Topics

1

24.7 Production Series / unifi controller 1.3 unreachable since update

« on: July 31, 2024, 11:07:09 pm »

Good morning,

after the update to 24.7 (currently on 24.7_9) the community repository apps were updates as well and since then unifi controller starts, and appears running, but I can not access it via port 8443. I tried uninstalling and reinstalling to set it up via 8080 again, but no luck.

Thank you in advance, and happy to provide any additional data to help with diagnosis

2

24.1 Legacy Series / UniFi Network Application v8+

« on: May 06, 2024, 11:19:12 pm »

Hi all and particularly @mimugmail! Thank you for making additional packages available on opnsense. My question: are there any plans to update the os-unifi7-maxit plugin to version 8+ (current: 8.1.127) for compatibility with new hardware such as the U7 Pro (minimum required: 8.0.26)?

3

24.1 Legacy Series / [solved] IPv6 setup question(s)

« on: April 28, 2024, 05:57:30 am »

I have been trying to setup IPv6 as my ISP provides it, and has since 2012. To make this happen I have read a lot of guides/discussions/answers. However I seem to have stumbled across a somewhat unique circumstance and I will try to be as comprehensive as I can to provide info on my problem.

The Problem
I get an IPv6 address on WAN, but I am unable to pass/parse it to LAN. When I set LAN to Track Interface (due to provision of dynamic IPv6, I lose access to GUI with a 503 error (Service Unavailable). DHCPv6 Server attempts to start by does not. After a restart via ssh, I get access to the GUI again.

On dashboard:
- dhcpd6 is red and when I click the start button nothing other than the page refreshing.
- WAN receives an IPv6 address (2001:1111:11111:9700:1111:1111:1111:f844 and shows Gateway (fe80::1111:1111:1111:816c), LAN does not.
I can ping google.com IPv6 fine from router Interfaces > Diagnostics > Ping.

Where am I going wrong in my setup? Thank you for your help in advance

Hardware
DEC700 Series - Opnsense 24.1.6
QNAP 2.5/10Gbe VLAN compatible switch

ISP
My ISP provides a native 'dual stack' IPv4 and IPv6 service. It is turned on and gives me the following:
- An existing IPv4 address (if static) and any existing framed route(s)
- A dynamic /64 IPv6 prefix for your PPP session
- A static /56 IPv6 prefix for your LAN (if you are using a router with Prefix Delegation)
- the delegated static /56 IPv6 prefix is: 2001:1111:11111:9700
- currently the ISP automatic DNS mapping is enabled

OPNsense settings
Firewall > Settings > Advanced > IPv6 Options > Allow IPv6 [X]
I also added a rule for IPv6 for WAN:
PASS - WAN - in - IPv6 - ICMP - Destination Unreachable - any - WAN address

System > Settings > General >Networking > Prefer IPv4 over IPv6 []
System > Settings > General >Networking > DNS server options []

Interfaces > WAN > IPv6 Configuration Type [DHCPv6]
Interfaces > WAN > DHCPv6 client configuration > Request only an IPv6 prefix [] (when ticked, this changes the IP address to start with fe80...)
Interfaces > WAN > DHCPv6 client configuration > Prefix delegation size [56] (in line with ISP provision)
Interfaces > WAN > DHCPv6 client configuration > Send IPv6 prefix hint [X]
Interfaces > WAN > DHCPv6 client configuration > Use IPv4 connectivity [X]
Interfaces > WAN > DHCPv6 client configuration > Use VLAN priority [Disabled]

Interfaces > LAN > IPv6 Configuration Type [Track Interface]
Interfaces > LAN > Track IPv6 Interface > IPv6 Interface [WAN]
Interfaces > LAN > Track IPv6 Interface > IPv6 Prefix ID [1]
Interfaces > LAN > Track IPv6 Interface > Manual configuration []

These settings result in LAN to show under Interfaces:Overview an IPv6 address starting with fe80.../64

Services > ISC DHCPv6  there are no further settings.