Verizon Fios and IPV6, Which Settings Work?
-
Good Morning everybody;
I tried everything, I did all @MikeV7896 setting and I have all the IPV6 address, but I don't have network traffic, I can ping all my internal network IPV6 address and also the one assigned by FIOS but I can ping anything else outside of my network. IPV6 test show my IPV6 address but no connection to any IPV6 servers.
I tried using the default DNS servers and also tried Google's DNS server still not working.
Below are my settings, thanks for the help.
-
@betapc I am skeptical about the "LAN net" alias when it comes to tracked DHCPv6-PD. For shits and giggles add a rule on your LAN side allowing all IPv6 any any...
-
@jeremy-duncan Thanks for the replied. Change, still no working.
IPV6 test result change:
The setting for DHCP6 and Advertisement are correct?
Thanks
-
@betapc no you have to set the router mode to managed on the RA section if you are using DHCPv6.
-
@jeremy-duncan I made the changes still no working, I got all the IPV6 address, DNS server running but no connection outside of my network.
I don't know what else to do. I already did a clean installation of pFSense, still nothing.
-
I actually found out a bit more about what was going on.
Since I have pfsense virtualized with a didcated nic card on pfsense i decided to restore a backup I had from a few days ago. I found out that i had PFBlockerNG installed but for some reason it was not active. ( i must have been messing with some testing and disabled it)
Meaning that for some reason when you have it installed but it's disabled it basically completelly opens holes like this on your firewall (not sure what happens on the IPV4 side though) . This is a major bug ! As soon as i activated pfblockerng I couldnt ping or ssh my VMs anymore same if uninstalled it. As soon i tried to disable it but still have it installed. Boom...everything open.
I only have PFBlocker on WAN interface for inbound and my main Lan and dedicated Homelab Lan for outbout, and everything is configured automatically as floating rules.... basically blocking inbound except for a few IP blocking settings on both inboud and outbound.
I'll report this to pfsense as soon as i have time. -
@jeremy-duncan my set up is pFSense connected directly to ONT. Still not working. I was talking to FIOS customer support and they sent me a new router, I connected to the ONT, same issue, router provided all IPV6 address and getaways but no connection. The ONT is like 9 year old, I don't think that is the problem. I think the problem is more the implementation.
It's frustrating because some services were down and I didn't know why, and then I found because they were trying to connect using IPV6.
Even pFSense wasn't updating or retrieving any packages because of the IPV6. I checked on pFSense only use IPV4 and fixed my network issues.
Any suggestions how to make FIOS to fix this issues?
Thanks.
-
I have IPV6 working 100 % on FIOS network on all my interfaces using pFSense, finally after couple days.
Thanks everybody for the input, with this post I was able to enable IPV6. Thanks to @ jeremy.duncan and @MikeV7896.
These are my setting for future reference. I am using pFSense Plus.
-
@betapc what ended up being your fix?
-
@betapc There had been some IPv6 routing issues in NJ that are believed to have been resolved earlier today... so might've been affected by that?
-
@jeremy-duncan I did what you told me to change Router mode: Managed, and also I unchecked Provide DNS servers to DHCPv6 clients on all the interfaces, then unplugged all the cables from pFSense, FIOS ONT turn off and unplugged from the electricity, turned on without any cables, turned off again, plugged all the cables and turned on again.
Truth to be told I don't really know what made the trick.
Thanks
-
@mikev7896 Anyway, everything is working for now, thank you guys for all information you had provided, because this post was a huge help.
-
Thanks for your posts. I've been having the same issues on my network and your settings helped me to figure out what I was doing wrong.
I'm up and running now also.
Perth Amboy, NJ
-
Just posting this here to save anyone a little time...
@MikeV7896 has an awesome frequently-updated sheet on OneDrive that is tracking the rollout. No sense in banging your head against the wall if your area's CO hasn't been lit up yet.
-
-
To your point, I do not see my area on the list. I can confirm, this started working today. let me know what info you need to update it to my area also.
I'm in Perth Amboy, NJ
-
@slatterly6523 It's not my list - I can't edit it. I would message MikeV over on the DSLR thread and let him know.
-
Yeah, tracking the rollout is a bit out of scope for here (since this is the pfSense support forum)... post in the DSLR thread and I'll get your CO added to the list.
-
C Cyth referenced this topic on
-
B betapc referenced this topic on
-
Hi everybody, this is an update, today I did a clean installation of pFSense, out of the box I had IPV6 without any issues, I didn't have to change any settings, I have full access. Then I upgraded to pFSense plus, same thing I didn't have any issues, full IPV6 working out of the box.
The size of the IPV6 is 56 automatically Verizon provided the size to pFSense, again I didn't change any settings.
The only strange thing is the size of the IPV6 change when I upgraded to pFSense plus. I didn't have the time to figure out what happened.
So far is working.
I think Mike is right, looks like some areas just started rolling out dual stack and there is some technical issues in the implementation, couple more weeks of patience for some areas, I was waiting for Verizon implementation of dual stack for almost 10 year.
Thanks everyone for your posts, they were really helpful.
-
@betapc Are you able to share full screenshots of the Router Advertisements page? What, if anything, do you have checked? I have everything set up the same as your screenshots, but for whatever reason IPv6 traffic is not passing. I even found that spreadsheet that says that my CO should be live (since the end of July). Everything was working with Hurricane Electric before, so not sure if I'm missing something here.
