Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ipv6 broken: radvd: can't join ipv6-allrouters on <interface>

    Scheduled Pinned Locked Moved
    2.5 Development Snapshots (Retired)
    15
    144
    40.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User @w0w
      last edited by

      @w0w I can give it a try. I’ll have to update my 2.5 version first, it’s been a while.

      1 Reply Last reply Reply Quote 1
      • ?
        A Former User @w0w
        last edited by A Former User

        @w0w said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

        @rschell
        Ronald, any chances to get already compiled radvd with patch provided on https://redmine.pfsense.org/issues/9577? Just for testing.

        I think I got a RADVD version based on 2.5 now. My build machine is based on stable-12 and there was a linker change that required changing one of the linker options (added -z notext).

        The test version is based on the 2.5 source changing the behavior of setup_allrouters_membership routine in the RADVD port. From the code listed in 9577, I changed the dimension of the msockets table from 10 to 50 and added a logging message when a socket has been added to the table and also expanded the "can't join" message to include additional information should the IPV6_JOIN_GROUP call fail. Normal operation should log the following messages in the Routing log, one for each interface configured:

        Feb 11 08:28:18 	radvd 	78824 	version 2.18 started
Feb 11 08:28:18 	radvd 	78834 	adding ipv6-allrouters on em0, sock: 4, iface->props.if_index:1

        I have the txz file ready and have posted it to the redmine issue #9577 for those who wish to test the alternate patch.

        1 Reply Last reply Reply Quote 3
        • w0wW
          w0w
          last edited by

          Thanks, testing.

          M 1 Reply Last reply Reply Quote 0
          • M
            motific @w0w
            last edited by

            @w0w - any results so far?

            1 Reply Last reply Reply Quote 0
            • kiokomanK
              kiokoman LAYER 8
              last edited by kiokoman

              i'm start testing right now, we need at least 24 h to tell if it's ok. no prob so far :)

              Feb 13 18:58:33 	radvd 	38033 	adding ipv6-allrouters on ix0.100, sock: 4, iface->props.if_index:12
Feb 13 18:58:33 	radvd 	37849 	version 2.18 started

              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
              Please do not use chat/PM to ask for help
              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

              1 Reply Last reply Reply Quote 0
              • w0wW
                w0w
                last edited by

                Yes, I can confirm that IPv6 works good. About 36 hours and no problem.

                1 Reply Last reply Reply Quote 0
                • kiokomanK
                  kiokoman LAYER 8
                  last edited by

                  after all this days it's still working good
                  great job @rschell

                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                  Please do not use chat/PM to ask for help
                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                  1 Reply Last reply Reply Quote 0
                  • kiokomanK
                    kiokoman LAYER 8
                    last edited by

                    @rschell idk if it's related to this update but lately i had trouble with my ipv6 tunnel, i still need to investigate but the problem is that my tunnel does not work after a reboot
                    the gif is up but gateway monitor say packet loss 100%
                    i had to reboot 2 / 3 times in a row to make it work again

                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                    Please do not use chat/PM to ask for help
                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                    ? 1 Reply Last reply Reply Quote 0
                    • ?
                      A Former User @kiokoman
                      last edited by

                      @kiokoman Unlikely related to the proposed patch. I'm using an 6RD stf interface and have noticed issues with loss of the WAN connection. Might be a timing issue with the gif interface, not certain.

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK
                        kiokoman LAYER 8
                        last edited by

                        some kind of race condition at boot maybe, also if i wait some hours the tunnel start to work alone. but it's faster if i reboot until it start working. idk the problem started last week just after i moved pfsense from bare metal to esxi, probably something to do with that

                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                        Please do not use chat/PM to ask for help
                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                        ? 1 Reply Last reply Reply Quote 0
                        • ?
                          A Former User @kiokoman
                          last edited by

                          @kiokoman I've noticed that bare metal vs Hyper V behave differently in subtle ways.

                          1 Reply Last reply Reply Quote 0
                          • kiokomanK
                            kiokoman LAYER 8
                            last edited by kiokoman

                            ok i think that i found what's going on, if i disable openvpn before restarting pfsense the tunnel work.
                            so i have to disable openvpn, restart pfsense, and when it's up i can start the openvpn otherwise i have trouble

                            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                            Please do not use chat/PM to ask for help
                            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                            1 Reply Last reply Reply Quote 0
                            • w0wW
                              w0w
                              last edited by w0w

                              Looks like there are no error messages on the latest STABLE snapshots.

                              1 Reply Last reply Reply Quote 0
                              • kiokomanK
                                kiokoman LAYER 8
                                last edited by kiokoman

                                do we no longer have to apply that patch manually?
                                I have not yet had time to update and verify

                                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                Please do not use chat/PM to ask for help
                                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                w0wW 1 Reply Last reply Reply Quote 0
                                • w0wW
                                  w0w @kiokoman
                                  last edited by

                                  @kiokoman
                                  Wait for 24h and I tell you :)

                                  1 Reply Last reply Reply Quote 0
                                  • kiokomanK
                                    kiokoman LAYER 8
                                    last edited by

                                    all clear for now

                                    May 2 12:34:32 	radvd 	73936 	resuming normal operation
May 2 12:34:32 	radvd 	73936 	attempting to reread config file
May 2 12:02:28 	radvd 	73936 	adding ipv6-allrouters on vmx1.100, sock: 4, iface->props.if_index:8
May 2 12:02:28 	radvd 	73720 	version 2.18 started

                                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                    Please do not use chat/PM to ask for help
                                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                    ? 1 Reply Last reply Reply Quote 0
                                    • w0wW
                                      w0w
                                      last edited by 

                                      ping -t ipv6.google.com
Ping request could not find host ipv6.google.com. Please check the name and try again.

                                      and

                                      May 3 16:47:23 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:47:15 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:47:00 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:46:54 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:46:37 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:46:26 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:46:14 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:45:58 	radvd 	27820 	can't join ipv6-allrouters on ix1
May 3 16:45:42 	radvd 	27820 	can't join ipv6-allrouters on ix1

                                      So, not yet.

                                      Waiting for https://github.com/pfsense/FreeBSD-ports/pull/773 to be merged. I have no problems with patched binary.

                                      1 Reply Last reply Reply Quote 0
                                      • ?
                                        A Former User @kiokoman
                                        last edited by

                                        @kiokoman It appears you are still using the patched binary. I had my main pfSense running for 35+ days with the patch, so I am reasonably certain that it is a good work around for the issues in stable-12.

                                        w0wW 1 Reply Last reply Reply Quote 0
                                        • w0wW
                                          w0w @A Former User
                                          last edited by

                                          @rschell
                                          Yep, it can be true, I have found it right after installing STABLE. I looked for a error messages, did not found it and did

                                          pkg install -f -y radvd

                                          It downgraded my version back to that one which is in the pfSense repository and sorry guys but it failed the same way as before. I just forgot that another one error message

                                          IPv6 forwarding on interface seems to be disabled, but continuing anyway

                                          got its own fix and I thought that the current version was updated so sorry guys for false hope!

                                          1 Reply Last reply Reply Quote 0
                                          • kiokomanK
                                            kiokoman LAYER 8
                                            last edited by

                                            ah ok, then the upgrade didn't remove the patched radvd, well no problem it works, I'm happy

                                            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                            Please do not use chat/PM to ask for help
                                            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post