Bug #16163
open
Gateway widget incorrectly displays IPv6 default gateway status
0%
Description
Running 24.11 + System_Patches 2.2.20_04, the gateway widget occasionally fails to display the "globe icon" and gateway address for the default IPv6 gateway even though a default v6 gateway is configured and routing. A possible clue is that "netstat -r" displays "UG" as the v6 gateway flags in this state. When the globe icon and gateway address are correctly displayed, "netstat -r" displays "UGS" gateway flags.
pfSense is a DHCP (v4+v6) client of an ATT BGW320 residential gateway configured in IP Passthrough mode in all cases (i.e., upstream gateway and its configuration does not change).
Screenshots and debugging output here for the case of the correct display [[https://forum.netgate.com/post/1210080]], and here for the case of incorrect display [[https://forum.netgate.com/post/1213471]] .
Files
Updated by Marc Goldburg 5 months ago
Correction: System_Patches rev is 2.2.20_4
Updated by Kris Phillips 26 days ago
Marc Goldburg wrote in #note-1:
Correction: System_Patches rev is 2.2.20_4
Hello Marc,
Are you still experiencing this issue on 25.07? I also have an ATT bypass with both IPv4 and IPv6 and am unable to reproduce this issue.
Updated by Marc Goldburg 26 days ago
Hey, Kris. Have only been running 25.07 for a couple of days. Haven't yet seen the Gateway IPv6 display change on its own from the nominal display to the one reported above.
However, I can trigger something similar in 25.07 by rebooting the ATT BGW. Once it comes back up, v6 is still working -- v6 ping works, there are v6 states from LAN clients, etc. -- but the widget display is missing the globe icon and gateway address. On 24.11, the widget displayed the gateway as online in that state. With 25.07, the widget shows the gateway as Offline (see below). After 10+ minutes, I unplugged the BGW's ethernet connection from pfSense, waited 10 seconds and plugged it back in. The widget then showed the nominal display.
EDIT : For clarity, the BGW is configured in IP Passthrough mode. I am not using pfSense Authentication Bridging .
Updated by Marc Goldburg 24 days ago
Potential clue ... just updated to 25.07.1. Following the reboot, the v6 gateway status showed as in the previous screenshot. With the exception below, v6 was working from the LAN side: v6 pings to Internet sites, connections to Internet sites, etc.
However, the pfSense logs showed that dpinger was unable to ping the gateway. There were 1-2 messages per second like the following.
Aug 18 14:54:41 dpinger 89129 WAN_DHCP6 26xx:... sendto error: 13
Nor was I able to ping the gateway address from a LAN host (note the gateway is upstream of the BGW, somewhere in the ATT network).
I unplugged the pfSense<>BGW ethernet cable, waited 10s and plugged it back in. Dpinger was happy and the widget status changed to green.
Updated by