Project

General

Profile

Actions
Copy link

Todo #16146

closed

Document net.inet6.icmp6.nd6_onlink_ns_rfc4861

Added by Marcos M about 2 months ago. Updated about 1 month ago.

Status:
Rejected
Priority:
Normal
Assignee:
Jim Pingle
Category:
Troubleshooting
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Some ISPs require net.inet6.icmp6.nd6_onlink_ns_rfc4861 to be set (e.g. sysctl net.inet6.icmp6.nd6_onlink_ns_rfc4861=1). This is needed to allow pfSense to respond to Neighbor Solicitation requests sourced by an address that pfSense doesn't already know about.

For example, before setting the tunable:

15:40:29.529162 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
15:40:30.528332 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
15:40:31.528522 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
15:40:32.529656 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
15:40:33.529546 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
15:40:34.529569 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32

and after setting it:

17:03:07.113692 IP6 2001:db8:ffff:5:5::1 > ff02::1:ffb2:3434: ICMP6, neighbor solicitation, who has fe80::250:56ff:feb2:3434, length 32
17:03:07.113819 IP6 fe80::250:56ff:feb2:3434 > ff02::1:ff12:ec78: ICMP6, neighbor solicitation, who has fe80::208:a2ff:fe12:ec78, length 32
17:03:07.114223 IP6 2001:db8:ffff:5:5::1 > fe80::250:56ff:feb2:3434: ICMP6, echo request, id 18079, seq 0, length 16
17:03:07.114296 IP6 fe80::208:a2ff:fe12:ec78 > fe80::250:56ff:feb2:3434: ICMP6, neighbor advertisement, tgt is fe80::208:a2ff:fe12:ec78, length 32
17:03:07.114317 IP6 fd6e:6574:6761:7465:8361:a967:bcc8:70d3 > 2001:db8:ffff:5:5::1: ICMP6, neighbor advertisement, tgt is fe80::250:56ff:feb2:3434, length 32
17:03:07.114339 IP6 fe80::250:56ff:feb2:3434 > 2001:db8:ffff:5:5::1: ICMP6, echo reply, id 18079, seq 0, length 16
17:03:08.114233 IP6 2001:db8:ffff:5:5::1 > fe80::250:56ff:feb2:3434: ICMP6, echo request, id 18079, seq 1, length 16
17:03:08.114266 IP6 fe80::250:56ff:feb2:3434 > 2001:db8:ffff:5:5::1: ICMP6, echo reply, id 18079, seq 1, length 16

Information on this can be added to:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/connectivity.html

Related discussion:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263288
https://forum.netgate.com/topic/140950/ipv6-native-with-telstra-australia
https://forum.netgate.com/topic/196962/gigaclear-ip6-lose-of-connectivity-after-exactly-5-minutes

Actions
Copy link

Also available in: Atom PDF