Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.1 with IPv6 Tunnel, HELP?

    Scheduled Pinned Locked Moved IPv6
    37 Posts 4 Posters 11.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      OK - I'll bite…  AON?

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        OHHHHHHHH - THAT AON!

        ::)

        Why?????

        1 Reply Last reply Reply Quote 0
        • M
          mevans336
          last edited by

          For traffic to flow from my LAN clients to the Internet, an additional LAN rule needs to be created for IPv6, as noted in one of doktornotor's links.

          However, his link leaves out a few steps that the official how-to doesn't, so I'm going to submit an update to the official how-to and hopefully combine the two.

          So, in a nutshell, everything is now working - as long as I manually add the / via an SSH command so I'm going to keep my support ticket open.

          Thanks for the help everyone.

          ![9-15-2013 11-20-02 PM.jpg](/public/imported_attachments/1/9-15-2013 11-20-02 PM.jpg)
          ![9-15-2013 11-20-02 PM.jpg_thumb](/public/imported_attachments/1/9-15-2013 11-20-02 PM.jpg_thumb)

          1 Reply Last reply Reply Quote 0
          • M
            mevans336
            last edited by

            @kejianshi:

            OHHHHHHHH - THAT AON!

            ::)

            Why?????

            I have my normal WAN connection, but I also keep a nailed-up OpenVPN connection to StrongVPN. I can dynamically route traffic either out via my ISP or via StrongVPN by simply manipulating a LAN firewall rule. For this to work you have to use AON.

            EDIT:

            Why would I do this? My ISP has issues with SIP, so I route my SIP phone over the StrongVPN connection. It's just a tunnel via OpenVPN to bypass my ISPs SIP issues.

            Of course, I can also use it when I'd rather have the StrongVPN IP appear as my source IP rather than my ISPs IP. ;)

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              Uhm… considering this is the only mention of IPv6 anywhere on their site, don't see what's the plan there.

              1 Reply Last reply Reply Quote 0
              • M
                mevans336
                last edited by

                @doktornotor:

                Uhm… considering this is the only mention of IPv6 anywhere on their site, don't see what's the plan there.

                I don't use them for IPv6, I only route IPv4 over them.

                Basically, they are another gateway, just like Tunnelbroker. So I have 3 gateways - my ISP, StrongVPN, and now HE.net (Tunnelbroker).

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  Yes… so what's the IPv6 NAT for?

                  1 Reply Last reply Reply Quote 0
                  • M
                    mevans336
                    last edited by

                    @doktornotor:

                    Yes… so what's the IPv6 NAT for?

                    Do you mean my previous question about IPv6 and AON?

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      Well, you mentioned you need IPv6 NAT on this thread as well…

                      1 Reply Last reply Reply Quote 0
                      • M
                        mevans336
                        last edited by

                        @doktornotor:

                        Well, you mentioned you need IPv6 NAT on this thread as well…

                        I struck-through (is that even proper grammar?) that comment in my previous post.

                        I thought my clients couldn't communicate out via IPv6 because of my AON rules, but it in fact was a simple LAN rule I needed to create, which was mentioned in the how-to link you provided.

                        On the LAN tab: IPv6 * LAN net * * * * none

                        I now see that your how-to and the official how-to are BOTH missing information, so I'm going to take the correct information from your how-to and see if I can integrate it into the official how-to.

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Ah, OK.

                          1 Reply Last reply Reply Quote 0
                          • M
                            mevans336
                            last edited by

                            @doktornotor:

                            Ah, OK.

                            Seriously, thank you for your help.

                            Hopefully the GIF Interface issue is just something borked on my box, but if not, your guidance helped to narrow it down.

                            1 Reply Last reply Reply Quote 0
                            • M
                              mevans336
                              last edited by

                              FYI, the pfSense guys issued a fix.

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                A fix for what exactly?

                                I tried to make heads or talls of this thread a couple of times now – I have been using he tunnel with pfsense for quite some time, all through the development phase, etc..  And don't recall any issues with using the tunnel.

                                Now native ipv6 sure - but tunnel has been rock solid..  Still using it - so curious what this fix pfsense issued?  Looking at the commits I don't see anything ipv6 related?

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mevans336
                                  last edited by

                                  @johnpoz:

                                  A fix for what exactly?

                                  I tried to make heads or talls of this thread a couple of times now – I have been using he tunnel with pfsense for quite some time, all through the development phase, etc..  And don't recall any issues with using the tunnel.

                                  Now native ipv6 sure - but tunnel has been rock solid..  Still using it - so curious what this fix pfsense issued?  Looking at the commits I don't see anything ipv6 related?

                                  They gave me a patch for post #1 in this thread. That resolved my problems.

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    who game you a patch, and where?

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.