Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 changes in 2.2.5

    Scheduled Pinned Locked Moved IPv6
    77 Posts 13 Posters 28.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

      Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        maverick_slo
        last edited by

        Already started it, Redmine later…

        1 Reply Last reply Reply Quote 0
        • D
          David_W
          last edited by

          @jimp:

          Ah, OK. My fault for not looking back more in the thread – the thread title is still 2.2.5.

          As I noted in the 2.3 board earlier today, the issues discussed in this thread relate to both 2.2.5/2.2.6 and 2.3. I'm not the original poster, so I can't change the thread title.

          @jimp:

          Start a fresh thread in the 2.3 board for this, and open a ticket on redmine.pfsense.org

          I'll leave that to maverick_slo - though there is already a post in the 2.3 board.

          Hopefully fixing the bug maverick_slo has found will help in the process of validating my fixes for the two issues discussed in this thread, so that I can get on with submitting redmine bugs for those issues and pull requests for the fixes.

          1 Reply Last reply Reply Quote 0
          • M
            maverick_slo
            last edited by

            Doing redmine right now :)

            EDIT:
            https://redmine.pfsense.org/issues/5747

            1 Reply Last reply Reply Quote 0
            • I
              Inq
              last edited by

              Hey guys, after testing the patch for 2 days on an 2.2.6 machine everything is rock solid.
              I'm connecting through a pppoe connection dynamic ipv4 and dhcp6 with a /64 PD (Use IPv4 connectivity as parent interface - check, Request only an IPv6 prefix - unckeck, DHCPv6 Prefix Delegation size - 64, Send IPv6 prefix hint - check).

              Here are some logs after rebooting or disconnecting pfsense with and without the patch applied:

              • First reboot without patch:no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:
              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 17:31:24 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 17:31:24 router ppp: [wan]   0000:0000:524d:a09a -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::524d:a09a%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root    9403   0.0  0.1  17136  2644  -  S     5:40PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root    9868   0.0  0.1  18876  2392  -  S     5:40PM  0:00.01 grep -E -e (dhcp6c|rtsold)
              root   25426   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   25642   0.0  0.1  12556  2252  -  Is    5:31PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 17:31:27 router dhcp6c[25136]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:31:27 router dhcp6c[25368]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:31:27 router dhcp6c[25368]: failed initialize control message authentication
              Jan  8 17:31:27 router dhcp6c[25136]: failed initialize control message authentication
              Jan  8 17:31:27 router dhcp6c[25368]: skip opening control port
              Jan  8 17:31:27 router dhcp6c[25136]: skip opening control port
              Jan  8 17:31:27 router dhcp6c[25642]: XID mismatch
              Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:31:28 router dhcp6c[25642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
              Jan  8 17:31:37 router dhcp6c[25642]: XID mismatch
              Jan  8 17:31:43 router dhcp6c[25642]: XID mismatch
              Jan  8 17:32:01 router dhcp6c[25642]: XID mismatch
              Jan  8 17:32:36 router dhcp6c[25642]: XID mismatch
              Jan  8 17:33:44 router dhcp6c[25642]: XID mismatch
              Jan  8 17:35:40 router dhcp6c[25642]: XID mismatch
              Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
              Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
              

              2nd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows and pending WAN_PPPOE gateway (WAN_DHCP6 is online):

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 17:47:06 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 17:47:06 router ppp: [wan]   0000:0000:524c:8625 -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::524c:8625%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   12192   0.0  0.1  12556  2256  -  Is    5:47PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   90918   0.0  0.1  17136  2644  -  S     5:50PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   91441   0.0  0.1  18876  2392  -  S     5:50PM 0:00.00 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 17:37:45 router dhcp6c[25642]: XID mismatch
              Jan  8 17:39:38 router dhcp6c[25642]: XID mismatch
              Jan  8 17:41:26 router dhcp6c[25642]: XID mismatch
              Jan  8 17:44:11 router dhcp6c[11975]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:44:11 router dhcp6c[11975]: failed initialize control message authentication
              Jan  8 17:44:11 router dhcp6c[11975]: skip opening control port
              Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:44:12 router dhcp6c[12164]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:47:08 router dhcp6c[12168]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:47:08 router dhcp6c[12168]: failed initialize control message authentication
              Jan  8 17:47:08 router dhcp6c[12168]: skip opening control port
              Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:47:09 router dhcp6c[12192]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
              

              3rd reboot without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 17:56:18 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 17:56:18 router ppp: [wan]   0000:0000:bc19:6dd4 -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::bc19:6dd4%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   24060   0.0  0.1  12556  2252  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   24449   0.0  0.1  12556  2248  -  Is    5:56PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   53777   0.0  0.1  17136  2644  -  S     6:00PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   54136   0.0  0.1  18876  2392  -  S     6:00PM 0:00.01 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 17:56:19 router dhcp6c[23836]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:56:19 router dhcp6c[23963]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 17:56:19 router dhcp6c[23963]: failed initialize control message authentication
              Jan  8 17:56:19 router dhcp6c[23836]: failed initialize control message authentication
              Jan  8 17:56:19 router dhcp6c[23963]: skip opening control port
              Jan  8 17:56:19 router dhcp6c[23836]: skip opening control port
              Jan  8 17:56:20 router dhcp6c[24449]: XID mismatch
              Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:56:21 router dhcp6c[24449]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
              Jan  8 17:56:29 router dhcp6c[24449]: XID mismatch
              Jan  8 17:56:36 router dhcp6c[24449]: XID mismatch
              Jan  8 17:56:53 router dhcp6c[24449]: XID mismatch
              Jan  8 17:57:28 router dhcp6c[24449]: XID mismatch
              Jan  8 17:58:37 router dhcp6c[24449]: XID mismatch
              Jan  8 18:00:33 router dhcp6c[24449]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
              

              Disconnect-Reconnect without patch - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 18:03:23 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 18:03:23 router ppp: [wan]   0000:0000:bc19:6aee -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
              	inet6 fe80::bc19:6aee%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   24060   0.0  0.1  12556  2252  -  Is    5:56PM  0:00.01 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   38145   0.0  0.1  12556  2344  -  Is    6:03PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   55182   0.0  0.1  17136  2644  -  S     6:09PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   55670   0.0  0.1  18876  2392  -  S     6:09PM  0:00.00 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 18:02:38 router dhcp6c[24449]: XID mismatch
              Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
              Jan  8 18:02:55 router dhcp6c[24449]: transmit failed: Device not configured
              Jan  8 18:03:02 router dhcp6c[24449]: transmit failed: Device not configured
              Jan  8 18:03:03 router dhcp6c[24449]: transmit failed: Device not configured
              Jan  8 18:03:16 router dhcp6c[24449]: no responses were received
              Jan  8 18:03:18 router dhcp6c[24449]: no responses were received
              Jan  8 18:03:18 router dhcp6c[24449]: exiting
              Jan  8 18:03:26 router dhcp6c[38049]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:03:26 router dhcp6c[38049]: failed initialize control message authentication
              Jan  8 18:03:26 router dhcp6c[38049]: skip opening control port
              Jan  8 18:03:27 router dhcp6c[24060]: XID mismatch
              Jan  8 18:03:30 router dhcp6c[24060]: XID mismatch
              Jan  8 18:03:34 router dhcp6c[24060]: XID mismatch
              Jan  8 18:03:43 router dhcp6c[24060]: XID mismatch
              Jan  8 18:04:00 router dhcp6c[24060]: XID mismatch
              Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:04:31 router dhcp6c[24060]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:04:37 router dhcp6c[24060]: XID mismatch
              Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
              Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch</performnud,accept_rtadv,auto_linklocal>
              

              First reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 18:16:13 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 18:16:13 router ppp: [wan]   0000:0000:bc19:8772 -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::bc19:8772%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root    9381   0.0  0.1  17136  2644  -  S     6:20PM 0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   10000   0.0  0.1  18876  2392  -  S     6:20PM 0:00.00 grep -E -e (dhcp6c|rtsold)
              root   25667   0.0  0.1  12556  2248  -  Is    6:16PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
              Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
              Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
              Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
              Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
              

              2nd reboot with patch applied - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows :

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 18:23:56 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 18:23:56 router ppp: [wan]   0000:0000:bc19:a7cf -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::bc19:a7cf%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   10981   0.0  0.1  12556  2260  -  Is    6:23PM 0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   44528   0.0  0.1  17136  2644  -  S     6:27PM 0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   44974   0.0  0.1  18876  2392  -  S     6:27PM 0:00.01 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
              Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
              Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
              Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
              Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
              Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
              

              3rd reboot with patch applyed - 10/10 in http://test-ipv6.com/ (just becouse i rebooted the windows machine right after rebooting pfsense) :

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 18:30:12 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 18:30:12 router ppp: [wan]   0000:0000:524d:4e1d -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::524d:4e1d%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   23681   0.0  0.1  12556  2248  -  Is    6:30PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   57452   0.0  0.1  17136  2644  -  S     6:35PM  0:00.01 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   57889   0.0  0.1  18876  2392  -  S     6:35PM  0:00.00 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 18:05:43 router dhcp6c[24060]: XID mismatch
              Jan  8 18:07:39 router dhcp6c[24060]: XID mismatch
              Jan  8 18:09:44 router dhcp6c[24060]: XID mismatch
              Jan  8 18:11:37 router dhcp6c[24060]: XID mismatch
              Jan  8 18:13:14 router dhcp6c[23482]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:13:14 router dhcp6c[23482]: failed initialize control message authentication
              Jan  8 18:13:14 router dhcp6c[23482]: skip opening control port
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:13:16 router dhcp6c[23642]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:15 router dhcp6c[25563]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:16:15 router dhcp6c[25563]: failed initialize control message authentication
              Jan  8 18:16:15 router dhcp6c[25563]: skip opening control port
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:16:17 router dhcp6c[25667]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:23:58 router dhcp6c[10902]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:23:58 router dhcp6c[10902]: failed initialize control message authentication
              Jan  8 18:23:58 router dhcp6c[10902]: skip opening control port
              Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:23:59 router dhcp6c[10981]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:30:15 router dhcp6c[23499]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:30:15 router dhcp6c[23499]: failed initialize control message authentication
              Jan  8 18:30:15 router dhcp6c[23499]: skip opening control port
              Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:30:16 router dhcp6c[23681]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
              

              Disconnect-Reconnect with patch applyed - no ipv6 address detected in http://test-ipv6.com/ without disabling/enabling the network adapter in windows:

              $ clog /var/log/ppp.log | grep -A 1 -E -e 'IPV6CP: LayerUp' | tail -n 2
              Jan  8 18:38:19 router ppp: [wan] IPV6CP: LayerUp
              Jan  8 18:38:19 router ppp: [wan]   0000:0000:567f:9f6b -> 0000:0000:0000:0001
              --
              $ ifconfig pppoe0 inet6 | grep -E -e '( fe80::|nd6)'
              	inet6 fe80::2e8:4cff:fe68:20fb%pppoe0 prefixlen 64 scopeid 0x7 
              	inet6 fe80::567f:9f6b%pppoe0 prefixlen 64 scopeid 0x7 
              	nd6 options=23 <performnud,accept_rtadv,auto_linklocal>--
              $ ps -auwwx | grep -E -e '(dhcp6c|rtsold)'
              root   42814   0.0  0.1  12556  2344  -  Is    6:38PM  0:00.00 /usr/local/sbin/dhcp6c -d -c /var/etc/dhcp6c_wan.conf -p /var/run/dhcp6c_pppoe0.pid pppoe0
              root   97484   0.0  0.1  17136  2644  -  S     6:40PM  0:00.00 sh -c ps -auwwx | grep -E -e '(dhcp6c|rtsold)' 2>&1
              root   97770   0.0  0.1  18876  2392  -  S     6:40PM  0:00.00 grep -E -e (dhcp6c|rtsold)
              --
              $ clog /var/log/dhcpd.log | grep dhcp6c | tail -n 40
              Jan  8 18:38:11 router dhcp6c[23681]: transmit failed: Device not configured
              Jan  8 18:38:18 router dhcp6c[23681]: transmit failed: No route to host
              Jan  8 18:38:19 router dhcp6c[23681]: transmit failed: No route to host
              Jan  8 18:38:22 router dhcp6c[42511]: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
              Jan  8 18:38:22 router dhcp6c[42511]: failed initialize control message authentication
              Jan  8 18:38:22 router dhcp6c[42511]: skip opening control port
              Jan  8 18:38:22 router dhcp6c[23681]: XID mismatch
              Jan  8 18:38:23 router dhcp6c[23681]: XID mismatch
              Jan  8 18:38:26 router dhcp6c[23681]: XID mismatch
              Jan  8 18:38:30 router dhcp6c[23681]: XID mismatch
              Jan  8 18:38:32 router dhcp6c[23681]: no responses were received
              Jan  8 18:38:34 router dhcp6c[23681]: no responses were received
              Jan  8 18:38:34 router dhcp6c[23681]: exiting
              Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined
              Jan  8 18:38:40 router dhcp6c[42814]: T1(4294967295) and/or T2(4294967295) is locally determined</performnud,accept_rtadv,auto_linklocal>
              

              The enable/disable thing in windows is strange other machines (linux, android, mac, ios) have no problem acquiring the new ipv6 address after reboot/disconnect-reconnect.
              WAN_PPPOE gateway in pending state must be apinger acting strange, it goes back online if i edit the gateway and save without changing anything.

              The problem with making something idiot proof is that the world keeps making better idiots.

              1 Reply Last reply Reply Quote 0
              • M
                maverick_slo
                last edited by

                @David_W:
                We indeed have identical config as far as IPv6 goes.
                BUT:

                Without your patch my IPv6 works perfect.
                With your patch my IPv6 works perfect.

                I tried:
                ISP modem power off and on.
                Unplog PPPoE iface.
                Disconnect/connect from iface status page.
                Reboot.

                In every scenario things worked 10/10 on test my IPv6 page.
                Sometimes I had to wait for RA packet and then it worked (no need to disable win/android/linux NIC).

                BR,
                Greg

                1 Reply Last reply Reply Quote 0
                • D
                  David_W
                  last edited by

                  @maverick_slo:

                  Without your patch my IPv6 works perfect.
                  With your patch my IPv6 works perfect.

                  That means that my patch causes no regressions on your system, which is my largest concern over Issue 1. Any patch touching that functionality needs to make at least some previously broken systems work whilst not breaking previously working ones.

                  I expect your system will display Issue 2 without the patch, meaning your SLAAC IPv6 WAN address will have a random element on the first connection after boot. A predictable IPv6 WAN address is useful for uptime monitoring services that ping your WAN IPv6 address and/or if you use pfSense as an IPv6 VPN endpoint.

                  It's certainly helpful that your efforts have shaken out Redmine #5747.

                  1 Reply Last reply Reply Quote 0
                  • M
                    maverick_slo
                    last edited by

                    Yeah but I`m lone rnger I guess.
                    Nobody can repro it :(

                    1 Reply Last reply Reply Quote 0
                    • C
                      cmb
                      last edited by

                      Since David hasn't been around in a bit and several of us have confirmed his 2.3 patch is good (both fixes broken scenarios, and doesn't harm anything), I went ahead and committed it. There already was a ticket for one of the issues here.
                      https://redmine.pfsense.org/issues/5621

                      1 Reply Last reply Reply Quote 0
                      • D
                        David_W
                        last edited by

                        Thanks, Chris.

                        I've been really ill with a respiratory virus on top of my neuromuscular condition, which means my energy has had to remain focused on staying alive and is why I disappeared from the forum. My cough reflex doesn't work and my cough is ineffective, so it's a case of trying not to drown.

                        I'm not recovered yet and am still stuck in bed very breathless, but I'm much better than I was. It's now a case of hoping that my strength returns and I don't get a secondary infection of bacterial pneumonia. Bacterial pneumonia is never good news and, in my case, may well eventually take my life. I have been warned that another serious bout of pneumonia could require an ICU admission, which is something I'd rather avoid.

                        The patch was in a feature branch on GitHub ready for a pull request, then my health failed before I submitted the pull request. The important thing is that it has been merged - thanks. I'll leave the feature branch up for a while just in case you want to revert the flat merge and pull from the branch to include the commit history.

                        I've created a pull request for the RELENG_2_2 version of the patch. Whilst another 2.2 release seems unlikely, these fixes have been tested and were already in a GitHub feature branch. To my mind, it makes more sense to merge them than delete the feature branch.

                        1 Reply Last reply Reply Quote 0
                        • M
                          maverick_slo
                          last edited by

                          David, take care of yourself, health comes first!
                          I (and all of community) really appreciate what you did here, and wish you good luck!

                          1 Reply Last reply Reply Quote 0
                          • C
                            cmb
                            last edited by

                            Wow, very sorry to hear, David. Definitely take care of yourself! I was hoping it was just everyday life/day job that was consuming you for a bit, figured you'd be back. Wish that's all it was.

                            I know pneumonia is no joke, I was in the hospital 5 days with it about a decade ago. It was no fun as a normally healthy 25 year old, can't imagine having other complications to deal with as well. I couldn't even sit up without supplemental oxygen. Even after that experience it still took me a decade past that to finally quit smoking, but been smoke-free for over 7 months now. Those of us who have our health tend to take it for granted.

                            Take care, hope to see you around here for many years to come.

                            1 Reply Last reply Reply Quote 0
                            • R
                              raymondjansen
                              last edited by

                              @David_W:

                              2.2.6 (or, possibly, 2.2.5)

                              Revert the RFC 4638 patch, if you have that installed.

                              Revert any previous patch from this thread.

                              Install the System Patches package (if you haven't done so already) and create a patch as follows. If you are updating from an older version of the patch, the URL has changed, so you need to use this new URL and blank the Patch Contents box.

                              | Field | Contents |
                              | Description | PPP IPv6 fixes |
                              | URL/Commit ID | https://github.com/pfsense/pfsense/compare/RELENG_2_2…davidjwood:RELENG_2_2-ppp-ipv6-new.diff |
                              | Patch Contents | (leave blank) |
                              | Path Strip Count | 1 |
                              | Base Directory | / |
                              | Ignore Whitespace | (checked) |
                              | Auto Apply | (unchecked) |

                              Press the Save button, then, if necessary, press 'Fetch' next to the patch. At this point, the option to 'Apply' should appear, so press 'Apply'.

                              Apply the RFC 4638 patch, if you are using that.

                              Execute the sysctl command at the top of this section or reboot.

                              Hi,

                              If I follow the link for 2.2.6 I get nothing. The link for 2.3 is working fine. Does anybody have a correct link for 2.2.6 for me please?

                              Thanks,
                              Ray

                              1 Reply Last reply Reply Quote 0
                              • H
                                hda
                                last edited by

                                2.2.6. "Patch Contents" for pasting.

                                IPv6_pppoe_DWpatch4.txt

                                1 Reply Last reply Reply Quote 0
                                • D
                                  David_W
                                  last edited by

                                  @raymondjansen:

                                  If I follow the link for 2.2.6 I get nothing. The link for 2.3 is working fine. Does anybody have a correct link for 2.2.6 for me please?

                                  The URL for 2.2.6 displays nothing because the patch was merged to the RELENG_2_2 branch of pfsense/pfsense. Instead of the URL, try the commit ID ec0643f7f1537ab6a18ed05fc015ecba598fcffc

                                  The patch for 2.3 still displays but is obsolete, as the patch was merged (without commit history) into the master branch of pfsense/pfsense. It has been part of all 2.3 builds for over a month.

                                  The full instructions are therefore:

                                  | Field | Contents |
                                  | Description | PPP IPv6 fixes (incorporated in pfSense releases after 2.2.6) |
                                  | URL/Commit ID | ec0643f7f1537ab6a18ed05fc015ecba598fcffc |
                                  | Patch Contents | (leave blank) |
                                  | Path Strip Count | 1 |
                                  | Base Directory | / |
                                  | Ignore Whitespace | (checked) |
                                  | Auto Apply | (unchecked) |

                                  Press the Save button, then, if necessary, press 'Fetch' next to the patch. At this point, the option to 'Apply' should appear, so press 'Apply'.

                                  Reboot pfSense.

                                  N.B. I haven't tested this method of applying the patch - the other alternative is to use the version hda posted.

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    hda
                                    last edited by

                                    Hi David, great to read from you again :)

                                    <github.com pfsense="" commit="" ec0643f7f1537ab6a18ed05fc015ecba598fcffc="">does yield, but from head on:

                                    
                                    From 682d280755ee7bd2140dca84b5ee21659a4ae580 Mon Sep 17 00:00:00 2001
                                    From: David Wood <david@xxxx.org.uk>Date: Thu, 24 Dec 2015 05:50:16 +0000
                                    Subject: [PATCH 1/8] Make ppp-ipv6 the only way interface_dhcpv6_configure()
                                     is called on PPP interfaces
                                    
                                    ... snipped</david@xxxx.org.uk> 
                                    

                                    And following code content is very different from your last patch (4th)  ;)</github.com>

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      David_W
                                      last edited by

                                      @hda:

                                      Hi David, great to read from you again :)

                                      <github.com pfsense="" commit="" ec0643f7f1537ab6a18ed05fc015ecba598fcffc="">does yield, but from head on:

                                      
                                      From 682d280755ee7bd2140dca84b5ee21659a4ae580 Mon Sep 17 00:00:00 2001
                                      From: David Wood <david@xxxx.org.uk>Date: Thu, 24 Dec 2015 05:50:16 +0000
                                      Subject: [PATCH 1/8] Make ppp-ipv6 the only way interface_dhcpv6_configure()
                                       is called on PPP interfaces
                                      
                                      ... snipped</david@xxxx.org.uk> 
                                      

                                      And following code content is very different from your last patch (4th)  ;)</github.com>

                                      For some reason, System Patches chooses to use the .patch GitHub URL, which gives all the history including the many code snippets I later reversed. If it used the .diff GitHub URL, that produces a flat patch with no history, which is really what you want.

                                      In this case, I suggest using https://github.com/pfsense/pfsense/commit/ec0643f7f1537ab6a18ed05fc015ecba598fcffc.diff as the URL.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.