Coming from pfsense, I am currently testing OPNsense. First steps were a pleasant surprise, fresh install, updated to latest version, but now I face issues:
4G cellular network, I can get only IPv4 with CGNAT or /64 IPv6. But.... I need to reach that box from outside, ie advertise the dynamic IPv6 address via some dyndns provider. Which did not work at all with noip. While IPv6 itself seems to work (pinging google), updating the dynamic dns entry fails. And I tried a variety of combinations, even full custom. Logs seem fine, but no updates done.
Are there other dyndns providers that work better with OPNsense?
If not, what are my options: CVS/wireguard/tailscale?
Thanks in advance!
How did you test NO-IP exactly ?
Did you try this :
- https://docs.opnsense.org/manual/dynamic_dns.html#dynamic-dns
- https://ddclient.net/
??
Not sure if this will be helpful for you, but I too have T-Mobile/Metro for my cell phone. Currently my home setup for VPN consists of a docker install of WG-Easy (https://github.com/wg-easy/wg-easy), and on the same Linux VM, I also run the Linux CLI version of the No-IP updater as that is the only method currently you can use to update the IPv6 address of the system it's running on. Afaik, there is no current method for IPv6 update in OpnSense (or Windows if you were thinking of using that as an option), and it also made networking alot easier since I didnt have to deal with adding in firewall rules in OpnSense for the WG client(s) being able to access the LAN and WAN. Just need a single (or dual if also using IPv4) firewall rule to open the port for the incoming WG connection to the Linux VM it's running on. This will of course work for ISPs that don't give out a fixed IPv6 address range, which is pretty much every single ISP.