2c0:a000:1a1:201:2eff:fe5a:779d.43454: UDP, length 88
    14:49:35.284462 IP6 2a03:2880:f011:8:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288: tcp 0
    14:49:35.284705 IP6 2a03:2880:f011:8:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288: tcp 0
    14:49:35.288875 IP6 2a03:2880:f011:8:face:b00c:0:1.443 > 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49288: tcp 0
    14:49:35.330345 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 0
    14:49:35.366209 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 137
    14:49:35.366550 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 1194
    14:49:35.366707 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 46
    14:49:35.366826 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 0
    14:49:35.369276 IP6 2607:f2c0:f00f:bf00::2.50774 > 2607:f8b0:4006:808::2005.443: tcp 46
    14:49:35.429890 IP6 2607:f8b0:4006:808::2005.443 > 2607:f2c0:f00f:bf00::2.50774: tcp 0
    14:49:35.537619 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6440, length 8
    14:49:35.545033 IP6 fe80::2a0:a512:7b:9152 > fe80::201:2eff:fe5a:779d: ICMP6, echo reply, seq 6440, length 8
    14:49:36.024661 IP6 2607:f2c0:f00f:bf00:ed65:d57e:8c05:1b1b.49309 > 2a03:2880:f011:1:face:b00c:0:1.443: tcp 0
    14:49:36.039616 IP6 fe80::201:2eff:fe5a:779d > fe80::2a0:a512:7b:9152: ICMP6, echo request, seq 6441, length 8

    LoboTiger



  • Anyone have any advice? It's only been 2 days and the IPv6 connectivity is broken again and I have to reboot the firewall.

    LoboTiger



  • I ended up wiping the my pfsense to factory defaults and re-configuring everything from scratch (no backups used).  This was done on Thursday afternoon and this Sunday morning I woke to find that IPv6 is broken again.

    I'm starting to wonder if maybe this can be related to my ISP (Teksavvy) in Ontario?  In the screenshot below, it shows a proper working IPv6 traceroute from HE.net to the LAN interface on my pfsense.  When things failed this morning, the same traceroute would stop at hop 4.  If routing for my prefix was working properly, then I should expect to see up to hop 5 since that's still within their network.  It's almost as if my delegated /56 is being withdrawn from their routing table.  Does rebooting the firewall trigger something with the PPPoE authentication to say "hey, I'm alive over here please send me my /56"?




  • I wanted to post an update on this.  I changed my WAN settings to reset every night at midnight and since doing that a week ago my IPv6 connectivity has remained stable.  While this is one way around the issue of having to reboot every 2-3 days I still don't think I need to be doing this.  Plus it ends up resetting a lot of my connections I have established (irc and others).  So again I have to ask if we think this is related to something within the pfsense config or is Teksavvy to blame here with them only keeping my /56 active because I re-request it every night?

    LoboTiger



  • Hi everyone, just an update regarding this issue.  I posted in a Teksavvy dslreports forum about the issue I'd been having and got some interesting feedback.  They recommended allowing IPv6 ICMP packets to hit the WAN interface of the firewall.  After doing this, my IPv6 connectivity to my LAN has remained constant and is at 5 days straight now vs losing it after 2 days.  So either something has changed on the Teksavvy side to monitor the CPE/FW of their customers to ensure that the DHCP /56 that is handed out is still valid and should stay in their routing tables vs removing it.  Or something on the pfsense configuration changed in that Teksavvy is no longer able to tell whether the FW is alive or not via some kind of ND or whatever.  This started about a year ago so it's not something recent.  Others seem to have experienced similar problems with one person using a cron job to reset the DHCP6 session nightly.

    I'll post back if things change and I lose connectivity again.

    LoboTiger