OPNsense Forum
English Forums => General Discussion => Topic started by: TarteTatin on April 30, 2023, 09:31:39 am
-
Hi!
First post here, thank you for this great firewall, which I am currently trying to configure for my needs with IPv6.
I was wondering if there is a way to modify, or add IPv6 link-local addresses for each of my LAN interfaces (fe80::XXXX:XXXX:XXXX:XXXX/64).
To simplify the gateway of my servers in theses LAN.
Thanks!
-
It should be there already, check out Interfaces->Overview, it should display the link-local address. The address is deterministic, it's based on the interface's MAC address (EUI-64).
-
Theoretically, fe80::1/64 is a perfectly legal address and you should be able to set it,
You could also modify the interface MAC in order to get another EUI-64 from that, but it contains ff:fe in the middle.
-
It should be there already, check out Interfaces->Overview, it should display the link-local address. The address is deterministic, it's based on the interface's MAC address (EUI-64).
Yes, I want to use another, simplier, IPv6 link-local address. Like fe80::1/64. It is possible on Cisco routers for example.
Theoretically, fe80::1/64 is a perfectly legal address and you you be able to set it, but it does not seem to be possible from OpnSense GUI as a VIP.
You could modify the interface MAC in order to get another EUI-64 from that, but it contains ff:fe in the middle.
Ok, thank you.
I will look for a way to modify it in command line, but not sure if it is possible.
-
Just add a virtual IP link local address, but make sure it's /64.
Cheers,
Franco
-
Hi Franco,
It works, thank you!
(Not possible to use the same IPv6, like "fe80::1/64", but it's sufficient to use an easy to remember address.)