• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IPv6 name resolution

Scheduled Pinned Locked Moved IPv6
dns
6 Posts 3 Posters 905 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Y
    yobyot
    last edited by Mar 11, 2023, 3:23 AM

    I'm an IPv6 newbie with a question about DNS resolution on a LAN interface. I can't ping6 local interfaces even though they have valid IPv6 addresses.

    As you can see in the image, interfaces are receiving IPv6 addresses. RA is set to managed and these are SLAAC addresses. I know they're SLAAC assigned because they aren't in the DHCPv6 range I created.

    The router is able to access external IPv6 sites, so outbound connectivity and name resolution aren't issues.

    But I am puzzled as to why I cannot ping6 an interface on the LAN. The screen shot also shows that's likely to be because I am only resolving the IPV4 address -- from the IPv6 address of bind on the pfSense router.

    I'd appreciate any insights folk may have about this.

    Thanks.

    alt text

    J 1 Reply Last reply Mar 11, 2023, 11:07 AM Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator @yobyot
      last edited by Mar 11, 2023, 11:07 AM

      @yobyot said in IPv6 name resolution:

      But I am puzzled as to why I cannot ping6 an interface on the LAN

      Do you have a rule that allows ping for IPv6 to your lan interface IPv6 address or range?

      do you have a AAAA record set for this fqdn on pfsense?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      Y 1 Reply Last reply Mar 11, 2023, 1:13 PM Reply Quote 0
      • Y
        yobyot @johnpoz
        last edited by Mar 11, 2023, 1:13 PM

        @johnpoz said in IPv6 name resolution:

        @yobyot said in IPv6 name resolution:

        But I am puzzled as to why I cannot ping6 an interface on the LAN

        Do you have a rule that allows ping for IPv6 to your lan interface IPv6 address or range?

        do you have a AAAA record set for this fqdn on pfsense?

        No. But I don’t have an A record for the IPv4 address either.

        Are you suggesting that all SLAAC-assigned addresses are never added to local DNS?

        Thanks.

        J 1 Reply Last reply Mar 11, 2023, 1:23 PM Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator @yobyot
          last edited by Mar 11, 2023, 1:23 PM

          @yobyot said in IPv6 name resolution:

          Are you suggesting that all SLAAC-assigned addresses are never added to local DNS?

          How would that happen? SLAAC the client picks an address based on the prefix it gets from from RA and then normally uses its mac address to create what amounts to a random IP.. For that to be in your dns, the client would have to register it.

          If you resolve the A, then you do have a record for - if you didn't then it couldn't resolve. Did you setup a dhcp reservation and enable static registration, or do you have dhcp registration on?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          Y 1 Reply Last reply Mar 11, 2023, 1:27 PM Reply Quote 0
          • Y
            yobyot @johnpoz
            last edited by Mar 11, 2023, 1:27 PM

            @johnpoz

            Well, if I use “Assisted” in RA settings, all interfaces select SLAAC. This produces privacy addresses but no DNS.

            OTOH, “Managed” produces AAAA records but no privacy addresses.

            Is there a combo possible?

            J 1 Reply Last reply Mar 11, 2023, 4:46 PM Reply Quote 0
            • J
              JKnott @yobyot
              last edited by Mar 11, 2023, 4:46 PM

              @yobyot

              There is one SLAAC address that does not change. Point the DNS to that address.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              6 out of 6
              • First post
                6/6
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                This community forum collects and processes your personal information.
                consent.not_received