Problem routing ipv6 interfaces

marcos.viana

good afternoon

I have a problem with ipv6 routing
I have a prefix /48

router isp xxxx:xxxx:xxxx::1/48

pfsense config

WAN IP xxxx:xxxx:xxxx::2/126 and gateway xxxx:xxxx:xxxx::1

this works OK I can ping internet from the interface wan.

LAN IP xxxx:xxxx:xxxx:yyyy::1/64

PC xxxx:xxxx:xxxx:yyyy::2/64

From the lan interface I can not ping the ip of the router

from the PC I can ping the wan interface pfsense but not the ip router

I have ipv6 enabled and firewall rules let pass all traffic ipv6 in the 2 interfaces

edit photo

thanks for the help

johnpoz

Why do you have a different mask on your wan IP then your gateway mask of /48? The mask of your interface that talks to the gateway should match the mask on the gateway. You have /126, but in your pic you list /64 on your pfsense wan ipv6 IP?

marcos.viana

The router I have no access my isp routed me prefixed with the mask / 48

I proble to change the mask of wan to pfsense a / 126 to be more restrictive but does not work

apart, then I have a default route pointing to the ISP router

marcos.viana

if someone could give me an alternative functional configuration, would appreciate.

any help is welcome;)

hda

When communicating with outside, you should adhere to /64 IP mask per interface, else things break.

marcos.viana

I changed the mask wan pfsense a / 64 and the problem persists, there is no response from the ISP router.

The strange thing is that from any pc I answered the wan ip of pfsense, and from the wan interface of the router responds pfsense me.

But since the pcs isp router interface is unresponsive.

thx

hda

Assure your connection with a reboot of ISP-router and the pfSense-box in cascading sequence.

marcos.viana

hi

I 've tried several times even simulations with another pfsense a PC emulating the ISP router and the same result

hda

Hmmm, tell us how do you issue IP to PC's ?
i.e. Static, DHCP6-server and/or SLAAC ? How is your radvd settings ?

marcos.viana

in test environment emulating the isp router with routing pc changing the mask / 48 to /64 and creating a static route routing prefix / 48 to the wan ip of pfsense
working properly

It is normal to have to do this? should not route all traffic to the mask / 48?

Thx

marcos.viana

not use or dhcp or Ra ips the assigned manually

hda

You get an /48 space supply. Of this /48 you can chop something like say /56 up into subnets of /64 (these are 255 LAN's or NIC's)

Reliable communication goes with /64.

So you can do a Static like 2A02:babe:face:1::1/64 for LAN-1
And you can do a Static like 2A02:babe:face:2::1/64 for LAN-2

Suppose you connect a switch to LAN-1.
Then you can attach a PC on that switch (to LAN-1) give it a Static, say 2A02:babe:face:1::beef

And you need RA to set on Router Only if you do Static, else no routing…