IPv6 DHCP-PD – radvd dies after interface reset - dhcpv6 does not reaquire addr
-
Unfortunately, for me it's more or less the same.
But even the first offer is not accepted.Normally the link local address is used to aquire a lease.
I have a virtual IPv6 address that is used by haproxy to hide multiple servers behind a single IPv6 address.
now the DHCP6 client uses this ip as the interface IP so every offer is rejected with a XID mismatch.When I remove the virtual IP the initial lease is accepted but when the lease is expired the renew is denied.
/Andre
-
Interesting… I'm on Comcast, and my 2.1-RC0 box (June 4 snapshot) passed the four-day uptime mark today without losing IPv6 connectivity (and with rc.newwanip6 entries in the system log earlier today). Could this issue have been resolved?
-
I am still having issues.. Maybe I will try a clean install?
Just updated too
2.1-RC0 (i386)
built on Sun Jun 9 18:28:57 EDT 2013
FreeBSD 8.3-RELEASE-p8Jun 10 04:24:31 radvd[9391]: Exiting, failed to read config file.
Jun 10 04:24:31 radvd[9391]: error parsing or activating the config file: /var/etc/radvd.conf
Jun 10 04:24:31 radvd[9391]: syntax error in /var/etc/radvd.conf, line 2:
Jun 10 04:24:31 radvd[9391]: version 1.9.1 started
Jun 10 04:24:25 radvd[97175]: Exiting, failed to read config file.
Jun 10 04:24:25 radvd[97175]: error parsing or activating the config file: /var/etc/radvd.conf
Jun 10 04:24:25 radvd[97175]: syntax error in /var/etc/radvd.conf, line 2:
Jun 10 04:24:25 radvd[97175]: version 1.9.1 started
Jun 10 04:24:08 radvd[8125]: Exiting, failed to read config file.
Jun 10 04:24:08 radvd[8125]: error parsing or activating the config file: /var/etc/radvd.conf
Jun 10 04:24:08 radvd[8125]: syntax error in /var/etc/radvd.conf, line 2:
Jun 10 04:24:08 radvd[8125]: version 1.9.1 startedSo I get a ipv6 global and link local on wan.. But not seeing anything on lan side.. I have tried resetting back to none none for wan and lan, then back to dhcp6 and track.. I have rebooted, etc. Seems like some progress was having issues grabbing global ipv6 on the wan before, etc.
-
I'm on Concast, and was unable to get it to work on beta versions. I upgraded to the RC0 dated June 8 Saturday and it's been up and running since. Hasn't been 4 days yet so I don't know if it will stick. Not sure if it's fixed but it's working for the 1st time. I had been running M0n0wall because of the problems.
Interesting… I'm on Comcast, and my 2.1-RC0 box (June 4 snapshot) passed the four-day uptime mark today without losing IPv6 connectivity (and with rc.newwanip6 entries in the system log earlier today). Could this issue have been resolved?
-
I have put some more fixes for radvd wrong config error.
Please try a today snapshot. -
Nope. I did a fresh install of …
2.1-RC0 (amd64)
built on Tue Jun 11 06:04:26 EDT 2013
FreeBSD 8.3-RELEASE-p8... The 1st time it booted, it successfully got IPv6 addressing. I let it run a couple of hours and rebooted. Now there is nothing I can do to get it to pull IPv6 addressing again.
dhcp6c[68545]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
dhcp6c[68545]: client6_init: failed initialize control message authentication
dhcp6c[68545]: client6_init: skip opening control portAlso, radvd doesn't even show up as a stopped service, it does not appear on the services screen.
-
I tried the update from today and it broke the working IPv6.
-
I'm on comcast service. Zoom Modem is IPv6 enabled. PFsense, well can't keep a ipv6 address.
I'll stay at the latest beta that I have and update when there's a consensus that the IPv6 is working again.
-
Back on May 9th, I did a clean install of this version
2.1-BETA1 (i386)
built on Thu May 9 07:05:02 EDT 2013
FreeBSD 8.3-RELEASE-p8I was able to have IPv6 work for around 4 days before the lease from Comcast's DHCP servers renewed.
After that point, I was not able to get IPv6 working again.
What's interesting is if I do a full clean install, I still cannot get it to work. Its almost like something is left behind in some configuration somewhere that a full install does not remove.
I am looking to download and install the latest beta build, but wondering if the problem has been fixed yet. So, if someone has installed a newer build with some success, please pass that on.
–Brian
-
See my 6/10 post; I've had IPv6 connectivity on Comcast for more than four days straight with the June 4 snapshot. Haven't stayed on any one revision for long enough since.
-
See my 6/10 post; I've had IPv6 connectivity on Comcast for more than four days straight with the June 4 snapshot. Haven't stayed on any one revision for long enough since.
If you would like to do an experiment …. reboot pfSense and see if it gets IPv6 addressing again.
If I build a fresh install, it works exactly once. If I reboot, it will not pull addressing again.
-
Done. Seems to get both a WAN and a LAN address just fine. (Ditto after firmware updates.)
-
I installed the built on Wed Jun 12 17:13:09 EDT 2013 update and it seems to be working so far.
-
Can anybody confirm that when a renewal is not done either 2 dhcp6c processes are running or there is no default gw for v6?
-
I've seen a few posts here in the last few days that give the impression that builds after 06/10 appear to fix the issues at hand.
Before I go and download the latest beta build, I would like a bit more feedback from those that have, and if they got IPv6 working or not.
A few people here, and also on the Comcast forum over at Broadbandreports.com have suggested moving to m0n0wall. I really don't want to do that as I am very happy with pfSense. I would rather stay with that product, as it does everything that I need it to do.
Thanks!
–Brian
-
@ermal:
Can anybody confirm that when a renewal is not done either 2 dhcp6c processes are running or there is no default gw for v6?
I'm currently on the following and will let it run its normal renewal course and report back.
2.1-RC0 (amd64)
built on Wed Jun 12 18:24:34 EDT 2013Uptime: 1 Day 02 Hours 35 Minutes 25 Seconds
–
In a previous post, I mentioned that I was able to get IPV6 addressing once and then after a reboot, it was unable to get anything. Always with the following logging:
dhcp6c[68545]: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
dhcp6c[68545]: client6_init: failed initialize control message authentication
dhcp6c[68545]: client6_init: skip opening control port… with the current build I'm running, I rebooted twice and it was ok. So, stay tuned ...
-
Today I tried to do some debugging.
What I found is that the DHCP process itself looks ok and also the PD is working.
But during the process the route command isn't foundDuring renewal an XID mismatch is generated.
[2.1-RC0][xxxx]/var/run(66): /usr/local/sbin/dhcp6c -d -D -f -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
Jun/16/2013 17:18:15: get_duid: extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:19:50:8e:29:48:5d:60:cb:50:36
Jun/16/2013 17:18:15: dhcp6_ctl_authinit: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
Jun/16/2013 17:18:15: client6_init: failed initialize control message authentication
Jun/16/2013 17:18:15: client6_init: skip opening control port
Jun/16/2013 17:18:15: cfdebug_print: <3>[interface] (9)
Jun/16/2013 17:18:15: cfdebug_print: <5>[pppoe0] (6)
Jun/16/2013 17:18:15: cfdebug_print: <3>begin of closure [{] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[send] (4)
Jun/16/2013 17:18:15: cfdebug_print: <3>[ia-na] (5)
Jun/16/2013 17:18:15: cfdebug_print: <3>[0] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>comment [# request stateful address] (26)
Jun/16/2013 17:18:15: cfdebug_print: <3>[send] (4)
Jun/16/2013 17:18:15: cfdebug_print: <3>[ia-pd] (5)
Jun/16/2013 17:18:15: cfdebug_print: <3>[0] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>comment [# request prefix delegation] (27)
Jun/16/2013 17:18:15: cfdebug_print: <3>[request] (7)
Jun/16/2013 17:18:15: cfdebug_print: <3>[domain-name-servers] (19)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[request] (7)
Jun/16/2013 17:18:15: cfdebug_print: <3>[domain-name] (11)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[script] (6)
Jun/16/2013 17:18:15: cfdebug_print: <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>comment [# we'd like some nameservers please] (35)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of closure [}] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[id-assoc] (8)
Jun/16/2013 17:18:15: cfdebug_print: <13>[na] (2)
Jun/16/2013 17:18:15: cfdebug_print: <13>[0] (1)
Jun/16/2013 17:18:15: cfdebug_print: <13>begin of closure [{] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of closure [}] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[id-assoc] (8)
Jun/16/2013 17:18:15: cfdebug_print: <13>[pd] (2)
Jun/16/2013 17:18:15: cfdebug_print: <13>[0] (1)
Jun/16/2013 17:18:15: cfdebug_print: <13>begin of closure [{] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[prefix-interface] (16)
Jun/16/2013 17:18:15: cfdebug_print: <5>[bridge0] (7)
Jun/16/2013 17:18:15: cfdebug_print: <3>begin of closure [{] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[sla-id] (6)
Jun/16/2013 17:18:15: cfdebug_print: <3>[32] (2)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>[sla-len] (7)
Jun/16/2013 17:18:15: cfdebug_print: <3>[16] (2)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of closure [}] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of closure [}] (1)
Jun/16/2013 17:18:15: cfdebug_print: <3>end of sentence [;] (1)
Jun/16/2013 17:18:15: configure_pool: called
Jun/16/2013 17:18:15: clear_poolconf: called
Jun/16/2013 17:18:15: dhcp6_reset_timer: reset a timer on pppoe0, state=INIT, timeo=0, retrans=383
Jun/16/2013 17:18:16: client6_send: a new XID (37f7f7) is generated
Jun/16/2013 17:18:16: copy_option: set client ID (len 14)
Jun/16/2013 17:18:16: copyout_option: set identity association
Jun/16/2013 17:18:16: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:16: copy_option: set option request (len 4)
Jun/16/2013 17:18:16: copyout_option: set IA_PD
Jun/16/2013 17:18:16: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:16: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=0, retrans=1088
Jun/16/2013 17:18:16: client6_recv: receive advertise from fe80::2a0:a50f:fc78:5530%pppoe0 on pppoe0
Jun/16/2013 17:18:16: dhcp6_get_options: get DHCP option client ID, len 14
Jun/16/2013 17:18:16: DUID: 00:01:00:01:19:50:8e:29:48:5d:60:cb:50:36
Jun/16/2013 17:18:16: dhcp6_get_options: get DHCP option server ID, len 26
Jun/16/2013 17:18:16: DUID: 00:02:00:00:05:83:4a:4e:31:31:45:41:33:30:42:41:46:41:00:00:00:00:00:00:00:00
Jun/16/2013 17:18:16: dhcp6_get_options: get DHCP option IA_PD, len 41
Jun/16/2013 17:18:16: IA_PD: ID=0, T1=3600, T2=5760
Jun/16/2013 17:18:16: copyin_option: get DHCP option IA_PD prefix, len 25
Jun/16/2013 17:18:16: copyin_option: IA_PD prefix: 2001:980:93ab::/48 pltime=7200 vltime=7200
Jun/16/2013 17:18:16: dhcp6_get_options: get DHCP option identity association, len 18
Jun/16/2013 17:18:16: IA_NA: ID=0, T1=0, T2=0
Jun/16/2013 17:18:16: copyin_option: get DHCP option status code, len 2
Jun/16/2013 17:18:16: status code: no addresses
Jun/16/2013 17:18:16: dhcp6_get_options: get DHCP option DNS, len 32
Jun/16/2013 17:18:16: client6_recvadvert: server ID: 00:02:00:00:05:83:4a:4e:31:31:45:41:33:30:42:41:46:41:00:00:00:00:00:00:00:00, pref=-1
Jun/16/2013 17:18:16: client6_recvadvert: reset timer for pppoe0 to 0.771510
Jun/16/2013 17:18:17: select_server: picked a server (ID: 00:02:00:00:05:83:4a:4e:31:31:45:41:33:30:42:41:46:41:00:00:00:00:00:00:00:00)
Jun/16/2013 17:18:17: client6_send: a new XID (982ee) is generated
Jun/16/2013 17:18:17: copy_option: set client ID (len 14)
Jun/16/2013 17:18:17: copy_option: set server ID (len 26)
Jun/16/2013 17:18:17: copyout_option: set status code
Jun/16/2013 17:18:17: copyout_option: set identity association
Jun/16/2013 17:18:17: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:17: copy_option: set option request (len 4)
Jun/16/2013 17:18:17: copyout_option: set IA_PD prefix
Jun/16/2013 17:18:17: copyout_option: set IA_PD
Jun/16/2013 17:18:17: client6_send: send request to ff02::1:2%pppoe0
Jun/16/2013 17:18:17: dhcp6_reset_timer: reset a timer on pppoe0, state=REQUEST, timeo=0, retrans=977
Jun/16/2013 17:18:17: client6_recv: receive reply from fe80::2a0:a50f:fc78:5530%pppoe0 on pppoe0
Jun/16/2013 17:18:17: dhcp6_get_options: get DHCP option client ID, len 14
Jun/16/2013 17:18:17: DUID: 00:01:00:01:19:50:8e:29:48:5d:60:cb:50:36
Jun/16/2013 17:18:17: dhcp6_get_options: get DHCP option server ID, len 26
Jun/16/2013 17:18:17: DUID: 00:02:00:00:05:83:4a:4e:31:31:45:41:33:30:42:41:46:41:00:00:00:00:00:00:00:00
Jun/16/2013 17:18:17: dhcp6_get_options: get DHCP option IA_PD, len 41
Jun/16/2013 17:18:17: IA_PD: ID=0, T1=3600, T2=5760
Jun/16/2013 17:18:17: copyin_option: get DHCP option IA_PD prefix, len 25
Jun/16/2013 17:18:17: copyin_option: IA_PD prefix: 2001:980:93ab::/48 pltime=7200 vltime=7200
Jun/16/2013 17:18:17: dhcp6_get_options: get DHCP option identity association, len 18
Jun/16/2013 17:18:17: IA_NA: ID=0, T1=0, T2=0
Jun/16/2013 17:18:17: copyin_option: get DHCP option status code, len 2
Jun/16/2013 17:18:17: status code: no addresses
Jun/16/2013 17:18:17: dhcp6_get_options: get DHCP option DNS, len 32
Jun/16/2013 17:18:17: info_printf: nameserver[0] 2001:888:0:6::66
Jun/16/2013 17:18:17: info_printf: nameserver[1] 2001:888:0:9::99
Jun/16/2013 17:18:17: get_ia: make an IA: PD-0
Jun/16/2013 17:18:17: update_prefix: create a prefix 2001:980:93ab::/48 pltime=7200, vltime=7200
Jun/16/2013 17:18:17: ifaddrconf: add an address 2001:980:93ab:20:fe:4aff:fec8:9c00/64 on bridge0
Jun/16/2013 17:18:17: get_ia: make an IA: NA-0
Jun/16/2013 17:18:17: update_ia: status code for NA-0: no addresses
Jun/16/2013 17:18:17: update_ia: IA NA-0 is invalidated
Jun/16/2013 17:18:17: remove_ia: remove an IA: NA-0
Jun/16/2013 17:18:17: dhcp6_reset_timer: reset a timer on pppoe0, state=INIT, timeo=0, retrans=915
Jun/16/2013 17:18:17: client6_recvreply: executes /var/etc/dhcp6c_wan_script.sh
route: not found
route: not found
Jun/16/2013 17:18:24: client6_script: script "/var/etc/dhcp6c_wan_script.sh" terminated
Jun/16/2013 17:18:24: dhcp6_remove_event: removing an event on pppoe0, state=REQUEST
Jun/16/2013 17:18:24: dhcp6_remove_event: removing server (ID: 00:02:00:00:05:83:4a:4e:31:31:45:41:33:30:42:41:46:41:00:00:00:00:00:00:00:00)
Jun/16/2013 17:18:24: client6_recvreply: got an expected reply, sleeping.
Jun/16/2013 17:18:24: client6_send: a new XID (e4dbbb) is generated
Jun/16/2013 17:18:24: copy_option: set client ID (len 14)
Jun/16/2013 17:18:24: copyout_option: set identity association
Jun/16/2013 17:18:24: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:24: copy_option: set option request (len 4)
Jun/16/2013 17:18:24: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:24: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=0, retrans=1079
Jun/16/2013 17:18:25: copy_option: set client ID (len 14)
Jun/16/2013 17:18:25: copyout_option: set identity association
Jun/16/2013 17:18:25: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:25: copy_option: set option request (len 4)
Jun/16/2013 17:18:25: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:25: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=1, retrans=2086
Jun/16/2013 17:18:27: copy_option: set client ID (len 14)
Jun/16/2013 17:18:27: copyout_option: set identity association
Jun/16/2013 17:18:27: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:27: copy_option: set option request (len 4)
Jun/16/2013 17:18:27: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:27: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=2, retrans=4252
Jun/16/2013 17:18:31: copy_option: set client ID (len 14)
Jun/16/2013 17:18:31: copyout_option: set identity association
Jun/16/2013 17:18:31: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:31: copy_option: set option request (len 4)
Jun/16/2013 17:18:31: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:31: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=3, retrans=8287
Jun/16/2013 17:18:40: copy_option: set client ID (len 14)
Jun/16/2013 17:18:40: copyout_option: set identity association
Jun/16/2013 17:18:40: copy_option: set elapsed time (len 2)
Jun/16/2013 17:18:40: copy_option: set option request (len 4)
Jun/16/2013 17:18:40: client6_send: send solicit to ff02::1:2%pppoe0
Jun/16/2013 17:18:40: dhcp6_reset_timer: reset a timer on pppoe0, state=SOLICIT, timeo=4, retrans=16283 -
@ermal:
Can anybody confirm that when a renewal is not done either 2 dhcp6c processes are running or there is no default gw for v6?
At the time the 4 day lease expired, all IPv6 addressing went away.
There is no dhcp6c process running:
$ ps -aux | grep dhcp6c root 56506 0.0 0.0 9068 1512 ?? S 12:14PM 0:00.00 grep dhcp6cJun 17 05:58:32 dhcp6c[34138]: client6_timo: all information to be updated was canceled Jun 17 05:55:08 dhcp6c[34138]: client6_timo: all information to be updated was canceledradvd is no longer running:
Jun 13 05:50:51 radvd[41186]: removing /var/run/radvd.pid Jun 13 05:50:51 radvd[41186]: sending stop adverts Jun 13 05:50:51 radvd[41186]: Exiting, sigterm or sigint received. Jun 13 05:50:30 radvd[40640]: IPv6 forwarding seems to be disabled, but continuing anyway. Jun 13 05:50:30 radvd[40640]: IPv6 forwarding setting is: 0, should be 1 Jun 13 05:50:30 radvd[40640]: version 1.9.1 started Jun 13 05:42:24 radvd[53132]: resuming normal operation Jun 13 05:42:24 radvd[53132]: attempting to reread config file Jun 13 05:42:05 radvd[50732]: IPv6 forwarding seems to be disabled, but continuing anyway. Jun 13 05:42:05 radvd[50732]: IPv6 forwarding setting is: 0, should be 1 Jun 13 05:42:05 radvd[50732]: version 1.9.1 started Jun 13 05:34:06 radvd[52561]: resuming normal operation Jun 13 05:34:06 radvd[52561]: attempting to reread config file Jun 13 05:33:47 radvd[52249]: IPv6 forwarding seems to be disabled, but continuing anyway. Jun 13 05:33:47 radvd[52249]: IPv6 forwarding setting is: 0, should be 1 Jun 13 05:33:47 radvd[52249]: version 1.9.1 startedGateway is there (same as when it was working):
Internet6: Destination Gateway Flags Netif Expire default fe80::201:5cff:fe24:9301%em1 UG em1 ::1 ::1 UH lo0 fe80::%em0/64 link#1 U em0 fe80::1:1%em0 link#1 UHS lo0 fe80::%em1/64 link#2 U em1 fe80::230:18ff:fea5:bdb8%em1 link#2 UHS lo0 -
I haven't stayed on a version long enough to see what happens after 4 days.
But after every update I loose IPv6 connectivity.
I found that by going to "LAN interface" and disabling "IPv6" and clicking "save" then going to the "WAN interface" and disabling "IPv6" then clicking on Save then clicking "Apply changes" then turning "Ipv6" back on for the "WAN interface" as "DHCP6" and set "Prefix to 64" and clicking "save" then switching to the "LAN interface" and setting "IPv6 to Track Interface" and setting "interface to WAN" and clicking "save" then hitting "Apply changes" I can get IPv6 back without rebooting. It's worked ever time since last Wednesday. If I reboot then I loose connectivity and have to repeat the above procedure to get it back.
-
Ok just did that on version
2.1-RC0 (i386)
built on Wed Jun 19 06:11:14 EDT 2013
FreeBSD 8.3-RELEASE-p8And no ipv6 – I will give it a bit, and then try to reboot.. But I had a ipv6 while I was away for work.. Figured sweet, but when I got back looking today no ipv6.. So tried updating to the above, as of yet have not been able to get a ipv6
Just going to have to go back to a tunnel from HE.. Since this is clearly NOT ready for primetime, I would just use m0n0wall but no openvpn support is not there..
Can we please work on getting stable ipv6 where it comes up on its own and best yet maintain the IP range..
