Project

General

Profile

Actions
Copy link

Bug #13633

closed

DHCPv6 rules are not created for interfaces with static IPv6

Added by Marcos M about 2 years ago. Updated about 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
DHCP (IPv6)
Target version:
2.7.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.01
Release Notes:
Default
Affected Version:
Affected Architecture:
All

Description

Tested on 23.01.

Rules are not created automatically when the DHCPv6 server is enabled on interfaces with a static IPv6 address configured.

Actions
Copy link
 #1

Updated by Marcos M about 2 years ago

  • Status changed from New to Pull Request Review
  • Assignee set to Marcos M

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/920

Before, clients on $ADMIN interface do not receive an IPv6 lease. After, clients on $ADMIN interface receive an IPv6 lease.

Actions
Copy link
 #2

Updated by Danilo Zrenjanin about 2 years ago

I couldn't replicate the issue on 22.05.

After setting the static IPv6 on the LAN interface and enabling DHCPv6 Server, I got the IPv6 address on my PC from the defined range.

Here is the generated ruleset:

# allow access to DHCPv6 server on LAN
# We need inet6 icmp for stateless autoconfig and dhcpv6
pass  quick on $LAN inet6 proto udp from fe80::/10 to fe80::/10 port = 546 ridentifier 1000002551 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from fe80::/10 to ff02::/16 port = 546 ridentifier 1000002552 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from fe80::/10 to ff02::/16 port = 547 ridentifier 1000002553 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from ff02::/16 to fe80::/10 port = 547 ridentifier 1000002554 label "allow access to DHCPv6 server" 
pass in  quick on $LAN inet6 proto udp from fe80::/10 to fc00::1 port = 546 ridentifier 1000002555 label "allow access to DHCPv6 server" 
pass out  quick on $LAN inet6 proto udp from fc00::1 port = 547 to fe80::/10 ridentifier 1000002556 label "allow access to DHCPv6 server"

I get the same ruleset generated after I copied the patched filter.inc file and reloaded the filter:

# allow access to DHCPv6 server on LAN
pass  quick on $LAN inet6 proto udp from fe80::/10 to fe80::/10 port = 546 ridentifier 1000002551 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from fe80::/10 to ff02::/16 port = 546 ridentifier 1000002552 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from fe80::/10 to ff02::/16 port = 547 ridentifier 1000002553 label "allow access to DHCPv6 server" 
pass  quick on $LAN inet6 proto udp from ff02::/16 to fe80::/10 port = 547 ridentifier 1000002554 label "allow access to DHCPv6 server" 
pass in  quick on $LAN inet6 proto udp from fe80::/10 to fc00::1 port = 546 ridentifier 1000002555 label "allow access to DHCPv6 server" 
pass out  quick on $LAN inet6 proto udp from fc00::1 port = 547 to fe80::/10 ridentifier 1000002556 label "allow access to DHCPv6 server"
Actions
Copy link
 #3

Updated by Marcos M about 2 years ago

The 22.05 system that had the same symptom ended up being user error. However 23.01 is still an issue.

Actions
Copy link
 #4

Updated by Marcos M about 2 years ago

  • Description updated (diff)
Actions
Copy link
 #5

Updated by Steve Wheeler about 2 years ago

  • Affected Architecture All added

Patch works as expected and is required in current snapshots.

Tested:

2.7.0-DEVELOPMENT (amd64)
built on Mon Nov 14 06:04:22 UTC 2022
FreeBSD 14.0-CURRENT

Actions
Copy link
 #6

Updated by Marcos M about 2 years ago

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #7

Updated by Danilo Zrenjanin about 2 years ago

  • Status changed from Feedback to Resolved

Tested against:

23.01-DEVELOPMENT (amd64)
built on Fri Nov 18 06:04:48 UTC 2022
FreeBSD 14.0-CURRENT

It works as expected. I am marking this ticket resolved.

Actions
Copy link
 #8

Updated by Jim Pingle about 2 years ago

  • Target version set to 2.7.0
  • Plus Target Version set to 23.01
Actions
Copy link

Also available in: Atom PDF