Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need Help : Ipv6 Next-hop with Pfsense

    Scheduled Pinned Locked Moved IPv6
    3 Posts 3 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Kal
      last edited by

      Hi,

      My ISP provide me several /64 :

      • 2a01:e35:xxxx:yyy0::/64

      • 2a01:e35:xxxx:yyy1::/64

      • 2a01:e35:xxxx:yyy2::/64

      I want to configure pfense like this :

      WAN <==> BOX <=( 2a01:e35:xxxx:yyy0::/64)=> PFSENSE1(Release:2.2.6) <=(2a01:e35:xxxx:yyy1::/64) DMZ=>  PFSENSE2 <=(2a01:e35:xxxx:yyy2::/64) LAN=>

      On my ISP BOX, I have configured the nex-hop like this :

      • 2a01:e35:xxxx:yyy1::/64 = fe80::21f:29ff:yyyy:xxxx

      • 2a01:e35:xxxx:yyy2::/64 = fe80::21f:29ff:yyyy:xxxx

      With  fe80::21f:29ff:yyyy:xxxx the locallink of PFSENSE1 for the WAN

      So in my DMZ I can use : 2a01:e35:xxxx:yyy1::/64

      Now, I want to be able to have the 2a01:e35:xxxx:yyy2::/64 network on the LAN, but I don't know how to tell PFSENSE1 to send 2a01:e35:xxxx:yyy2::/64 to the PFSENSE2 ?

      I have try to put on PFENSE1 a gateway with the link-local of pfsense2 (interface DMZ), and had a static route 2a01:e35:xxxx:yyy2::/64 but this doesn't work.

      1 Reply Last reply Reply Quote 0
      • H
        hda
        last edited by

        @Kal:

        My ISP provide me several /64 :

        There it goes off the road. You should receive a prefix /62 (or upto /48) on your pfSense's WAN-request…
        Then pfSense-LAN's can get an address /64 by Track Interface or Static assignment.

        (Your ISP-box must delegate-on-request with use of its DHCP6-server, to pfSense)

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          @hda:

          (Your ISP-box must delegate-on-request with use of its DHCP6-server, to pfSense)

          Not if they're static. They actually seem to be part of some bigger net block anyway.

          Just need to add a static route to send it to the other device in that case.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.