1
21.7 Legacy Series / Re: IPSEC VPN Mutual RSA with P12 certificates
« on: August 05, 2021, 07:56:49 am »
I've the same issue, glad to see I'm not the only one 
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
19.1 Legacy Series / Re: Needed to force Realtek 8168's MTU after 19.1 Upgrade
« on: February 02, 2019, 09:19:39 am »3
19.1 Legacy Series / Re: Feature Request : dynamic NPTv6
« on: January 25, 2019, 05:05:59 pm »
I just tried and it doesn't work well :s
If I add the ULA after the autoconfiguration of the GUA, it's working
But if opnsense reboot, the system only use the ULA
If I add the ULA after the autoconfiguration of the GUA, it's working
But if opnsense reboot, the system only use the ULA
4
19.1 Legacy Series / Re: Feature Request : dynamic NPTv6
« on: January 15, 2019, 07:13:10 pm »
Agreed 
It would allow tu use ULA and GUA at the same time
It would allow tu use ULA and GUA at the same time
5
19.1 Legacy Series / Re: Feature Request : dynamic NPTv6
« on: January 14, 2019, 04:14:34 pm »
"So please, consider getting to know IPv6 a little more and don't try to adapt IPv4 solutions onto IPv6."
Don't worry, I know IPv6 very well, it's just that we don't share the same opinion
I'm not saying you should always do NPT with IPv6, far from it ! But NPT has some uses cases
You want to do IPv6 multihoming without BGP ? You can use NPT
You want to be able to leave your ISP without having to renumbered your LAN ? You can use NPT
You want a workaround to greedy ISP who gives you dynamic prefix ? You can use NPT
And I said "can", not "should"
NPT is just another tool in the IPv6 box
"Instead, look what IPv6 has to offer us: Link Local Addresses."
LLA addresses can't be routed And yes, I've VLAN in my network
"If you need your dns server available locally above vlan borders you should assign your DNS server a ULA, which is also static locally. If you add another ula with the same prefix to an interface on the pfsense/opnsense the router will also be able to route correctly."
I know, I currently use ULA and GUA in my network. But I've a bug with pfsense, if I configure a static ULA to an interface, Pfsense doesn't use the delegate prefix anymore... Don't know why. I need to try this with opnsense
Don't worry, I know IPv6 very well, it's just that we don't share the same opinion
I'm not saying you should always do NPT with IPv6, far from it ! But NPT has some uses cases
You want to do IPv6 multihoming without BGP ? You can use NPT
You want to be able to leave your ISP without having to renumbered your LAN ? You can use NPT
You want a workaround to greedy ISP who gives you dynamic prefix ? You can use NPT
And I said "can", not "should"
NPT is just another tool in the IPv6 box"Instead, look what IPv6 has to offer us: Link Local Addresses."
LLA addresses can't be routed
And yes, I've VLAN in my network "If you need your dns server available locally above vlan borders you should assign your DNS server a ULA, which is also static locally. If you add another ula with the same prefix to an interface on the pfsense/opnsense the router will also be able to route correctly."
I know, I currently use ULA and GUA in my network. But I've a bug with pfsense, if I configure a static ULA to an interface, Pfsense doesn't use the delegate prefix anymore... Don't know why. I need to try this with opnsense
6
19.1 Legacy Series / Re: Feature Request : dynamic NPTv6
« on: January 13, 2019, 08:37:45 pm »
Thx for your answer ! It's nice to see you acknowledge the problem and are working on it
I'm going to look at opnsense to replace pfsense, I prefer the atmosphere of this forum
bimmerdriver, I'm already using this option. It help but unfortunately, if pfsense reboot, the prefix change
I'm going to look at opnsense to replace pfsense, I prefer the atmosphere of this forum
bimmerdriver, I'm already using this option. It help but unfortunately, if pfsense reboot, the prefix change
7
19.1 Legacy Series / Feature Request : dynamic NPTv6
« on: January 12, 2019, 11:47:08 pm »
Hi everyone, sorry but english is not my native language, I will try my best
I'm currently using Pfsense but I've a problem with IPv6. In my country (Belgium), all the ISP allocate dynamic IPv6 prefix. If I reboot Pfsense for exemple, I receive a new prefix and all my LAN is renumbered. It's boring because I need to change the DNS records each time it happens.
The ISP is doing this on purpose, I need to pay more if I want a static IPv6 prefix
I asked for a solution on the Pfsense forum but they told me to change of ISP (but all the major ISP are doing that in Belgium) or to use a TunnelBroker (which cause problem with netflix and add latency on the line). Pfsense support static NPTv6 but they don't want implement dynamic NPTv6 (refresh the rules automatically if the ISP give a new prefix). I'm not the only one with this problem but they don't seems to care.
Is there any chance for OPNsense to implement this feature one day ?
Thx !
I'm currently using Pfsense but I've a problem with IPv6. In my country (Belgium), all the ISP allocate dynamic IPv6 prefix. If I reboot Pfsense for exemple, I receive a new prefix and all my LAN is renumbered. It's boring because I need to change the DNS records each time it happens.
The ISP is doing this on purpose, I need to pay more if I want a static IPv6 prefix
I asked for a solution on the Pfsense forum but they told me to change of ISP (but all the major ISP are doing that in Belgium) or to use a TunnelBroker (which cause problem with netflix and add latency on the line). Pfsense support static NPTv6 but they don't want implement dynamic NPTv6 (refresh the rules automatically if the ISP give a new prefix). I'm not the only one with this problem but they don't seems to care.
Is there any chance for OPNsense to implement this feature one day ?
Thx !
Pages: [1]