Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    how do i set pfsense to get ipv6 from isp

    Scheduled Pinned Locked Moved General pfSense Questions
    37 Posts 6 Posters 4.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firefox
      last edited by firefox

      Do I need to make a specific setting for pfsense to get ipv6 from ISP
      Or it's automatic
      Are these settings OK?

      ipv61.png
      ipv62.png

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @firefox
        last edited by

        @firefox

        I'm on a cable modem, not DSL, but this area should be the same. In DHCP6 Client Configuration, I have this:

        92b7fc87-4b47-4885-a13d-fe400d85ccbb-image.png

        There will also be some stuff on the LAN page:

        487605a2-b9f5-49dc-88c3-0fa0d4a47cf0-image.png

        Give those a try and see what happens.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        F 2 Replies Last reply Reply Quote 0
        • F
          firefox @JKnott
          last edited by

          @jknott
          i try that
          and it didnt work

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @firefox
            last edited by

            @firefox

            Does your ISP provide IPv6? If so, are you getting a WAN address? Who is your ISP? There may be someone else here who has experience with them.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            F 1 Reply Last reply Reply Quote 0
            • F
              firefox @JKnott
              last edited by

              @jknott

              my isp provide ipv6
              I checked it out with them

              I already got ipv6 from them
              That I was on pfsense 2.4.5 after the upgrade to 2.5.0 it did not show up

              I did not attach importance to it
              I did a new installation of pfsense 2.5.0
              And probably here the settings are a bit different

              JKnottJ 2 Replies Last reply Reply Quote 0
              • JKnottJ
                JKnott @firefox
                last edited by

                @firefox

                Again, please say who your ISP is. Someone else may be able to help better than I can. When I updated to 2.5.0 & 2.5.1, IPv6 just kept working.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @JKnott
                  last edited by

                  Well if your isp is pppoe based, would seem odd that their ipv6 would be just dhcpv6..

                  Is the settings from before? As mentioned - who is your isp.. This will allow other users that have that ISP or have used them to chime in on any special settings.

                  I would suggest you get with your isp for what settings you need for ipv6.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @firefox
                    last edited by

                    @firefox

                    Here is some setup info from a Canadian ISP that uses both ADSL and cable. Perhaps something here will give you some clues. As I mentioned, I haven't set up pfsense on ADSL, so I can't speak from experience.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      @johnpoz said in how do i set pfsense to get ipv6 from isp:

                      Well if your isp is pppoe based, would seem odd that their ipv6 would be just dhcpv6..

                      That's exactly how my ISP works, and that would apply to most DSL providers in the UK.

                      I have it configured as above except I am only pulling a prefix.

                      Steve

                      F 1 Reply Last reply Reply Quote 0
                      • F
                        firefox @stephenw10
                        last edited by

                        @stephenw10
                        it is pppoe based

                        After a conversation with my ISP ("CCC" in israel)
                        They say I get an ipv6 address
                        (Appears to them on the computer that I have an address)
                        I just do not see it or something like that

                        I did not touch or change anything in the ipv6 settings
                        I always got an address automatically

                        It could be that in version 2.4.5 it was different
                        I do not know

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott @firefox
                          last edited by

                          @firefox said in how do i set pfsense to get ipv6 from isp:

                          They say I get an ipv6 address

                          Are you getting a WAN address? Also, packet captures can do wonders when trying to solve problems. Try this:

                          Shut down pfsense & unplug WAN cable
                          Reboot pfsense and run Packet Capture on the WAN port, filtering on port 546 or 547
                          Plug in WAN cable
                          Post the capture file here

                          BTW, it really can help if you mention your ISP, in case someone else here has experience with them.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          F 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Enable 'Debug' in the dhcpb6 client settings. Check the dhcp logs after connecting.

                            If you are pulling a prefix only you want see that unless you have an internal interface set to use it.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • F
                              firefox @JKnott
                              last edited by

                              @jknott
                              I wrote that my ISP is CCC IN israel

                              Are the settings that appear on the screenshots I uploaded correct?

                              Maybe there
                              I need to change something

                              JKnottJ 1 Reply Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @firefox
                                last edited by

                                @firefox

                                Sorry, I must have missed that. However, I see you gave a prefix delegation size of 64. If your ISP provides only a /64, then you can't pass IPv6 onto your LAN. If the ISP provides a different size then you use that number. For example my ISP provides a /56, which I can then split into 256 /64s on the LAN side.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Yeah, I pull a /56 here with link-local on WAN.

                                  You could pull a /64 and use it only on LAN. Make sure you are requesting the correct prefix size though. I have seen that fail if it's not exactly what the ISP is offering.

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    firefox @JKnott
                                    last edited by

                                    @jknott
                                    i try that again
                                    And now I see the ipv6

                                    why it says offline packetloss ?

                                    ipv688.png

                                    MikeV7896M 1 Reply Last reply Reply Quote 0
                                    • MikeV7896M
                                      MikeV7896 @firefox
                                      last edited by MikeV7896

                                      @firefox
                                      Your ISP's router may not be responding to IPv6 ping requests. Maybe do a IPv6 traceroute (you might need to temporarily disable monitoring to do this, see below) and try using hop #3 or 4 as the monitoring IP address, or use something more global like Google DNS or something. Or you can change the gateway setting to disable the monitoring (System > Routing > [edit the IPv6 gateway] > check "Disable Gateway Monitoring"), though that might affect failover if you have dual WAN.

                                      The S in IOT stands for Security

                                      JKnottJ 1 Reply Last reply Reply Quote 0
                                      • JKnottJ
                                        JKnott @MikeV7896
                                        last edited by

                                        @virgiliomi

                                        Or not use gateway monitoring. I don't use it, as it doesn't do much for most users.

                                        PfSense running on Qotom mini PC
                                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                        UniFi AC-Lite access point

                                        I haven't lost my mind. It's around here...somewhere...

                                        F 1 Reply Last reply Reply Quote 0
                                        • F
                                          firefox @JKnott
                                          last edited by

                                          @jknott

                                          updating
                                          I returned everything to the previous state
                                          Ipv4 only
                                          Because for some reason everything works slowly
                                          I currently will not use ipv6 maybe I will try again in a few months

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yeah, that's typical of having partial v6 connectivity. Most operating systems will try to use it first if they think they have a v6 connection. If that is broken you have to wait for it to timeout before it tries v4 resulting in a pretty bad experience!

                                            F 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.