IPV6 on more than one NIC
-
@jknott Not satisfied by the answer i received from the ISP, i called back, and they stated that they cannot tell me what delegation size is for my IPv6 for something that has to do with security reasons?
EDIT:
I spoke again with the ISP, and htey said there were no security reason, but that IPv6 isn't much used for costumers and that the rep did not understand what i was talking about. They do not know how to answer my question. So, I tried using a /56 in my wan, and it assigned an IP to my 2nd NIC.
The issue for me now is to know if it works. -
@nthly said in IPV6 on more than one NIC:
The issue for me now is to know if it works.
There are ways to tell what prefix is assigned by examining traffic with Wireshark, but a bit complex to describe here. What you can do is experiment with the prefix ID and also the delegation size to see what works. Who knows, they may surprise you and provide a /48.
See if prefix ID ff works with that /56.
Perhaps if you mention who your ISP is, someone else here can advise better.
BTW, it sounds like they could use better tech "support".
-
@jknott Sure.
My ISP is Spectrum/TWC.
Yes. They could definitely use better Tech Support. The said that what I am asking is mostly handled by the Business portion and Customer side is not really knowledgeable about it. It would be disappointing having to go with a business line just to get a larger IPv6 assignment. Maybe they think IPv6 addresses are scarce?I had an IP assigned to both LANs using /56, but when i tested it online it did not work, not even for my LAN. I now reverted to /64, and despite rebooting the machine and tests tell me i am not using IPv6.
-
I see they have a community support forum. Perhaps someone there can help.
-
@jknott
Here is what I have found on the Thread."TWC uses DHCP6. You'll get a /128 for your WAN interface and a /56 PD. IPv6 is not intended for address translation and should be considered un-NAT-able."
However, in order for me to be able to have IPv6 addresses on both LANs i need to check "Send IPv6 prefix hint" under "DHCP6 Client Configuration".
But it won't work. -
Post your issues in that community forum. People there will have experience with your ISP. I can only advise based on my experience with another ISP. Perhaps you can find some info that you can post here for the benefit of others. However, that /128 is irrelevant to the issue and the /56 means you have 256 /64s available. Also, I would hope that no one ever uses NAT on IPv6. It was needed to get around the IPv4 address shortage and created it's own problems in the process.
-
@jknott Alright. I doubt they will volunteer to help me with pfSense though.
-
Be sure you check the debug logs on the DHCP6 portion of your WAN configuration.
You can then search the DHCP logs for process dhcp6c to see exactly what is happening.
This is the configuration that works for me (Cox Las Vegas.)
-
Alright. I doubt they will volunteer to help me with pfSense though.
They might. My community forum provided some help for me and now I am able to provide pfSense help in return. The thing is, they know your ISP better than I do and may know of some issues, whereas I can only provide general info. Also, some configuration is the same no matter what router you're using.
However, you won't know, if you don't ask.
-
I’m on legacy charter (now spectrum) and the prefix delegation size of 56 works (checked send ipv6 prefix hint). It’s been a while since I set this up but if I remember right I had to power off my pfsense box followed by the modem, then power on modem and finally pfsense box. However I’m currently not using dhcpv6 server but router advertisements of unmanaged for two vlans.
-
@salth20fan Thank you for the input salth20fan.
I was under the impression from my clueless playing around with the functions in IPv6 that it could have been a /56, but the info i got from Spec/Chart/TWC were less than clarifying! I do not blame them... given I may not be informed enough to properly work my questions. -
@jknott
Definitely! Thank you. -
@derelict
Hello derelict.
I did try to enable IPv6 hint, Debug, and I cannot remember if "Do not allow PD...." is checked by default -i think so. Then i went to System Logs > DHCP, and checked. I believe I received some sort of error there of the sort 64 + 4 + 64 along with mention to delegation size. But I cannot remember from the top of my head.What is astonishing for me is that in the mist of all that, the machine on which my pfSense was running gave up. Upon rebooting the hdd of the PC (an old optiplex 755 core duo) started spinning with crazy noise. I checked online with my phone and i replaced the CMOS battery. It never powered up again.
I am not sure it is the HDD or the motherboard that does not work anymore. I believe the second since it receives no power.Regardless, It won' be worth trying and saving it. A friend of mine will donate me his old optiplex with an Intel i3-4130 (AES NI enabled i think for when 2.5 drops?).
Bottom line, Thank you for your help. I will resume my tinkering as soon as i receive the replacement machine. Another alternative is buying an appliance with pfSense on it. But to do that I may need guidance. My needs are home network and 1Gbps internet approximately --mostly gaming. (I'm open to suggestions in regards to the appliance).
Thx
-
Hello. So I just moved into an area with Spectrum as well. My IPv6 works fine. I have two internal interfaces, LAN and DMZ. Both are serving up IPv6 just fine.
I put how I did it on my blog. Link below. Just a big FYI, Spectrum doesnt let you ping the gateway so you have to disable the Gateway Monitoring or else pfSense thinks its down. Thats at the bottom of my blog. Hope that helps! if you still having issues, make sure you don't have any funky rules or something blocking ICMP for IPv6. its used heavily in IPv6 for communication.
https://malacube.wordpress.com/2018/12/29/pfsense-spectrum-ipv6-setup/
-
@sneffy80
Thank you so much for the info. I will definitely check your link out. I am still waiting for an Intel I350 to provide the new computer i got with lan capabilities --it should arrive in 2/3 days at most.
If it isn't an issue, I'd like to keep in touch with you while setting IPv6 up. -
@nthly fo sho. No worries, just hit me up in the forum.
-
@sneffy80
Great!Thank you very much for the guide.
I have now IPv6 on every interface.Much appreciated!
-
Glad to help.