IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP)
-
Hello,
I’m trying to use my Netgate 3100 (pfSense+ 25.07.1) behind a Freebox (French ISP “Free”) in bridge mode.
IPv4 works fine in bridge mode (public IPv4 is correctly obtained).
But IPv6 does not work: pfSense does not obtain a global IPv6 on WAN, only a link-local address.
What I tested :
ifconfig mvneta2 (WAN) only shows link-local:
inet6 fe80::208:a2ff:fe12:47d1%mvneta2 prefixlen 64 scopeid 0x8
ping6 fail:
PING(56=40+8+8 bytes) fe80::208:a2ff:fe12:47d1%mvneta2 --> 2a00:1450:4007:80c::200e
--- ipv6.l.google.com ping statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss
traceroute6 stops at the Freebox bridge with !S:
1 fe80::160c:7613:37b4:5ea2%mvneta2 0.3 ms
2 fe80::160c:7613:37b4:5ea2%mvneta2 0.3 ms !S
This shows Free is rejecting the traffic because the prefix delegation was not obtained by DHCPv6.
Question
Is this a known issue with pfSense+ 25.07.1 on Netgate 3100?
How can I debug why dhcp6c is not requesting/obtaining the prefix?
Do I need to adjust DUID type (currently DUID-LLT) or any special option for Free ISP?Thank you.
GG.PS : When I switch off bridge mode and I switch on router mode on the box it works fine
Suffixe DNS propre à la connexion. . . :
Description. . . . . . . . . . . . . . : Marvell AVASTAR Wireless-AC Network Controller
Adresse physique . . . . . . . . . . . : B8-31-B5-78-E7-E3
DHCP activé. . . . . . . . . . . . . . : Oui
Configuration automatique activée. . . : Oui
Adresse IPv6. . . . . . . . . . . . . .: 2a01:e0a:9d7:e520::3f42:188c(préféré)
Bail obtenu. . . . . . . . . . . . . . : lundi 29 septembre 2025 12:47:06
Bail expirant. . . . . . . . . . . . . : mardi 30 septembre 2025 12:47:04
Adresse IPv6 de liaison locale. . . . .: fe80::c9e0:f09c:bf7b:cbae%17(préféré)
Adresse IPv4. . . . . . . . . . . . . .: 192.168.71.9(préféré)
Masque de sous-réseau. . . . . . . . . : 255.255.255.0
Bail obtenu. . . . . . . . . . . . . . : lundi 29 septembre 2025 12:47:06
Bail expirant. . . . . . . . . . . . . : mardi 30 septembre 2025 00:48:10
Passerelle par défaut. . . . . . . . . : fe80::160c:76ff:feb4:5ea2%17
192.168.71.254
Serveur DHCP . . . . . . . . . . . . . : 192.168.71.254
IAID DHCPv6 . . . . . . . . . . . : 297284021
DUID de client DHCPv6. . . . . . . . : 00-01-00-01-24-55-EF-DC-B8-31-B5-78-E7-E3
Serveurs DNS. . . . . . . . . . . . . : 2001:910:800::12
2001:910:800::40
1.1.1.1
8.8.8.8
8.8.4.4
2001:910:800::12
2001:910:800::40
NetBIOS sur Tcpip. . . . . . . . . . . : Activé -
@ggpf said in IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP):
How can I debug why dhcp6c is not requesting/obtaining the prefix?
Locate : System > Advanced > Networking > DHCP6 Debug and check it.
From now on, the DHCP logs will contain more detailed DHCPv6 client info (look for "dhcp6c" process info).@ggpf said in IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP):
Do I need to adjust DUID type (currently DUID-LLT) or any special option for Free ISP?
Ask Free ?
But I get it, an ISP (FAI) will not support this, as they only support their boxes, not 'your box'. More precise : you pay for support for their box, they don't know anything about 'pfSense'.
And pfSense (Netgate) doesn't know anything about 'Free (box)'.As I'm using myself a Livebox (Orange, France) I often visit https://lafibre.info/ - where an entire sub forum section is dedicated to the one and only (your !) question : Free : Remplacer la Freebox par un routeur. If an answer exists, it will be mentioned there.
For Orange (the Livebox) the solution is known. That said, if you only want Internet traffic, IPv4 and IPv6, this part is well documented, although, imho, bit of a hassle. I will loose phone and TV support (might be possible, but the setup will become way more complex). -
Hi,
With Free I didn't lost any this, TV is working and phone too work fine. Next step I'll test with Orange, the problem with Orange we don't have any info how they implement IPV6, we have to snif. :(
The implementation of IPv6 of Free is well described on the french book of Gisele Cizault. :)Regards.
GG. -
@ggpf said in IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP):
the problem with Orange we don't have any info how they implement IPV6, we have to snif
Remplacer la LiveBox par un routeur
The very first pinned forum thread (you have to read the 116 pages !!)
Explained is how to set up the dhcp6c (DHCPv4 and IPv6 client process), as the DHCPclient has to communicate during the IPv4 and IPv6 lease request the orange /fti/xxx and the password, and mandatory DHCP options, etc.
As promised : this won't be a "click and play" solution.
-
@Gertjan said in IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP):
@ggpf said in IPv6 prefix delegation not working on Netgate 3100 with Free (France ISP):
the problem with Orange we don't have any info how they implement IPV6, we have to snif
Remplacer la LiveBox par un routeur
The very first pinned forum thread (you have to read the 116 pages !!)Explained is how to set up the dhcp6c (DHCPv4 and IPv6 client process), as the DHCPclient has to communicate during the IPv4 and IPv6 lease request the orange /fti/xxx and the password, and mandatory DHCP options, etc.
As promised : this won't be a "click and play" solution.
But the orange livebox replacement with pfSense only works for IPv4 as Orange requires several DHCP6 options that the builtin DHCP6c client in pfSense cannot handle. While pfSenses kea DHCP6 server supports most things or can be costumized in the UI to do so, the same cannot be said of the DHCP6c client. That has to be the worst/least compatible DHCP6 client implementation across all known operating systems at this point. I have tried 4 different ISP’s and only one works out of the box in pfSense, another can be brought to works with special settings. The rest just won’t work with pfSense. Any linux flavor I test works just fine.
