Ip6rd question

paaland

Running pfsense 2.2 and I'm trying to setup 6rd with little success.

My ISP is Altibox and they have published the following 6rd settings:

IPv4 BR adress: 213.167.115.92
IPv4 Prefix: 0
IPv6 Prefix: 2a01:79c::
IPv6 Prefix Length: 30
IPv6 DNS: 2a01:798:0:8012::4

First question: Where do I need to specify these settings, on the WAN or the LAN interface?

Both allow me to specify IP6 type to 6rd tunnel and then allows me to enter some settings under 6RD Configuration:

6RD prefix is as specified 2a01:79c::
6RD Border Relay is as specified 213.167.115.92

Second question: The next setting is "6RD IPv4 Prefix length". I assume the 30 means 30 bits.

Third question: There is nowehere on 6RD to enter the ipv6 dns so I just appended that to the normal list of DNS'es.

Fourth question: The only settings I have not entered now is the IPv4 Prefix: 0, where does that go?

With the above settings I can open cmd on a client and do ping google.com -6 and it resolves to 2a00:1450:400f:803::1006, but no ping retunrs and I'm not able to access any ip6 services.
This makes me assume DNS for IP6 works, but no traffic is allowed.

I have IPv6 enabled under System/Advanced/Networking
I have a firewall rule enabled to allow all IPv4 and IPv6 outbound traffic

Any ideas?

jjstecchino

You specify these settings in WAN.
For IPV6 configuration type specify 6RD Tunnel
then in the 6RD configuration header (still under wan) specify:
2a01:79c::/30 under 6RD prefix
213.167.115.92 under 6RD Border Relay
leave prefix len at 0

Then set LAN IPV6 to track LAN

You can then use the supplied ipv6 DNS and set it under System-> general setuo->DNS servers and associate it to the WAN_6RD gateway. There you could also use google free DNS that is usually faster than ISP provided DNS

wishyou

You have to enable IPV6 on the LAN-side as well…
Choose follow/track interface and select WAN.

I just got 6rd working with Altibox on pf 2.2 like this, but from where I sit now I cannot verify your settings, I'll check tonight...

Wish

eri--

Also there is a bug when prefix length is not 32 for 6rd.
Check this section of the forum for a fix.