• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PFSense Not Working with DHCPV6 or Stateless on tracking interface

Scheduled Pinned Locked Moved IPv6
48 Posts 10 Posters 15.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J Offline
    JKnott
    last edited by Feb 15, 2017, 11:28 PM

    DHCP6 Client Configuration, 2.4B

    There's a version 2.4B???

    I'm supposedly at the latest and I don't see that setting anywhere.

    PfSense running on Qotom mini PC
    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
    UniFi AC-Lite access point

    I haven't lost my mind. It's around here...somewhere...

    1 Reply Last reply Reply Quote 0
    • J Offline
      JKnott
      last edited by Feb 15, 2017, 11:32 PM

      DUID hold is in System/Advanced/Networking.

      I don't see that one either.  My version of pfSense must have come from a parallel universe or something, as it doesn't appear to have either of those settings.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • M Offline
        MikeV7896
        last edited by Feb 16, 2017, 3:08 AM

        It's a setting in the pfSense 2.4 beta.

        The S in IOT stands for Security

        1 Reply Last reply Reply Quote 0
        • J Offline
          JKnott
          last edited by Feb 16, 2017, 3:48 AM

          I'll have to watch for that new version.  Any idea when it will be available?

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • ? This user is from outside of this forum
            Guest
            last edited by Feb 16, 2017, 7:45 AM

            @JKnott:

            I'll have to watch for that new version.  Any idea when it will be available?

            For several months now… Its in beta but its very stable. Either install from clean, my preference, or you can select 2.4 as you should find it in update/update settings.

            1 Reply Last reply Reply Quote 0
            • J Offline
              JKnott
              last edited by Feb 21, 2017, 3:23 PM

              You can also turn on 'Do not send release' which will prevent dhcp6c from sending a release signal, some ISP's will give you a new address/prefix if they get a release signal.

              I've found that in v2.3.3 and have set it.  Hopefully it works, so my prefix won't change simply because I unplugged my Ethernet cable.

              Incidentally, why did pfSense send a DHCPv6 release when the computers was merely disconnected from the modem & reconnected?  I could see that happening when I monitored the connection with Wireshark.  A release is something that should be specifically requested and not occur for something as trivial as a disconnect/reconnect.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • ? This user is from outside of this forum
                Guest
                last edited by Feb 21, 2017, 3:47 PM

                @JKnott:

                You can also turn on 'Do not send release' which will prevent dhcp6c from sending a release signal, some ISP's will give you a new address/prefix if they get a release signal.

                I've found that in v2.3.3 and have set it.  Hopefully it works, so my prefix won't change simply because I unplugged my Ethernet cable.

                Incidentally, why did pfSense send a DHCPv6 release when the computers was merely disconnected from the modem & reconnected?  I could see that happening when I monitored the connection with Wireshark.  A release is something that should be specifically requested and not occur for something as trivial as a disconnect/reconnect.

                Because dhcp6c exits and on exit it sends a release, hence the addition of the no-release flag and an updated dhcp6c client.

                1 Reply Last reply Reply Quote 0
                • J Offline
                  JKnott
                  last edited by Feb 21, 2017, 4:01 PM

                  The question is why it sends the release by default.  With IPv4 DHCP, a device normally requests the same address on re-connection and gets it if available.  You have to specifically request a release.  Why shouldn't it be the same with IPv6?

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • ? This user is from outside of this forum
                    Guest
                    last edited by Feb 21, 2017, 4:03 PM

                    @JKnott:

                    The question is why it sends the release by default.  With IPv4 DHCP, a device normally requests the same address on re-connection and gets it if available.  You have to specifically request a release.  Why shouldn't it be the same with IPv6?

                    Because it's a totally different client and bears little resemblance to its v4 counterpart.

                    1 Reply Last reply Reply Quote 0
                    • J Offline
                      JKnott
                      last edited by Feb 21, 2017, 4:11 PM

                      DHCPv6 has something called "DUID" the purpose of which is to identify the client so it get the same prefix.  Having the default release means that no longer works.  With IPv4, a changed address could affect a single device, but on IPv6 at least a /64, but often more, affecting potentially gazillions of addresses.  When the prefix changed, I had to go and update all the DNS entries for devices on my network, even if I did nothing more than connect in a managed switch, so that I could monitor the traffic with Wireshark.  I don't think the release should be happening, unless specifically requested, as happens with IPv4.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • ? This user is from outside of this forum
                        Guest
                        last edited by Feb 21, 2017, 4:13 PM

                        That's why it's been modified along with the DUID stored in the config.

                        1 Reply Last reply Reply Quote 0
                        • J Offline
                          JKnott
                          last edited by Feb 22, 2017, 3:22 PM

                          I've found that in v2.3.3 and have set it.  Hopefully it works, so my prefix won't change simply because I unplugged my Ethernet cable.

                          It appears to work.  I have disconnected/reconnected the WAN cable several times since yesterday.  My prefix stays the same and I'm not seeing any DHCPv6 release.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          1 Reply Last reply Reply Quote 0
                          • ? This user is from outside of this forum
                            Guest
                            last edited by Feb 22, 2017, 3:30 PM

                            @JKnott:

                            I've found that in v2.3.3 and have set it.  Hopefully it works, so my prefix won't change simply because I unplugged my Ethernet cable.

                            It appears to work.  I have disconnected/reconnected the WAN cable several times since yesterday.  My prefix stays the same and I'm not seeing any DHCPv6 release.

                            :) That's OK then.

                            I began the work on dhcp6c almost a year ago when my ISP rolled out IPv6. There were quite a few issues to deal with, dhcp6 before RA being the first. Then there was loss of PD when ever the connection dropped, partially corrected by the no-release flag but if you ran a RAM drive then the DUID would change, this could be avoided by using an early shell command to copy the DUID from the drive to the RAM at boot, but it was still not held in the config; this was done a couple of months back. We are now awaiting a further PR to be accepted upstream which adds a few other features missing from dhcp6c. I and my testers are running it and we now have VERY quiet logs.

                            1 Reply Last reply Reply Quote 0
                            • J Offline
                              JKnott
                              last edited by Feb 22, 2017, 3:37 PM

                              I'll keep an eye on it for a while.  If it fails again, I'll report back.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              1 Reply Last reply Reply Quote 0
                              • ? This user is from outside of this forum
                                Guest
                                last edited by Feb 22, 2017, 3:40 PM

                                It's been tested to death for the last 'n' months, solid as a rock. The only time we see any change in PD now is when the ISP resets their servers, and there's nothing we can do about that.

                                1 Reply Last reply Reply Quote 0
                                • J Offline
                                  JKnott
                                  last edited by Feb 22, 2017, 5:02 PM

                                  I just posted a message about this on a forum for customers of my ISP (Rogers).

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  1 Reply Last reply Reply Quote 0
                                  • B Offline
                                    bimmerdriver
                                    last edited by Mar 1, 2017, 10:26 PM Feb 22, 2017, 5:55 PM

                                    I'm one of the people who has been testing these features since marjohn56 started to develop them. I'm on Telus and there are other Telus users who have also been using these features. I started a thread in www.dslreports.com/forum/telus about it.

                                    1 Reply Last reply Reply Quote 0
                                    • C Offline
                                      chrcoluk
                                      last edited by Feb 22, 2017, 7:00 PM

                                      I can confirm the changes in 2.4b by marjohn work wonders, on sky UK, it works with perfection now.

                                      pfSense CE 2.8.0

                                      1 Reply Last reply Reply Quote 0
                                      • ? This user is from outside of this forum
                                        Guest
                                        last edited by Feb 22, 2017, 8:49 PM

                                        yes I'm also running @marjohn56 patch on Sky in the UK and its so stable its becoming a little dull now LOL

                                        And my logs are ALL SO QUIET

                                        1 Reply Last reply Reply Quote 0
                                        • M Offline
                                          moscato359
                                          last edited by Feb 23, 2017, 9:09 PM

                                          Comcast has now assigned me a static IPv6, which has "resolved" my issue, in theory

                                          I still think unmanaged RA + Tracking interface should work.

                                          What would be a good way to collect information on why its not working?

                                          1 Reply Last reply Reply Quote 0
                                          32 out of 48
                                          • First post
                                            32/48
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received