IPv6 RS with unspecified source address



  • 2.1-BETA0 (i386)
    built on Tue Sep 18 12:28:26 EDT 2012
    FreeBSD 8.3-RELEASE-p4

    From what I can see, pfSense does not respond to Router Solicitation messages where the source address is unspecified.
    The client I have tested with, then waits for 4 seconds before sending out a new RS message with the link-local address as source, to which pfSense responds to.

    The pfSense RA is set to "Unmanaged", normal "Router Priority" and no "RA Subnets".

    Is this a known issue, limitation, or is it due to a wrong configuration on my side?

    Thank you.



  • Hi,
    I have checked the RFC (4861), and it clearly states that router solicitation messages can have undefined source address:

    Source Address
    An IP address assigned to the sending interface, or
    the unspecified address if no address is assigned
    to the sending interface.

    I have tested several times, and pfSense does not reply with RA if the source address in the RS message is undefined.

    I consider this to be a fault in the pfSense.


  • Rebel Alliance Developer Netgate

    We currently use the radvd daemon for RA, so if there is a fault, it lies there.

    Does anything show up under Status > System Logs on the Routing tab from radvd when it receives one of these packets?



  • No, there are no log entries due to these RS messages.



  • My bad!
    I noticed an IPv6 rule that did not allow undefined address access to the fw.
    After I explicitly created a rule for this case, pfSense responds with RA after the RS mentioned above.

    Sorry for the confusion.


Locked