Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ESXi, pfSense and Hetzner IPv6

    Scheduled Pinned Locked Moved IPv6
    21 Posts 2 Posters 7.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ Online
      johnpoz LAYER 8 Global Moderator
      last edited by

      this is pretty straight forward you should just have to put in the information in the openvpn setup.

      I ran into a slight issue, but turned out to be a hook for security software that was bound to my vpn interface that is not ready for ipv6 on the client once I remove that binding worked clickity clickity

      In the advanced section you can push route for ipv6 to go down the tunnel
      push "route-ipv6 2000::/3"

      ipv6.png
      ipv6.png_thumb

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 25.07 | Lab VMs 2.8, 25.07

      1 Reply Last reply Reply Quote 0
      • J Offline
        jochar
        last edited by

        OK,

        Should I assign interface for OpenVPN too? as now i have 3 interfaces LAN WAN HENET64 and assign button, i will add some images too to confirm setup here

        Thanks

        1 Reply Last reply Reply Quote 0
        • johnpozJ Online
          johnpoz LAYER 8 Global Moderator
          last edited by

          unless you want to do something special there is no reason to assign an interface to openvpn instances..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 25.07 | Lab VMs 2.8, 25.07

          1 Reply Last reply Reply Quote 0
          • J Offline
            jochar
            last edited by

            Ok This is the config i have please check

            PS: should i use the /48 block or the /64 from HE?

            Thanks

            system-routes.png
            system-routes.png_thumb
            dhcpv6-server.png
            dhcpv6-server.png_thumb
            interface-gif.png
            interface-gif.png_thumb
            interface-henet64.png
            interface-henet64.png_thumb
            interface-lan.png
            interface-lan.png_thumb
            interface-wan.png
            interface-wan.png_thumb
            openvpn-server.png
            openvpn-server.png_thumb

            1 Reply Last reply Reply Quote 0
            • johnpozJ Online
              johnpoz LAYER 8 Global Moderator
              last edited by

              you would break the /48 up into multiple /64 you wouldn't use the whole thing ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 25.07 | Lab VMs 2.8, 25.07

              1 Reply Last reply Reply Quote 0
              • J Offline
                jochar
                last edited by

                how about my configs?

                do they look ok to you?

                cause they dont work

                1 Reply Last reply Reply Quote 0
                • johnpozJ Online
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  what doesn't work ipv6 over openvpn?  You don't have a tunnel network..

                  Your not providing any dns servers to client.. What doesn't work?  Did you just run through the openvpn wizard?

                  Where are your wan firewall rules that allow the openvpn connection, this would be created auto if you ran the wizard.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 25.07 | Lab VMs 2.8, 25.07

                  1 Reply Last reply Reply Quote 0
                  • J Offline
                    jochar
                    last edited by

                    Hello and thanks for the reply

                    Yes clients get a IP when i was playing with it the ygot a IPv6 too but id did not open IPv4 or IPv6 addresses just when i did put in a ip it worked

                    For OpenVPN i did run the wizard and have default rules there

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ Online
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      "IPv4 or IPv6 addresses just when i did put in a ip it worked"

                      What IPv6 did they get?  You didn't put in a ipv6 tunnel network - so how is they would of gotten a ipv6 address???

                      Well without any dns how would you resolve anything?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 25.07 | Lab VMs 2.8, 25.07

                      1 Reply Last reply Reply Quote 0
                      • J Offline
                        jochar
                        last edited by

                        i have tried to put in subnet, then removed it and all over again

                        Where do i put the DNS servers? should i use ISP or google DNS?

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ Online
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          what do you mean where do you put in dns??  Right there on the openvpn setup screen..  Does googledns resolve your internal network devices?  Why would you not just point to pfsense..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 25.07 | Lab VMs 2.8, 25.07

                          1 Reply Last reply Reply Quote 0
                          • J Offline
                            jochar
                            last edited by

                            Hello,

                            At this point I have no idea what am I doing or what am I doing right or wrong

                            See the screen attached, i have added 8.8.8.8 and 8.8.4.4 under Client Settings > DNS Servers > I have ticked Client Settings and put the IP's there

                            I can connect to OpenVPN server but there is no internet access i get IP 192.168.10.x and dns is googledns but rest fails hard

                            Thanks again

                            openvpn-server.png
                            openvpn-server.png_thumb

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ Online
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              Where are you handing out dns???  Client tab is for when PFSENSE is the vpn CLIENT..

                              whereisyourdns.png
                              whereisyourdns.png_thumb

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 25.07 | Lab VMs 2.8, 25.07

                              1 Reply Last reply Reply Quote 0
                              • J Offline
                                jochar
                                last edited by

                                @johnpoz:

                                Where are you handing out dns???  Client tab is for when PFSENSE is the vpn CLIENT..

                                Hello

                                Yes OpenVPN > Server > Client Settings >
                                DNS Serrvers: i have ticked Provide a DNS server list to clinets
                                Server #1 8.8.8.8
                                Server #2 8.8.4.4

                                thats all there but clients cant access net

                                Regards

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ Online
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  So this is where your doing it?  See pic

                                  On your CLIENT do an ipconfig /all.. what does it show for dns for the openvpn connection?

                                  So for example I connect to one of my vps running openvpn..  Now can you do a query via vpn, do a traceroute do you go down the tunnel to get to the dns you provided?

                                  vpndns.png
                                  vpndns.png_thumb
                                  dnsonvpnclient.png
                                  dnsonvpnclient.png_thumb
                                  dnsqueryandtrace.png
                                  dnsqueryandtrace.png_thumb

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 25.07 | Lab VMs 2.8, 25.07

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.