Thank you for the IPv6 NAT capabilities in 2.5

Yes, I received the new computer a few weeks ago. The VPN problems were actually not VPN problems. I get 2 IPv4 addresses from my ISP. For years, I had been using that 2nd address for testing, right up to the day before I updated to pfsense 2.5.0. For some reason, I can no longer connect to pfsense from that address, even though the packets are arriving at the WAN interface. On the other hand, the VPN works fine if I tether to my cell phone. I have absolutely no idea why that 2nd address now fails.

Why is there another router ahead of pfsense? You should have your modem configured for bridge mode, not gateway.

JKnott

@bob-dig said in Thank you for the IPv6 NAT capabilities in 2.5:

Need this for telephony and as a modem

My modem has Internet, phone and IPTV on it. It's in bridge mode. Gateway vs bridge mode has no effect on my phone. Are you sure your phone service requires gateway mode?

Bob.Dig

@jknott It is not cable anymore, now it is VDSL and I have no separated modem anymore, you have to rent or buy it yourself.

DaddyGo

@jknott said in Thank you for the IPv6 NAT capabilities in 2.5:

before I updated to pfsense 2.5.0

hahaoooooo..

Stay the running version 2.4.5-p1, until you get a green light,..... and test in a VM environment with 2.5.0 ... PLS

JKnott

@johnpoz said in Thank you for the IPv6 NAT capabilities in 2.5:

edit: Yeah sage was fun.. Still have the shirt.. Even though it is starting show its age ;)
Certification Level: Sage earned at 2011-01-26 09:05:43

And you give a lot of sage advice.

JKnott

@bob-dig said in Thank you for the IPv6 NAT capabilities in 2.5:

@jknott it is not cable anymore, now it is VDSL.

The same still applies. Do you really need gateway mode for the phone service?

Bob.Dig

@jknott I would have to buy yet another device (probably another router) to get the fax machine going.

JKnott

@daddygo said in Thank you for the IPv6 NAT capabilities in 2.5:

Stay the running version 2.4.5-p1, until you get a green light,..... and test in a VM environment with 2.5.0 ... PLS

It's not a major problem. I don't often need a VPN to reach my home network, when I'm already at home. However, it is nice to be able to ensure it's working before I need to use it from elsewhere. With COVID, that's not happening very often. I can still test by tethering to my phone.

JKnott

@bob-dig said in Thank you for the IPv6 NAT capabilities in 2.5:

@jknott I would have to buy yet another device (probably another router) to get the fax machine going.

I'm having trouble understanding this. Is your phone on the same modem as your Internet connection? If so, can it not provide the phone service when in bridge mode, as mine does?

BTW, faxes are obsolete. I haven't sent one in years.

DaddyGo

@jknott said in Thank you for the IPv6 NAT capabilities in 2.5:

BTW, faxes are obsolete. I haven't sent one in years.

Like @me .....

do you know what I am using now?

from "untrusted" ISP zone - GPON 1/1 Gig + 2 IPS IP + VOIP + ISP NAT for VOIP + CCTV

bridge mode for pfSensen on port 4 (Technicolor router ISP)

pure GPON ISP IP.... 1000 / 1000 with very serious quality:

Bob.Dig

@jknott Again, don't say that, I have voted by fax in the last us elections.
And no, it has no bridge mode. I haven't see any device for VDSL which could be a bridge and has a jack for a phone and some stuff is different here.

DaddyGo

@bob-dig said in Thank you for the IPv6 NAT capabilities in 2.5:

Again, don't say that, I have voted by fax in the last us elections.

it means nothing and / or stupidity
politics eats your soul, pls. don't deal with it

Bob.Dig

@daddygo DONT VOTE EAT TRASH DO DRUGS GET CASH
Don't take it too serious I guess.

DaddyGo

@bob-dig said in Thank you for the IPv6 NAT capabilities in 2.5:

Don't take it too serious I guess

I just love you, because dare you are communicative, hello next time.........

yon 0

Where can I learn the ipv6 nat tutorial? Our university’s ipv6 network ppoe cannot get ipv6 prefixes. maybe i have to use ipv6 nat for LAN.

Bob.Dig

@yon-0 If you have an IPv6 address on the WAN-Interface, then sure, go for it.