<![CDATA[Access webGui via double stack]]>Hello guys,

It's possible to access the pfsense webgui via double stack (ipv4 and ipv6)?

]]>https://forum.netgate.com/topic/100489/access-webgui-via-double-stackRSS for NodeSun, 12 Jul 2026 20:37:50 GMTWed, 25 May 2016 14:18:26 GMT60<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 20:43:07 GMT]]>@johnpoz:

That is a pretty OPEN rule ;)  If your wanting to lock down access to the gui.. And only access it from a specific vlan great.  But that that seems pretty wide if you ask me ;)

Glad you got it sorted.

yea..I will configure a rule according to the link below. :D
https://doc.pfsense.org/index.php/Restrict_access_to_management_interface

Thanks!!!

]]>https://forum.netgate.com/post/627850https://forum.netgate.com/post/627850Fri, 27 May 2016 20:43:07 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 17:00:29 GMT]]>That is a pretty OPEN rule ;)  If your wanting to lock down access to the gui.. And only access it from a specific vlan great.  But that that seems pretty wide if you ask me ;)

Glad you got it sorted.

]]>https://forum.netgate.com/post/627808https://forum.netgate.com/post/627808Fri, 27 May 2016 17:00:29 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 14:27:03 GMT]]>Guys,

My firewall no have access from outside. Only for me. ;D

My DNS server have both v4 (A) and v6 (AAAA) entries.

Did you disable the antilock out?  This allows access to pfsense both ipv4 and ipv6

He was disabled. Now, it's working. It needed only a access rule any to vlan300 address.

]]>https://forum.netgate.com/post/627768https://forum.netgate.com/post/627768Fri, 27 May 2016 14:27:03 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 12:25:49 GMT]]>^ very true.  But out of the box all wan inbound be it ipv4 or ipv6 is blocked.  You would of had to allow such access by creating a rule.

]]>https://forum.netgate.com/post/627748https://forum.netgate.com/post/627748Fri, 27 May 2016 12:25:49 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 04:47:44 GMT]]>Your pfsense IPV6 address is most probably a public address.

So, if you have allowed access throught the firewall, it will be accessible via the internet from anywhere in the world and by anyone without any port forwarding required.

Keep that in mind.

Now that thats out of the way, I access mine like this (the numbers here are replaced but the form is correct)

https://[2001:111:e111:1::1]/

]]>https://forum.netgate.com/post/627683https://forum.netgate.com/post/627683Fri, 27 May 2016 04:47:44 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 03:58:14 GMT]]>What do you mean what firewall config?

My lan rules are default any any.. I see no reason to filter MY access.  Now my other networks are very restricted from my lan and other segment.  But there is a antilock out rule anyway.

What rules do you have?  Did you disable the antilock out?  This allows access to pfsense both ipv4 and ipv6

antilockrule.png
antilockrule.png_thumb

]]>https://forum.netgate.com/post/627681https://forum.netgate.com/post/627681Fri, 27 May 2016 03:58:14 GMT<![CDATA[Reply to Access webGui via double stack on Fri, 27 May 2016 00:55:41 GMT]]>@johnpoz:

Or just go to your ipv6 address directly.

Your client does have to have a working ipv6 connection, etc.

Or sure names work as well, if you setup a AAAA for pfsense to resolve too.  See 2nd attachment via name and using ipv6.

johnpoz,

what firewall configuration you did?

]]>https://forum.netgate.com/post/627655https://forum.netgate.com/post/627655Fri, 27 May 2016 00:55:41 GMT<![CDATA[Reply to Access webGui via double stack on Wed, 25 May 2016 21:04:18 GMT]]>Or just go to your ipv6 address directly.

Your client does have to have a working ipv6 connection, etc.

Or sure names work as well, if you setup a AAAA for pfsense to resolve too.  See 2nd attachment via name and using ipv6.

webguiviaipv6.png
webguiviaipv6.png_thumb
vianameipv6.png
vianameipv6.png_thumb

]]>https://forum.netgate.com/post/627329https://forum.netgate.com/post/627329Wed, 25 May 2016 21:04:18 GMT<![CDATA[Reply to Access webGui via double stack on Wed, 25 May 2016 17:27:47 GMT]]>You need to have DNS configured so that it returns both A and AAAA records for the name you have chosen for the firewall, let's say firewall.example.tld. A record(s) for the IPv4 address(es) and AAAA records for the IPv6 address(es). For local access you can do that in the DNS resolver with host overrides, otherwise in the authoritative name server for your domain.

]]>https://forum.netgate.com/post/627270https://forum.netgate.com/post/627270Wed, 25 May 2016 17:27:47 GMT<![CDATA[Reply to Access webGui via double stack on Wed, 25 May 2016 16:20:59 GMT]]>@kpa:

Why do you think it wouldn't be possible? IPv6 is just addresses and routes just like IPv4 is when it comes to connectivity.

Ok. How I config this?

]]>https://forum.netgate.com/post/627260https://forum.netgate.com/post/627260Wed, 25 May 2016 16:20:59 GMT<![CDATA[Reply to Access webGui via double stack on Wed, 25 May 2016 15:00:12 GMT]]>Why do you think it wouldn't be possible? IPv6 is just addresses and routes just like IPv4 is when it comes to connectivity.

]]>https://forum.netgate.com/post/627241https://forum.netgate.com/post/627241Wed, 25 May 2016 15:00:12 GMT