Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Assigning ipv6 address to WAN via VLAN

    Scheduled Pinned Locked Moved General pfSense Questions
    9 Posts 3 Posters 777 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DBLClick
      last edited by

      My ISP (Verizon FIOS) doesn't provide an IPv6 address for the wan address. Using their router, the delegate a /56 address space and use the very last block in the set "FF" and assign the address of 1 to the interface. Is it possible for me to configure a VLAN tracking the interface on the wan port to assign it an IPv6 address.

      Is there a working configuration doing this?

      I really like to have DDNS IPv6 address assigned to my interface.

      Thank you.

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @DBLClick
        last edited by

        @DBLClick

        You don't need one. Just use the interface address for your LAN.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        D 1 Reply Last reply Reply Quote 0
        • D
          DBLClick @JKnott
          last edited by

          @JKnott I'm a little confused, if I'm using a VLAN it didn't assign it IP address with "TrackInterface" turned on.

          are you saying, just assign a static address?

          JKnottJ 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            If it's dynamic you need to assign it somewhere and then rack that.

            How are they delegating the /56 to you?

            D 1 Reply Last reply Reply Quote 0
            • D
              DBLClick @stephenw10
              last edited by

              @stephenw10 They Delegate a Using DHCPv6 on the wan interface. you must use request delegation only to receive the block of IPv6 address. Wan Interface doesn't receive a Global IPv6 address only a Link Local address to the interface.

              Normally a FIOS router will utilize the last block "FF" and assign ::1 to the interface of the delegated received address.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Ok, that's fine. You can still just use track WAN for the other interfaces. Verizon will route that /56 to you using the link-local address on WAN.

                D 1 Reply Last reply Reply Quote 0
                • D
                  DBLClick @stephenw10
                  last edited by

                  @stephenw10 what if I wish to set up an VPN interface to the network. I was planing to assign an IPv6 address to my DDNS service and use it for VPN into my network.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    That will work. Everything in that /56 will be globally routable. You just need to rule to allow the incoming VPN connections.

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @DBLClick
                      last edited by JKnott

                      @DBLClick said in Assigning ipv6 address to WAN via VLAN:

                      are you saying, just assign a static address?

                      What specifically are you trying to do that requires a VLAN? If you're trying to reach your pfSense box, the address of any interface will do. Also, it helps if your ISP provides a consistent prefix, so that your prefixes don't change. Make sure you have Do not allow PD/Address release, on the WAN page, selected. And yes, enable track interface for anything that gets the prefix from your ISP.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.