Single WAN IPv6 and /64 prefix delegation

hlidotbe

Hi,

I'm a bit at loss as how to configure IPv6 on my pfsense box.

From my ISP I have:

IP: xxxx:xxxx:xxxx:xxxx::7
Mask : /64
Gateway : xxxx:xxxx:xxxx:xxxx::1

Prefix Delegation IPV6 : xxxx:xxxx:xxxx:yyyy::
Mask : /64

I assigned the IP to my WAN interface, set up the gateway and it shows some connectivity. I can ping IPv6 from the box so I assume on this side everything is ok.

On the LAN side I don't know what to do with the delegated prefix. I tried assigning a static IP to the LAN interface (xxxx:xxxx:xxxx:yyyy::1) and a static IP on my machine (xxxx:xxxx:xxxx:yyyy::2) and I can ping between them but my PC can't ping outside of the LAN.
I tried setting up DHCPv6 but if I use a static IP on the LAN it refuses any range.
Tried SLAAC, nothing happens, can't track interface with a static WAN IP,...

I read that it would be easier if my ISP gave me a smaller prefix but given how long they took to enable IPv6 on our connection I have little hope they'd give me a /56 or anything else.

Thanks for the help!

JKnott

@hlidotbe

The ISP actually provided addresses you're supposed to use? Normally, they use DHCPv6-PD, to assign an address and prefix.

hlidotbe

Well, this is what I got when I ask if IPv6 was finally enabled for us.

I can try enabling DHCPv6 on my WAN interface but IIRC that didn't work

JKnott

@hlidotbe

I haven't tried a static config, as I have no need to. However, one box on the LAN page is for upstream gateway. Have you set that?

Derelict

If they are actually delegating the /64 it will work fine but only for one tracked interface.

Be sure your LAN is configured for Track interface and the tracked interface is WAN.

Enable the extended logging in the WAN's DHCP6 settings. When you save it it will try to acquire the DHCP again so you will have fresh logs.

Look at Status > System Logs, DHCP and filter on command dhcp6c.

See what happens there. Post if you're unsure what you're looking at.

axsense2

@hlidotbe said in Single WAN IPv6 and /64 prefix delegation:

Well, this is what I got when I ask if IPv6 was finally enabled for us.

So I am not the only one using an ISP which is providing static IPV6 addresses. Just curious, did you get this working?

Ax.

hlidotbe

Unfortunately no. I haven’t had the time yet to get back to it but the previous suggestions didn’t seems to have worked.

axsense2

I have pretty much the same kind of setup provided by a local ISP. I found out that ISP providing static IPs is not so common practice. At least among PFSense forum users.
I built up two different setup ("automatic" and "semi-automatic"). Not 100% sure those are according to best IPV6 practices, but I tried to do everything by the book. Not just something that happens to work.
Hoping you get your IPV6 network to work and/or people here are able to assist you on that.

Ax.