[solved] WAN gets IPv6 but LAN can't

crazypotato142

@patient0
That was the first thing I did after realising I couldn't set up IPv6 properly. Didn't help much due to lack of information tbh.

Top result shows this (didn't work):

They also have this on ISS' official IPv6 configuration page for their router:

patient0

@crazypotato142 I now see what you meant by 'stateless': that refers to SLAAC. So you can try setting WAN IPv6 to SLAAC instead of DHCPv6.

Btw: do you get an public IPv4 address, that is working, yes?

Here is the entry for Turk Telekom on OpenWRT:

https://openwrt.org/docs/guide-user/network/wan/isp-configurations#turk_telekom

I'd say from that entry it means Request a IPv6 prefix/information through the IPv4 connectivity link has to be checked. Not sure yet what 'ipv6 auto' translates to in pfSense.

crazypotato142

@patient0

I now see what you meant by 'stateless': that refers to SLAAC. So you can try setting WAN IPv6 to SLAAC instead of DHCPv6.

If I set it to SLAAC it doesn't provide me anything. Both IPv6 prefix thru IPv4 connectivity checked and unchecked:

But when i try to ping, it gives the exact same local-link IP I sent the SS above

Also, isn't "Stateless" a RA mode?

Btw: do you get an public IPv4 address, that is working, yes?

Of course. I have a static one working perfectly fine.

@patient0 said in WAN gets IPv6 but LAN can't:

Here is the entry for Turk Telekom on OpenWRT:

https://openwrt.org/docs/guide-user/network/wan/isp-configurations#turk_telekom

I'd say from that entry it means Request a IPv6 prefix/information through the IPv4 connectivity link has to be checked. Not sure yet what 'ipv6 auto' translates to in pfSense.

My ISP is TurkNet, does it change anything?

JKnott

@crazypotato142 said in WAN gets IPv6 but LAN can't:

Sorry for not giving any details

I see you're only requesting a prefix size of 64. That allows for only a single /64 prefix, which will allow only a single LAN. What is the largest prefix your ISP offers? That's what you should be using. For example, I get a /56, which provides 256 /64s.

JKnott

@crazypotato142 said in WAN gets IPv6 but LAN can't:

I'm not a pro on IPv6 but I assume it's because WAN gets a link-local and not a public IPv6 prefix so it can't adv the IP to LAN?

No, that has nothing to do with it. On IPv6, routing is normally over link local addresses.

crazypotato142

@JKnott

I see you're only requesting a prefix size of 64. That allows for only a single /64 prefix, which will allow only a single LAN. What is the largest prefix your ISP offers? That's what you should be using. For example, I get a /56, which provides 256 /64s.

I have no idea tbf. But even it's /64 shouldn't it work anyway?

patient0

@crazypotato142 said in WAN gets IPv6 but LAN can't:

My ISP is TurkNet, does it change anything?

Nope, the settings look the same (also on that ISP page from OpenWrt.

Also, isn't "Stateless" a RA mode?

Yep, RA/SLAAC is pair (stateless address autoconfiguration == SLAAC) and stateless is one mode in RA.

crazypotato142

@patient0

Yep, RA/SLAAC is pair (stateless address autoconfiguration == SLAAC) and stateless is one mode in RA.

Alright. So setting the configuration type on WAN settings as SLAAC doesn't seem to work. I have no idea how i will configure LAN when i selected that too so it's on DHCP6. But in RA its on Stateless DHCP mode. Should I leave it that way?

@JKnott

I see you're only requesting a prefix size of 64. That allows for only a single /64 prefix, which will allow only a single LAN. What is the largest prefix your ISP offers? That's what you should be using. For example, I get a /56, which provides 256 /64s.

When I set my WAN settings as below I get prefix ID from 0 to FF, which is from 0 to 0 with /64.

Would changing this help in any way?

crazypotato142

How can I check the prefix pFsense gets, or be sure it gets or not?

patient0

@crazypotato142 check the logs in Status / System Logs / DHCP and search for "dhcp6c". Additionally you can enable debug mode: check System / Advanced / Networking: DHCP6 Debug.

crazypotato142

@patient0
Can't see anything related to a prefix. I think it's confirmed it doesn't get any.

I've seen "transmit failed: Can't assign requested address" in the logs. I've been looking for it on the internet since then.

Negan

I never seen it mentioned here but have you enabled Allow ipv6 ?

System/Advanced/Networking- ipv6 Options -Allow IPV6

crazypotato142

@Negan
It's checked. Thank you for the mention.
I mean, it says it only blocks traffic tho. pF still gotta provide IPv6 to LAN on both checked and unchecked.

Gertjan

@crazypotato142

This :

is that pfSense 2.8.0 ?
Or do you use the "ISC DHCP" setup instead of the newer 'kea dhcp' ?

means the DHCP PLAN server doesn't gave a IPv6 /64 prefix for your LAN.

Normally, you should see this :

that said, I don't use SLAAC, so maybe I'm wrong.

crazypotato142

@Gertjan

is that pfSense 2.8.0 ?
Or do you use the "ISC DHCP" setup instead of the newer 'kea dhcp' ?

It's CE 2.7.0
ISC it should be because I don't have the option "DHCP backend" on Advanced>Networking tab and on services it says "dhcpd"

that said, I don't use SLAAC, so maybe I'm wrong.
I don't have the IP after "WAN/0"

I asked to my ISP and they approved that I get the prefix from their end. Seems like my end is the problem. I'll try to upgrade or clean install to 2.8.0 today.

Gertjan

@crazypotato142

Reminder :
The DHCP log will show dhcp6c (DHCP v6 Client process) activity when you check this one :

crazypotato142

@Gertjan
It's checked. The logs above are from dhcp6c

Gertjan

@crazypotato142 said in WAN gets IPv6 but LAN can't:

@Gertjan
.....The logs above are from dhcp6c

Euh .... where ?

crazypotato142

@Gertjan said in WAN gets IPv6 but LAN can't:

@crazypotato142 said in WAN gets IPv6 but LAN can't:

@Gertjan
.....The logs above are from dhcp6c

Euh .... where ?

@crazypotato142 said in WAN gets IPv6 but LAN can't:

I have these warnings on my logs

@crazypotato142 said in WAN gets IPv6 but LAN can't:

I've seen "transmit failed: Can't assign requested address" in the logs. I've been looking for it on the internet since then.

eagle61

@crazypotato142 said in WAN gets IPv6 but LAN can't:

But I moved to a pFsense & custom router on AP mode setup and I wasn't able to get IPv6 anymore, because pfSense can't get an IPv6 on LAN so other devices can't get over DHCPv6 either.

From your first screen picture you sen here i can see you only have a fe80:-IPv6-Adress on WAN. With that you can't get any LAN-IPv6. You will need regular IPv6 on WAN first. One like 2001:...

I guss your custom router on AP mode setup does not deliver an IPv6-Adress and/or IPv6-Prefix to your pfsense. That needs to be fixed beforehand all other setups.

Please read:

Both Documents are from OPNsense Documentation, but helped me very much to configure my pfsense with IPv6 prefix delegation.