Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ISP Delegates /64 Multiple Times But No /56 or /60

    Scheduled Pinned Locked Moved IPv6
    21 Posts 3 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @vader9000
      last edited by

      @vader9000 said in ISP Delegates /64 Multiple Times But No /56 or /60:

      The only one it works is /64
      wen i go /63 / 62 /60 /56 it doesn't work

      Then your out of luck I think. ๐Ÿ˜–

      vader9000V 1 Reply Last reply Reply Quote 0
      • vader9000V
        vader9000 @Bob.Dig
        last edited by

        @Bob-Dig

        Thank You

        I was hoping that maybe could be possible to make the requests coming from the other interfaces look like different devices ... maybe vlans on the wan side ... i don't know that's beyond my abilities.

        Thanks just the same
        FC

        1 Reply Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @vader9000
          last edited by

          @vader9000 Now what you can do is trying NAT with NPt. This will work ok with outbound connections but only partially with unsolicited inbound connections.

          vader9000V 1 Reply Last reply Reply Quote 0
          • vader9000V
            vader9000 @Bob.Dig
            last edited by

            @Bob-Dig

            Can you please explain how i can do that on the pfsense so i can give it a try.

            thks

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @vader9000
              last edited by Bob.Dig

              @vader9000 Check the docs.
              You have to roll out ULAs on all other Interfaces but the LAN, which still gets the one /64 that is working for you.

              One example:
              Capture.PNG
              You have to create these rules for every other interface than LAN and change the Source accordingly.

              vader9000V JKnottJ 3 Replies Last reply Reply Quote 0
              • vader9000V
                vader9000 @Bob.Dig
                last edited by

                @Bob-Dig

                Thank You Im Going to Try it

                1 Reply Last reply Reply Quote 0
                • vader9000V
                  vader9000 @Bob.Dig
                  last edited by

                  @Bob-Dig

                  On The Interface Lets call it TEST(igb1.5) VLAN tag 5 i Set the interface as STATIC IPV6?
                  If so wen the ISP changes the ips for the router this will stop working correct?

                  Bob.DigB 1 Reply Last reply Reply Quote 0
                  • Bob.DigB
                    Bob.Dig LAYER 8 @vader9000
                    last edited by Bob.Dig

                    @vader9000 said in ISP Delegates /64 Multiple Times But No /56 or /60:

                    On The Interface Lets call it TEST(igb1.5) VLAN tag 5 i Set the interface as STATIC IPV6?

                    Yes and you give it an ULA with /64 like shown above.

                    If so wen the ISP changes the ips for the router this will stop working correct?

                    No, LAN is still handled via Track Interface so in general it should work.

                    vader9000V 1 Reply Last reply Reply Quote 1
                    • JKnottJ
                      JKnott @Bob.Dig
                      last edited by

                      @Bob-Dig said in ISP Delegates /64 Multiple Times But No /56 or /60:

                      You have to roll out ULAs on all other Interfaces but the LAN, which still gets the one /64 that is working for you.

                      Actually, you can add ULA to the LAN, along with GUA. In fact, I don't think ULA is allowed to route to GUA addresses.

                      Using Unique Local Addresses

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      Bob.DigB 1 Reply Last reply Reply Quote 0
                      • vader9000V
                        vader9000 @Bob.Dig
                        last edited by

                        @Bob-Dig

                        Hello,

                        Thank you for the help, I managed to get it working on my test box so I will be setting up my live box.

                        Best regards,
                        FC

                        1 Reply Last reply Reply Quote 0
                        • Bob.DigB
                          Bob.Dig LAYER 8 @JKnott
                          last edited by Bob.Dig

                          @JKnott said in ISP Delegates /64 Multiple Times But No /56 or /60:

                          Actually, you can add ULA to the LAN, along with GUA.

                          True but at least with Track Interface you need a patch for pfsense and this patch is only working partially.

                          In fact, I don't think ULA is allowed to route to GUA addresses.

                          Someone has to test this. ๐Ÿ˜‰ I ditched my ULAs because of the mentioned problems, so it won't be me.

                          JKnottJ 2 Replies Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @Bob.Dig
                            last edited by

                            @Bob-Dig said in ISP Delegates /64 Multiple Times But No /56 or /60:

                            Someone has to test this.

                            RFC 6724 describes priority when you have multiple addresses to choose from, but doesn't appear to get into the GUA <> ULA situation. However, I seem to recall reading elsewhere that it wasn't allowed. Can't say for certain though.

                            Anyway, I have both GUA and ULA on my subnets.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @Bob.Dig
                              last edited by

                              @Bob-Dig said in ISP Delegates /64 Multiple Times But No /56 or /60:

                              Someone has to test this.

                              I just did and I can reach ULA from GUA. I tested from my VPN, which only has GUA to my desktop computer and it's ULA address.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              1 Reply Last reply Reply Quote 2
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.