Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
23.7 Legacy Series
»
DS-Lite on 23.7.6+ (23.7.10_1)
« previous
next »
Print
Pages:
1
2
3
[
4
]
Author
Topic: DS-Lite on 23.7.6+ (23.7.10_1) (Read 2928 times)
Patrick M. Hausen
Hero Member
Posts: 5024
Karma: 426
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #45 on:
Today
at 04:13:03 pm »
Thanks, @meyergru! Also consider that an explicit assignment of a single address from a LAN /64 to a different interface is possible if a prefix length of /128 is used.
We use this for all our hosts at Hetzner who also give us a single /64 per server by default.
<prefix>::1/128 goes to the outside interface of the host (with a link-local default gateway, of course - fe80::1).
<prefix>::2/64 goes to "jail0" which is an isolated bridge interface without any external interface as a member. This address acts as the default gateway for all the VNET jails connected to that bridge.
<prefix>:<random address for jail>/64 goes to the individual jails.
So you could e.g. use the WAN MAC address to create a GUA from the prefix in SLAAC style and assign it as /128.
Kind regards,
Patrick
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Print
Pages:
1
2
3
[
4
]
« previous
next »
OPNsense Forum
»
English Forums
»
23.7 Legacy Series
»
DS-Lite on 23.7.6+ (23.7.10_1)