trouble setting up ipv6

[Jon Radel]

On 7/10/20 13:22, Ernie Luzar wrote:
> Internet6:
> Destination                       Gateway         Flags     Netif Expire
> ::/96                             ::1              UGRS      lo0
> ::1                               link#2           UH        lo0
> ::ffff:0.0.0.0/96                 ::1              UGRS      lo0
> 2600:3c02::/64                    link#1           U         vtnet0
> 2600:3c02::f03c:92ff:febc:1       link#3           UHS       lo0
> 2600:3c02::f03c:92ff:febc:5437    link#1           UHS       lo0
> fe80::/10                         ::1              UGRS      lo0
> fe80::%vtnet0/64                  link#1           U         vtnet0
> fe80::f03c:92ff:febc:5437%vtnet0  link#1           UHS       lo0
> fe80::%lo0/64                     link#2           U         lo0
> fe80::1%lo0                       link#2           UHS       lo0
> fe80::%epair0a/64                 link#4           U         epair0a
> fe80::ad:7fff:fe8d:820a%epair0a   link             UHS       lo0
> fe80::%epair1a/64                 link#5           U         epair1a
> fe80::c0:11ff:fee6:990a%epair1a   link#5           UHS       lo0
> ff02::/16                         ::1              UGRS      lo0
>
Notable largely for the complete lack of a default route.

Consider setting your gateway explicitly instead of depending on router
advertisements:

ipv6_defaultrouter="2600:3c02::dead:dead:dead:beef"

or whatever that address is.  Otherwise you'll need to figure out what's
broken with router advertisements on your network.  My quick read of
your ipf.rules file leads me to believe that you're allowing icmp6
router advertisements in

> # pass in ipv6 pings. no ipv6 with keep state option allowed
> pass in log quick proto icmp6 all 
Are you logging advertisements based on that?  If you don't see them,
you probably need to figure out what's up with your gateway device.

As a quick check, you can also override the routing table with the -g
option to ping6.



-- 
--Jon Radel
jon at radel.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4177 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20200710/ca6dc69e/attachment.bin>