IPv6 testing
-
yes my ipv6 connectivity is working well, I can browse ipv6 sites, I'm not complaining about that :)
I think I miss understood your question, my bad.
the fe80:… address I wrote on my message is the gateway address shown by ipconfig. My box link local address is another address beginning with fe80:
Right, sorry… just saw the fe80:... didnt look far enough.
-Sorry about all the edits, I'm on my iPhone and seem to be having issues posting-
-
Regis, somehow I'm glad I'm not the only one having problems getting DHCPv6 to work. Was starting to doubt myself ;) I'm experiencing the same as you do.. DHCPv6 seems to be working.. no errors are reported, but my client never gets a lease. An auto configured IPv6 address works fine. I really have no clue anymore what I can be doing different why it does work with some people, but not with me. If you discover something, please do share in this topic.
-
The manual databeestje provided at his website must contain an error somewhere. It kind of jumps from the left to the right with missing the step in the middle. For example when configuring the WANIPv6 interface he all of a sudden already has a gateway while adding that is dealt with after configuring the interface. And configuring the gateway gives the address not within range error like others already have reported here. Can't believe it did work for some people. They must have done something different. I'm wondering what.
My setup indeed lacked a default route. I already tried adding it manually, but to no avail. I also saw a difference between the assigned IPv6 tunnel addresses between my hacked pfSense 1.2.3 setup and this pfSense 2.0b5 setup. Before I could add the default IPv6 route on the command line, I needed to assign the IPv6 tunnel addresses to my GIF0 at the command line first. What I did:
ifconfig gif0 inet6 2001:470:1f14:xxx::2 2001:470:1f14:xxx::1prefixlen 128
after that, I could manually add the default route for IPv6 using:
route -n add -inet6 default 2001:470:1f14:xxx::1
Just wanted to add I just installed 2.0-RC1 last night, then did the gitsync today.
I ran into the exact same issue after following the instructions - my gif0 was screwy (mask of /64 instead of /128) and no default route.
The errors in the pfsense log were:
php: /system_gateways.php: The command '/sbin/ifconfig gif0 inet6 2001:470:1f06:XXX::2 2001:470:1f06:XXX::1 prefixlen 64 ' returned exit code '1', the output was 'ifconfig: ioctl (SIOCAIFADDR): Invalid argument'
php: /system_gateways.php: The command '/sbin/route add -inet6 default '2001:470:1f06:XXX::1'' returned exit code '1', the output was 'route: writing to routing socket: Network is unreachable add net default: gateway 2001:470:1f06:XXX::1: Network is unreachable'
Now to figure out how to correctly edit the config so it "sticks" after a reboot.
-
Manual changes to the config are no longer required. Since my posting you're quoting above there have been updates from the pfSense developers to resolve that problem. Did you download the RC1 or the RC1-IPv6 version? I would highly recommend the last one. Downloadable from http://iserv.nl/files/pfsense/ipv6/rc1/. With this release you should be ready to go without any gitsyncing or firmware updating.
My gif0 towards HE.net is using the /64 netmask. Are you able to choose the gateway on the gif0 interfaces page? If so and the routing doesn't work (this still happens every now and then), just go to System -> Routing -> Edit your IPv6 route -> Change nothing and click save -> Click Apply Changes and you'll find that the routing does work after that.
-
Manual changes to the config are no longer required. Since my posting you're quoting above there have been updates from the pfSense developers to resolve that problem. Did you download the RC1 or the RC1-IPv6 version? I would highly recommend the last one. Downloadable from http://iserv.nl/files/pfsense/ipv6/rc1/. With this release you should be ready to go without any gitsyncing or firmware updating.
My gif0 towards HE.net is using the /64 netmask. Are you able to choose the gateway on the gif0 interfaces page? If so and the routing doesn't work (this still happens every now and then), just go to System -> Routing -> Edit your IPv6 route -> Change nothing and click save -> Click Apply Changes and you'll find that the routing does work after that.
I installed the 2.0-RC1 mainline last night, then today used the gitsync method to bring in your changes.
I think I just fixed it - in the gif interface config page I entered "/64" for the netmask. Changing it to /128 seems to have fixed everything. I think I was looking at the HE page at the time and figured I should match the subnet, but that's apparently not correct.
The timing on this is great - I just found out a client's colo provider has had v6 up and running for a long time. They just never bothered telling anyone about it. :) Now I can start getting some basic services up there and with pfsense + your changes I can actually test things end to end. Great job, really appreciate this.
-
The gif tunnel is a point to point link and should thus always have a /128 subnetmask. I'll correct the howto.
No need to run the ndp -a command manually, there is now a diag ndp tables page.
-
Databeestje, I was happily surprised to find out after gitsyncing last week that the IPv6 statistics on the frontpage widget started to work. I gitsynced again last weekend and they stopped working again. Are you aware of this and is this a known issue?
-
I did a firmware update instead of only gitsyncing and now the IPv6 statistics work again. I do experience total freezes of my pfSense box since a couple of days though. Every few hours it totally locks up and I have to turn the machine off and on again. Very irritating. I saw there's a new pfSense RC1 IPv6 image. I'm going to try reinstalling pfSense tonight with that image to see if that solves the lockups.
-
I've fixed the statistics issue. I accidentally overwrote the changes, that happens, atleast you can recover them easily with a source versioning system.
On system_services_dhcpv6.php there is a javascript message that should disable all dhcp fields when disabling DHCP or when it's set to "unmanaged". I failed to get this javascript check working. Perhaps you can have a look @Koen.
There is a ongoing effort with the Intel gigabit drivers which are causing some issues. There is also some active IPsec patching work. One, the other, or both of these might be causing this.
If you set the firmware update settings to gitsync after updating the firmware you can get the older binary bits but still get the newer IPv6 code. The images I've made myself are most likely affected with the same issues.
-
Just tried getting my pfSense box to work again. Something is seriously wrong with the releases. When I take the RC1 IPv6 i386 image of the 1st of March it installs well on clean system. When I restore my config I get an error during boot time that my config is from a newer version and I should urgently upgrade. When I just do a gitsync on this version, the whole IPv6 support is gone right after the gitsync as reported earlier. When I do a full firmware update + gitsync + reboot, IPv6 is still gone. When I take the 22nd of March RC1 IPv6 i386 image and clean install that, it works fine after installation. When I just gitsync that, same shit.. IPv6 support is totally gone. I now took the 22nd of March RC1 IPv6 i386 release and just restored my backup without gitsyncing or firmware updating. IPv6 support is still there and no warnings during boot time. I wonder if this brings back stability.
Funny thing is that I have two other pfSense boxes running which I haven't updated (either gitsync or firmware update) for about a month (both RC1 non IPv6 release gitsynced with IPv6 support) and they run smoothly and without any problems with both IPv4 and IPv6. I also didn't have any problems with my 3rd pfSense box which I do update frequently against the latest firmware and gitsyncs since about two weeks ago. So the problems seems to be introduced in changes made in the last month and most likely in the past two weeks. I hope the developers are able to find the cause. I am using IPSec tunnels but am not using Intel NICs by the way.
@Databeestje, I'll be happy to take a look at the JavaScript. How can I do this? Does it require gitsyncing with the latest version and then just checking out the source of the page? If so, I'll set up a new testbox first so it will not disrupt my pfSense home internet router.
-
I'm using the pfSense 2.0-RC1 binary release and then gitsynced my branch over it. It's been working well over the last month.
-
That's weird. There's not much that one can be doing wrong with a clean install. Do you recon there's something in my configuration that I keep restoring that ruins the setup after gitsyncing?
-
I've been using the gitsync method since I started developing in october or so. It just works. Not sure what you are doing that fails to perform this step.
If you end up with a tree without v6 bits you are syncing the wrong tree, this could be script failing but it has absolutely nothing to do with the git tree.
-
I believe you that it all should work fine. Just trying to find out what I can be doing wrong. This is exactly what I do:
1. Burn the pfSense-2.0-RC1-IPv6-i386-20110321-2139.iso.gz image to CD
2. Insert the CD into my old Compaq P3 800 Mhz PC that functions as my home router
3. Reboot the machine from the console menu
4. The system boots from the CD and when it asks me if I want to install, recover or boot normally I choose install.
5. In the setup screen I accept the default keyboard, vga, etc.
6. In the next screen I choose easy setup and let the installer do its thing and copy the files
7. When it's ready, it will reboot and I will remove the CD from the drive
8. Once booted, I choose not to assign VLANs and I assign the WAN and LAN to my nics
9. I choose to assign the proper private IP address to my LAN facing NIC, disable DHCP and revert to HTTP for web access all using the second menu option in the console
10. I use Firefox to browse to the webinterface of the pfSense installation and choose to restore the config from my backed up XML file
11. In the console I use option 12 and enter playback gitsync. It downloads and installs the gitsync software addons and starts gitsyncing with the tree as defined on your tutorial page. No errors, no problems during the update. It returns to the console menu and the IPv6 addresses are gone.What am I doing wrong?
-
What am I doing wrong?
I would guess you should do your step 11 before your step 10 on the grounds you probably need to have the system "IPv6 aware" before you try to import IPv6 configuration items.
-
Thanks for the advice, do note though that I'm using the IPv6 RC1 image from Databeestje which is IPv6 aware "out of the box". The only thing I can think of is that the error is caused by my config.
The reinstall I did this morning is still up and running by the way.
-
Wishful thinking unfortunately. It has crashed three times again today. And people say Microsoft stuff tends to hang :P It just showed me the following at the console screen when it got stuck. I noticed its mentioning nge0 which is my lan facing NIC. Can I assume the problems are caused by my NIC? Its not an Intel. Not sure which brand it is, but appearantly not only Intel is causing trouble. The WAN facing NIC is the exact same type. And again they worked without any hassle for a couple of months until two weeks ago :( I'm going to put together another system tomorrow with different NICs to see if that finally solves this instability.
-
do note though that I'm using the IPv6 RC1 image from Databeestje which is IPv6 aware "out of the box".
Sorry I didn't pick that up. Maybe something in the "config import" is not fully IPv6 aware. Where does this backup config file come from? Maybe pfSense thinks it need to do a version conversion on import and that is not fully IPv6 aware.
Have you tried copying your backup config file directly to /cf/conf/config.xml (not a restore through web GUI) and rebooting?
-
Can I assume the problems are caused by my NIC?
Its possible but not certain. The NIC driver (nge) might just be the place where a far earlier "corruption" manifested.
If you have this happen again please type bt at the db> prompt. This will cause the kernel debugger to display a stack trace which will provide at least a little more information about what was going on in the system leading up to the trap.
-
When I restore my config I get an error during boot time that my config is from a newer version and I should urgently upgrade.
Please post the first three lines from the configuration file you are restoring. This should show the version number. For example, on my system:
more /cf/conf/config.xml
<pfsense><version>7.9</version></pfsense>
Are you certain the configuration file you are restoring contains IPv6 information? Have you searched it for ipaddrv6 tags (for example)?