Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPV6 - pfsense behind BT Hub

    Scheduled Pinned Locked Moved General pfSense Questions
    39 Posts 3 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Exactly the problem here is that the ISP routes the /56 PD to the BT Hub but since pfSense is not pullling a PD from the BT Hub it does not get the required route. So the BT Hub has no way to know the /64 on the pfSense LAN is behind a downstream router.
      Unfortunately I doubt the BT business hub has any static routing, additional gateway type ability. I could be wrong...

      Steve

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @stephenw10
        last edited by

        @stephenw10 said in IPV6 - pfsense behind BT Hub:

        Exactly the problem here is that the ISP routes the /56 PD to the BT Hub but since pfSense is not pullling a PD from the BT Hub it does not get the required route. So the BT Hub has no way to know the /64 on the pfSense LAN is behind a downstream router.
        Unfortunately I doubt the BT business hub has any static routing, additional gateway type ability. I could be wrong...

        Steve

        That's not the impression I got from the OP. He said:

        "Thanks.
        The BT Hub gets ipv6 via DHCPv6-PD on its WAN(2a0X:xxxx:xxxx:xx00:86a1:d1ff:fea1:f0df) BUT gave Pfsense WAN a
        fe80:: range ,WHICH i then changed to(2a0X:xxxx:xxxx:xx00:86a1:d1ff:fea1:f0ff /64 - STATIC) and used the Other /64 on the pfsense LAN side.
        The Default routes on the LAN clients is showing as fe80::,(EXpecting the LAN v6 gateway?) but ipv6 client is in the right range ,also DNS is Pfsense LAN ipv6 gateway and Google v6 dns."

        Based on that, it appears that he is being assigned a prefix, but not a WAN address. That is entirely normal, as the link local address will be used for routing and a WAN address is not necessary. He has the same thing on the LAN, with the link local address being used for the gateway. This is entirely normal. Based on what I've read in this thread is he can't reach the Internet from his LAN, which indicates a routing problem or perhaps a misconfigured firewall.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Indeed, BT don't usually give you a WAN IP just a Prefix. That's exactly what I see on my BT connection.

          But unlike the OP I am using pfSense to get that prefix, he is using the BT Hub router. I am setting up a PD in that edge pfSense device to pass a /60 to my inner pfSense device. He is just configuring it statically on pfSense with no way to tell the BT Hub about that route.

          Steve

          JKnottJ 1 Reply Last reply Reply Quote 0
          • J
            Jid @JKnott
            last edited by

            @JKnott
            Will try the Capture and see what i find
            Regards

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Is there any ability to add routes and gateways in the BT Business hub?

              J 1 Reply Last reply Reply Quote 0
              • J
                Jid @stephenw10
                last edited by

                @stephenw10

                Yes exactly ,but i was expecting the BT hub to give Pfsence an ip in the 2a0X:xxxx:xxxx:xx00:: /64 but it wasnt but gave it a fe80:: ?? will try to keep this as fe80:: and then use the /64 from the BT wan range in the LAN ,BUT that will still pose the issue of the BT box knowing how to get to this /64.

                JKnottJ 1 Reply Last reply Reply Quote 0
                • J
                  Jid @stephenw10
                  last edited by

                  @stephenw10
                  Will look into this by weekend,so set a static route(BT hUB) for the /64 to the pfsense WAN (fe80::)??

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    Yes I would expect that to work. Odd that it doesn't assign the pfSense WAN a routable v6 IP though, it's set to DHCPv6? I assume other devices connected to the hub do get a v6 IP in that /64?

                    J 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @stephenw10
                      last edited by

                      @stephenw10 said in IPV6 - pfsense behind BT Hub:

                      he is using the BT Hub router

                      I didn't see that. In that case prefix delegation won't work. He wants to put the modem in bridge mode. With it in gateway mode, only devices connected directly to it will get an address.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      J 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @Jid
                        last edited by JKnott

                        @Jid said in IPV6 - pfsense behind BT Hub:

                        @stephenw10

                        Yes exactly ,but i was expecting the BT hub to give Pfsence an ip in the 2a0X:xxxx:xxxx:xx00:: /64 but it wasnt but gave it a fe80:: ?? will try to keep this as fe80:: and then use the /64 from the BT wan range in the LAN ,BUT that will still pose the issue of the BT box knowing how to get to this /64.

                        If that modem is in gateway mode, you can't put pfSense behind it and expect it to work properly. The pfSense WAN interface should get an address, but no prefix for the LAN. Every IPv6 capable device will have a link local fe80 address, no matter what it's connected to. That does not come from the ISP. It's often derived from the MAC address.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • J
                          Jid @JKnott
                          last edited by Jid

                          @JKnott
                          "With it in gateway mode, only devices connected directly to it will get an address". That is the case here .
                          The Probem is HOW do I get Devices on LAN side of Pfsense(connected directly to BT hub) to be able to route out in ipv6.

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • J
                            Jid @stephenw10
                            last edited by

                            @stephenw10

                            Yes they do in the 2a0X:xxxx:xxxx:xx00:: range, however in the pfsense WAN(directly connected to LAN of BT Hub) its showing in the fe80:: range.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Some sort of route on the BT Hub, static or added via a PD.

                              Or put the hub in modem mode and just use pfSense directly.

                              I know the Business hub used to do something funky with static IPv4 subnets though that caused problems with that.

                              J 1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by stephenw10

                                What is the pfSense WAN set to for IPv6? Or what was it set to before you set it statically?

                                If dhcpv6 doesn't work try SLAAC.

                                Steve

                                J 1 Reply Last reply Reply Quote 0
                                • J
                                  Jid @stephenw10
                                  last edited by

                                  @stephenw10
                                  DHCPV6 it gets fe80:: range , Static applied 2a0X:xxxx:xxxx:xx00:: /64 to match the 2a0X:xxxx:xxxx:xx00:: on the BT hub.

                                  J 1 Reply Last reply Reply Quote 0
                                  • J
                                    Jid @Jid
                                    last edited by

                                    @stephenw10
                                    Just tried SLAAC and getting this fdaa:bbcc:ddee:0:215: is that good.
                                    But i cant access any Node to test now .

                                    J JKnottJ 2 Replies Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      If other clients connected to the Hub do get an IPv6 IP as expected, what are they set to?

                                      That address with SLACC is not any better really.

                                      J 1 Reply Last reply Reply Quote 0
                                      • J
                                        Jid @stephenw10
                                        last edited by

                                        @stephenw10

                                        Thanks ,Stv unfortunateley no device is currently connected to LANof BT hub ,apart from Pfsense.

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          Jid @Jid
                                          last edited by

                                          @Jid
                                          Tried DHCPv6 now getting this fdaa:bbcc:ddee: ?
                                          For the LAN side what should it ? Statics? with DHCPv6 active?

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            I expect dhcpv6 to pull an routable v6 IP from a /64 withing the /56 BT are delegating to you.

                                            I think you probably need to confirm a laptop connected to the Hub is getting that before going further here.

                                            Steve

                                            J 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.