Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - Truxi

#1
Hello,

I'm still configuring my IPV6 for home network and I have solved what I thought my last issue with this post: https://forum.opnsense.org/index.php?topic=43885.msg219037#msg219037.

I have now a private static IP for routing my local IPV6 devices to my DNS service and ISP can change my delegation range, it's not an issue anymore (for this).

Except that I observe now firewall issues (that were here before, I just didn't noticed it) when I reboot my ISP router as it assigns me a new delegation prefix.

I'm not sure if it's exactly the issue but when my ISP router reboot, I get my new prefix, DHCPv6 start issuing new  IPs for this range but old device are still on the "old" IPV6 prefix, so it doesn't match current networking state of OPNsense this I can observe a lot of "Default deny / state violation rule" coming from "old" prefix IPV6.

What is weird is that some devices won't renew, even by rebooting, so I'm a bit lost now on how to deal with this situation, would like to know if some of you are in the same situation and how you handle it  :)

On my setup:
- ISP providing /56 and delegating /64
- WAN in DHCPv6
- LAN Track WAN
- Router Advertisements Assisted
#2
Gave it a try with ULA, I'd set a virtual IP to my LAN and it worked great actually !
Didn't think of it but this is exactly what I needed as it's only for my private network.

Thanks for your help !
#3
Quoteuse a dns provider that supports dynamic DNS such as Cloudflare and use DDNS to update it

I see thanks for the idea though I just learned about ULA and wonder if I couldn't get away with it.
#4
For context I have AdGuard plugin installed and my OPNSense LAN interface is exposing AdGuard DNS server.

QuoteTrue if the OpnSense itself is the DNS server
I'm sorry but I must be missing / misunderstanding something or that must be because I'm not using integrated Unbound DNS Server,
but how can I advertise dynamically my LAN interface IPV6 to my local IPV6 devices via DHCPv6 ?

I see I can input a list of DNS servers either in router advertisement or in DHCPv6 but it's going to be manually input of the current LAN IF IPV6, on my next reboot of ISP device it won't be the same.
#5
Thanks for your help.

Unfortunately I don't have static prefix, it's going to change on reboot of my ISP device.
I'm a bit clueless on how I should advertise my DNS server IPV6 to my internal devices if it's going to change at each reboot of my ISP device.
I'm curious how people are doing.
#6
Hello,

I'm seeking for help as I can't figure how to do this.
I have:
- ISP providing /56 and delegating /64
- WAN in DHCPv6
- LAN Track WAN

Everything works fine ! I have IPV6 connectivity on all my LAN it's great.
But I would like my LAN interface to be always the same IPV6 (like it is for my IPV4).
Unfortunately I cannot do that since I'm in "Track Interface".
I'd hope I could do a static mapping but AFAIK I can't do it from Admin console.

Looking for help, thanks.