More IPV6 fun: NPT with a PD range

Started by cpw, June 30, 2019, 03:19:25 PM

Previous topic - Next topic
Hi
So, I'm trying to see if I can use a prefix delegated address with NPTv6 and ULAs in my local networks.

The problem: I have several internal networks (DMZ, LAN, WIFI, GUEST, others). I would like to have IPv6 working uniformly across all of them. I have two upstream ISP providers (CABLE and DSL). Both provide IPv6 PD (though of differing sizes - CABLE is only giving out /64, DSL offers a full /56). By default I route all traffic through CABLE (it's about 5x faster than DSL), but DSL handles various server tasks as it has an IPv4 /29 allocated.

I would like WAN failover to work, for both IPv4 and IPv6. As far as I can tell, that requires that I setup ULAs for all my local systems, and use NPTv6 to translate to a prefix from my ISP.

Currently, it seems that I don't receive a prefix unless I use " Track Interface" on one of my local networks at all (though it's hard to verify - the log files are not clear at all about what is being requested). I seem to have to "request an IP" separately from the prefix for the WAN side interface to receive an IPv6 IP (can I not allocate one from the PD pool I'm requesting?). Finally, it seems that NPTv6 in OPNsense only supports fixed static translations - not really compatible with a potentially dynamic PD from my upstream, or WAN failover events (where the PD would change because different upstream).

https://github.com/opnsense/core/issues/2544 seems somewhat related, but there is little progress? Is there something I can do to help?

I'm a single family home, ARIN are not going to give me a /48. (I cannot believe that people seriously suggest this as a "multihome" solution, by the way!)