Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configuring radvd when using ULA with NPT?

    Scheduled Pinned Locked Moved IPv6
    13 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @ianc1215
      last edited by Bob.Dig

      @ianc1215 said in Configuring radvd when using ULA with NPT?:

      @bob-dig I upgraded to pfSense Plus, it supports dynamic prefixes.

      Good for you... then do what I have said and look if this is working for you. 😉

      I 1 Reply Last reply Reply Quote 0
      • I
        ianc1215 @Bob.Dig
        last edited by

        @bob-dig Ok, so I assign a Virtual IP to each interface I want a ULA on? How would I get radvd to advertise the ULA prefix but not the GUA prefix?

        Bob.DigB JKnottJ 2 Replies Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @ianc1215
          last edited by

          @ianc1215 I don't think you can do that, you will have both.

          I 1 Reply Last reply Reply Quote 0
          • I
            ianc1215 @Bob.Dig
            last edited by

            @bob-dig I assume there is no way to override radvd's config file without breaking the way pfSense configures it?

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @ianc1215
              last edited by Bob.Dig

              @ianc1215 I don't know.

              If you look at the NPt-dialog, you can see that it makes more sense if you don't put that GUA-prefix on the same interface to begin with because it is "applied" at the WAN-Interface. This also means you could have two WANs with separate prefixes and the routing would dictate which GUA-prefix would be used by NPt.

              So I guess the best way to do it at present is to create VLANs for every GUA-prefix and don't use them for anything other than the NPt-dialog.
              In the future I would like to see that integrated there without setting up those VLANs.

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @ianc1215
                last edited by

                @ianc1215

                You can have both GUA and ULA on your network. Then you can use the ULA in your DNS.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @ianc1215
                  last edited by

                  @ianc1215

                  You advertise both for local devices and use the ULA for your DNS.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  I 1 Reply Last reply Reply Quote 1
                  • I
                    ianc1215 @JKnott
                    last edited by

                    @jknott Oh! Never looked at it that way. So in a sort of analogy its like split tunneling with a vpn. GUA would be used for non-local traffic bound for beyond the WAN interface but the ULA would be used for local resources and local name resolution?

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @ianc1215
                      last edited by

                      @ianc1215

                      Yes. People have to stop thinking about the way they did things with IPv4. With IPv6, you can have multiple GUA and ULA on the same interface. Some people also use ULA because they don't get a stable prefix from their ISP, which makes it difficult to use DNS. With ULA, it works fine.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      I 1 Reply Last reply Reply Quote 0
                      • I
                        ianc1215 @JKnott
                        last edited by

                        @jknott Well I just learned something new today, thanks!

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.