> Le 2 mai 2016 à 20:24, Olivier Mascia <[email protected]> a écrit : > > I have a problem with IPv6 on a HA setup. > > With IPv4, it is OK. > >> IPv4 : >> VLAN MAC Address Type Age Port >> Mod >> ---------+-----------------+-------+---------+------------------------------+--- >> 2776 0000.5e00.0168 dynamic 0 Veth5 >> 5 >> 2776 0000.5e00.0168 dynamic 0 Po4 >> 6 >> Total MAC Addresses: 2 > > With IPv6 the MAC is reported active on both pfSense's (Veth5/Veth6 instead > of Veth5/Po4 as above). > >> IPv6 >> VLAN MAC Address Type Age Port >> Mod >> ---------+-----------------+-------+---------+------------------------------+--- >> 2776 0000.5e00.016a dynamic 1 Veth5 >> 5 >> 2776 0000.5e00.016a dynamic 2 Veth6 >> 6 >> Total MAC Addresses: 2 > > I proceeded for IPv6 as for IPv4. > > One IPv6 address for each WAN interface: > x:y:z:d8ff::2/64 and x:y:z:d8ff::3/64. > And a CARP virtual IP definition of x:y:z:d8ff::1/64 on WAN interface. > The VHID is 106. > > Pinging from outside either one of the WAN adresses looks good. > Pinging the CARP VIP loose packets at varying rate and captures show echo > requests packets arriving randomly on each WAN interface. > > The IPv4 part of that same setup works wonderfully.
In case anybody would doubt what I'm seeing... Here is a ping from one remote location to the CARP VIPv6: 16 bytes from x:y:z:d8ff::1, icmp_seq=0 hlim=57 time=17.095 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=1 hlim=57 time=16.801 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=2 hlim=57 time=16.906 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=3 hlim=57 time=16.004 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=4 hlim=57 time=17.142 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=8 hlim=57 time=16.766 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=11 hlim=57 time=18.267 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=15 hlim=57 time=18.232 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=18 hlim=57 time=16.817 ms 16 bytes from x:y:z:d8ff::1, icmp_seq=22 hlim=57 time=18.129 ms ^C See the missing replies 5, 6, 7, 9, 12, 13, 14, 16, 17, 19, 20, 21 ? Now look the capture on the WAN of the BACKUP pfSense: 00:50:29.040856 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 5, length 16 00:50:30.040092 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 6, length 16 00:50:31.040665 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 7, length 16 00:50:33.041250 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 9, length 16 00:50:34.041469 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 10, length 16 00:50:36.040262 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 12, length 16 00:50:37.041530 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 13, length 16 00:50:38.041524 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 14, length 16 00:50:40.040628 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 16, length 16 00:50:41.041671 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 17, length 16 00:50:43.041429 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 19, length 16 00:50:44.041769 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 20, length 16 00:50:45.040738 IP6 2a02:578:85a0:101:78eb:bc6c:8ac4:efa3 > x:y:z:d8ff::1: ICMP6, echo request, seq 21, length 16 Those echo requests weren't lost for everybody. :( -- Meilleures salutations, Met vriendelijke groeten, Best Regards, Olivier Mascia, integral.be/om _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
