Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Single WAN IPv6 and /64 prefix delegation

    Scheduled Pinned Locked Moved
    IPv6
    ipv6
    4
    8
    840
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hlidotbe
      last edited by

      Hi,

      I'm a bit at loss as how to configure IPv6 on my pfsense box.

      From my ISP I have:

      IP: xxxx:xxxx:xxxx:xxxx::7
      Mask : /64
      Gateway : xxxx:xxxx:xxxx:xxxx::1

      Prefix Delegation IPV6 : xxxx:xxxx:xxxx:yyyy::
      Mask : /64

      I assigned the IP to my WAN interface, set up the gateway and it shows some connectivity. I can ping IPv6 from the box so I assume on this side everything is ok.

      On the LAN side I don't know what to do with the delegated prefix. I tried assigning a static IP to the LAN interface (xxxx:xxxx:xxxx:yyyy::1) and a static IP on my machine (xxxx:xxxx:xxxx:yyyy::2) and I can ping between them but my PC can't ping outside of the LAN.
      I tried setting up DHCPv6 but if I use a static IP on the LAN it refuses any range.
      Tried SLAAC, nothing happens, can't track interface with a static WAN IP,...

      I read that it would be easier if my ISP gave me a smaller prefix but given how long they took to enable IPv6 on our connection I have little hope they'd give me a /56 or anything else.

      Thanks for the help!

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @hlidotbe
        last edited by

        @hlidotbe

        The ISP actually provided addresses you're supposed to use? Normally, they use DHCPv6-PD, to assign an address and prefix.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • H
          hlidotbe
          last edited by

          Well, this is what I got when I ask if IPv6 was finally enabled for us.

          I can try enabling DHCPv6 on my WAN interface but IIRC that didn't work

          JKnottJ A 2 Replies Last reply Reply Quote 0
          • JKnottJ
            JKnott @hlidotbe
            last edited by

            @hlidotbe

            I haven't tried a static config, as I have no need to. However, one box on the LAN page is for upstream gateway. Have you set that?

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              If they are actually delegating the /64 it will work fine but only for one tracked interface.

              Be sure your LAN is configured for Track interface and the tracked interface is WAN.

              Enable the extended logging in the WAN's DHCP6 settings. When you save it it will try to acquire the DHCP again so you will have fresh logs.

              Look at Status > System Logs, DHCP and filter on command dhcp6c.

              See what happens there. Post if you're unsure what you're looking at.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • A
                axsense2 @hlidotbe
                last edited by

                @hlidotbe said in Single WAN IPv6 and /64 prefix delegation:

                Well, this is what I got when I ask if IPv6 was finally enabled for us.

                So I am not the only one using an ISP which is providing static IPV6 addresses. Just curious, did you get this working?

                Ax.

                1 Reply Last reply Reply Quote 0
                • H
                  hlidotbe
                  last edited by

                  Unfortunately no. I haven’t had the time yet to get back to it but the previous suggestions didn’t seems to have worked.

                  1 Reply Last reply Reply Quote 0
                  • A
                    axsense2
                    last edited by

                    I have pretty much the same kind of setup provided by a local ISP. I found out that ISP providing static IPs is not so common practice. At least among PFSense forum users.
                    I built up two different setup ("automatic" and "semi-automatic"). Not 100% sure those are according to best IPV6 practices, but I tried to do everything by the book. Not just something that happens to work.
                    Hoping you get your IPV6 network to work and/or people here are able to assist you on that.

                    Ax.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post