OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: Diggy on March 12, 2026, 07:12:07 PM

Title: Adding IPv6 private address range to the Home Networks
Post by: Diggy on March 12, 2026, 07:12:07 PM
We are using private IPv6 addresses along with IPv4 addresses on our local network.  I noticed that the IPv6 range "fc00::0/7" is not included in the default Home Networks list.  Why?  Does "Home Networks" not apply to IPv6?  Are there any special considerations when adding "fc00::0/7" to the Home Networks list?

In advance, thanks for guidance on this matter.
Title: Re: Adding IPv6 private address range to the Home Networks
Post by: JamesFrisch on March 12, 2026, 07:55:51 PM
Link local IPv6s fe80::/64 don't need blocking, since they won't be routed anyway.


However, I did add my static /48 prefix I got from my ISP to my "local Network" alias, so that traffic to other VLANs is blocked.
Title: Re: Adding IPv6 private address range to the Home Networks
Post by: Patrick M. Hausen on March 12, 2026, 08:14:41 PM
fc00::/7 is ULA, not link local.