Text only | Text with Images

OPNsense Forum

English Forums => 26.1, 26,4 Series => Topic started by: fengchen_opn on July 13, 2026, 08:41:07 AM

Title: Prefix Delegation - need to change the firewall settings
Post by: fengchen_opn on July 13, 2026, 08:41:07 AM
Versions
OPNsense 26.1.11_6-amd64


According to the documentation at https://docs.opnsense.org/manual/kea.html#prefix-delegation-ia-pd (https://docs.opnsense.org/manual/kea.html#prefix-delegation-ia-pd), the PC can't access the internet.
I checked and found that I need to change the firewall rule 'Default allow LAN IPv6 to any'. Change the 'Source' from 'lan network' to 'any'
Title: Re: Prefix Delegation - need to change the firewall settings
Post by: meyergru on July 13, 2026, 10:08:39 AM
Yes, of course. That is because the delegated prefix (IA_PD) is not within the 'lan network'.

Delegating IPv6 prefixes is an "advanced" topic. The "default allow" rules for the first LAN are legacy convenience rules designed for the standard case only. Also, these rules exist ONLY for the first (V)LAN. You have to create suited rules for any additional (V)LAN by yourself - likewise when you create networks behind your LAN.
Text only | Text with Images