IOS IPv6 not working on opt interfaces

k6usy

Background info: I am running pfSense 2.2.6-Release dual stack with Comcast as my ISP. Before yesterday I was only requesting a /64 from Comcast and assigning it to my primary LAN. This was working great on my LAN but I wanted to extend IPv6 support to my guest wireless and home automation vLANs.

Yesterday I switch to requesting a /60 from Comcast and enabled prefix hint. I assigned prefix ID 0, 1 & 2 to my 3 LAN interfaces with no problem.

WAN 2001:558:xxxx:xx:xxxx:xxxx:xxxx:xxxx
LAN 2601:205:3:xxx0:xxx:xxxx:xxxx:xxxx
Guest 2601:205:3:xxx1:xxx:xxxx:xxxx:xxxx
HA 2601:205:3:xxx2:xxx:xxxx:xxxx:xxxx

So far so good, I am getting IPv6 addresses on my 3 of my LANs; I then updated my firewall rules to allow IPv6 traffic on Guest and HA. ICMPv6 is allowed in both directions on all interfaces.

Here comes the fun part, when I started doing some testing I was able to use my Windows laptop dual stack on all 3 LANs no problem (Wired and Wireless). But my iPhone and iPad only work with IPv6 on the LAN. Both iOS devices get dual stack IPs on all 3 LANs, I can even ping and traceroute stuff over IPv6. If I try to access any IPv6 websites… nothing on Guest or HA vLAN. If my move these devices back to my LAN they work just fine.

I checked my RA config and everything looks good.

# Automatically Generated, do not edit
# Generated config for dhcp6 delegation from wan on lan
interface vr0 {
	AdvSendAdvert on;
	MinRtrAdvInterval 3;
	MaxRtrAdvInterval 10;
	AdvLinkMTU 1500;
	AdvOtherConfigFlag on;
		prefix 2601:205:3:xxx0::/64 {
		AdvOnLink on;
		AdvAutonomous on;
		AdvRouterAddr on;
	};
	RDNSS 2601:205:3:xxx0:xxx:xxxx:xxxx:xxxx { };
	DNSSL k6usy.com { };
};
# Generated config for dhcp6 delegation from wan on opt1
interface vr0_vlan10 {
	AdvSendAdvert on;
	MinRtrAdvInterval 3;
	MaxRtrAdvInterval 10;
	AdvLinkMTU 1500;
	AdvOtherConfigFlag on;
		prefix 2601:205:3:xxx1::/64 {
		AdvOnLink on;
		AdvAutonomous on;
		AdvRouterAddr on;
	};
	RDNSS 2601:205:3:xxx1:xxx:xxxx:xxxx:xxxx { };
	DNSSL k6usy.com { };
};
# Generated config for dhcp6 delegation from wan on opt3
interface vr0_vlan2 {
	AdvSendAdvert on;
	MinRtrAdvInterval 3;
	MaxRtrAdvInterval 10;
	AdvLinkMTU 1500;
	AdvOtherConfigFlag on;
		prefix 2601:205:3:xxx2::/64 {
		AdvOnLink on;
		AdvAutonomous on;
		AdvRouterAddr on;
	};
	RDNSS 2601:205:3:xxx2:xxx:xxxx:xxxx:xxxx { };
	DNSSL k6usy.com { };
};

What would cause iOS devices to not work with IPv6 on opt interfaces, what am I missing here?

k6usy

Upgraded to 2.3 last night, still having problems with my iOS devices working with IPv6 on my opt interfaces.

Toady

Is RA only enabled on the LAN interface, or is it enabled on the other interfaces too ?

k6usy

Both DHCPv6 and RA are enabled on all 3 LANs almost identical setups (I have the domain name set different on two of the LANs). My windows laptop can use IPv6 on my guest wireless but if I connect my phone or iPad it does not work. Move the devices back to my LAN and they work just fine.