DS-Lite State in 2020

[jan_berg]

Hello,
I just wanted to know whether DS-Lite is supported and to what extend. Can I set it up via the GUI? Or is there any Tutorial out there?

[JKnott]

@jan_berg

That's a Nintendo game isn't it? What do you mean by "support"?

[Bob.Dig]

There is nothing to be done to support DS-Lite as far as I know.

[jimp]

It's not supported on pfSense, though it is supported on TNSR (As a B4 or AFTR endpoint).

[Orbixx]

Are there any plans to implement B4 client support? There's a few ISPs in my country that do IPv4 over IPv6 with DS-Lite and I'd love to use pfSense for them.

[viktor_g]

@Orbixx said in DS-Lite State in 2020:

Are there any plans to implement B4 client support? There's a few ISPs in my country that do IPv4 over IPv6 with DS-Lite and I'd love to use pfSense for them.

Follow https://redmine.pfsense.org/issues/2357

[Jens Keiner]

@jan_berg This approach seemed to be working for me: https://wiki.cable-wiki.xyz/OPNsense

Caveats:

• Can't be done through UI, needs to be executed in a shell.
• The tunnel will not be visible in the UI.
• Doesn't persist. Would need to re-execute every time the WAN comes up and has a global IPv6 assigned.
• Need to extract the AFTR name and its IPv6 address. In my case, the name comes through via DHCPv6 from the ISP as option 64. Could extract it via tcpdump. Then resolved it to an IP address and used that when setting up the tunnel.
• Breaks again if AFTR name/IP changes.

So, no real DS-Lite support in pfSense currently, but possible to set up manually.