• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

DHCP-v6 PD broken when track interface enabled on wirguard interface

Scheduled Pinned Locked Moved Plus 25.03 Develoment Snapshots
9 Posts 2 Posters 343 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    BN82
    last edited by 28 days ago

    Hello,
    i got a new internet connection with IPv6, and had an issue where the WAN interface was configured with DHCPv6 and should receive an address and a prefix.
    The interface was receiving an address but no prefix, and there was just an error in the dhcpv6c log: dhcp6c failed to parse configuration file.
    This was fixed when i removed IPV6 configuration for wireguard interface that was track interface. Then all worked as expected.

    I guess IPv6 track interface should be blocked for wireguard interface ?
    Or can we have an IPV6 network with a prefix from dhcp for wireguard interface ?

    1 Reply Last reply Reply Quote 0
    • S
      stephenw10 Netgate Administrator
      last edited by 28 days ago

      Hmm, interesting. Since that's the default setting I'd expect to have seen a lot of threads if it was a problem.

      Are you getting a valid prefix?

      Is it working on other internal interfaces?

      B 1 Reply Last reply 27 days ago Reply Quote 0
      • B
        BN82 @stephenw10
        last edited by 27 days ago

        @stephenw10 If I remove "track interface" on wireguard interface (i have 2 wireguard interfaces), then yes, the other internal interface get a prefix, otherwise no interface has an IPV6 addresse except WAN (which uses SLAAC). The router before is a mikrotik that distribute the prefix with DHCPv6.

        1 Reply Last reply Reply Quote 0
        • S
          stephenw10 Netgate Administrator
          last edited by 27 days ago

          Hmm, can you replicate it?

          If so can you check the dhcp6c conf file it's choking on at: /var/etc/dhcp6c.conf

          1 Reply Last reply Reply Quote 0
          • B
            BN82
            last edited by BN82 25 days ago 25 days ago

            This would be the dhcp6c.conf when wireguard is configured with track interface, and interface don't get an ipv6 address:

            interface igb0 {
            	send ia-na 0;	# request stateful address
            	send ia-pd 0;	# request prefix delegation
            	request domain-name-servers;
            	request domain-name;
            	script "/var/etc/dhcp6c_wan_script.sh"; # we'd like some nameservers please
            };
            id-assoc na 0 { };
            id-assoc pd 0 {
            	prefix-interface tun_wg0 {
            		sla-id 0;
            		sla-len 8;
            	};
            	prefix-interface igb2 {
            		sla-id 10;
            		sla-len 8;
            	};
            	prefix-interface igb1 {
            		sla-id 4;
            		sla-len 8;
            	};
            	prefix-interface tun_wg1 {
            		sla-id 1;
            		sla-len 8;
            	};
            };
            

            and the log:

            May 8 21:13:38 	dhcp6c 	51900 	failed to parse configuration file
            May 8 21:13:38 	dhcp6c 	51900 	failed to get default IF ID for tun_wg0
            May 8 21:13:38 	dhcp6c 	51900 	link layer address is too short (tun_wg0)
            May 8 21:13:38 	dhcp6c 	51900 	skip opening control port
            May 8 21:13:38 	dhcp6c 	51900 	failed initialize control message authentication
            May 8 21:13:38 	dhcp6c 	51900 	failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
            
            1 Reply Last reply Reply Quote 0
            • S
              stephenw10 Netgate Administrator
              last edited by 25 days ago

              Ah, because it has no link-layer. Hmm, in that case it always seems invalid. 🤔

              1 Reply Last reply Reply Quote 0
              • B
                BN82
                last edited by 20 days ago

                Will this be fixed ?

                1 Reply Last reply Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by 19 days ago

                  The fix here seems to be to prevent, or at least default to, not setting trackv6 on assigned wireguard interfaces.

                  You haven't seen any ongoing problems since disabling that I'm assuming?

                  1 Reply Last reply Reply Quote 0
                  • B
                    BN82
                    last edited by BN82 13 days ago 13 days ago

                    since disabling trackv6 all good.
                    I now put a static address in Wireguard interface and all is working.

                    But i guess that interface with NOARP needs a special treatment !

                    1 Reply Last reply Reply Quote 1
                    9 out of 9
                    • First post
                      9/9
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                      This community forum collects and processes your personal information.
                      consent.not_received