• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Assigning ipv6 address to WAN via VLAN

Scheduled Pinned Locked Moved General pfSense Questions
9 Posts 3 Posters 776 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D
    DBLClick
    last edited by Jun 8, 2023, 10:47 PM

    My ISP (Verizon FIOS) doesn't provide an IPv6 address for the wan address. Using their router, the delegate a /56 address space and use the very last block in the set "FF" and assign the address of 1 to the interface. Is it possible for me to configure a VLAN tracking the interface on the wan port to assign it an IPv6 address.

    Is there a working configuration doing this?

    I really like to have DDNS IPv6 address assigned to my interface.

    Thank you.

    J 1 Reply Last reply Jun 9, 2023, 12:36 PM Reply Quote 0
    • J
      JKnott @DBLClick
      last edited by Jun 9, 2023, 12:36 PM

      @DBLClick

      You don't need one. Just use the interface address for your LAN.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      D 1 Reply Last reply Jun 9, 2023, 12:41 PM Reply Quote 0
      • D
        DBLClick @JKnott
        last edited by Jun 9, 2023, 12:41 PM

        @JKnott I'm a little confused, if I'm using a VLAN it didn't assign it IP address with "TrackInterface" turned on.

        are you saying, just assign a static address?

        J 1 Reply Last reply Jun 9, 2023, 8:09 PM Reply Quote 0
        • S
          stephenw10 Netgate Administrator
          last edited by Jun 9, 2023, 1:59 PM

          If it's dynamic you need to assign it somewhere and then rack that.

          How are they delegating the /56 to you?

          D 1 Reply Last reply Jun 9, 2023, 2:07 PM Reply Quote 0
          • D
            DBLClick @stephenw10
            last edited by Jun 9, 2023, 2:07 PM

            @stephenw10 They Delegate a Using DHCPv6 on the wan interface. you must use request delegation only to receive the block of IPv6 address. Wan Interface doesn't receive a Global IPv6 address only a Link Local address to the interface.

            Normally a FIOS router will utilize the last block "FF" and assign ::1 to the interface of the delegated received address.

            1 Reply Last reply Reply Quote 0
            • S
              stephenw10 Netgate Administrator
              last edited by Jun 9, 2023, 2:12 PM

              Ok, that's fine. You can still just use track WAN for the other interfaces. Verizon will route that /56 to you using the link-local address on WAN.

              D 1 Reply Last reply Jun 9, 2023, 2:15 PM Reply Quote 0
              • D
                DBLClick @stephenw10
                last edited by Jun 9, 2023, 2:15 PM

                @stephenw10 what if I wish to set up an VPN interface to the network. I was planing to assign an IPv6 address to my DDNS service and use it for VPN into my network.

                1 Reply Last reply Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by Jun 9, 2023, 3:39 PM

                  That will work. Everything in that /56 will be globally routable. You just need to rule to allow the incoming VPN connections.

                  1 Reply Last reply Reply Quote 0
                  • J
                    JKnott @DBLClick
                    last edited by JKnott Jun 9, 2023, 8:12 PM Jun 9, 2023, 8:09 PM

                    @DBLClick said in Assigning ipv6 address to WAN via VLAN:

                    are you saying, just assign a static address?

                    What specifically are you trying to do that requires a VLAN? If you're trying to reach your pfSense box, the address of any interface will do. Also, it helps if your ISP provides a consistent prefix, so that your prefixes don't change. Make sure you have Do not allow PD/Address release, on the WAN page, selected. And yes, enable track interface for anything that gets the prefix from your ISP.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    9 out of 9
                    • First post
                      9/9
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                      This community forum collects and processes your personal information.
                      consent.not_received