OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: 9axqe on February 21, 2025, 07:15:04 PM

Title: Router Advertisements and ULA
Post by: 9axqe on February 21, 2025, 07:15:04 PM
Hello,

I would like to have my devices only get IPs via DHCPv6 on the network, no autoconfiguration. (I want to know which IPv6 belongs to what device, it's a small home network.)

At the same time, I do want to use ULA as a backup: I had a couple of times the issue that my ISP Internet was down and additional opnsense power cycled, causing DHCPv6 acquired prefix to be forgotten by the router. I am aware that the point could be made, IPv4 is already one backup, since it's RFC1918...

Question 1: is there a way for opnsense to keep using the last known DHCPv6 acquired prefix / IP, even after a reboot? (I assume not)

Question 2: if that is not possible, is it possible to assign ULAs over DHCPv6 while using the managed mode for router advertisement?

opnsense 25.1.1 on DEC695
Title: Re: Router Advertisements and ULA
Post by: Bob.Dig on February 21, 2025, 09:13:54 PM
You can only assign one type via DHCPv6, so the answer is no.
Title: Re: Router Advertisements and ULA
Post by: dseven on February 22, 2025, 12:12:27 PM
I wonder if OPNsense would ever consider changing that - i.e. allowing a "Managed" ULA and "Unmanaged" "Track Interface" on the same interface simultaneously.

Meanwhile, I think ULA + NPTv6 is the only available solution...
Title: Re: Router Advertisements and ULA
Post by: doktornotor on February 22, 2025, 01:59:55 PM
Quote from: 9axqe on February 21, 2025, 07:15:04 PMI am aware that the point could be made, IPv4 is already one backup, since it's RFC1918...

Do you realize that ULA won't be used at all in dual-stack network? (https://blogs.infoblox.com/ipv6-coe/ula-is-broken-in-dual-stack-networks/)
Title: Re: Router Advertisements and ULA
Post by: dseven on February 22, 2025, 02:45:32 PM
Quote from: doktornotor on February 22, 2025, 01:59:55 PMDo you realize that ULA won't be used at all in dual-stack network? (https://blogs.infoblox.com/ipv6-coe/ula-is-broken-in-dual-stack-networks/)

Only if there are DNS entries for both... e.g. if "thing123.lan" has a v6 static mapping but no v4 static mapping (or maybe doesn't even do v4 at all), it should be reachable via its ULA, even if DNS resolution (on the client trying to access it) was done over IPv4