hey, do you happen to see anything in the "ipsecctl -sf" output? if there's a deny flow, try flushing it via "ipsecctl -F".
On 21 May 2015 at 23:22, Chris Moody <ch...@node-nine.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > Hello - new list-subscriber here. > > Need a little help debugging IPv6 on OpenBSD 5.7. I've got a VMware VM > running as a router. IPv4 is working beautifully. V6 is not working > for some reason. I'm unable to even ping6 the system's local interfaces. > > I've cleared all v6 interface settings and am trying to bring them up > one interface at a time while debugging but still no luck. > > link-local and global addresses are not responding. PF is disabled > while troubleshooting. > > I've included some relevant v6 settings and outputs in case it sheds > some light or gives any ideas. > > ==========[ pf disabled > root@spike ~ # pfctl -d > pfctl: pf not enabled > > ==========[ first interface I'm bringing up > root@spike ~ # ifconfig em5 > em5: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 > lladdr 00:0c:29:cc:5c:76 > priority: 0 > groups: egress > media: Ethernet autoselect (1000baseT full-duplex,master) > status: active > inet 192.168.255.254 netmask 0xffffff00 broadcast 192.168.255.255 > inet6 fe80::20c:29ff:fecc:5c76%em5 prefixlen 64 scopeid 0x6 > inet6 2001:470:xxxx:255::254 prefixlen 64 > > ==========[ unable to ping6 local interface's link-local address > root@spike ~ # ping6 fe80::20c:29ff:fecc:5c76 > PING6(56=40+8+8 bytes) ::1 --> fe80::20c:29ff:fecc:5c76 > ping6: sendmsg: No route to host > ping6: wrote fe80::20c:29ff:fecc:5c76 16 chars, ret=-1 > ^C > - --- fe80::20c:29ff:fecc:5c76 ping6 statistics --- > 1 packets transmitted, 0 packets received, 100.0% packet loss > > ==========[ unable to ping6 local interface's global address > root@spike ~ # ping6 2001:470:xxxx:255::254 > PING6(56=40+8+8 bytes) 2001:470:xxxx:255::254 --> 2001:470:xxxx:255::254 > ping6: sendmsg: No route to host > ping6: wrote 2001:470:xxxx:255::254 16 chars, ret=-1 > ^C > - --- 2001:470:xxxx:255::254 ping6 statistics --- > 1 packets transmitted, 0 packets received, 100.0% packet loss > > ==========[ lo0 only has it's link-local default address > root@spike ~ # ifconfig lo0 > lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 32768 > priority: 0 > groups: lo > inet6 fe80::1%lo0 prefixlen 64 scopeid 0xb > inet6 ::1 prefixlen 128 > inet 127.0.0.1 netmask 0xff000000 > > ==========[ IPv6 forwarding is enabled > root@spike ~ # sysctl net.inet6.ip6.forwarding > net.inet6.ip6.forwarding=1 > > ==========[ netstat -rn output > Internet6: > Destination Gateway > Flags Refs Use Mtu Prio Iface > ::/104 ::1 > UGRS 0 0 32768 8 lo0 > ::/96 ::1 > UGRS 0 0 32768 8 lo0 > ::127.0.0.0/104 ::1 > UGRS 0 0 32768 8 lo0 > ::224.0.0.0/100 ::1 > UGRS 0 0 32768 8 lo0 > ::255.0.0.0/104 ::1 > UGRS 0 0 32768 8 lo0 > ::ffff:0.0.0.0/96 ::1 > UGRS 0 0 32768 8 lo0 > 2001:470:xxxx:255::/64 link#6 > UC 1 0 - 4 em5 > 2001:470:xxxx:255::11 00:0c:29:80:a8:bd > UHLc 0 0 - 4 em5 > 2001:470:xxxx:255::254 00:0c:29:cc:5c:76 > UHLl 0 0 - 1 _*lo0 ??? <- don't understand why > lo0 shows up here*_ > 2002::/24 ::1 > UGRS 0 0 32768 8 lo0 > 2002:7f00::/24 ::1 > UGRS 0 0 32768 8 lo0 > 2002:e000::/20 ::1 > UGRS 0 0 32768 8 lo0 > 2002:ff00::/24 ::1 > UGRS 0 0 32768 8 lo0 > fe80::/10 ::1 > UGRS 0 0 32768 8 lo0 > fe80::%em5/64 link#6 > UC 0 0 - 4 em5 > fe80::20c:29ff:fecc:5c76%em5 00:0c:29:cc:5c:76 > UHLl 0 0 - 1 lo0 > fec0::/10 ::1 > UGRS 0 0 32768 8 lo0 > ff01::/16 ::1 > UGRS 0 0 32768 8 lo0 > ff01::%em5/32 link#6 > UC 0 0 - 4 em5 > ff02::/16 ::1 > UGRS 0 0 32768 8 lo0 > ff02::%em5/32 link#6 > UC 0 0 - 4 em5 > root@spike ~ # > ========== > > Does anyone have any ideas. I'm betting it's a face-palm level user > error that I'm just not seeing. > > Any help is appreciated. > > Thanks, > - -Chris > Comment: GPGTools - https://gpgtools.org > > iQEcBAEBCgAGBQJVXkyYAAoJEOO37M6Idh8NH1oH/j4KOTXNmGk3S4jBM55guzEb > WHDZGS+9tbmKcy428mJKTp3awf/8f9wyBBUh5phIpoLUYpj7dbvBI9LcrP8FCI8i > nd23DD5szQNlJ5XLaAejkdnUvC0Y9B6WTnvPlvUbemMHjOpawE8zmUJFOZ+rE83W > 27XDP8qF5PvmNzkI8wrszuHIHAMCYMXdEZlJb0wxPnjRJXyR1t7pw4sVruCdlPw6 > yJJcgGGmcW26H5sYvNH6CKcFFUES1GrrpjNBz8glbkW79z25jJ26ILVSuSKweuej > YoTS5UEZKq+XSCQvLx7mAj6Rs/gxp3cI5il+RTAxZakol5XIItdgb6Mmhnw7hoU= > =8xSA > -----END PGP SIGNATURE-----
