[Risolto] - IPv6 OPNsense - A volte non si configura correttamente

MN00AA

Matwolf Ho notato però qualcosa di diverso nella sequenza di pacchetti IPV6CP 🤔

👀

Matwolf

nel primo caso, quello non funzionante, la richiesta ripetuta è proprio quella dell'IP che poi sarebbe dovuto essere impostato in automatico come gateway:

Skyscreaper88

Matwolf Effettivamente non ho mai provato a settare tutto statico subito dopo che funziona in automatico.... ho sempre provato a settare tutto statico quando le cose ormai non andavano piu... ma onestamente non so come possa andare... riesco a beccare l'indirizzo del gateway per la default route solo dopo che ho messo tutto in automatico e cercando nella gui l'indirizzo in quel piccolo lasso di tempo.

A me sta storia di mettere un indirizzo a caso come default gateway non ha mai funzionato... e sincerametne non dovrebbe funzionare cosi... quando avevo aruba mettevo tutto automatico, anche li non mi creava la default gateway. Andavo a pescare sempre nello stesso modo l'indirizzo ip link local dalla gui lo mettevo nella rotta statica e non smetteva mai di funzionare.

secondo me è una specifica situazione di come è implementato ipv6 da pf.

ps. non escludo che quando dico "smette di funzionare" è perchè è ripartita la ppoe... proprio come te.

MN00AA

Matwolf mmmh, pero' sembra essere il ~~pppd~~ mpd di OPNsense che non sta rispondendo al primo pacchetto ricevuto, e aspetta la ritrasmissione per poi reagire... 🤔

Hai modo di attivare il parametro "debug" di ~~pppd~~ mpd, e poi vedere cosa compare nel log quando il pacchetto viene ritrasmesso?

Matwolf

MN00AA Hai modo di attivare il parametro "debug" di pppd, e poi vedere cosa compare nel log quando il pacchetto viene ritrasmesso?

Ecco le righe relative alla riconnessione delle 23.11 (quella che ha dato problemi)

2022-11-14T23:11:29	Informational	ppp	 [opt8]   287d:08ff:fe8b:4522 -> 0000:0000:00f1:27a6
2022-11-14T23:11:29	Informational	ppp	 [opt8] IPV6CP: LayerUp
2022-11-14T23:11:29	Informational	ppp	 [opt8] IPV6CP: state change Ack-Rcvd --> Opened
2022-11-14T23:11:29	Informational	ppp	 [opt8] IPV6CP: SendConfigAck #2
2022-11-14T23:11:29	Informational	ppp	 [opt8] IPV6CP: rec'd Configure Request #2 (Ack-Rcvd)
2022-11-14T23:11:29	Informational	ppp	 [opt8_link0] rec'd unexpected protocol MPLS Control Protocol (RFC 3032), rejecting
2022-11-14T23:11:28	Informational	ppp	 [opt8] IFACE: Rename interface ng0 to pppoe1
2022-11-14T23:11:28	Informational	ppp	 [opt8] IFACE: Up event
2022-11-14T23:11:28	Informational	ppp	 [opt8]   <mio-ip-pubblico> -> 83.136.109.254
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: LayerUp
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: state change Ack-Sent --> Opened
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR <mio-ip-pubblico>
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: rec'd Configure Ack #3 (Ack-Sent)
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR <mio-ip-pubblico>
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: SendConfigReq #3
2022-11-14T23:11:28	Informational	ppp	 [opt8]     <mio-ip-pubblico> is OK
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR <mio-ip-pubblico>
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: rec'd Configure Nak #2 (Ack-Sent)
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: state change Req-Sent --> Ack-Rcvd
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: rec'd Configure Ack #1 (Req-Sent)
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR 0.0.0.0
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: SendConfigReq #2
2022-11-14T23:11:28	Informational	ppp	 [opt8]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: rec'd Configure Reject #1 (Ack-Sent)
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: state change Req-Sent --> Ack-Sent
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR 83.136.109.254
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: SendConfigAck #1
2022-11-14T23:11:28	Informational	ppp	 [opt8]     83.136.109.254 is OK
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR 83.136.109.254
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: rec'd Configure Request #1 (Req-Sent)
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: SendConfigReq #1
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: state change Starting --> Req-Sent
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: Up event
2022-11-14T23:11:28	Informational	ppp	 [opt8]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
2022-11-14T23:11:28	Informational	ppp	 [opt8]   IPADDR 0.0.0.0
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: SendConfigReq #1
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: state change Starting --> Req-Sent
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: Up event
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: LayerStart
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: state change Initial --> Starting
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPV6CP: Open event
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: LayerStart
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: state change Initial --> Starting
2022-11-14T23:11:28	Informational	ppp	 [opt8] IPCP: Open event
2022-11-14T23:11:28	Informational	ppp	 [opt8] Bundle: Status update: up 1 link, total bandwidth 64000 bps
2022-11-14T23:11:28	Informational	ppp	 [opt8_link0] Link: Join bundle "opt8"
2022-11-14T23:11:28	Informational	ppp	 [opt8_link0] Link: Matched action 'bundle "opt8" ""'
2022-11-14T23:11:28	Informational	ppp	 [opt8_link0] LCP: authorization successful
2022-11-14T23:11:28	Informational	ppp	 [opt8_link0]   MESG: S=E284CEC6B730388F3B6CFE0E82319091A3BB7B7A
2022-11-14T23:11:28	Informational	ppp	 [opt8_link0] CHAP: rec'd SUCCESS #1 len: 46
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] CHAP: sending RESPONSE #1 len: 62
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] CHAP: Using authname "<mio-username>"
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   Name: "PianetaFibra Auth2"
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] CHAP: rec'd CHALLENGE #1 len: 39
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: LayerUp
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: auth: peer wants CHAP, I want nothing
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: state change Ack-Sent --> Opened
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MAGICNUM 0x6f9a7eac
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MRU 1492
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: rec'd Configure Ack #2 (Ack-Sent)
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MAGICNUM 0x6f9a7eac
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MRU 1492
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: SendConfigReq #2
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   PROTOCOMP
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: rec'd Configure Reject #1 (Ack-Sent)
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: state change Req-Sent --> Ack-Sent
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MAGICNUM 0x23a55865
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MRU 1480
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   AUTHPROTO CHAP MSOFTv2
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: SendConfigAck #1
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MAGICNUM 0x23a55865
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MRU 1480
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   AUTHPROTO CHAP MSOFTv2
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: rec'd Configure Request #1 (Req-Sent)
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MAGICNUM 0x6f9a7eac
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   MRU 1492
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0]   PROTOCOMP
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: SendConfigReq #1
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: state change Starting --> Req-Sent
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: Up event
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] Link: UP event
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] PPPoE: connection successful
2022-11-14T23:11:27	Informational	ppp	 PPPoE: rec'd ACNAME "PianetaFibra Auth2"
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] PPPoE: Connecting to ''
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: LayerStart
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: state change Initial --> Starting
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] LCP: Open event
2022-11-14T23:11:27	Informational	ppp	 [opt8_link0] Link: OPEN event
2022-11-14T23:11:27	Informational	ppp	 [opt8] Bundle: Interface ng0 created
2022-11-14T23:11:27	Informational	ppp	 web: web is not running
2022-11-14T23:11:27	Informational	ppp	 process 15915 started, version 5.9
2022-11-14T23:11:27	Informational	ppp	
2022-11-14T23:11:27	Informational	ppp	 Multi-link PPP daemon for FreeBSD
2022-11-14T23:11:19	Informational	ppp	 process 43182 terminated
2022-11-14T23:11:19	Informational	ppp	 [opt8_link0] Link: Shutdown
2022-11-14T23:11:19	Informational	ppp	 [opt8] Bundle: Shutdown
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: state change Closed --> Initial
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: Down event
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: Close event
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] Link: giving up after 0 reconnection attempts
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] Link: DOWN event
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: LayerFinish
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: state change Closing --> Closed
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: rec'd Terminate Ack #4 (Closing)
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: LayerDown
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: SendTerminateReq #4
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: state change Closed --> Initial
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: Down event
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: state change Closed --> Initial
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: Down event
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: Close event
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: Close event
2022-11-14T23:11:17	Informational	ppp	 [opt8] Bundle: Status update: up 0 links, total bandwidth 9600 bps
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] Link: Leave bundle "opt8"
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: state change Opened --> Closing
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] LCP: Close event
2022-11-14T23:11:17	Informational	ppp	 [opt8_link0] Link: CLOSE event
2022-11-14T23:11:17	Informational	ppp	 [opt8] Bundle: closing link "opt8_link0"...
2022-11-14T23:11:17	Informational	ppp	 [opt8] Bundle: No NCPs left. Closing links...
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: LayerFinish
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: state change Closing --> Closed
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: rec'd Terminate Ack #2 (Closing)
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: LayerFinish
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: state change Closing --> Closed
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: rec'd Terminate Ack #4 (Closing)
2022-11-14T23:11:17	Informational	ppp	 [opt8] IFACE: Rename interface pppoe1 to pppoe1
2022-11-14T23:11:17	Informational	ppp	 [opt8] IFACE: Down event
2022-11-14T23:11:17	Notice	ppp-linkdown	 Removing stale PPPoE gateway fe80::f0:b4cb%pppoe1 on inet6
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: LayerDown
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: SendTerminateReq #2
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: state change Opened --> Closing
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPV6CP: Close event
2022-11-14T23:11:17	Notice	ppp-linkdown	 Removing stale PPPoE gateway 83.136.109.254 on inet
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: LayerDown
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: SendTerminateReq #4
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: state change Opened --> Closing
2022-11-14T23:11:17	Informational	ppp	 [opt8] IPCP: Close event
2022-11-14T23:11:17	Informational	ppp	 [opt8] IFACE: Close event
2022-11-14T23:11:17	Informational	ppp	 caught fatal signal TERM

MN00AA

Matwolf hmmm. Potresti mettere un qualcosa tipo

echo "[`date`] $0 $@" >> /tmp/mypppdbg.log

in cima a /usr/local/opnsense/scripts/interfaces/ppp-linkup.sh e /usr/local/opnsense/scripts/interfaces/ppp-linkdown.sh, subito sotto l'export PATH=...?

E poi vediamo cosa compare in quel file...

OperationOne

seguo perché nonostante l'hardware del tutto diverso (TP Link vr1210v) registro dei comportamenti altalenanti e più o meno analoghi, riguardo a IPv6

MN00AA

OperationOne il che e' strano visto che piu' che hardware parliamo di software (sia userspace, mpd vs pppd, che kernel, BSD vs Linux) completamente diversi...

OperationOne

MN00AA la sostanza del problema qua è che al riavvio o alla disconnessione/connessione manuale della sessione PPPoE IPv6 sul TP Link funziona correttamente fino a ...non lo so, nel senso che per qualche evento che non ho modo di monitorare, ad un certo punto IPv6 "cade" e risulta non attivo. per "altalenante" intendevo quello, non che ovviamente i problemi siano sovrapponibili pari pari fra piattaforme totalmente diverse 😉

MN00AA

OperationOne ma quando cade, cambia qualcosa nella GUI, oppure da li' vedi sempre le stesse cose mentre smette di funzionare?

OperationOne

MN00AA premesso che adesso "vedo" la rete solo da remoto da un RasPi, e che ieri sera IPv6 funzionava perfettamente, ecco qua...

attualmente da GUI l'unica cosa "sospetta" è qua

MN00AA

OperationOne hai modo di pingare da fuori l'IPv6 indicato sotto Internet e vedere se almeno quello sta ancora funzionando in questa situazione?

OperationOne

MN00AA per il momento purtroppo pare di no, vedo di organizzarmi per provarci

MN00AA

OperationOne prova da https://www.pianetafibra.it/lg/

(p.s. @PF-Matteo e' scaduto il certificato della looking glass https://www.as49367.net/ ...)

OperationOne

MN00AA ottima idea, non ci avevo pensato

comunque, no way :(

MN00AA

OperationOne ok quell'errore significa che il lease DHCPv6-PD non e' stato rinnovato nemmeno dal punto di vista del BRAS...

OperationOne qui invece potrebbe essere il firewall del TP-Link

Skyscreaper88

Mi avete incuriosito e ho provato a riattivare ipv6 sul mio dva 5592.

Sulla PPOE abilito dhcpv6.
Ottengo il prefix sulla ppoe

Vado sulla interfaccia di bridge:
Il bridge ha un indirizzo statico e ricava la /64.

il mio server dhcp6 offre la /64 nella mia lan

Creo la rotta statica a manella (l'avevo già creata a mano con un indirizzo link local a caso)

Fin qui funziona. Vi aggiorno appena smette.

OperationOne

aggiornamento: dopo aver semplicemente aggiunto gli "000" prima dell'IPv6 del router e del gateway (il che probabilmente ha forzato una disconnessione e riconnessione PPPoE), una macchina che è a valle del TPLink adesso è vista come abilitata IPv6 (prima il test falliva) però il ping dal looking glass PF continua a non funzionare

OperationOne

MN00AA qui invece potrebbe essere il firewall del TP-Link

centrato in pieno, era disabilitato il ping da WAN, vedi il mio post precedente

Skyscreaper88

Ma è normale che il tempo di vita sia cosi corto? parlo dello screen dove c'è il lease ricevuto dalla ppoe.

OperationOne

nuovo update: ho riattivato la possibilità di ping da remoto (mi sono ricordato solo ora che l'avevo tolta) e adesso il ping v6 da looking glass PF a router TPLink funziona

semplicemente adesso attendo che "vada giù" IPv6 e rifaccio il test, così vediamo se abbiamo qualche dato in più.

grazie a tutti

« Pagina precedente Pagina successiva »