how do i set pfsense to get ipv6 from isp
-
Do I need to make a specific setting for pfsense to get ipv6 from ISP
Or it's automatic
Are these settings OK?
-
I'm on a cable modem, not DSL, but this area should be the same. In DHCP6 Client Configuration, I have this:
There will also be some stuff on the LAN page:
Give those a try and see what happens.
-
@jknott
i try that
and it didnt work -
Does your ISP provide IPv6? If so, are you getting a WAN address? Who is your ISP? There may be someone else here who has experience with them.
-
my isp provide ipv6
I checked it out with themI already got ipv6 from them
That I was on pfsense 2.4.5 after the upgrade to 2.5.0 it did not show upI did not attach importance to it
I did a new installation of pfsense 2.5.0
And probably here the settings are a bit different -
Again, please say who your ISP is. Someone else may be able to help better than I can. When I updated to 2.5.0 & 2.5.1, IPv6 just kept working.
-
Well if your isp is pppoe based, would seem odd that their ipv6 would be just dhcpv6..
Is the settings from before? As mentioned - who is your isp.. This will allow other users that have that ISP or have used them to chime in on any special settings.
I would suggest you get with your isp for what settings you need for ipv6.
-
Here is some setup info from a Canadian ISP that uses both ADSL and cable. Perhaps something here will give you some clues. As I mentioned, I haven't set up pfsense on ADSL, so I can't speak from experience.
-
@johnpoz said in how do i set pfsense to get ipv6 from isp:
Well if your isp is pppoe based, would seem odd that their ipv6 would be just dhcpv6..
That's exactly how my ISP works, and that would apply to most DSL providers in the UK.
I have it configured as above except I am only pulling a prefix.
Steve
-
@stephenw10
it is pppoe basedAfter a conversation with my ISP ("CCC" in israel)
They say I get an ipv6 address
(Appears to them on the computer that I have an address)
I just do not see it or something like thatI did not touch or change anything in the ipv6 settings
I always got an address automaticallyIt could be that in version 2.4.5 it was different
I do not know -
@firefox said in how do i set pfsense to get ipv6 from isp:
They say I get an ipv6 address
Are you getting a WAN address? Also, packet captures can do wonders when trying to solve problems. Try this:
Shut down pfsense & unplug WAN cable
Reboot pfsense and run Packet Capture on the WAN port, filtering on port 546 or 547
Plug in WAN cable
Post the capture file hereBTW, it really can help if you mention your ISP, in case someone else here has experience with them.
-
Enable 'Debug' in the dhcpb6 client settings. Check the dhcp logs after connecting.
If you are pulling a prefix only you want see that unless you have an internal interface set to use it.
Steve
-
@jknott
I wrote that my ISP is CCC IN israelAre the settings that appear on the screenshots I uploaded correct?
Maybe there
I need to change something -
Sorry, I must have missed that. However, I see you gave a prefix delegation size of 64. If your ISP provides only a /64, then you can't pass IPv6 onto your LAN. If the ISP provides a different size then you use that number. For example my ISP provides a /56, which I can then split into 256 /64s on the LAN side.
-
Yeah, I pull a /56 here with link-local on WAN.
You could pull a /64 and use it only on LAN. Make sure you are requesting the correct prefix size though. I have seen that fail if it's not exactly what the ISP is offering.
-
-
@firefox
Your ISP's router may not be responding to IPv6 ping requests. Maybe do a IPv6 traceroute (you might need to temporarily disable monitoring to do this, see below) and try using hop #3 or 4 as the monitoring IP address, or use something more global like Google DNS or something. Or you can change the gateway setting to disable the monitoring (System > Routing > [edit the IPv6 gateway] > check "Disable Gateway Monitoring"), though that might affect failover if you have dual WAN. -
@virgiliomi
Or not use gateway monitoring. I don't use it, as it doesn't do much for most users.
-
updating
I returned everything to the previous state
Ipv4 only
Because for some reason everything works slowly
I currently will not use ipv6 maybe I will try again in a few months -
Yeah, that's typical of having partial v6 connectivity. Most operating systems will try to use it first if they think they have a v6 connection. If that is broken you have to wait for it to timeout before it tries v4 resulting in a pretty bad experience!
