IPv6 Default Gateway Selects Wrong Physical Interface
-
Hi All,
I finally got around to getting my Hurricane tunnel working last night and came across an issue which I wasn't sure was already a known bug. I searched Redmine and the forums and couldn't find this existing already though I wanted to raise it here first to avoid logging a dupe in redmine.
Environment is:
FreeBSD <fqdn>8.3-RELEASE-p6 FreeBSD 8.3-RELEASE-p6 #0: Sat Feb 23 05:30:28 EST 2013 root@snapshots-8_3-i386.builders.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_SMP.8 i386</fqdn>
I have not git-synced beyond that snap either.
After following the guide here (http://doc.pfsense.org/index.php/Using_IPv6_on_2.1_with_a_Tunnel_Broker) I was able to ping6 the remote side of the tunnel from the OPT interface, however when I tried to ping from the LAN interface (with the appropriate routed /64 set up) I was getting a host not reachable (from memory). I also could not route any traffic from my LAN outbound nor get a response inbound using the HE IP6 port scanner. I set up a firewall rule to log allow and log incoming from HE and could see the traffic hitting the OPT interface but nothing would route.
After looking at the routing tables I noticed that the default gateway to the correct HE IPv6 address had an incorrect physical interface (my LAN interface ue0 instead of the tunnel gif0) effectively black-holing the packets:
netstat -rw Internet6: Destination Gateway Flags Refs Use Mtu Netif Expire default <fqdn of="" he="">UGS 0 420 1280 ue0 ::1 ::1 UH 0 0 16384 lo0</fqdn>
I then executed:
route delete -inet6 default route -n add -inet6 default 2001:xxxx:yyyy:zzzz::1
and now the route looks like this and the packets route correctly:
Internet6: Destination Gateway Flags Refs Use Mtu Netif Expire default <fqdn of="" he="">UGS 0 1 1280 gif0 ::1 ::1 UH 0 0 16384 lo0</fqdn>
If this isn't a known issue already please let me know and I'll raise it on Redmine, but I at least wanted to publish the issue as I spent a few hours scratching my head and couldn't find anything online to help.