Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need serious help with configuring IPv6 in pfSense.

    Scheduled Pinned Locked Moved IPv6
    12 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SidMan06052001
      last edited by

      My ISP provides IPv6 address and I had been trying to configure it with pfSense so that every device on my network gets an IPv6 address. I read many fourms but I didn't succeed. My network configuration is something like this :

      ISP–------------------>ISP Router------------------------------>pfSense Router------------------------------------->All Devices

      When I connect my devices to ISP router every device gets a unique IPv6 address. I checked it at http://ipv6-test.com and the address matched with the address in ipconfig output.

      The ISP router IPv6 status is attached in the screenshot. Prefix length is 64.

      Can someone provide a link to step by step guide or explain me the steps.

      ![Screenshot (46).png](/public/imported_attachments/1/Screenshot (46).png)
      ![Screenshot (46).png_thumb](/public/imported_attachments/1/Screenshot (46).png_thumb)

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        What are they giving you as a prefix delegation?

        How is the IPv6 WAN configured? DHCP6? Static?

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • S
          SidMan06052001
          last edited by

          The prefix length is 64. I have no clue what prefix delegation is.

          The wan is configured to use dhcpv6.

          1 Reply Last reply Reply Quote 0
          • S
            SidMan06052001
            last edited by

            Ok after a bit of online reading I came to understand my situation. The ISP router acts as a prefix delegating client and requests from ISP prefix delegating server. My ISP router then uses this prefix and assigns IP addresses to the clients, in my case pfSense router.

            How should I configure pfSense to work in such situation.

            1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott
              last edited by

              As I mentioned in your other thread, put the ISP's router in bridge mode.  PfSense is a much better firewall/router than what ISPs provide.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • S
                SidMan06052001
                last edited by

                The problem is ISP Router has no bridge mode. The settings are very limited.

                1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott
                  last edited by

                  @SidMan06052001:

                  The problem is ISP Router has no bridge mode. The settings are very limited.

                  I've had a few cable modems over the years.  Some I could put in bridge mode myself, other I had to call the ISP.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • S
                    SidMan06052001
                    last edited by

                    Well when I contacted my ISP the person whom I talked to had no clue ehat I was doing.

                    And no this router that I have doesn't allow bridge mode.

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott
                      last edited by

                      @SidMan06052001:

                      Well when I contacted my ISP the person whom I talked to had no clue ehat I was doing.

                      And no this router that I have doesn't allow bridge mode.

                      What is the modem make & model?

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • S
                        SidMan06052001
                        last edited by

                        Well the area in which I live has very bad broadband service so I am using a MiFi device connected to pfSense box. The firmware version is fxn_jmr540_r6.1_s. The model is JMR540 but the same model number has different firmwares which have different settings option.

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          You are probably out-of-luck.

                          If the ISP cannot provide simple, router-agnostic instructions for what you basically need to do to get at least one /64 routed behind the router, you should just cut your losses and set up something like a tunnelbroker.net tunnel and stop wasting time on them.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • S
                            SidMan06052001
                            last edited by

                            Yeah you are right.

                            Here is similiar situation.
                            https://forum.pfsense.org/index.php?topic=80472.0

                            I am out of luck. Thanks everybody for their time.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.