IPV6 Static IPV6 address

[axsense2]

Please forget my ISP already.
I was building a reference setup using an initial requirement that IPV6 address from ISP is static.

For those whom are able to comment my setup I would be appreciated. Thank you.

[axsense2]

@JKnott I'd suspect most people get IPv6 from an ISP that uses DHCPv6-PD. Again, until we know what you're dealing with, it's hard to offer advise.

Yes I can imagine that too. After reading instructions and comments.

But one more time: I am dealing with the setup I have specified and trying to build up a reference setup using those prerequisites. Got it?

[johnpoz]

Well then sure if you want to use the first /64 out of /48 as your transit - then sure that is possible.

[axsense2]

In this reference setup the first /64 is assumed to be a transit.

But what I would like to know if is this a correct way to publish subnets to subroutes (copied from a message above)?:
Prefix Delegation Range start: 2001:1111:2222:3334::
Prefix Delegation Range end: 2001:1111:2222:333f::
Prefix delegation size: 64

Ax.

[johnpoz]

So your going to do downstream prefix delegation? The range is only use to use part of a larger prefix in your actual delegation. Say you want to delegate the 2nd half of larger prefix, or maybe you want to only delegate the middle of the prefix to downstream devices asking for delegation - ie downstream routers.

[axsense2]

Let me clarify the idea.
Lets assume ISP gives /56 network. In this theoretical example it is then 2001:1111:2222:3300::
So, 2001:1111:2222:3333 was the LAN network of PFSense. I think it was stated that SubRouters need to have /64 subnets within that /56 network? Otherwise they are not able to route to ISP

So I assigned 3334:: to 333f to be delegated to subrouters using /64 delegation size. Which they got and pinging works inside of the internal network built by this example (between 3333 and 333e and over the SubRouter).

[johnpoz]

You don't have to actually delegate anything if this your own internal network.. And delegating a /64 would kind of pointless.. For the same reason your isp giving you only 1 /64 would be pointless.

If you have downstream routers, then you could just statically assign everything, using link local for the transit to the downstream..

Love to see this network where you need to delegate say /60s from your /56 down to other routers, who then have other /64 behind them, etc. Are you going to be an isp for a neighborhood? A DC with multiple clients?

[axsense2]

@johnpoz said in IPV6 Static IPV6 address:

Are you going to be an isp for a neighborhood?

Yes, that is correct. Been like that for 10 years and now exploring if I can upgrade to IPV6 level. There aren't subrouters behind the first level after PFSense.
I was going to delegate /64s (see specs above)

If you have downstream routers, then you could just statically assign everything, using link local for the transit to the downstream..

There are probably many ways to do this. If the DHCP approach works I would probably start a pilot using that. Setup may change later tho...

[johnpoz]

Well if your an ISP for your neighborhood your prob going to want something bigger than a /56 ;) How many clients are you going to have? How many networks will they have behind their routers, etc.

[axsense2]

There are only up to 30 so basically any size will do.
Probably the reason why ISP was giving me a static IPV6 address instead of one by DHCP is probably that the connection is business product and not consumer product. For consumers ISPs probably "always" supply IPs by DHCP. At least in this part of the world business connections have static IPs without DHCP.
"My customers" have just couple of devices behind their routers. Absolutely none of them has anything but a consumer xDSL router.

[johnpoz]

@axsense2 said in IPV6 Static IPV6 address:

Absolutely none of them has anything but a consumer xDSL router.

Well you prob be best off just doing static for them as well.. This should take out any sort of deployment issues, and allow for them to get more segments if they need them. And for others not have to deal with ipv6 if they don't want to, etc.

This way your sure differences in their routers will not be a problem - only issue is that static will be a bit more leg work, and could be problem if you have to scale up to like 300 or 3000 at some point ;)

[JKnott]

@axsense2 said in IPV6 Static IPV6 address:

There are only up to 30 so basically any size will do.

If you want the users to be able to use DHCPv6-PD, then you'll need a router that can provide it. That's an extra cost option, with Cisco gear, IIRC.

[axsense2]

@JKnott said in IPV6 Static IPV6 address:

If you want the users to be able to use DHCPv6-PD, then you'll need a router that can provide it. That's an extra cost option, with Cisco gear, IIRC.

I was testing this setup using consumer xDSL modem. Delegation worked just fine. (The SubRouter in the test above was Zyxel low end modem.)

And for others not have to deal with ipv6 if they don't want to, etc.
This is true. I was thinking the same thing. Maybe I just give instructions only to them whom actually likes to use IPV6 and not to compromise rest of the users. On the other hand: if it's automatic it would mean less work for me.

Well anyway... thanks for the help. If my reference setup above is just fine I will probably do a pilot with something like that - depending on what kind of IPV6 connection (from ISP) I am actually getting next week.

[axsense2]

This document contains pretty much all the information I was looking for earlier. I can see that I ended up to the same setup after all.
https://www.slideshare.net/NetgateUSA/ipv6-basics-pfsense-hangout-july-2015

Remark about DHCP6 with Android pays my attention. Should I advertise subnets using RA instead of DHCP6? And disable DHCP6 completely...(?)
But how to do this

with RA:

[JKnott]

@axsense2 said in IPV6 Static IPV6 address:

Should I advertise subnets using RA instead of DHCP6? And disable DHCP6 completely...(?)

That's what I do. With SLAAC, you don't need DHCPv6 to assign addresses.

[axsense2]

@JKnott said in IPV6 Static IPV6 address:

That's what I do. With SLAAC, you don't need DHCPv6 to assign addresses.

Yep. Got it. Need to study how to properly define this DHCP6 setup without DHCP6.

Since there is only this on RA form:

I think my 3333 network gets IPV6 addresses using SLAAC without any additional configuration. I hope I don't need to create RA Subnet of every single /64 I need to assign...

[JKnott]

@axsense2 said in IPV6 Static IPV6 address:

Yep. Got it. Need to study how to properly define this DHCP6 setup without DHCP6.

Assuming you're handing out /64s, then you rely on router advertisements to provide the prefix and SLAAC automagically adds the rest. Nothing to do at all.

[axsense2]

Right... but how do any of the routers be are aware of 3334-> subnets since I haven't defined those to anywhere?
Changing Router mode to Unmanaged and thats it? Sounds like too easy to be true...

[JKnott]

@axsense2 said in IPV6 Static IPV6 address:

Right... but how do any of the routers be are aware of 3334-> subnets since I haven't defined those to anywhere?

You're confusing assigning addresses to users with configuring your network. Some how, you have to create individual networks for each user, unless you want them all to share a single /64. You start with your /56 and divide it into individual networks. As mentioned, this can be done with VLANs. With each network (VLAN) you select the prefix ID, to choose which of the 256 /64s to use. Then on each individual network, there should be router advertisements with the prefix for that network. The users devices then add their own portion of the address through SLAAC and DHCPv6 is not needed. With SLAAC, the address suffix is generated from either the MAC address or a random number. It just works, without any configuration.

You'd also need a managed switch to separate the VLANs into individual access ports, one for each user.

[axsense2]

@JKnott said in IPV6 Static IPV6 address:

You're confusing assigning addresses to users with configuring your network.

I think I am not. Those 3334-> /64 subnets were for SubRouters. Those are the ones I need to delegate SubRouters.
But anyway, the answer is clear and obvious. Based on your description I will stick in DHCP. It suits better for my need and I have better control over the delegation.

Ax.