Messages

The wan port originally had a link-local address that was different from the lan port. The problem was that it added a link-local address that was the same as the lan port.

After webui interfaces-overviews wan 'Reload', wan's ipv6 has an additional address that is the same as the lan Link-local address.
The same situation is also seen when using the ifconfig command to check the PPPoE interface. Restarting the system can back to normal.

Type   opnsense   
Version   24.7.1   
Architecture   amd64   
Commit   2d070ccc8

Mybe the AP will not respond to http/https (?) requests from foreign subnets. Some devices (or the desired service of those) have an option to explicity permit those requests.

I compared openwrt and found that this problem can be solved by setting snat
firewall - nat - outbound:
Select - Hybrid outbound NAT rule generation
Add rule - interface: lan, tcp/ip: ipv4, source address: wg net, destination address: lan net, translation/target: lan address

https://docs.opnsense.org/development/backend/autorun.html

root@OPNsense:~ # cat /usr/local/etc/rc.syshook.d/start/20-autostart
#!/bin/sh

sh /etc/rc.local

In addition, the interface -> wan -> DHCPv6 client configuration -> Prefix delegation size must be accurate, such as 60 instead of 64, otherwise the prefix in the RA received by the client is 60 bits instead of 64 bits, so the client cannot use slaac mode to generate ipv6