IPv6 Basic Setup



  • I'm looking for basic info on setting up IPv6 on pfSense. What I'm after is something really basic, down even to how you enter a static address into pfSense.

    For example:
    I have been allocated the range 2a02:1500:181:8::/64 for our servers.
    My hosting provider says they will require
    2a02:1500:181:8::1/64 (which is the gateway)
    2a02:1500:181:8::2/64 (for HSRP)
    2a02:1500:181:8::3/64 (for HSRP)

    Do we enter 2a02:1500:181:8::1/64 into the gateway exactly like that?
    Do we enter 2a02:1500:181:8::4 into the first field of the static IPv6 text box and choose 64 from the dropdown?
    If so, do we create the AAAA record as 2a02:1500:181:8::4/64?

    Please excuse me if these are very basic questions (and especially if they have been asked before - a search for basic IPv6 setup didn't answer my basic questions).

    So what I'm after is:
    1. Answers to the above three questions
    2. Point me to a helpful tutorial or documentation
    3. If there is some decent documentation on how to set pfSense up with WAN IPv6 and LAN IPv4 that would be great. We use quite a bit of NAT 1:1

    TIA


  • Netgate

    There should be the /64 for your interface, then a /48 for your internal network.



  • Thanks Derelict

    Do you know of any "pfSense IPv6 for dummies" that I can refer to? Been searching and not found anything.


  • Netgate

    Probably the 2.1 book you get with gold membership.  It has a pretty good intro to IPv6 in Networking Concepts->IPv6.  On my shelf I also have O'Reilly's IPv6 Essentials (Hagen, 0-596-10058-2) and Wiley's Migrating to IPv6 (Blanchet, 0-471-49892-0).  Plus a couple CCENT/CCNA study guides (Cisco Press and Pearson) that also cover IPv6.

    Get a tunnel and take the online course at www.tunnelbroker.net.  Become an IPv6 Sage.



  • IPV6 has turned out to be LESS complicated than IPv4 for me since I'm not always wrestling with NAT.
    You will like it.  Too bad its not replaced IPV4 significantly yet.



  • @kejianshi:

    You will like it.  Too bad its not replaced IPV4 significantly yet.

    Looking forward to it …. might be ready to retire when it finally become mainstream.