Trouble configuring IPv6
-
@jknott I've been off-site. I will do this in a few hours. Thank you!
-
@jknott
@jknott Re: your traceroute... I saw this in my logs and thought I was going nuts. Who the *** has been pinging me? And was successful?!? LOL.When I do some voodoo (disconnect WAN from pfSense, reboot ISP modem, reboot pfSense, reconnect WAN to pfSense after both reboots complete), I can get some flaky, intermittent IPv6 connectivity, sometimes lasting for days.
This is starting to sound like an ISP issue, even though they claim the issue is in my firewall config. (If I connect the server directly to the ISP modem, the IPv6 connection is rock solid. In fact I can multi-home the server and get perfect IPv6 from its direct connection to the ISP modem, while getting no IPv6 through the firewall. But I really want the server behind the firewall...)
I'll run your reboot capture as soon as I get in. Thank you!
-
Yep, it likely is an ISP issue or beyond. If it was your issue, you should see the pings for LAN addresses hitting the WAN interface, but you're not. This is exactly what I saw when I had that problem 2 years ago.
-
@jknott
Here's the capture of 546|547 on the WAN interface... -
There should be more to it than that. There should be at least 4 packets.
Here's one that works:
DHCPv6 Solicit and Renew.pcapng
Did you follow the instructions to shut down pfsense, disconnect the modem, restart pfsense and reconnect the modem? That should provide the full DHCPv6-PD sequence.
-
@jknott
I followed the instructions precisely. The first time I got two packets.I tried again - the second time I reset the ISP modem also. Waited for both to finish booting, started the packet capture, and then reconnected the WAN to the ISP modem.
What I sent was the result of the second try (which, to my untrained eyes, seemed much like the first attempt).
-
I don't see any response from your ISP. If that's all you get, then that could be the problem. Take a look at mine. You need at least 4 packets, ending with the reply. In yours, I don't see the advertise or reply. Is IPv6 up on pfsense? I'd be surprised if it is.
-
@jknott
Hmmmm.... It is NOW, but that doesn't mean that it was THEN...Let me run the test again and WAIT until I see an IPv6 address has been assigned to the WAN before I stop the packet capture.
-
@jknott
Here's where I am now. I tried a few times to get the capture and got zero->2 packets. The zero was the most frustrating, because I saw that the WAN interface acquired the address, but I captured NO packets.I concluded that I needed to install a sniffer between the WAN interface and the ISP modem, but that involves moving a cable that will break something - my next window will be Tuesday morning.
In the interim though, I was toying with a few environment modifications and changed my RA from 'unmanaged' to 'stateless DHCP' and my IPv6 started working.
I don't believe it's actually fixed, but it's not easy to debug something that isn't obviously broken. If history is a guide, it'll break again within a few days and I'll make my physical changes on Tuesday and have captures that show the full sequence.
Until then...
Thank you, again, for your assistance!
-
