This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPv6 in broken state

IPv6 has been unuseable latetly. Its not just about the unsupported PD-IA over PPPoE which has not been fixed since i reported it 1 1/2 years ago (several times and in beta), but with the last few updates IPv6 seems to only work in midnight during full moon if you spell the right chants. Sometimes it works, sometimes i need to restart the UTM a few times turn off/on IPv6.

Is anyone else having these problems?

If Sophos is reading this: when are you going to fix remaining buggy implementation?



This thread was automatically locked due to age.
Parents
  • We recently identified the root cause for a similar issue related to IPv6. The issue was with low-speed (<=1 Gig) eth interfaces and the solution for it was to disable GRO (generic-receive-offload) for the eth interfaces on the UTM.

    You may try the following configuration for the eth interfaces on your device and see if it helps solve the issue you are facing:

    1. Disable GRO using "ethtool --offload eth<x> gro off"

    2.  If step '1' doesn’t solve the issue, also try disabling other offloading features like GSO, TSO, LRO, etc

    If this solution doesn't work, please provide more information about the NICs (like device-id, vendor-id, etc), interface speed and the kernel/ network driver version on your device.

    Thanks,

    Prakash

  • i just spent 3 hours reinstalling my complete sophos utm, now ipv6 works, will make a backup of this and see how long it "holds"

    ---

    Sophos UTM 9.3 Certified Engineer

  • ipv6 is dead again, i cant get it to work on the same utm no matter what magic i try.

    fresh utm install = works for a while

    ---

    Sophos UTM 9.3 Certified Engineer

  • Hi Ben,

    Did disabling GRO using " ethtool --offload eth<x> gro off "  not help?

    Can you please provide more information about the network interfaces & UTM? -- ie,... NIC device-id/vendor-id, interface speed, kernel version, network driver type/version and firmware version on the UTM.

  • hi, it did not help (i did that on the wan interface)

    in the end i set the IPv6 adress and gateway on the WAN Interface manually on what i got initially according to the logfile. I also than used the same prefix for my internal clients. It did not work so i finally went to sleep..

    this morning ipv6 was suddenly working again on internal clients ...

    Are you a Sophos Employee PrakashSwamy? 

    newest Firmware Version, ESXi 6.0U2, vmxnet3 NICs

    ---

    Sophos UTM 9.3 Certified Engineer

  • and ipv6 is again non functional. Will disable it until a sophos engineer will spend some proper time on it and iron out basic issues.

    ---

    Sophos UTM 9.3 Certified Engineer

Reply Children
No Data