Verizon FiOS and IPv6 for pfSense 2.7.2
-
Re: [Verizon Fios and IPV6](Which Settings Work?)
Just a more recent update, in getting FioS working on pfSense for IPv6.
It has been a topic covered extensively in the referenced topic a couple of years ado.
Here is my take after upgrading to pfSense CE version 2.7.2, which seemed to break teh Ipv6 connectivity.
Following the guidance and using the companion patch by @luckman212 and the script, I was able to get Ipv6 working for FiOS. Do not forget to comment out the line mentioned by @luckman212 in the patch, as well as changing the python version mentioned in the script "/usr/local/bin/python3.8" to "/usr/local/bin/python3.11" (works on 2.7.x).
However, when I updated to pfSense 2.7.2, the line in the script "/sbin/ifconfig $IFACE inet6 $GUA prefixlen 64" was replacing the link local IPv6 addr on the WAN interface. This caused and issue as the FioS IPv6 GW was unreachable. the script can be edited, and the line changed to "/sbin/ifconfig add $IFACE inet6 $GUA prefixlen 64", the add command adds the Ipv6 GUA in addition to link local IPV6 address, fixing the IPv6 reachability issue.
In addition to the steps noted in the referred topic, you do need to uncheck, the "Block private networks and loopback addresses" and "Block bogon networks" as this causes issues with ICMPv6 and IPv6Multicasts from the FiOS GW which is using the link local IPv6 space.
Many thanks to @luckman212 for the IPv6 script to assign a public IPv6 address to the WAN interface from the PD received.
-
However, when I updated to pfSense 2.7.2, the line in the script "/sbin/ifconfig $IFACE inet6 $GUA prefixlen 64" was replacing the link local IPv6 addr on the WAN interface. This caused and issue as the FioS IPv6 GW was unreachable. the script can be edited, and the line changed to "/sbin/ifconfig add $IFACE inet6 $GUA prefixlen 64", the add command adds the Ipv6 GUA in addition to link local IPV6 address, fixing the IPv6 reachability issue.
You have a typo there, right? I think the change should be to this:
/sbin/ifconfig $IFACE inet6 add $GUA prefixlen 64That being said, while this adds an IPv6 address to my WAN, it has broken IPv6 connectivity from all my LAN clients. I have no idea how to troubleshoot it.
-
I could tell my routing tables were screwed up, but I didn't really know why.
After a while, I stumbled on the System/Routing/Gateways settings and noticed the "Default gateway IPv6" was set to "none."
After setting it to WAN_DHCP6, it started working. I'm not sure how that got screwed up, given that my clients were working before.