Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issue configuring IPv6 with ULA, but works fine with Track Interface.

    Scheduled Pinned Locked Moved IPv6
    36 Posts 3 Posters 4.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @lamboalpha
      last edited by

      @lamboalpha

      Can you post screen captures of your WAN, LAN and Router Advertisement pages?

      You do not need NAT, etc.. I would expect your ISP provides a /56 prefix, which provides 256 /64 prefixes, though some ISPs provide a different size. You use the /64s for each LAN or VLAN.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      L 1 Reply Last reply Reply Quote 0
      • L
        lamboalpha @JKnott
        last edited by

        @jknott a96ade86-b496-4949-b0ca-3d0459c2d030-image.png 2035e6cc-2c5a-4713-b948-477ab0501f88-image.png fb40accc-5067-436a-aace-645ebf3ec777-image.png 876106e4-24e0-48e2-85a8-6704d2ec759b-image.png 63d39771-0cdf-43d8-9681-21c8bf7f3125-image.png 7502b164-7071-4f9a-89ca-27823bc52c4a-image.png 8d75a796-570c-4840-bbd6-b2cc4d467cb8-image.png

        JKnottJ Bob.DigB 2 Replies Last reply Reply Quote 0
        • JKnottJ
          JKnott @lamboalpha
          last edited by

          @lamboalpha

          Change DHCPv6 Prefix Delegation size to whatever your ISP provides. Many, including mine, provide a /56, so 56 would go in that box.

          Also, for Router mode I have Unmanaged - RA Flags.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • Bob.DigB
            Bob.Dig LAYER 8 @lamboalpha
            last edited by

            @lamboalpha And don't use /128 for subnet on RA...

            1 Reply Last reply Reply Quote 0
            • L
              lamboalpha
              last edited by lamboalpha

              @JKnott @Bob-Dig Yes, I had the RA subnet wrong. I missed that when I redid all the settings. It is now set to /56, the same as the WAN. It had previously been at 64. JKnott, I changed the Router mode to Managed. When DHCPv6 is enabled, it works with assisted or managed fine.

              Still nothing on the LAN is getting an IPv6 address.

              Thanks...

              JKnottJ Bob.DigB 2 Replies Last reply Reply Quote 0
              • JKnottJ
                JKnott @lamboalpha
                last edited by

                @lamboalpha

                Assuming your ISP is providing DHCPv6-PD, it should work. Maybe the best thing is to start fresh, as you may have messed up something. Keep it simple and get it working before adding any extras.
                You can back up the existing config first, so you can compare.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • Bob.DigB
                  Bob.Dig LAYER 8 @lamboalpha
                  last edited by

                  @lamboalpha said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                  Yes, I had the RA subnet wrong. I missed that when I redid all the settings. It is now set to /56, the same as the WAN. It had previously been at 64.

                  /64 was right.

                  JKnottJ 1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @Bob.Dig
                    last edited by

                    @bob-dig said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                    /64 was right.

                    That would allow only a single /64 prefix. If the ISP provides a larger prefix, that's what should be used.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    L 1 Reply Last reply Reply Quote 0
                    • L
                      lamboalpha @JKnott
                      last edited by

                      @jknott Everything works fine the moment I enable DHCPv6 (with PD). I have enabled the IP alias, but just confirming, there is not way with 1:1 or NPt to use the ISP range (which is dynamic) and set the internal network of FD00. Per the ULA comment.

                      1348bae5-52b0-4759-9cfb-1aa6d5bfa42f-image.png

                      Bob.DigB 1 Reply Last reply Reply Quote 0
                      • Bob.DigB
                        Bob.Dig LAYER 8 @lamboalpha
                        last edited by Bob.Dig

                        @lamboalpha said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                        but just confirming, there is not way with 1:1 or NPt to use the ISP range (which is dynamic) and set the internal network of FD00.

                        Maybe there is, haven't tried it yet, because you can use the dynamic ones too (with some caveats).

                        One thing one could try is maybe this, make an unused VLAN and give it a dynamic prefix via track interface. Then use that prefix to do NPt with your interface which is using the ULA and see how pfSense respond.

                        Screenshot 2022-09-19 090520.png

                        In the future it would be nice if pfSense would allow to reserve prefixes just for that cause. Or find another way of fixing the problems when using dynamic prefixes.

                        1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott
                          last edited by

                          @lamboalpha said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                          but just confirming, there is not way with 1:1 or NPt to use the ISP range (which is dynamic) and set the internal network of FD00. Per the ULA comment.

                          Not that I'm aware of. Regardless, NAT is a bad idea on both IPv4 and IPv6. It's needed on IPv4 due to the address shortage, but not IPv6. However, your prefix should not be changing, provided Do not allow PD/Address release is selected, though I know there are some stupid ISPs that don't respect it. I've had the same prefix for a few years and it's survived replacing both the modem and the computer I run pfSense on.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          Bob.DigB 1 Reply Last reply Reply Quote 0
                          • Bob.DigB
                            Bob.Dig LAYER 8 @JKnott
                            last edited by Bob.Dig

                            @jknott said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                            Do not allow PD/Address release

                            I don't have this option anymore or am I blind...

                            Screenshot 2022-09-19 151011.png

                            JKnottJ 1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @Bob.Dig
                              last edited by

                              @bob-dig said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                              or am I blind...

                              Yes. It's on the WAN page.

                              a05d631a-bdf4-4195-978d-298db1883dfb-image.png

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              Bob.DigB 1 Reply Last reply Reply Quote 0
                              • Bob.DigB
                                Bob.Dig LAYER 8 @JKnott
                                last edited by

                                @jknott Not for me.

                                JKnottJ 1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @Bob.Dig
                                  last edited by

                                  @bob-dig

                                  How old is your version of pfSense? It was added a few years ago. It wasn't there when I started using pfSense around 6.5 years ago, but was added not long afterward. Before then, simply disconnecting/reconnecting the WAN cable was enough to cause a prefix change.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  Bob.DigB 1 Reply Last reply Reply Quote 0
                                  • Bob.DigB
                                    Bob.Dig LAYER 8 @JKnott
                                    last edited by

                                    @jknott said in Issue configuring IPv6 with ULA, but works fine with Track Interface.:

                                    @bob-dig

                                    How old is your version of pfSense?

                                    I am on 22.05-RELEASE

                                    JKnottJ 1 Reply Last reply Reply Quote 0
                                    • JKnottJ
                                      JKnott @Bob.Dig
                                      last edited by

                                      @bob-dig

                                      I'm on 2.6.0. I have no experience with 22. Perhaps you should contact the Netgate people about this.

                                      PfSense running on Qotom mini PC
                                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                      UniFi AC-Lite access point

                                      I haven't lost my mind. It's around here...somewhere...

                                      1 Reply Last reply Reply Quote 0
                                      • Bob.DigB
                                        Bob.Dig LAYER 8
                                        last edited by

                                        Maybe @stephenw10 can confirm, that that option (Do not allow PD/Address release) is missing in 22.05-RELEASE.

                                        1 Reply Last reply Reply Quote 0
                                        • L
                                          lamboalpha
                                          last edited by

                                          It is set on for me per my above post. But, I am on 2.6.0 (which is 22.2 config rev).

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.