1
17.1 Legacy Series / IPv6 behind ISP's router, cannot get it to work
« on: July 11, 2017, 05:49:33 pm »
Hello!
Having finally got the opportunity to work with IPv6 over a backup DSL connection provided by a consumer grade router from my ISP, I have tried for a couple of days to make my OPNsense hand out some IPv6 addresses to its LAN and Guest interfaces but without any luck.
The router has its own /128 address on its WAN and it hands out a /48 through DHCPv6 to its own LAN interface and I would like to run with these public addresses internally as well.
My goal is to have OPNsense hand out a /64 or less to both its LAN and Guest interface but right now I would like to concentrate on just getting it to work on my LAN. I have tried to illustrate my setup below.
ISP
| /48
DSL router (/128)
| /48
OPNsense
| /64
LAN
The router has some IPv6 options, being stateless / stateful and address handout can be done through DHCPv6 / Router Advertisement / Both and RADVD is enabled. If I connect a laptop to the router's LAN then it gets an IPv6 address and can use it just fine and passes the various web-based IPv6 tests.
I have enabled DHCPv6 on OPNsense WAN with PD size set to 64 and no hint and track interface on LAN to WAN with prefix 0.
The status on my Dashboard is that WAN has got an IPv6 address from the router but my LAN has only got its static IPv4. Another laptop I have connected to OPNsense LAN gets an IPv4 address from OPNsense but not IPv6.
The system logs tells me: opnsense: /usr/local/etc/rc.filter_configure: Could not find IPv6 gateway for interface(wan).
What am I missing here?
I have also tried to set a static IPv6 address on both WAN and LAN and fiddled with DHCPv6 but cannot get this to work either, however this is likely due to my still limited amount of knowledge on how to properly route IPv6.
When my router gets an x:y:z:: /48 address then what is best practice to use for OPNsense?
The router hands out x:y:z:0:: /64 to a laptop on its LAN.
I would figure an OPNsense static WAN address "has" to be in this range as well?
And from that point onwards I can configure my LAN with x:y:z:0:1:: /80 and Guest with x:y:z:0:2:: /80
Or I might be terribly mistaken.
Any help will be much appreciated as I am wearing myself out by not being able to make this work.
Having finally got the opportunity to work with IPv6 over a backup DSL connection provided by a consumer grade router from my ISP, I have tried for a couple of days to make my OPNsense hand out some IPv6 addresses to its LAN and Guest interfaces but without any luck.
The router has its own /128 address on its WAN and it hands out a /48 through DHCPv6 to its own LAN interface and I would like to run with these public addresses internally as well.
My goal is to have OPNsense hand out a /64 or less to both its LAN and Guest interface but right now I would like to concentrate on just getting it to work on my LAN. I have tried to illustrate my setup below.
ISP
| /48
DSL router (/128)
| /48
OPNsense
| /64
LAN
The router has some IPv6 options, being stateless / stateful and address handout can be done through DHCPv6 / Router Advertisement / Both and RADVD is enabled. If I connect a laptop to the router's LAN then it gets an IPv6 address and can use it just fine and passes the various web-based IPv6 tests.
I have enabled DHCPv6 on OPNsense WAN with PD size set to 64 and no hint and track interface on LAN to WAN with prefix 0.
The status on my Dashboard is that WAN has got an IPv6 address from the router but my LAN has only got its static IPv4. Another laptop I have connected to OPNsense LAN gets an IPv4 address from OPNsense but not IPv6.
The system logs tells me: opnsense: /usr/local/etc/rc.filter_configure: Could not find IPv6 gateway for interface(wan).
What am I missing here?
I have also tried to set a static IPv6 address on both WAN and LAN and fiddled with DHCPv6 but cannot get this to work either, however this is likely due to my still limited amount of knowledge on how to properly route IPv6.
When my router gets an x:y:z:: /48 address then what is best practice to use for OPNsense?
The router hands out x:y:z:0:: /64 to a laptop on its LAN.
I would figure an OPNsense static WAN address "has" to be in this range as well?
And from that point onwards I can configure my LAN with x:y:z:0:1:: /80 and Guest with x:y:z:0:2:: /80
Or I might be terribly mistaken.
Any help will be much appreciated as I am wearing myself out by not being able to make this work.