IPv6 testing

jimp

I've noticed line 167 of system_firmware_settings.php disables gitsync in web gui on platforms such as nanobsd. Since there are nanobsd IPv6 images and as far as I can tell it works fine on nanobsd…is there some other reason this feature is disabled on the web gui?

Probably because when that was first implemented, it didn't work on NanoBSD, and I'd still be inclined to not do a gitsync on NanoBSD in general, since the large number of CF writes involved would be detrimental to the lifetime of the CF.

databeestje

openvpn with ipv6 support is now included, it will slowly be integrated over the next few weeks.

The biggest issue is that most clients do not support it yet.

Cino

@databeestje:

openvpn with ipv6 support is now included, it will slowly be integrated over the next few weeks.

The biggest issue is that most clients do not support it yet.

I gitsync and updated my snapshot. I'm seeing this error in my OpenVPN logs and my RoadWarrior service wont start:


Apr 25 19:58:40 	openvpn[5266]: Use --help for more information.
Apr 25 19:58:40 	openvpn[5266]: Options error: --tun-ipv6 cannot be used with --mode server

I was able to get it running by manually editing the server1.conf file, removing the tun-ipv6 entry

databeestje

You have a old openvpn binary, you need to update.

MrKoen

@databeestje:

The javascript on the services_dhcpv6.php page is a work in progress. We'll need to fix that.

Can I help with this issue Databeestje?

MrKoen

@Databeestje, I believe I have found a bug caused by a change you did last week in the DHCPv6 service. I also believe to have found the solution for it. I have described it in this forum post:

http://forum.pfsense.org/index.php/topic,33955.msg187311.html#msg187311

Could you have a look at it?

alexis.olivier

Hello everybody,

I just reported a bug into pfSense bugtracker (http://redmine.pfsense.org/issues/1555) about DHCPv6 and "Deny unknown clients" options and there is the same bug in the v6 version but i don't know where to report it.

In line 736, you should change :

$dhcpdv6conf .= "            deny unknown clients;\n";

by

$dhcpdv6conf .= "            deny unknown-clients;\n";

By the way, i can't do failover in v6… Does anyone knows more about it ?

databeestje

From the specifications you can assign priorities to different dhcp servers. Not sure if this works yet.

Supermule

What about fixed IP's in IPv6??

MrKoen

@Supermule:

What about fixed IP's in IPv6??

What about it? It is currently already possible to configure reservations for DHCPv6 leases. Works like a charm.

Supermule

Yes….you can enable it, but cannot allocate it to interfaces asf...

MrKoen

@Supermule:

Yes….you can enable it, but cannot allocate it to interfaces asf...

If I go to /services_dhcpv6.php at the bottom I can add static reservations by entering the DUID. The DHCPv6 server nicely hands out the same reserved static IPv6 address to my client with the registered DUID. Or don't I understand you correctly?

Supermule

Pls show me the menu for this in the gui :)

MrKoen

Sure, no problem :) Check the attached screenshots. Are you sure you have gitsynced against the latest IPv6 github?

DUIDReservation.png_thumb

DUIDReservation2.png_thumb

Supermule

I dont have that at all.

noipv6.jpg_thumb

MrKoen

It looks like you're not synced with the latest version. Did you update your gitsync location to the new github location being:

https://github.com/smos/pfsense-ipv6.git

branch: master

Webview of the updates via: https://github.com/smos/pfsense-ipv6/commits/

This has changed since a week of 3. Around that time Databeestje updated the DHCPv6 reservations page from what is shown on your screenshot to what you can see on my screenshot.

Supermule

No I only use the "official" releases….no gitsync :D

MrKoen

Well that explains it then :) I must say it's incredibly stable to use the github updates. Only every now and then there's a typo somewhere which kills your whole pfSense box. That sucks bigtime.. but that's the risk of using alpha software. If you grab the current release, its stable, correct and provides you with DHCPv6 reservations :)

ludditetechnologies

Nice work on 2 everyone, looking pretty flash :)

I cant get IPV6 traffic out, gateway says it is ok:

HE_NET 2001:470:c:2f5::1 2001:470:c:2f5::1 Online HE.net Gateway

get this in log

php: : Could not find IPv6 gateway for interface(wan).

this under routing

HE_NET (default) WANIPV6 2001:470:c:2f5::1 2001:470:c:2f5::1 HE.net Gateway

Anyone have a clue about this?

Thanks.

(edit:
Version info 2.0-RC2-IPv6 (i386)
built on Sat Feb 26 16:00:14 EST 2011)

databeestje

gateway support is not complete yet, the filter rules are not address family aware yet.

If you try to set a v4 gateway on a v6 rule that will result in a rules error.

If no gateway is defined it will try to lookup a gateway for "wan" which doesn't have a v6 gateway and is returning this result in logfile.