Setup Prefix Delegation

Started by Gamienator, December 24, 2023, 09:22:10 PM

Previous topic - Next topic
Hey everyone,

can anybody help me to setup a Prefix Delegation?

Following Scenario: I'm a sysadmin for a LAN-Party where we don't have direct access from the ISP. To receive Internet we plug our pfSense to their FritzBox and then routing it that way. For the next Event I want to enable IPv6 to our users. Further Documenation showed me that on the FritzBox itself can be Prefix Delegation enabled. Fine for me, but my Setup is different at home :) So that I'm able to configure our servers as well I need to rebuild the Network at home. And thats where I need your help. I don't know how to setup the Prefix Delegation "Server" on my OPNSense. I try to show you the setup at home:

VDSL Modem --> OPNSense with full DualStack --VLAN 1337--> WAN of LAN-Party pfSense

My ISP is giving me an /56 Prefix. WAN of OPNsense is PPPoE and getting IPv6 via DHCPv6 over IPv4 Connectivity. The VLAN 1337 has a static IPv4 and getting IPv6 via "Track Interface WAN" and PrefixID e0. If I think it correctly through, I need to configure the DHCPv6 Server on VLAN 1337 to delegate an Prefix, right? IS it even possible when my VLAN 1337 receive the IPv6 via Tracking Interface to receive a /60 Prefix to delegate it even further?

Quote from: Gamienator on December 24, 2023, 09:22:10 PM
If I think it correctly through, I need to configure the DHCPv6 Server on VLAN 1337 to delegate an Prefix, right? IS it even possible when my VLAN 1337 receive the IPv6 via Tracking Interface to receive a /60 Prefix to delegate it even further?

Yes, it's possible. You have to allow manual adjustment of DHCPv6 and Router Advertisements in the VLAN 1337 interface settings. Then, you can configure downstream prefix delegation in the DHCPv6 server settings. Set the prefix delegation size to 60 and specify a prefix delegation range. For a single /60, you can e. g. use ::f0 for both 'from' an 'to'.

Cheers
Maurice
OPNsense virtual machine images
OPNsense aarch64 firmware repository

Commercial support & engineering available. PM for details (en / de).