Bug #15096: Interface subnet aliases do not contain IPv6 VIPs - pfSense - pfSense bugtracker

Actions

Copy link

Bug #15096

closed

Interface subnet aliases do not contain IPv6 VIPs

Added by Bob Dig about 1 year ago. Updated 11 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

Marcos M

Category:

Aliases / Tables

Target version:

2.8.0

Start date:

Due date:

% Done:

100%

Estimated time:

Plus Target Version:

24.03

Release Notes:

Default

Affected Version:

2.7.2

Affected Architecture:

Description

While the tables NETWORK not reflecting any IPv6 ULA as VIP at all, an ULA IPv6 connection from LAN is working while a connection from other Subnets isn't working as long as there is a rule with subnets as source. It is working with source any with every subnet, not only LAN.
Also see this forum post.
https://forum.netgate.com/topic/184867/ula-routing-broke-after-2-7-2-update/2?=1702635139798

CE and Plus are affected.

Files

clipboard-202312152349-amahq.png (41.9 KB) clipboard-202312152349-amahq.png

Lev Prokofev, 12/15/2023 04:49 PM

Actions

Copy link

Updated by JohnPoz _ about 1 year ago

I just looked, created gua and ula on one of my interfaces - and while the gua is shown, the ula is missing.

I created a IPv4 vip on the same interface the ula is on, and the IPv4 is shown, the gua IPv6 is shown, but not the ula.

Actions

Copy link

Updated by gwab ber about 1 year ago

I fixed it temporarely by adding separate allow rule for the ULA.

Actions

Copy link

Updated by Marcos M about 1 year ago

Project changed from pfSense Plus to pfSense
Subject changed from built-in subnets not containing ULA IPv6 VIP to Interface subnet aliases do not contain IPv6 VIPs
Category changed from Aliases / Tables to Aliases / Tables
Status changed from New to Feedback
Assignee set to Marcos M
Target version set to 2.8.0
Affected Plus Version deleted (~~23.09~~)
Plus Target Version set to 24.03
Affected Version set to 2.7.2

Fixed in commit 1c4ca20d3d5910f126f11221f23e1fa21197f225.

Actions

Copy link

Updated by Marcos M about 1 year ago

% Done changed from 0 to 100

Applied in changeset 1c4ca20d3d5910f126f11221f23e1fa21197f225.

Actions

Copy link

Updated by Lev Prokofev about 1 year ago

File clipboard-202312152349-amahq.png clipboard-202312152349-amahq.png added

Patch is woring, table now contain the IPV6 alias IP
tested on

23.09.1-RELEASE (amd64)
built on Wed Dec 6 23:22:00 MSK 2023
FreeBSD 14.0-CURRENT

Actions

Copy link

Updated by Bob Dig about 1 year ago

Patch working great, thanks.

Actions

Copy link

Updated by gwab ber about 1 year ago

Works like a charm! cheers!

Actions

Copy link

Updated by Marcos M about 1 year ago

Status changed from Feedback to Resolved

Actions

Copy link

Updated by Bob Dig 11 months ago

Turns out the patch is only working momentarily. It will prevent you from enabling IPv6 GUA (tested via Track Interface) on another interface.
First you have to disable the patch, turn IPv6 on on another interface, as desired, and then re-enable the patch (for ULA).

Actions

Copy link

#10