Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Single WAN IPv6 and /64 prefix delegation

    IPv6
    ipv6
    4
    8
    478
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hlidotbe last edited by

      Hi,

      I'm a bit at loss as how to configure IPv6 on my pfsense box.

      From my ISP I have:

      IP: xxxx:xxxx:xxxx:xxxx::7
      Mask : /64
      Gateway : xxxx:xxxx:xxxx:xxxx::1

      Prefix Delegation IPV6 : xxxx:xxxx:xxxx:yyyy::
      Mask : /64

      I assigned the IP to my WAN interface, set up the gateway and it shows some connectivity. I can ping IPv6 from the box so I assume on this side everything is ok.

      On the LAN side I don't know what to do with the delegated prefix. I tried assigning a static IP to the LAN interface (xxxx:xxxx:xxxx:yyyy::1) and a static IP on my machine (xxxx:xxxx:xxxx:yyyy::2) and I can ping between them but my PC can't ping outside of the LAN.
      I tried setting up DHCPv6 but if I use a static IP on the LAN it refuses any range.
      Tried SLAAC, nothing happens, can't track interface with a static WAN IP,...

      I read that it would be easier if my ISP gave me a smaller prefix but given how long they took to enable IPv6 on our connection I have little hope they'd give me a /56 or anything else.

      Thanks for the help!

      JKnott 1 Reply Last reply Reply Quote 0
      • JKnott
        JKnott @hlidotbe last edited by

        @hlidotbe

        The ISP actually provided addresses you're supposed to use? Normally, they use DHCPv6-PD, to assign an address and prefix.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • H
          hlidotbe last edited by

          Well, this is what I got when I ask if IPv6 was finally enabled for us.

          I can try enabling DHCPv6 on my WAN interface but IIRC that didn't work

          JKnott A 2 Replies Last reply Reply Quote 0
          • JKnott
            JKnott @hlidotbe last edited by

            @hlidotbe

            I haven't tried a static config, as I have no need to. However, one box on the LAN page is for upstream gateway. Have you set that?

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • Derelict
              Derelict LAYER 8 Netgate last edited by

              If they are actually delegating the /64 it will work fine but only for one tracked interface.

              Be sure your LAN is configured for Track interface and the tracked interface is WAN.

              Enable the extended logging in the WAN's DHCP6 settings. When you save it it will try to acquire the DHCP again so you will have fresh logs.

              Look at Status > System Logs, DHCP and filter on command dhcp6c.

              See what happens there. Post if you're unsure what you're looking at.

              Chattanooga, Tennessee, USA
              The pfSense Book is free of charge!
              DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • A
                axsense2 @hlidotbe last edited by

                @hlidotbe said in Single WAN IPv6 and /64 prefix delegation:

                Well, this is what I got when I ask if IPv6 was finally enabled for us.

                So I am not the only one using an ISP which is providing static IPV6 addresses. Just curious, did you get this working?

                Ax.

                1 Reply Last reply Reply Quote 0
                • H
                  hlidotbe last edited by

                  Unfortunately no. I haven’t had the time yet to get back to it but the previous suggestions didn’t seems to have worked.

                  1 Reply Last reply Reply Quote 0
                  • A
                    axsense2 last edited by

                    I have pretty much the same kind of setup provided by a local ISP. I found out that ISP providing static IPs is not so common practice. At least among PFSense forum users.
                    I built up two different setup ("automatic" and "semi-automatic"). Not 100% sure those are according to best IPV6 practices, but I tried to do everything by the book. Not just something that happens to work.
                    Hoping you get your IPV6 network to work and/or people here are able to assist you on that.

                    Ax.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post