Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    setting ULA on LAN

    IPv6
    2
    5
    661
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AndrewZ last edited by

      I'm running pfSense with HE tunnel, so IPv6 address on LAN is statically configured according to the information received from HE. DHCPv6 is not used on LAN, everything works fine using RA, Router mode = unmanaged.
      Now I'm adding ULA subnet in Services - DHCPv6 Server & RA - LAN - Router Advertisements.
      I see that my Linux host already have 2x FD:bla-bla-bla ULA addresses and I can ping ULA of another host in LAN.
      Now the question - how can I configure ULA on pfSense LAN interface itself?

      1 Reply Last reply Reply Quote 0
      • JKnott
        JKnott last edited by JKnott

        Go to Firewall / Virtual IPs and click on + Add to get to the screen to enter info. To keep things simple, use the ULA prefix for the first half of the address and add the last half of your GUA. Select /64.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 64 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • A
          AndrewZ last edited by

          Thanks for the hint. I've added an 'IP Alias' there but cannot ping that address from another host in LAN.
          However I do see the new address added to LAN with 'ifconfig -a'. Do I need anything else?

          1 Reply Last reply Reply Quote 0
          • JKnott
            JKnott last edited by JKnott

            Ping works for me. What operating system are you pinging from? You may have to specify the interface. I use ping -I eth0 <address> on Linux. You can also try ping6 <address> at the pfSense command prompt.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 64 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • A
              AndrewZ last edited by

              I'm on latest Ubuntu. Can ping6 another host in LAN using it's FD... address but not the pfSense LAN. Weird...
              Found! It seems I need to add separate a firewall rule to allow ULA subnet access the firewall.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post