IPv6 Issues since upgrading

poppadum

@jordanp123 said in IPv6 Issues since upgrading:

I found that manually adding a ipv6 route using the link local gateway address will let mine work

That fix also works for me. In my case if I enter

route -6 add default fe80::ec5e:b8ff:fe3a:ae7c%pppoe0

IPv6 routing starts working fine from inside the LAN.

poppadum

@poppadum said in IPv6 Issues since upgrading:

The gateway IPv6 address shown doesn't seem to be valid for interface pppoe0:
# ifconfig pppoe0
pppoe0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492
        description: WAN
        inet6 fe80::3421:f898:4e49:5f2b%pppoe0 prefixlen 64 scopeid 0x8
        inet6 fe80::ec5e:b8ff:fe3a:ae7c%pppoe0 prefixlen 64 scopeid 0x8
        inet6 2001:8b0:1111:1111:0:ffff:51bb:1aef prefixlen 128
        ...
I'm not sure where it's getting that gateway address from - it's set to dynamic in the web interface. It is in file /tmp/pppoe0_defaultgwv6 but I thought that was regenerated every boot?

Just spotted this in the ppp log on the date I did the upgrade:

Jul 27 17:07:25	ppp	13981	[wan] IPV6CP: rec'd Configure Request #0 (Ack-Rcvd)
Jul 27 17:07:25	ppp	13981	[wan] IPV6CP: SendConfigAck #0
Jul 27 17:07:25	ppp	13981	[wan] IPV6CP: state change Ack-Rcvd --> Opened
Jul 27 17:07:25	ppp	13981	[wan] IPV6CP: LayerUp
Jul 27 17:07:25	ppp	13981	[wan] ec5e:b8ff:fe3a:ae7c -> 0203:97ff:feba:0900

Anyone know why ppp seems to be rewriting the link-local address?

jordanp123

None of the systems I'm on are using ppp but so far its two systems that I've had to fix with the ipv6 issue, both the same thing.

gregeeh

alt text

[2.7.0-RELEASE][admin@pfSense.localdomain]/root: ifconfig re0
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        description: WAN
        options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
        ether 00:e0:4c:68:1b:b2
        inet6 fe80::2e0:4cff:fe68:1bb2%re0 prefixlen 64 scopeid 0x1
        inet 103.85.37.84 netmask 0xfffffc00 broadcast 103.85.39.255
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
[2.7.0-RELEASE][admin@pfSense.localdomain]/root:

The gateway IPv6 address does not appear to be valid for the re0 interface.

Can someone please explain what is happening here?

TIA

stephenw10

Check the routing tables, make sure there is a valid default route for IPv6. If not make sure the default gateway in System > Routing > Gateways is set to WAN_DHCP6.

It's valid to have only a linklocal address on WAN. If your ISP is passing only a prefix they can route that to you across the linklocal address. You must have a globally routable IPv6 address somewhere though.

jordanp123

@stephenw10

I tried setting the default gateway under Gateways to both automatic and the WAN_DHCP6 both failed to route, I had to manually add a static GW or use the add route option to get the two I was working on to route.

stephenw10

And before that the routing table was showing no default IPv6 route?

Do the logs show a new route being passed when it connects?

jordanp123

@stephenw10

I'll change the gateway back to the default one this evening and get you some answers, I can't change it back right now, since ipv6 is being used.

jordanp123

@stephenw10
I was able to catch some time while no one was using the system and test. Switching to WAN_DHCP6 after setting the static GW results in connectivity, however if the pfSense is rebooted with WAN_DHCP6 set as the default GW then a default route isn’t installed on reboot.

Screenshot 2023-08-01 at 11.38.01 AM.png
Screenshot 2023-08-01 at 11.45.55 AM.png

stephenw10

Ah, then I would check the dhcp and routing logs for errors when it first connects at boot. There is likely something preventing it adding the default route at that time.

jordanp123

@stephenw10
Going through the logs on boot the only errors I see are the following:

Aug 1 11:42:39 dhcp6c 39378 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Aug 1 11:42:39 dhcp6c 39378 failed initialize control message authentication
Aug 1 11:42:39 dhcp6c 39378 skip opening control port
Aug 1 11:42:40 dhcp6c 39448 Sending Solicit
Aug 1 11:42:40 dhcp6c 39448 transmit failed: Can't assign requested address
Aug 1 11:42:41 dhcp6c 39448 Sending Solicit
Aug 1 11:42:41 dhcp6c 39448 Sending Request
Aug 1 11:42:41 dhcp6c 39448 dhcp6c Received REQUEST

Then for routing:

Aug 1 11:43:02 radvd 9387 version 2.19 started
Aug 1 11:43:02 radvd 9387 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: (/var/etc/radvd.conf:24) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: (/var/etc/radvd.conf:52) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: (/var/etc/radvd.conf:80) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: (/var/etc/radvd.conf:108) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:43:02 radvd 9387 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:44:11 radvd 9534 attempting to reread config file
Aug 1 11:44:11 radvd 9534 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: (/var/etc/radvd.conf:24) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: (/var/etc/radvd.conf:52) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: (/var/etc/radvd.conf:80) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: (/var/etc/radvd.conf:108) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 11:44:11 radvd 9534 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 11:44:11 radvd 9534 resuming normal operation

stephenw10

Hmm, nothing jumps out there as a specific gateway/route error. How does that compare with when it creates the route correctly?

jordanp123

@stephenw10
Here is the logs for DHCP6C since ~31st, it was restarted this morning @7 due to a hypervisor (ProxMox ) update. IP6 GA's changed to X.

Aug 1 07:20:00 dhcp6c 41130 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Aug 1 07:20:00 dhcp6c 41130 failed initialize control message authentication
Aug 1 07:20:00 dhcp6c 41130 skip opening control port
Aug 1 07:20:01 dhcp6c 41404 Sending Solicit
Aug 1 07:20:01 dhcp6c 41404 transmit failed: Can't assign requested address
Aug 1 07:20:02 dhcp6c 41404 Sending Solicit
Aug 1 07:20:02 dhcp6c 41404 Sending Request
Aug 1 07:20:02 dhcp6c 41404 dhcp6c Received REQUEST
Aug 1 07:20:02 dhcp6c 41404 add an address X on vtnet2
Aug 1 07:20:02 dhcp6c 41404 add an address X on vtnet0.6
Aug 1 07:20:02 dhcp6c 41404 add an address X on vtnet0.4
Aug 1 07:20:02 dhcp6c 41404 add an address X on vtnet0.5
Aug 1 11:42:39 dhcp6c 39378 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Aug 1 11:42:39 dhcp6c 39378 failed initialize control message authentication
Aug 1 11:42:39 dhcp6c 39378 skip opening control port
Aug 1 11:42:40 dhcp6c 39448 Sending Solicit
Aug 1 11:42:40 dhcp6c 39448 transmit failed: Can't assign requested address
Aug 1 11:42:41 dhcp6c 39448 Sending Solicit
Aug 1 11:42:41 dhcp6c 39448 Sending Request
Aug 1 11:42:41 dhcp6c 39448 dhcp6c Received REQUEST
Aug 1 11:42:41 dhcp6c 39448 add an address X on vtnet2
Aug 1 11:42:41 dhcp6c 39448 add an address X on vtnet0.6
Aug 1 11:42:41 dhcp6c 39448 add an address X on vtnet0.4
Aug 1 11:42:41 dhcp6c 39448 add an address X on vtnet0.5

The routing logs look pretty much identical:

Aug 1 07:20:25 radvd 66853 version 2.19 started
Aug 1 07:20:25 radvd 66853 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: (/var/etc/radvd.conf:24) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: (/var/etc/radvd.conf:52) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: (/var/etc/radvd.conf:80) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: (/var/etc/radvd.conf:108) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:20:25 radvd 66853 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:21:22 radvd 66861 attempting to reread config file
Aug 1 07:21:22 radvd 66861 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: (/var/etc/radvd.conf:24) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: (/var/etc/radvd.conf:52) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: (/var/etc/radvd.conf:80) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: (/var/etc/radvd.conf:108) AdvRDNSSLifetime <= 2MaxRtrAdvInterval would allow stale DNS servers to be deleted faster
Aug 1 07:21:22 radvd 66861 warning: AdvDNSSLLifetime <= 2MaxRtrAdvInterval would allow stale DNS suffixes to be deleted faster
Aug 1 07:21:22 radvd 66861 resuming normal operation

stephenw10

Enable 'DHCP6 Debug' in System > Advanced > Networking. Check again.

jordanp123

@stephenw10
Aug 1 12:45:28 dhcp6c 41581 extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 12:45:28 dhcp6c 41581 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Aug 1 12:45:28 dhcp6c 41581 failed initialize control message authentication
Aug 1 12:45:28 dhcp6c 41581 skip opening control port
Aug 1 12:45:28 dhcp6c 41581 <3>[interface] (9)
Aug 1 12:45:28 dhcp6c 41581 <5>[vtnet1] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[send] (4)
Aug 1 12:45:28 dhcp6c 41581 <3>[ia-na] (5)
Aug 1 12:45:28 dhcp6c 41581 <3>[0] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>comment [# request stateful address] (26)
Aug 1 12:45:28 dhcp6c 41581 <3>[send] (4)
Aug 1 12:45:28 dhcp6c 41581 <3>[ia-pd] (5)
Aug 1 12:45:28 dhcp6c 41581 <3>[0] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>comment [# request prefix delegation] (27)
Aug 1 12:45:28 dhcp6c 41581 <3>[request] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[domain-name-servers] (19)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[request] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[domain-name] (11)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[script] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>comment [# we'd like some nameservers please] (35)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[id-assoc] (8)
Aug 1 12:45:28 dhcp6c 41581 <13>[na] (2)
Aug 1 12:45:28 dhcp6c 41581 <13>[0] (1)
Aug 1 12:45:28 dhcp6c 41581 <13>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[id-assoc] (8)
Aug 1 12:45:28 dhcp6c 41581 <13>[pd] (2)
Aug 1 12:45:28 dhcp6c 41581 <13>[0] (1)
Aug 1 12:45:28 dhcp6c 41581 <13>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[prefix] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>[::] (2)
Aug 1 12:45:28 dhcp6c 41581 <3>[/] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[58] (2)
Aug 1 12:45:28 dhcp6c 41581 <3>[infinity] (8)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[prefix-interface] (16)
Aug 1 12:45:28 dhcp6c 41581 <5>[vtnet2] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-id] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>[3] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-len] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[6] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[prefix-interface] (16)
Aug 1 12:45:28 dhcp6c 41581 <5>[vtnet0.6] (8)
Aug 1 12:45:28 dhcp6c 41581 <3>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-id] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>[0] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-len] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[6] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[prefix-interface] (16)
Aug 1 12:45:28 dhcp6c 41581 <5>[vtnet0.4] (8)
Aug 1 12:45:28 dhcp6c 41581 <3>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-id] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>[2] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-len] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[6] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[prefix-interface] (16)
Aug 1 12:45:28 dhcp6c 41581 <5>[vtnet0.5] (8)
Aug 1 12:45:28 dhcp6c 41581 <3>begin of closure [{] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-id] (6)
Aug 1 12:45:28 dhcp6c 41581 <3>[1] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>[sla-len] (7)
Aug 1 12:45:28 dhcp6c 41581 <3>[6] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of closure [}] (1)
Aug 1 12:45:28 dhcp6c 41581 <3>end of sentence [;] (1)
Aug 1 12:45:28 dhcp6c 41581 called
Aug 1 12:45:28 dhcp6c 41581 called
Aug 1 12:45:28 dhcp6c 41725 reset a timer on vtnet1, state=INIT, timeo=0, retrans=891
Aug 1 12:45:29 dhcp6c 41725 Sending Solicit
Aug 1 12:45:29 dhcp6c 41725 a new XID (9f67a2) is generated
Aug 1 12:45:29 dhcp6c 41725 set client ID (len 14)
Aug 1 12:45:29 dhcp6c 41725 set identity association
Aug 1 12:45:29 dhcp6c 41725 set elapsed time (len 2)
Aug 1 12:45:29 dhcp6c 41725 set option request (len 4)
Aug 1 12:45:29 dhcp6c 41725 set IA_PD prefix
Aug 1 12:45:29 dhcp6c 41725 set IA_PD
Aug 1 12:45:29 dhcp6c 41725 transmit failed: Can't assign requested address
Aug 1 12:45:29 dhcp6c 41725 reset a timer on vtnet1, state=SOLICIT, timeo=0, retrans=1091
Aug 1 12:45:30 dhcp6c 41725 Sending Solicit
Aug 1 12:45:30 dhcp6c 41725 set client ID (len 14)
Aug 1 12:45:30 dhcp6c 41725 set identity association
Aug 1 12:45:30 dhcp6c 41725 set elapsed time (len 2)
Aug 1 12:45:30 dhcp6c 41725 set option request (len 4)
Aug 1 12:45:30 dhcp6c 41725 set IA_PD prefix
Aug 1 12:45:30 dhcp6c 41725 set IA_PD
Aug 1 12:45:30 dhcp6c 41725 send solicit to ff02::1:2%vtnet1
Aug 1 12:45:30 dhcp6c 41725 reset a timer on vtnet1, state=SOLICIT, timeo=1, retrans=2083
Aug 1 12:45:30 dhcp6c 41725 receive advertise from fe80::2ec8:1bff:fe03:9b13%vtnet1 on vtnet1
Aug 1 12:45:30 dhcp6c 41725 get DHCP option client ID, len 14
Aug 1 12:45:30 dhcp6c 41725 DUID: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 12:45:30 dhcp6c 41725 get DHCP option server ID, len 10
Aug 1 12:45:30 dhcp6c 41725 DUID: 00:03:00:01:2c:c8:1b:03:9b:13
Aug 1 12:45:30 dhcp6c 41725 get DHCP option preference, len 1
Aug 1 12:45:30 dhcp6c 41725 preference: 255
Aug 1 12:45:30 dhcp6c 41725 get DHCP option IA_PD, len 41
Aug 1 12:45:30 dhcp6c 41725 IA_PD: ID=0, T1=43200, T2=69120
Aug 1 12:45:30 dhcp6c 41725 get DHCP option IA_PD prefix, len 25
Aug 1 12:45:30 dhcp6c 41725 IA_PD prefix: X::/58 pltime=77760 vltime=86400
Aug 1 12:45:30 dhcp6c 41725 server ID: 00:03:00:01:2c:c8:1b:03:9b:13, pref=255
Aug 1 12:45:30 dhcp6c 41725 Sending Request
Aug 1 12:45:30 dhcp6c 41725 a new XID (40660d) is generated
Aug 1 12:45:30 dhcp6c 41725 set client ID (len 14)
Aug 1 12:45:30 dhcp6c 41725 set server ID (len 10)
Aug 1 12:45:30 dhcp6c 41725 set elapsed time (len 2)
Aug 1 12:45:30 dhcp6c 41725 set option request (len 4)
Aug 1 12:45:30 dhcp6c 41725 set IA_PD prefix
Aug 1 12:45:30 dhcp6c 41725 set IA_PD
Aug 1 12:45:30 dhcp6c 41725 send request to ff02::1:2%vtnet1
Aug 1 12:45:30 dhcp6c 41725 reset a timer on vtnet1, state=REQUEST, timeo=0, retrans=911
Aug 1 12:45:30 dhcp6c 41725 receive reply from fe80::2ec8:1bff:fe03:9b13%vtnet1 on vtnet1
Aug 1 12:45:30 dhcp6c 41725 get DHCP option client ID, len 14
Aug 1 12:45:30 dhcp6c 41725 DUID: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 12:45:30 dhcp6c 41725 get DHCP option server ID, len 10
Aug 1 12:45:30 dhcp6c 41725 DUID: 00:03:00:01:2c:c8:1b:03:9b:13
Aug 1 12:45:30 dhcp6c 41725 get DHCP option IA_PD, len 41
Aug 1 12:45:30 dhcp6c 41725 IA_PD: ID=0, T1=43200, T2=69120
Aug 1 12:45:30 dhcp6c 41725 get DHCP option IA_PD prefix, len 25
Aug 1 12:45:30 dhcp6c 41725 IA_PD prefix: X::/58 pltime=77760 vltime=86400
Aug 1 12:45:30 dhcp6c 41725 dhcp6c Received REQUEST
Aug 1 12:45:30 dhcp6c 41725 make an IA: PD-0
Aug 1 12:45:30 dhcp6c 41725 create a prefix X::/58 pltime=77760, vltime=86400
Aug 1 12:45:30 dhcp6c 41725 add an address X on vtnet2
Aug 1 12:45:30 dhcp6c 41725 add an address X on vtnet0.6
Aug 1 12:45:30 dhcp6c 41725 add an address X on vtnet0.4
Aug 1 12:45:30 dhcp6c 41725 add an address X on vtnet0.5
Aug 1 12:45:30 dhcp6c 41725 executes /var/etc/dhcp6c_wan_script.sh
Aug 1 12:45:30 dhcp6c 68926 dhcp6c RELEASE, REQUEST or EXIT on vtnet1 running rc.newwanipv6
Aug 1 12:45:30 dhcp6c 41725 script "/var/etc/dhcp6c_wan_script.sh" terminated
Aug 1 12:45:30 dhcp6c 41725 removing an event on vtnet1, state=REQUEST
Aug 1 12:45:30 dhcp6c 41725 removing server (ID: 00:03:00:01:2c:c8:1b:03:9b:13)
Aug 1 12:45:30 dhcp6c 41725 got an expected reply, sleeping.

stephenw10

That looks like the successful case. What does it show when it fails?

jordanp123

@stephenw10
It failed, I have no IPV6 default route.

stephenw10

@jordanp123 said in IPv6 Issues since upgrading:

Aug 1 12:45:30 dhcp6c 41725 receive reply from fe80::2ec8:1bff:fe03:9b13%vtnet1 on vtnet1

Hmm, yet it is adding addresses and knows what the gateway is....

How does that compare with the successful case?

jordanp123

@stephenw10
With the manually added static GW.

Aug 1 13:56:50 dhcp6c 39855 extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 13:56:50 dhcp6c 39855 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Aug 1 13:56:50 dhcp6c 39855 failed initialize control message authentication
Aug 1 13:56:50 dhcp6c 39855 skip opening control port
Aug 1 13:56:50 dhcp6c 39855 <3>[interface] (9)
Aug 1 13:56:50 dhcp6c 39855 <5>[vtnet1] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[send] (4)
Aug 1 13:56:50 dhcp6c 39855 <3>[ia-na] (5)
Aug 1 13:56:50 dhcp6c 39855 <3>[0] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>comment [# request stateful address] (26)
Aug 1 13:56:50 dhcp6c 39855 <3>[send] (4)
Aug 1 13:56:50 dhcp6c 39855 <3>[ia-pd] (5)
Aug 1 13:56:50 dhcp6c 39855 <3>[0] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>comment [# request prefix delegation] (27)
Aug 1 13:56:50 dhcp6c 39855 <3>[request] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[domain-name-servers] (19)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[request] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[domain-name] (11)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[script] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>comment [# we'd like some nameservers please] (35)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[id-assoc] (8)
Aug 1 13:56:50 dhcp6c 39855 <13>[na] (2)
Aug 1 13:56:50 dhcp6c 39855 <13>[0] (1)
Aug 1 13:56:50 dhcp6c 39855 <13>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[id-assoc] (8)
Aug 1 13:56:50 dhcp6c 39855 <13>[pd] (2)
Aug 1 13:56:50 dhcp6c 39855 <13>[0] (1)
Aug 1 13:56:50 dhcp6c 39855 <13>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[prefix] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>[::] (2)
Aug 1 13:56:50 dhcp6c 39855 <3>[/] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[58] (2)
Aug 1 13:56:50 dhcp6c 39855 <3>[infinity] (8)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[prefix-interface] (16)
Aug 1 13:56:50 dhcp6c 39855 <5>[vtnet2] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-id] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>[3] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-len] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[6] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[prefix-interface] (16)
Aug 1 13:56:50 dhcp6c 39855 <5>[vtnet0.6] (8)
Aug 1 13:56:50 dhcp6c 39855 <3>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-id] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>[0] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-len] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[6] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[prefix-interface] (16)
Aug 1 13:56:50 dhcp6c 39855 <5>[vtnet0.4] (8)
Aug 1 13:56:50 dhcp6c 39855 <3>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-id] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>[2] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-len] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[6] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[prefix-interface] (16)
Aug 1 13:56:50 dhcp6c 39855 <5>[vtnet0.5] (8)
Aug 1 13:56:50 dhcp6c 39855 <3>begin of closure [{] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-id] (6)
Aug 1 13:56:50 dhcp6c 39855 <3>[1] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>[sla-len] (7)
Aug 1 13:56:50 dhcp6c 39855 <3>[6] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of closure [}] (1)
Aug 1 13:56:50 dhcp6c 39855 <3>end of sentence [;] (1)
Aug 1 13:56:50 dhcp6c 39855 called
Aug 1 13:56:50 dhcp6c 39855 called
Aug 1 13:56:50 dhcp6c 39971 reset a timer on vtnet1, state=INIT, timeo=0, retrans=891
Aug 1 13:56:51 dhcp6c 39971 Sending Solicit
Aug 1 13:56:51 dhcp6c 39971 a new XID (c9bf81) is generated
Aug 1 13:56:51 dhcp6c 39971 set client ID (len 14)
Aug 1 13:56:51 dhcp6c 39971 set identity association
Aug 1 13:56:51 dhcp6c 39971 set elapsed time (len 2)
Aug 1 13:56:51 dhcp6c 39971 set option request (len 4)
Aug 1 13:56:51 dhcp6c 39971 set IA_PD prefix
Aug 1 13:56:51 dhcp6c 39971 set IA_PD
Aug 1 13:56:51 dhcp6c 39971 transmit failed: Can't assign requested address
Aug 1 13:56:51 dhcp6c 39971 reset a timer on vtnet1, state=SOLICIT, timeo=0, retrans=1091
Aug 1 13:56:52 dhcp6c 39971 Sending Solicit
Aug 1 13:56:52 dhcp6c 39971 set client ID (len 14)
Aug 1 13:56:52 dhcp6c 39971 set identity association
Aug 1 13:56:52 dhcp6c 39971 set elapsed time (len 2)
Aug 1 13:56:52 dhcp6c 39971 set option request (len 4)
Aug 1 13:56:52 dhcp6c 39971 set IA_PD prefix
Aug 1 13:56:52 dhcp6c 39971 set IA_PD
Aug 1 13:56:52 dhcp6c 39971 send solicit to ff02::1:2%vtnet1
Aug 1 13:56:52 dhcp6c 39971 reset a timer on vtnet1, state=SOLICIT, timeo=1, retrans=2083
Aug 1 13:56:52 dhcp6c 39971 receive advertise from fe80::2ec8:1bff:fe03:9b13%vtnet1 on vtnet1
Aug 1 13:56:52 dhcp6c 39971 get DHCP option client ID, len 14
Aug 1 13:56:52 dhcp6c 39971 DUID: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 13:56:52 dhcp6c 39971 get DHCP option server ID, len 10
Aug 1 13:56:52 dhcp6c 39971 DUID: 00:03:00:01:2c:c8:1b:03:9b:13
Aug 1 13:56:52 dhcp6c 39971 get DHCP option preference, len 1
Aug 1 13:56:52 dhcp6c 39971 preference: 255
Aug 1 13:56:52 dhcp6c 39971 get DHCP option IA_PD, len 41
Aug 1 13:56:52 dhcp6c 39971 IA_PD: ID=0, T1=43200, T2=69120
Aug 1 13:56:52 dhcp6c 39971 get DHCP option IA_PD prefix, len 25
Aug 1 13:56:52 dhcp6c 39971 IA_PD prefix: X::/58 pltime=77760 vltime=86400
Aug 1 13:56:52 dhcp6c 39971 server ID: 00:03:00:01:2c:c8:1b:03:9b:13, pref=255
Aug 1 13:56:52 dhcp6c 39971 Sending Request
Aug 1 13:56:52 dhcp6c 39971 a new XID (5ae09e) is generated
Aug 1 13:56:52 dhcp6c 39971 set client ID (len 14)
Aug 1 13:56:52 dhcp6c 39971 set server ID (len 10)
Aug 1 13:56:52 dhcp6c 39971 set elapsed time (len 2)
Aug 1 13:56:52 dhcp6c 39971 set option request (len 4)
Aug 1 13:56:52 dhcp6c 39971 set IA_PD prefix
Aug 1 13:56:52 dhcp6c 39971 set IA_PD
Aug 1 13:56:52 dhcp6c 39971 send request to ff02::1:2%vtnet1
Aug 1 13:56:52 dhcp6c 39971 reset a timer on vtnet1, state=REQUEST, timeo=0, retrans=911
Aug 1 13:56:52 dhcp6c 39971 receive reply from fe80::2ec8:1bff:fe03:9b13%vtnet1 on vtnet1
Aug 1 13:56:52 dhcp6c 39971 get DHCP option client ID, len 14
Aug 1 13:56:52 dhcp6c 39971 DUID: 00:01:00:01:2b:b0:e9:8d:66:9f:b4:58:90:62
Aug 1 13:56:52 dhcp6c 39971 get DHCP option server ID, len 10
Aug 1 13:56:52 dhcp6c 39971 DUID: 00:03:00:01:2c:c8:1b:03:9b:13
Aug 1 13:56:52 dhcp6c 39971 get DHCP option IA_PD, len 41
Aug 1 13:56:52 dhcp6c 39971 IA_PD: ID=0, T1=43200, T2=69120
Aug 1 13:56:52 dhcp6c 39971 get DHCP option IA_PD prefix, len 25
Aug 1 13:56:52 dhcp6c 39971 IA_PD prefix: X::/58 pltime=77760 vltime=86400
Aug 1 13:56:52 dhcp6c 39971 dhcp6c Received REQUEST
Aug 1 13:56:52 dhcp6c 39971 make an IA: PD-0
Aug 1 13:56:52 dhcp6c 39971 create a prefix X::/58 pltime=77760, vltime=86400
Aug 1 13:56:52 dhcp6c 39971 add an address X/64 on vtnet2
Aug 1 13:56:52 dhcp6c 39971 add an address X/64 on vtnet0.6
Aug 1 13:56:52 dhcp6c 39971 add an address X/64 on vtnet0.4
Aug 1 13:56:52 dhcp6c 39971 add an address X/64 on vtnet0.5
Aug 1 13:56:52 dhcp6c 39971 executes /var/etc/dhcp6c_wan_script.sh
Aug 1 13:56:52 dhcp6c 48503 dhcp6c RELEASE, REQUEST or EXIT on vtnet1 running rc.newwanipv6
Aug 1 13:56:52 dhcp6c 39971 script "/var/etc/dhcp6c_wan_script.sh" terminated
Aug 1 13:56:52 dhcp6c 39971 removing an event on vtnet1, state=REQUEST
Aug 1 13:56:52 dhcp6c 39971 removing server (ID: 00:03:00:01:2c:c8:1b:03:9b:13)
Aug 1 13:56:52 dhcp6c 39971 got an expected reply, sleeping.

gregeeh

@stephenw10 said in IPv6 Issues since upgrading:

You must have a globally routable IPv6 address somewhere though.

Yes, I can understand that and I can ping IPv6 addresses from pfSense but not from any of the LAN clients. The LAN clients to have IPv6 addresses. I enabled "Do not wait for RA" in the WAN DHCP6 Options and this is how my system looks now.

alt text

[2.7.0-RELEASE][admin@pfSense.localdomain]/root: ifconfig re0
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        description: WAN
       options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
        ether 00:e0:4c:68:1b:b2
        inet6 fe80::2e0:4cff:fe68:1bb2%re0 prefixlen 64 scopeid 0x1
        inet6 2402:7940:f000:200::111 prefixlen 128
        inet 103.85.37.84 netmask 0xfffffc00 broadcast 103.85.39.255
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
[2.7.0-RELEASE][admin@pfSense.localdomain]/root:

The IPv6 gateway address shown for the WAN gateway in the GUI does not appear in the ifconfig results. Surely something is wrong here.