Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 Router behind router

    Scheduled Pinned Locked Moved IPv6
    68 Posts 3 Posters 14.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @matthewgcampbell
      last edited by

      @cashew

      You put the modem in bridge mode, not pfsense. For example, my modem came in gateway mode, which provides a single /64. With it in bridge mode, I could use pfsense for my firewall/router and received a /56 prefix from my ISP with DHCPv6-PD. This can provide up to 256 /64s.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      M 1 Reply Last reply Reply Quote 0
      • M
        matthewgcampbell @JKnott
        last edited by

        @JKnott so the UDM Pro should be able to use the DHCPV6-PD and give out IPv6 to its LAN?

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @matthewgcampbell
          last edited by

          @cashew

          I would assume so, but can't say for certain, as I'm not familiar with it. DHCPv6-PD is the way most ISPs provide IPv6. However not all modems can handle it. I had to change modems to get IPv6.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          M 1 Reply Last reply Reply Quote 1
          • M
            matthewgcampbell @JKnott
            last edited by

            @JKnott yeah my ISP router is in bridge mode, but I have AT&T and have to use this but when doing so I get a /60 on the WAN my problem is configuring Pfsense so that my UDM Pro can get the IPV6 prefix from the LAN port, but since I have DHCPV6 I can’t start my own DHCPv6 server were my UDM Pro would be able to get the delegated prefix from pfsense, my only other option is static, but when I configure it as static the UDM Pro gets a IPv6 address but it just won’t hand it out the clients.

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @matthewgcampbell
              last edited by

              @cashew

              Are you trying to get an IPv6 address on the WAN side of pfsense? If so, don't worry about it, as you don't need one. With IPv6, routing is often done with link local addresses.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              M 1 Reply Last reply Reply Quote 1
              • M
                matthewgcampbell @JKnott
                last edited by

                @JKnott IPv6 on the WAN is fine it’s just advertising the prefix for the other router to get, that’s were I’m confused, pfsense gets a IPv6 address no problem

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @matthewgcampbell
                  last edited by

                  @cashew

                  Show your settings on the WAN and LAN interfaces.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    matthewgcampbell @JKnott
                    last edited by matthewgcampbell

                    @JKnott I’m doing this and the UDM Pro gets a IPV6 address I’m just unsure of how to configure pfsense to delegate a IPv6 address to the UDM Pro so that it can pass the IPv6 onto its clients my config

                    JKnottJ A 2 Replies Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @matthewgcampbell
                      last edited by JKnott

                      @cashew

                      Please do a screen capture of your actual WAN and LAN settings, including Router Advertisements.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • A
                        abuttino @matthewgcampbell
                        last edited by

                        @matthewgcampbell Did you ever get this solved?

                        M 1 Reply Last reply Reply Quote 0
                        • M
                          matthewgcampbell @abuttino
                          last edited by

                          @abuttino yes sure did, was new to pfsense and integrating IPv6 into networks so I had to look though the docs on both pfsense and how IPv6 works. I did kinda leave this post unanswered. What do you need help with?

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            abuttino @matthewgcampbell
                            last edited by

                            @matthewgcampbell What did the end configuration look like? Did you have to enable the DHCPV6 server on pfSense? RA on pfSense? What about the WAN/LAN side of them Unifi controller (UDM)?

                            I worked for a week trying to get this right and had to settle with tunnel broker.

                            Sending a few screenshots would make my day, that's for sure

                            Thanks for writing back!

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              matthewgcampbell @abuttino
                              last edited by

                              @abuttino yeah you need to setup a DHCPv6 server on pfsense as that is the only *current implementation that the UDM Pro supports without hacking around. Other than that the specifics would need to be tuned to your environment, ie how big of a IPv6 block is delegated to you from your isp, how often it changes, mine hasn’t changed for 5 years, etc.

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                abuttino @matthewgcampbell
                                last edited by

                                @matthewgcampbell How did you set up the wan/lan on the UDM? WAN DHCPV6, but, who issues the DHCPV6 on the UDM? pfSense? Unifi? ID#? PD subnet?

                                Do you have any anonymized screenshots (black out subnet data) you can provide?

                                I'm just lost here.

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  matthewgcampbell @abuttino
                                  last edited by

                                  @abuttino I’ll have to put some screenshots and examples together, what exactly does your typology look like? how big is the subnet delegated to you by your isp?

                                  A 1 Reply Last reply Reply Quote 0
                                  • A
                                    abuttino @matthewgcampbell
                                    last edited by

                                    @matthewgcampbell my ISP gives me a /56. Using the DHCP v6 from pfsense, it would only give the USG a /128, no matter what I used on pfSense.

                                    JKnottJ 1 Reply Last reply Reply Quote 0
                                    • JKnottJ
                                      JKnott @abuttino
                                      last edited by

                                      @abuttino

                                      I assume that /128 is your WAN address. That's entirely normal, as it's not used for routing. With IPv6, the link local address is often used for routing.

                                      PfSense running on Qotom mini PC
                                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                      UniFi AC-Lite access point

                                      I haven't lost my mind. It's around here...somewhere...

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        abuttino @JKnott
                                        last edited by

                                        @JKnott Unfortunately, I couldn't end up getting the lan dhcpv6 on the USG to give addresses out. I tried for a solid week.

                                        JKnottJ 1 Reply Last reply Reply Quote 0
                                        • JKnottJ
                                          JKnott @abuttino
                                          last edited by

                                          @abuttino

                                          Try capturing the DHCPv6-PD sequence from your ISP.

                                          To do that, shut pfsense down and disconnect the WAN port. Then reboot and run Packet Capture on the WAN port, filtering on DHCPv6. You can filter port 546 or 547. Then reconnect the WAN port. Post the capture here.

                                          PfSense running on Qotom mini PC
                                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                          UniFi AC-Lite access point

                                          I haven't lost my mind. It's around here...somewhere...

                                          A 1 Reply Last reply Reply Quote 1
                                          • A
                                            abuttino @JKnott
                                            last edited by abuttino

                                            @jknott

                                            I would like to see @matthewgcampbell 's setup on pfSense DHCPv6 and RA so I can just figure it out from his settings. I am pretty astute.

                                            JKnottJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.