• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IPv6 Static IP with track interface

Scheduled Pinned Locked Moved IPv6
6 Posts 4 Posters 2.9k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • ?
    A Former User
    last edited by May 31, 2017, 1:44 AM

    Is it possible to assign the last 64bits of the IP on a pfSense LAN interface while using Track interface from a PD on the WAN?

    I have the WAN being assigned an IPv6 address and a /56 delegation which is being assigned a handful of  /64's as expected to my LAN interfaces. pfSense is generating the latter half of the IP address from the NIC as expected for those track interfaces. But I'm wondering if I can assign my own value for that latter half? It would make things quite a bit easier for entering DNS (within DHCP responses) and host based FW info for the clients

    For this setup I am using pfSense as the DNS and DHCP servers.

    I've seen another thread on the forum mentioning something about resetting the interface to static after a delegation is received and rebooting, but the version was an older rev and I wasn't quite clear that is what was trying to be accomplished. If this is indeed the method to accomplish this, how could a 'relative' IP be entered so if the prefix changes the last 64bits would remain the same? Could ::1 or some variable be used (ie. [PD0]::1) in that case?

    1 Reply Last reply Reply Quote 0
    • J
      JKnott
      last edited by May 31, 2017, 2:04 AM

      The "latter half" is the host portion of the address.  There are a variety of ways to provide it.  A common way is SLAAC, where the MAC address is expanded to fill 64 bits.  Also, a random number may be used instead of the MAC.  Of course, DHCP or manual configuration can also be use.  Your choice.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • ?
        A Former User
        last edited by May 31, 2017, 5:33 AM

        I'm looking to set the address for the interface itself in pfsense. I have dhcpv6 working on the network fine (managed mode) but if the interface is attempting to obtain a lease I don't see it in the logs, though I haven't enabled debug logging yet since I don't expect the router interface to request a lease from the DHCP server.

        1 Reply Last reply Reply Quote 0
        • I
          Inq
          last edited by May 31, 2017, 1:27 PM

          Hey tortue, what you want is possible in 2.3.4 using static IPV6 on the lan side and advanced DHCP6 Client Configuration on the wan side :
          Send options - ia-na 0, ia-pd 0
          Request Options - domain-name-servers, domain-name
          check Prefix Delegation set id-assoc pd ID to 0 , IPv6 prefix to ::/56, pltime to infinity and leave vltime blank.

          Unfortunately the pfsense widedhcpv6 client doesn't support ifid statement, it would of made things easier. https://redmine.pfsense.org/issues/7138

          The problem with making something idiot proof is that the world keeps making better idiots.

          M 1 Reply Last reply Jan 30, 2019, 2:10 AM Reply Quote 1
          • ?
            A Former User
            last edited by May 31, 2017, 9:46 PM

            Thank you for the info, that's very similar to the other thread I mentioned but more specific. A work-around will do for now, and I'll track that request.

            I'll try it out and do some testing in my next config change but is there any way to know which internal LAN interface (I have multiple) will get which /64 subnet (00-ff) from the /56?

            1 Reply Last reply Reply Quote 0
            • M
              msm @Inq
              last edited by Jan 30, 2019, 2:10 AM

              @inq Thanks. That was really helpful!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                This community forum collects and processes your personal information.
                consent.not_received