Bug #15096
closed
Interface subnet aliases do not contain IPv6 VIPs
Added by Bob Dig 11 months ago.
Updated 10 months ago.
Category:
Aliases / Tables
Plus Target Version:
24.03
Description
While the tables NETWORK not reflecting any IPv6 ULA as VIP at all, an ULA IPv6 connection from LAN is working while a connection from other Subnets isn't working as long as there is a rule with subnets as source. It is working with source any with every subnet, not only LAN.
Also see this forum post.
https://forum.netgate.com/topic/184867/ula-routing-broke-after-2-7-2-update/2?=1702635139798
CE and Plus are affected.
Files
I just looked, created gua and ula on one of my interfaces - and while the gua is shown, the ula is missing.
I created a IPv4 vip on the same interface the ula is on, and the IPv4 is shown, the gua IPv6 is shown, but not the ula.
I fixed it temporarely by adding separate allow rule for the ULA.
- Project changed from pfSense Plus to pfSense
- Subject changed from built-in subnets not containing ULA IPv6 VIP to Interface subnet aliases do not contain IPv6 VIPs
- Category changed from Aliases / Tables to Aliases / Tables
- Status changed from New to Feedback
- Assignee set to Marcos M
- Target version set to 2.8.0
- Affected Plus Version deleted (
23.09)
- Plus Target Version set to 24.03
- Affected Version set to 2.7.2
Fixed in commit 1c4ca20d3d5910f126f11221f23e1fa21197f225.
- % Done changed from 0 to 100
Patch is woring, table now contain the IPV6 alias IP
tested on
23.09.1-RELEASE (amd64)
built on Wed Dec 6 23:22:00 MSK 2023
FreeBSD 14.0-CURRENT
Patch working great, thanks.
Works like a charm! cheers!
- Status changed from Feedback to Resolved
Turns out the patch is only working momentarily. It will prevent you from enabling IPv6 GUA (tested via Track Interface) on another interface.
First you have to disable the patch, turn IPv6 on on another interface, as desired, and then re-enable the patch (for ULA).
- Status changed from Resolved to New
- % Done changed from 100 to 90
- Status changed from New to Resolved
- % Done changed from 90 to 100
This issue/fix is only related to the alias; if an IPv6 address does not get added to the interface, that would need its own redmine issue.
The reason it is not working anymore is this patch, so it looks counter-intuitive to me to open another redmine issue.
Also available in: Atom
PDF