OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Profile of Truxi »
  • Show Posts »
  • Topics
  • Profile Info
    • Summary
    • Show Stats
    • Show Posts...
      • Messages
      • Topics
      • Attachments

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

  • Messages
  • Topics
  • Attachments

Topics - Truxi

Pages: [1]
1
24.7 Production Series / How to handle ISP IPV6 prefix delegation change ?
« on: November 17, 2024, 01:33:33 pm »
Hello,

I'm still configuring my IPV6 for home network and I have solved what I thought my last issue with this post: https://forum.opnsense.org/index.php?topic=43885.msg219037#msg219037.

I have now a private static IP for routing my local IPV6 devices to my DNS service and ISP can change my delegation range, it's not an issue anymore (for this).

Except that I observe now firewall issues (that were here before, I just didn't noticed it) when I reboot my ISP router as it assigns me a new delegation prefix.

I'm not sure if it's exactly the issue but when my ISP router reboot, I get my new prefix, DHCPv6 start issuing new  IPs for this range but old device are still on the "old" IPV6 prefix, so it doesn't match current networking state of OPNsense this I can observe a lot of "Default deny / state violation rule" coming from "old" prefix IPV6.

What is weird is that some devices won't renew, even by rebooting, so I'm a bit lost now on how to deal with this situation, would like to know if some of you are in the same situation and how you handle it  :)

On my setup:
- ISP providing /56 and delegating /64
- WAN in DHCPv6
- LAN Track WAN
- Router Advertisements Assisted

2
24.7 Production Series / How to set static IPV6 mapping for LAN interface
« on: November 07, 2024, 02:18:15 pm »
Hello,

I'm seeking for help as I can't figure how to do this.
I have:
- ISP providing /56 and delegating /64
- WAN in DHCPv6
- LAN Track WAN

Everything works fine ! I have IPV6 connectivity on all my LAN it's great.
But I would like my LAN interface to be always the same IPV6 (like it is for my IPV4).
Unfortunately I cannot do that since I'm in "Track Interface".
I'd hope I could do a static mapping but AFAIK I can't do it from Admin console.

Looking for help, thanks.

Pages: [1]
OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2