Project

General

Profile

Feature #10392

GRE: Tunnels cannot have IPv6 and IPv4 addresses at the same time

Added by Skyler Mäntysaari about 2 months ago. Updated 8 days ago.

Status:
Feedback
Priority:
Normal
Category:
Interfaces
Target version:
Start date:
03/30/2020
Due date:
% Done:

100%

Estimated time:

Description

For some unknown reason, pfSense does not ask in the GUI for local/remote IPv6 addresses when a user wants to use it to carry both, this is defined in [[https://tools.ietf.org/html/rfc7676]].

This should be addressed.

Associated revisions

Revision 5cb09a31 (diff)
Added by sebastian nielsen 19 days ago

Feature #10392: GRE: Tunnels cannot have IPv6 and IPv4 addresses at the same time

Revision e8e3fd22 (diff)
Added by sebastian nielsen 18 days ago

Feature #10392: Removed IPv4/IPv6 selection. Added code for configuration migration on upgrade.

Revision 491217a6 (diff)
Added by sebastian nielsen 16 days ago

Feature #10392: Improved/unified wording, removed link3, fixed empty() vs !== bug, fixed upgrade code. Increased config to 20.3.

History

#1 Updated by Skyler Mäntysaari about 2 months ago

Skyler Mäntysaari wrote:

For some unknown reason, pfSense does not ask in the GUI for local/remote IPv6 addresses when a user wants to use it to carry both, this is defined in https://tools.ietf.org/html/rfc7676.

This should be addressed.

#2 Updated by Jim Pingle about 2 months ago

  • Category set to Interfaces

It may be in the RFC but have you confirmed that it actually works on FreeBSD?

#3 Updated by Sebas tian 19 days ago

I manually executed

/sbin/ifconfig gre0 inet6 <localV6> <remoteV6> prefixlen 128
(as etc/inc/interfaces.inc would do it) and I can (at least) ping the tunnel remote now, so it seems to works? Although pfSense seems to remove the v6 address shortly after manually setting it …

#4 Updated by Jim Pingle 19 days ago

In that case it should be fairly easy to add that to the GUI by splitting it into separate IPv4 and IPv6 options. It will need some upgrade code to separate out the existing IPv4 and IPv6 config into the new fields but that should be simple.

The same should be done to GIF as well

#5 Updated by Sebas tian 19 days ago

I have implemented the necessary changes for GRE interfaces (and tested them with my setup – seems to be working). I have no way of testing it for GIF and therefore hesitate to add my changes there, too. Should I still do it nevertheless or should I just create a PR for the GRE part? (PRs on Github are the correct way to submit the changes, right?)

#6 Updated by Sebas tian 19 days ago

#7 Updated by Jim Pingle 18 days ago

  • Status changed from New to Pull Request Review

#8 Updated by Jim Pingle 15 days ago

  • Target version set to 2.5.0

#9 Updated by Renato Botelho 8 days ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged. Thanks!

Also available in: Atom PDF