Unable to communicate with https://packages.pfsense.org.

ferthelet · Feb 13, 2015, 2:41 PM

@johnpoz, I had this previous config which might have changed as I was playing around…

VLANCER, 2800:160:17c5::1:1 /52
VLANSEM, 2800:160:17c5::1:2 /52 and so on...

@stephenw10, you are correct, step-by-step, the only thing I want by now is to establish connection from my pfsense server to my default public GW first then to the world using ipv6 address –no DNS at first :-)

Our DNS servers would be

2800:160::2
2800:160::1

Thanks for your kind replies!

johnpoz · Feb 13, 2015, 4:33 PM

/52 ?? yeah that would not be correct..

kejianshi · Feb 13, 2015, 4:57 PM

Sleeping - Look at this when I wake.

ferthelet · Feb 13, 2015, 5:45 PM

@johnpoz /52 is not correct? I thought it could be subdivided in 16 networks with this… any suggestion?

johnpoz · Feb 13, 2015, 9:03 PM

min size of ipv6 segment is suppose to be /64, you can get a /48 for example from say tunnel broker HE, they route that to you via your tunnel then you can break that up into as many /64 you want.

stephenw10 · Feb 13, 2015, 10:38 PM

But those VLANs have the same subnet, no?

kejianshi · Feb 13, 2015, 10:58 PM

I have had great success with a /48 for WAN and handing out /64s on all interfaces, including openvpn interfaces.

I do want to experiment with something like a /52 on the WAN and handing out a limited number of /64s after. (tried before and failed)

Why? Because some data centers for some odd reason are still hesitant to hand me a /48. Maybe all they have is a /48 themselves?

I know thats a crap configuration, but it would solve problems for me also to get that to work.

I will soon have a chance to try that… "soon" according to the data center.

However, as previously stated, if you want IPV6 now, getting a HE IPV6 tunnel works super well.

ferthelet · Feb 16, 2015, 12:50 PM

@stephenw10, yes, those VLANs had the same /52…

@kejianshi, I will better go with /64, so I will post here how it goes...

In any case my "problem" is pinging from pfsense to my default route (even though both ips answer from the Internet)...


pfsense             <----> default GW 
2800:160:17c5::2/48 <----> 2800:160:17c5::1 /48

I don't know why but I'm still thinking the ipv4 way, I resist to waste so many addresses :-)

Thank you guys for following up…

kejianshi · Feb 16, 2015, 12:59 PM

/64 on the wan is near useless. You really want to be able to give each LAN/OPT interface a /64

ferthelet · Feb 16, 2015, 1:32 PM

@kejianshi I'm sorry I wasn't clear… I want first to get this two addresses to communicate each other (pf <-> gw) using the /48 mask... only then I will change the /52 to /64 configs for my internal networks...

Any suggestion as to how troubleshoot this pf <-> gw issue? It's worth saying that this problem presents only for ipv6. It works fine in ipv4...

I'm folllowing this document, but I have done it twice for the WAN part and I still don't find anything :-
https://doc.pfsense.org/index.php/Connectivity_Troubleshooting

Thank you again

ferthelet · Feb 17, 2015, 4:15 PM

Just to let you know that I finally could establish comm between pf <-> gw . I'm almost sure it was a fw rule, but I touched so many little things… now I'm going to subnet using /64... Thank you all for your kind support.

kejianshi · Feb 17, 2015, 10:34 PM

Its really difficult to help figure out IPV6 without seeing your settings. For me anyway. But I'm glad its working for you.

ferthelet · Feb 23, 2015, 9:18 PM

Hello,

Just to let you know that my IPv6 is working now, again it seemed to be a faulty firewall rule. Once the connection established between my "pfsense" <-> "default isp gw" everything else went fine.

. public addresses 2800:160:17C5::/48
. internal addresses 2800:160:17C5:1~4::/64

Initially I messed up with dhchpv6, then manual ipv6, finally stateless :-) and it works all right!

Again, thank you all for your great comments and support!