Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Providing isolation between Vlans!

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    32 Posts 9 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • the otherT
      the other @Bob.Dig
      last edited by

      @bob-dig said in Providing isolation between Vlans!:

      it would be nice to have this feature, but not much interest so far it seems.

      Hello there,
      I have to contradict: I am VERY interested in that feature. In fact, I wouldn't know, why anyone with dynamic prefix lease from ISP can be NOT interested...
      ๐Ÿ˜

      the other

      pure amateur home user, no business or professional background
      please excuse poor english skills and typpoz :)

      JKnottJ 1 Reply Last reply Reply Quote 1
      • JKnottJ
        JKnott @Bob.Dig
        last edited by

        @bob-dig said in Providing isolation between Vlans!:

        This is an interesting one: Reject "Prefix".

        I manually entered that value. My ISP uses DHCPv6-PD to assign prefixes, but mine doesn't change. In fact, it has survived replacing, at different times, my modem and the computer I run pfSense on. Even on IPv4, my address is virtually static and the host name will only change when I change hardware.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @johnpoz
          last edited by

          @johnpoz said in Providing isolation between Vlans!:

          I just don't see it as actually needed as of yet. I agree its the future for sure

          It's that attitude that keeps it "in the future".

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          johnpozJ the otherT 2 Replies Last reply Reply Quote 0
          • JKnottJ
            JKnott @the other
            last edited by

            @the-other

            If you want stable addresses to use with local DNS, you can use Unique Local Addresses.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @JKnott
              last edited by johnpoz

              @jknott said in Providing isolation between Vlans!:

              It's that attitude that keeps it "in the future".

              Yeah my not using it is holding up the world :) hehehe

              What keeps in the future is cost of migration. Without need - phones have now unlimited IPs with IPv6... So there is no reason to move the rest of the planet ;)

              Just like with nat when they ran out of IPv4 vs doing something about the IP shortage then - they came up with a work around ;) Guess what happens happens now, we have a work around - all the things that Need lots and lots of IPs can use IPv6.. And they will just 464XLAT them to get to the IPv4 world.. Your car will need to be connected as well - lots and lots of cars, they will use IPv6 as well.

              But sorry the rest of the planet is going to long drawn out process to move.. If it completes before we are dead and buried..

              And there is a very flourishing grey marking for the buying and selling of IPv4 space as well.. So as long as that market is viable - there is money to be made from the selling of IPv4, so it not going anywhere any time soon.

              So yeah - if billy bob not an IT guy, he has zero use for IPv6 currently.. Now if his isp won't give him IPv4 then he as need to work out how to use IPv6 for inbound. But guess what, most of the other uses on the planet can't get to them - and they have no desire too.

              Lets see one of the major players say hey - in 202X we will turn off IPv4.. So you better be on IPv6 if you want to use us. That is never going to happen, but that would drive desire for IPv6 from the user base. Like I said my isp doesn't provide it, nor have I seen any announcements of them having it even on their roadmap..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              DerelictD JKnottJ 2 Replies Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate @johnpoz
                last edited by

                ISPs are holding back IPv6 adoption by deploying it wrong.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                johnpozJ Bob.DigB 2 Replies Last reply Reply Quote 1
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @Derelict
                  last edited by

                  @derelict yeah good point as well ;)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • Bob.DigB
                    Bob.Dig LAYER 8 @Derelict
                    last edited by

                    @derelict said in Providing isolation between Vlans!:

                    ISPs are holding back IPv6 adoption by deploying it wrong.

                    Na... they pushing it but in a wrong way and will keep doing it.

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @johnpoz
                      last edited by

                      @johnpoz said in Providing isolation between Vlans!:

                      Yeah my not using it is holding up the world :) hehehe

                      I bet you didn't realize you were such an influencer. ๐Ÿ˜‰

                      But yes, this sort of attitude is the problem. For example, I'm on Rogers, in Canada. Rogers has been providing native IPv6 for over 6 years. Prior to that, they used 6to4 and 6rd tunnels. They also have full support on their cell network and tethered devices also get IPv6 addresses. On the other hand, another major provider, Bell Canada, does not provide it to their Internet customers and they do a very poor job on their cell network, to the point a phone will only get 2 at test-ipv6.com and forget about tethered devices. North America is fortunate with IPv4 in that it has most of the addresses. Other parts of the world aren't so fortunate and cannot provide adequate IPv4 connections.

                      Bottom line, the world has to move to IPv6 and the sooner the better. People or companies who refuse to move are just prolonging the problems caused by sticking with IPv4, including NAT. I've been using IPv6 for over 12 years. It's well past time for the rest of the world to catch up.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • the otherT
                        the other @JKnott
                        last edited by

                        @jknott yeah, that's what I'm doing, using ulas as well as gua...still would be nice.
                        And I agree with the opinion about ISPs breaking ipv6 with those dynamic prefix idea...
                        To get a fix prefix german telekom wants about 20 Euro a month more by providing half the bandwith. So...wonder ,why they implement it as they do...(not)
                        :)

                        the other

                        pure amateur home user, no business or professional background
                        please excuse poor english skills and typpoz :)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.