IPv6 name resolution
-
I'm an IPv6 newbie with a question about DNS resolution on a LAN interface. I can't ping6 local interfaces even though they have valid IPv6 addresses.
As you can see in the image, interfaces are receiving IPv6 addresses. RA is set to managed and these are SLAAC addresses. I know they're SLAAC assigned because they aren't in the DHCPv6 range I created.
The router is able to access external IPv6 sites, so outbound connectivity and name resolution aren't issues.
But I am puzzled as to why I cannot ping6 an interface on the LAN. The screen shot also shows that's likely to be because I am only resolving the IPV4 address -- from the IPv6 address of bind on the pfSense router.
I'd appreciate any insights folk may have about this.
Thanks.
-
@yobyot said in IPv6 name resolution:
But I am puzzled as to why I cannot ping6 an interface on the LAN
Do you have a rule that allows ping for IPv6 to your lan interface IPv6 address or range?
do you have a AAAA record set for this fqdn on pfsense?
-
@johnpoz said in IPv6 name resolution:
@yobyot said in IPv6 name resolution:
But I am puzzled as to why I cannot ping6 an interface on the LAN
Do you have a rule that allows ping for IPv6 to your lan interface IPv6 address or range?
do you have a AAAA record set for this fqdn on pfsense?
No. But I don’t have an A record for the IPv4 address either.
Are you suggesting that all SLAAC-assigned addresses are never added to local DNS?
Thanks.
-
@yobyot said in IPv6 name resolution:
Are you suggesting that all SLAAC-assigned addresses are never added to local DNS?
How would that happen? SLAAC the client picks an address based on the prefix it gets from from RA and then normally uses its mac address to create what amounts to a random IP.. For that to be in your dns, the client would have to register it.
If you resolve the A, then you do have a record for - if you didn't then it couldn't resolve. Did you setup a dhcp reservation and enable static registration, or do you have dhcp registration on?
-
Well, if I use “Assisted” in RA settings, all interfaces select SLAAC. This produces privacy addresses but no DNS.
OTOH, “Managed” produces AAAA records but no privacy addresses.
Is there a combo possible?
-
There is one SLAAC address that does not change. Point the DNS to that address.