Lost ipv6 connectivity from one interface


  • LAYER 8

    it was working before, didn't do any change but i've lost ipv6 connectivity from one interface
    pfsense 2.4.4-p3 under qemu/kvm

    WAN (wan)       -> em0        -> v4: 151.3.xxx.xxx/29
    LAN (lan)       -> em1        -> v4: 192.168.1.254/24
                                     v6: 2001:xxx:26:214::1/64
    SRV (opt1)      -> em2        -> v4: 172.16.0.254/24
                                     v6: 2001:xxx:b4e1:ffff::1/64
    HENETV6 (opt2)  -> gif0       -> v6: 2001:xxx:25:214::2/128
    
    em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
            options=2098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
            ether 52:54:00:3d:64:cc
            hwaddr 52:54:00:3d:64:cc
            inet6 fe80::5054:ff:fe3d:64cc%em0 prefixlen 64 scopeid 0x1
            inet 151.3.xxx.xx0 netmask 0xfffffff8 broadcast 151.3.xxx.xx5
            inet 151.3.xxx.xx1 netmask 0xfffffff8 broadcast 151.3.xxx.xx5
            inet 151.3.xxx.xx2 netmask 0xfffffff8 broadcast 151.3.xxx.xx5
            inet 151.3.xxx.xx3 netmask 0xfffffff8 broadcast 151.3.xxx.xx5
            inet 151.3.xxx.xx4 netmask 0xfffffff8 broadcast 151.3.xxx.xx5
            nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
            media: Ethernet autoselect (1000baseT <full-duplex>)
            status: active
    em1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
            options=2098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
            ether 52:54:00:fc:89:4c
            hwaddr 52:54:00:fc:89:4c
            inet6 fe80::5054:ff:fefc:894c%em1 prefixlen 64 scopeid 0x2
            inet6 2001:xxx:26:214::1 prefixlen 64
            inet 192.168.1.254 netmask 0xffffff00 broadcast 192.168.1.255
            nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
            media: Ethernet autoselect (1000baseT <full-duplex>)
            status: active
    em2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
            options=2098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
            ether 52:54:00:39:00:62
            hwaddr 52:54:00:39:00:62
            inet6 fe80::5054:ff:fe39:62%em2 prefixlen 64 scopeid 0x3
            inet6 2001:xxx:b4e1:ffff::1 prefixlen 64
            inet 172.16.0.254 netmask 0xffffff00 broadcast 172.16.0.255
            nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
            media: Ethernet autoselect (1000baseT <full-duplex>)
            status: active
    

    ipv6 from LAN is working - dhcpv6 working / static ipv6 assigned is working
    ipv6 from SRV is not working - dhcpv6 not working / static ipv6 assigned not working
    ipv6 from SRV work if i set interface auto

    there is only one linux server connected to srv

    /etc/network/interfaces

    ### Start IPV6 static configuration
    
    iface eno1 inet6 static
    address 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe
    netmask 64
    gateway 2001:xxx:b4e1:ffff::1
    dns-nameservers 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe
    

    ip -6 route

    ::1 dev lo proto kernel metric 256 pref medium
    2001:xxx:b4e1:ffff::/64 dev eno1 proto kernel metric 256 pref medium
    fe80::/64 dev eno1 proto kernel metric 256 pref medium
    default via 2001:xxx:b4e1:ffff::1 dev eno1 metric 1024 onlink pref medium
    

    ifconfig

    eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
            inet 172.16.0.100  netmask 255.255.255.0  broadcast 172.16.0.255
            inet6 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe  prefixlen 64  scopeid 0x0<global>
            inet6 fe80::868f:69ff:fede:7fb8  prefixlen 64  scopeid 0x20<link>
            ether 84:8f:69:de:7f:b8  txqueuelen 1000  (Ethernet)
            RX packets 21295  bytes 3493853 (3.4 MB)
            RX errors 0  dropped 0  overruns 0  frame 0
            TX packets 10583  bytes 2503528 (2.5 MB)
            TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
    

    test:

    ping fe80::5054:ff:fe39:62 -I eno1
    PING fe80::5054:ff:fe39:62(fe80::5054:ff:fe39:62) from fe80::868f:69ff:fede:7fb8%eno1 eno1: 56 data bytes
    64 bytes from fe80::5054:ff:fe39:62%eno1: icmp_seq=1 ttl=64 time=0.473 ms
    64 bytes from fe80::5054:ff:fe39:62%eno1: icmp_seq=2 ttl=64 time=0.465 ms
    64 bytes from fe80::5054:ff:fe39:62%eno1: icmp_seq=3 ttl=64 time=0.548 ms
    
    
    ping 2001:xxx:b4e1:ffff::1
    PING 2001:xxx:b4e1:ffff::1(2001:xxx:b4e1:ffff::1) 56 data bytes
    From 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe icmp_seq=1 Destination unreachable: Address unreachable
    From 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe icmp_seq=2 Destination unreachable: Address unreachable
    From 2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe icmp_seq=3 Destination unreachable: Address unreachable
    
    ping www.google.com
    PING www.google.com(mil04s27-in-x04.1e100.net (2a00:1450:4002:809::2004)) 56 data bytes
    From server.trmultiservice.lab (2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe) icmp_seq=1 Destination unreachable: Address unreachable
    From server.trmultiservice.lab (2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe) icmp_seq=2 Destination unreachable: Address unreachable
    From server.trmultiservice.lab (2001:xxx:b4e1:ffff:ffff:ffff:ffff:fffe) icmp_seq=3 Destination unreachable: Address unreachable
    

    it was working before but the other day there was a long outage and the server/pfsense shout down
    ipv6 from tunnel broker hurricane
    ipv4 is working
    any help would be really appreciated


  • LAYER 8

    after losing 2 days of sleep
    the problem was solved after disabling "Block private networks and loopback addresses" and/or "Block bogon networks" that i had on the WAN interface
    it was mentioned here
    https://redmine.pfsense.org/issues/9631


Log in to reply