How to configure IPv6 when the ISP provides NO PD (prefix delegation)

[logi]

Using TMHI as ISP, they provide /64, therefore no PD, in OpenWrt I have used Relay Mode, and the router acts as a bridge for IPv6 between the WAN and the LAN, I didn't find an equivalent mode in OPNsense, is it possible to configure something equivalent in OPNsense? Thanks

[franco]

Normally you want an NA (a /128) on WAN and the PD (/64) on LAN. It only works automatically if your ISP gives you both. There are some other solutions like NDP proxies but they are not readily available for OPNsense.

Note a /64 address should be a SLAAC address and doesn't necessarily give you Internet access (it should but sometimes it sadly does not).


Cheers,
Franco

[logi]

There are some other solutions like NDP proxies but they are not readily available for OPNsense.

That's exactly what I have used with OpenWrt and other commercial routers, NDP Proxy or IPv6 Passthrough, any timeline when NDP Proxy will be available or a guide on how to manually implement it with the current version of OPNsense? I will really appreciate any help, thank you

[franco]

Maurice was looking into it at some point, but seems to be inconclusive or lacking the time. As far as roadmap for the core goes at the moment we don't want to tackle this subject as there is too much IPv6 improvements that should precede this like IPv6 only PPP (which will be on the roadmap for 25.1).


Cheers,
Franco

[muchacha_grande]

I had this case years ago.. I mean, I'm on the same case that @logi.

Some years ago (two or three) my ISP started to assign IPs v6 but no PD. My workaround was to use NAT and subnet the /64 address they assigned.
I know that NAT is almost forbidden in IPv6 but I didn't find anything better yet. It passes all IPv6 tests out there and it works fine.
Forget to use IPv6 on Android because it needs SLAAC and SLAAC needs a /64 net. But works flawlessly on the rest of the cases.