IOS IPv6 not working on opt interfaces



  • Background info:  I am running pfSense 2.2.6-Release dual stack with Comcast as my ISP.  Before yesterday I was only requesting a /64 from Comcast and assigning it to my primary LAN.  This was working great on my LAN but I wanted to extend IPv6 support to my guest wireless and home automation vLANs.

    Yesterday I switch to requesting a /60 from Comcast and enabled prefix hint.  I assigned prefix ID 0, 1 & 2 to my 3 LAN interfaces with no problem.

    WAN  2001:558:xxxx:xx:xxxx:xxxx:xxxx:xxxx
    LAN    2601:205:3:xxx0:xxx:xxxx:xxxx:xxxx
    Guest  2601:205:3:xxx1:xxx:xxxx:xxxx:xxxx
    HA      2601:205:3:xxx2:xxx:xxxx:xxxx:xxxx

    So far so good, I am getting IPv6 addresses on my 3 of my LANs; I then updated my firewall rules to allow IPv6 traffic on Guest and HA.  ICMPv6 is allowed in both directions on all interfaces.

    Here comes the fun part, when I started doing some testing I was able to use my Windows laptop dual stack on all 3 LANs no problem (Wired and Wireless).  But my iPhone and iPad only work with IPv6 on the LAN.  Both iOS devices get dual stack IPs on all 3 LANs, I can even ping and traceroute stuff over IPv6.  If I try to access any IPv6 websites… nothing on Guest or HA vLAN.  If my move these devices back to my LAN they work just fine.

    I checked my RA config and everything looks good.

    # Automatically Generated, do not edit
    # Generated config for dhcp6 delegation from wan on lan
    interface vr0 {
    	AdvSendAdvert on;
    	MinRtrAdvInterval 3;
    	MaxRtrAdvInterval 10;
    	AdvLinkMTU 1500;
    	AdvOtherConfigFlag on;
    		prefix 2601:205:3:xxx0::/64 {
    		AdvOnLink on;
    		AdvAutonomous on;
    		AdvRouterAddr on;
    	};
    	RDNSS 2601:205:3:xxx0:xxx:xxxx:xxxx:xxxx { };
    	DNSSL k6usy.com { };
    };
    # Generated config for dhcp6 delegation from wan on opt1
    interface vr0_vlan10 {
    	AdvSendAdvert on;
    	MinRtrAdvInterval 3;
    	MaxRtrAdvInterval 10;
    	AdvLinkMTU 1500;
    	AdvOtherConfigFlag on;
    		prefix 2601:205:3:xxx1::/64 {
    		AdvOnLink on;
    		AdvAutonomous on;
    		AdvRouterAddr on;
    	};
    	RDNSS 2601:205:3:xxx1:xxx:xxxx:xxxx:xxxx { };
    	DNSSL k6usy.com { };
    };
    # Generated config for dhcp6 delegation from wan on opt3
    interface vr0_vlan2 {
    	AdvSendAdvert on;
    	MinRtrAdvInterval 3;
    	MaxRtrAdvInterval 10;
    	AdvLinkMTU 1500;
    	AdvOtherConfigFlag on;
    		prefix 2601:205:3:xxx2::/64 {
    		AdvOnLink on;
    		AdvAutonomous on;
    		AdvRouterAddr on;
    	};
    	RDNSS 2601:205:3:xxx2:xxx:xxxx:xxxx:xxxx { };
    	DNSSL k6usy.com { };
    };
    
    

    What would cause iOS devices to not work with IPv6 on opt interfaces, what am I missing here?



  • Upgraded to 2.3 last night, still having problems with my iOS devices working with IPv6 on my opt interfaces.



  • Is RA only enabled on the LAN interface, or is it enabled on the other interfaces too ?



  • Both DHCPv6 and RA are enabled on all 3 LANs almost identical setups (I have the domain name set different on two of the LANs).  My windows laptop can use IPv6 on my guest wireless but if I connect my phone or iPad it does not work.  Move the devices back to my LAN and they work just fine.


Log in to reply