• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Configuring radvd when using ULA with NPT?

Scheduled Pinned Locked Moved IPv6
13 Posts 3 Posters 1.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    Bob.Dig LAYER 8 @ianc1215
    last edited by Bob.Dig Dec 4, 2022, 10:15 AM Dec 4, 2022, 10:14 AM

    @ianc1215 said in Configuring radvd when using ULA with NPT?:

    @bob-dig I upgraded to pfSense Plus, it supports dynamic prefixes.

    Good for you... then do what I have said and look if this is working for you. 😉

    I 1 Reply Last reply Dec 4, 2022, 10:17 AM Reply Quote 0
    • I
      ianc1215 @Bob.Dig
      last edited by Dec 4, 2022, 10:17 AM

      @bob-dig Ok, so I assign a Virtual IP to each interface I want a ULA on? How would I get radvd to advertise the ULA prefix but not the GUA prefix?

      B J 2 Replies Last reply Dec 4, 2022, 10:19 AM Reply Quote 0
      • B
        Bob.Dig LAYER 8 @ianc1215
        last edited by Dec 4, 2022, 10:19 AM

        @ianc1215 I don't think you can do that, you will have both.

        I 1 Reply Last reply Dec 4, 2022, 10:27 AM Reply Quote 0
        • I
          ianc1215 @Bob.Dig
          last edited by Dec 4, 2022, 10:27 AM

          @bob-dig I assume there is no way to override radvd's config file without breaking the way pfSense configures it?

          B 1 Reply Last reply Dec 4, 2022, 12:14 PM Reply Quote 0
          • B
            Bob.Dig LAYER 8 @ianc1215
            last edited by Bob.Dig Dec 4, 2022, 1:20 PM Dec 4, 2022, 12:14 PM

            @ianc1215 I don't know.

            If you look at the NPt-dialog, you can see that it makes more sense if you don't put that GUA-prefix on the same interface to begin with because it is "applied" at the WAN-Interface. This also means you could have two WANs with separate prefixes and the routing would dictate which GUA-prefix would be used by NPt.

            So I guess the best way to do it at present is to create VLANs for every GUA-prefix and don't use them for anything other than the NPt-dialog.
            In the future I would like to see that integrated there without setting up those VLANs.

            1 Reply Last reply Reply Quote 0
            • J
              JKnott @ianc1215
              last edited by Dec 4, 2022, 12:58 PM

              @ianc1215

              You can have both GUA and ULA on your network. Then you can use the ULA in your DNS.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • J
                JKnott @ianc1215
                last edited by Dec 4, 2022, 12:59 PM

                @ianc1215

                You advertise both for local devices and use the ULA for your DNS.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                I 1 Reply Last reply Dec 4, 2022, 1:17 PM Reply Quote 1
                • I
                  ianc1215 @JKnott
                  last edited by Dec 4, 2022, 1:17 PM

                  @jknott Oh! Never looked at it that way. So in a sort of analogy its like split tunneling with a vpn. GUA would be used for non-local traffic bound for beyond the WAN interface but the ULA would be used for local resources and local name resolution?

                  J 1 Reply Last reply Dec 4, 2022, 2:34 PM Reply Quote 0
                  • J
                    JKnott @ianc1215
                    last edited by Dec 4, 2022, 2:34 PM

                    @ianc1215

                    Yes. People have to stop thinking about the way they did things with IPv4. With IPv6, you can have multiple GUA and ULA on the same interface. Some people also use ULA because they don't get a stable prefix from their ISP, which makes it difficult to use DNS. With ULA, it works fine.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    I 1 Reply Last reply Dec 4, 2022, 2:35 PM Reply Quote 0
                    • I
                      ianc1215 @JKnott
                      last edited by Dec 4, 2022, 2:35 PM

                      @jknott Well I just learned something new today, thanks!

                      1 Reply Last reply Reply Quote 0
                      13 out of 13
                      • First post
                        13/13
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received