Messages

1

24.7 Production Series / Re: The ipv6 of wan has an additional address that is the same as the lan local link

« on: August 16, 2024, 01:51:03 pm »

The wan port originally had a link-local address that was different from the lan port. The problem was that it added a link-local address that was the same as the lan port.

2

24.7 Production Series / The ipv6 of wan has an additional address that is the same as the lan local link

« on: August 16, 2024, 01:38:50 pm »

After webui interfaces-overviews wan 'Reload', wan's ipv6 has an additional address that is the same as the lan Link-local address.
The same situation is also seen when using the ifconfig command to check the PPPoE interface. Restarting the system can back to normal.

Type   opnsense   
Version   24.7.1   
Architecture   amd64   
Commit   2d070ccc8

3

Virtual private networks / Re: Can't access LAN IP of Access Point via Wireguard connection

« on: December 08, 2023, 02:54:35 pm »

Mybe the AP will not respond to http/https (?) requests from foreign subnets. Some devices (or the desired service of those) have an option to explicity permit those requests.

I compared openwrt and found that this problem can be solved by setting snat
firewall - nat - outbound:
Select - Hybrid outbound NAT rule generation
Add rule - interface: lan, tcp/ip: ipv4, source address: wg net, destination address: lan net, translation/target: lan address

4

Chinese - 中文 / Re: 系统求助

« on: August 25, 2023, 06:44:50 pm »

https://docs.opnsense.org/development/backend/autorun.html

root@OPNsense:~ # cat /usr/local/etc/rc.syshook.d/start/20-autostart
#!/bin/sh

sh /etc/rc.local

5

General Discussion / Re: [SOLVED] How to disable IPv6 DHCP server and only use SLAAC in LAN

« on: November 18, 2022, 11:51:59 am »

In addition, the interface -> wan -> DHCPv6 client configuration -> Prefix delegation size must be accurate, such as 60 instead of 64, otherwise the prefix in the RA received by the client is 60 bits instead of 64 bits, so the client cannot use slaac mode to generate ipv6