[RESOLVED] Problem with Cox cable-modem and pfSense with IPv6 routing on pfSense LAN side

martywise

@obitori , I know this is pretty old at this point, But I'm also a Cox customer, battling my way through a similar setup with pfSense and a netgear CM1000 cable modem.. Any chance you could provide some details on your pfSense config to get it to use the ISP provided block of addresses?
Thanks for any info you can provide.

stan-qaz

@martywise Nothing fancy, my WAN page has these set:

Use DHCP6 to configure
use /56 prefix and send a hint to the ISP
reject leases from your modem's internal IP address
don't block private networks (once working you can try blocking)

martywise

@stan-qaz -- Thanks for the info. Going through my settings again I see what I'm missing. I am currently only asking for a /64 and that's what I'm getting... And, it changes each router reboot.

With your config, do you get a static block? Have you seen the prefix change over time? If so, how frequently?

Thanks again.

stan-qaz

@martywise No reason to only ask for a /64 but it should work if you have only one internal LAN.

Try checking: "Do not allow PD/Address release" to see if it helps stabilize the prefix.

You do not get a static block, you get whatever Cox wants to hand out. Some times and some areas you'll be on the same prefix for a long time, other times and areas (like Phoenix last year) you'll get a different prefix every couple months. As long as you avoid hard coding the prefix into some rule or DNS entry you will never notice it changing.

JKnott

@martywise said in [RESOLVED] Problem with Cox cable-modem and pfSense with IPv6 routing on pfSense LAN side:

And, it changes each router reboot.

Check Do not allow PD/Address release on the WAN page. Also, no harm in requesting more /64s than you need. The IPv6 address space is huge, with gazillions of addresses. I get a /56 from my ISP and currently use 4 /64s.

martywise

@stan-qaz Fabulous! Thanks. This is definitely working. Now, I get a LAN IPv6 address and a /56 prefix that does not change each reboot. As you say, it will likely change periodically. I've had Cox for over 20 years. In that time, my IPv4 has changed only infrequently... I expect this will probably be similar.
Thanks again for your help!

martywise

@jknott I now have the "Do not allow PD/Address release" option checked and overall, things seem to be working.
As for address space -- that's about what I'm after too... I only want to create a few subnets, with at most a few dozen nodes on each.
Thanks for the assistance.

JKnott

@martywise

My IPv4 address is virtually static, but my host name is based on modem and router MAC addresses. If I change hardware, the host name will change. If I change my router or it's NIC, my address will change. On IPv6, my prefix has survived modem and complete replacement of the box I run pfsense on. I suspect it might take a nuke or two, to change it.