Solved IPV6 not working

N

noddybox

Hello all

I'm trying to set up IPV6 on a VPS I have with Ionos. I have followed the instructions at Thread howto-setting-up-freebsd-13-on-a-ionos-vps-server.84406 and rebooted but can't ping an outside address. Also pkg isn't working, I'm guessing because it's defaulting to IPV6. If I give it a -4 switch it's happy.

Anyway I have this in my /etc/rc.conf:

Code: 
ifconfig_vmx0="inet 185.132.36.242 netmask 255.255.255.255"
defaultrouter="10.255.255.1"
static_routes="wan"
route_wan="-host 10.255.255.1 -iface vmx0"
ifconfig_vmx0_ipv6="2a00:da00:1800:250::1/128"
ipv6_defaultrouter="fe80::1%vmx0"

My routing table looks like this:
Code: 
Routing tables

Internet6:
Destination        Gateway            Flags     Netif Expire
::/96              localhost          URS         lo0
default            fe80::1%vmx0       UGS        vmx0
localhost          link#2             UHS         lo0
::ffff:0.0.0.0/96  localhost          URS         lo0
noddybox           link#1             UHS         lo0
fe80::/10          localhost          URS         lo0
fe80::%vmx0/64     link#1             U          vmx0
fe80::250:56ff:fe2 link#1             UHS         lo0
fe80::%lo0/64      link#2             U           lo0
fe80::1%lo0        link#2             UHS         lo0
ff02::/16          localhost          URS         lo0

I'm a bit confused why there is a fe80::1%lo0 along with my default route.

Does anyone have any ideas what I'm missing?
 
I've done a route get on the freesdb.org address and it does look it should be routing via my interface, but I can't work out what could be going wrong. Could it be routing back to my machine that's going wrong? (I don't have an IPv6 capable connection at home.)

Code: 
[root@noddybox ~]# route -6 get 2610:1c1:1:606c::50:15
   route to: wfe0.nyi.freebsd.org
destination: default
       mask: default
    gateway: fe80::1%vmx0
        fib: 0
  interface: vmx0
      flags: <UP,GATEWAY,DONE,STATIC>
 recvpipe  sendpipe  ssthresh  rtt,msec    mtu        weight    expire
       0         0         0         0      1500         1         0
 
Do you have a firewall enabled? If yes, did you actually allow IPv6?
 
Yes, I do have a firewall enabled, but I have tried it without and just get the same. There is also another firewall in front of the Ionos VPS but that mentions nothing about IPv6 and you can't seem to switch it off (which I suppose is a good thing). I have tried a traceroute6 on freebsd.org and I get a !A (destination unreachable) from my own address:
Code: 
[root@noddybox ~]# traceroute6 freebsd.org
traceroute6 to freebsd.org (2610:1c1:1:606c::50:15) from 2a00:da00:1800:250::1, 64 hops max, 28 byte packets
 1  noddybox  2997.296 ms !A  3169.733 ms !A  3123.802 ms !A
I'll try contacting the Ionos support to see if there's anything at their end tomorrow, but I'm struggling to find an email address. The only options seem to be phone or on-line chat. Neither of which I enjoy!
 
Try pinging that default gateway address, you should at least be able to reach that.
 
Ah, thanks for the clarification over !A. Yes, the response times do look long for a simple I'm not going to route that.

I've tried pinging fe80::1 and I get:
Code: 
[root@noddybox ~]# ping6 -c 1 fe80::1
ping6: UDP connect: Network is unreachable
If I try pinging fe80::1%vmx0 and I get the following:
Code: 
[root@noddybox ~]# ping6 -c 1 fe80::1%vmx0
PING6(56=40+8+8 bytes) fe80::250:56ff:fe2b:7ea%vmx0 --> fe80::1%vmx0
16 bytes from fe80::1%vmx0, icmp_seq=0 hlim=64 time=1.977 ms

--- fe80::1%vmx0 ping6 statistics ---
1 packets transmitted, 1 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.977/1.977/1.977/0.000 ms
but the from address in the ping is not my public IPv6 address so not sure where it's getting that from.
 
noddybox said:
but the from address in the ping is not my public IPv6 address so not sure where it's getting that from.
Click to expand...
It's a link-local address.

If you can ping the gateway (which is also a link-local address) then the issue is further up on the network.
 
Thanks for the help and the extra info. I didn't really understand the link local addresses till you pointed them out. I'll try and contact the support to see if they can help if you think it's further up the chain.
 
Doh! It was the firewall! I allowed ICMP on my Ionos firewall and the ping suddenly started working:
Code: 
[root@noddybox ~]# ping6 -c 1 freebsd.org
PING6(56=40+8+8 bytes) 2a00:da00:1800:250::1 --> 2610:1c1:1:606c::50:15
16 bytes from 2610:1c1:1:606c::50:15, icmp_seq=0 hlim=53 time=72.948 ms

--- freebsd.org ping6 statistics ---
1 packets transmitted, 1 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 72.948/72.948/72.948/0.000 ms
And I can ping my host from one of those dodgy IPv6 ping sites on the internet. pkg is also working now without being forced onto IPv4. Not sure why ICMP should fix that, but there you go.

Thanks for your help all.

I'll leave this up here in case someone else is having the same problems and doesn't believe it could possibly be the blindingly obvious.
 
You must log in or register to reply here.
Back
Top