Switching to static IPV6 and dhcpv6 server - help/advice needed

[walkerx]

Hi,

Currently I'm with Zen and have my IPv6 configured to track wan and setup a dhcpv6 with some values

I'm now looking at setting up to use static addressing (got static details from zen)

I've gone through the online docs but some bits threw me off as the info didn't match the screenshots

So I've written down roughly what I need to do (i've changed all my ipv6 details I got from Zen)

Info from Zen
ND Prefix: 1234:1235:1234:89a::/64
PD Prefix: 1234:1234:1234::/48

Need to manually configure wan as
Ipv6 address   1234:1235:1234:89a:4262:31ff:fe03:db00/64
Ipv6 DP      1234:1234:1234::/48
Ipv6 Gateway   1234:1235:1234:89a::1

Lan Interface:
Ipv6 Configuration Type = Static IPv6
Ipv6 Address: 1234:1234:1234:0:4:3:2:1 (or should this be the ND Prefix)
Prefix: 64 bits

DHCPv6 Server
Enable
Subnet: 1234:1234:1234
Available Range
From: 1234:1234:1234:: to 1234:1234:1234:0:ffff:ffff:ffff
Range
From 1234:1234:1234::0000:0000:0000:0001
To: 1234:1234:1234:0000:ffff:ffff:ffff

If I'm not using subrouters and just opnsense along with no vlans, do I need to configure the prefix delegation range.

Has what I gathered correct and if setting static ipv6 on wan must I drop the connection to configure this first as if I try setting the one I get automatically it says already in use.

thanks in advance for any guidance on this

[defaultuserfoo]

You probably need to specify the prefix length (which seems to be 48).

I don't know what an ND prefix is; apparently Cisco uses it to indicate what not to use to create IPv6 addresses with.  You probably don't need to convert your WAN IPv6 into static:  Since it's static, I would expect to always get it.  Or does it change?  I guess tracking the interface takes care of not creating undesirable addresses.

Since this is for the purpose of setting up traffic shaping, you probably don't need to do anything about the WAN interface.  It should suffice to use these weird DUID/MAC things nobody knows how to get other than taking them from a lease for making static DHCPv6 entries for (some of) the devices on your network.

[walkerx]

hi,

i tried setting it up but didn't look right.

One of the reasons for setting up in static, is to see if can fix the issue of not having to perform a full reboot to get ipv6 renabled after a line drop, also to get dhcpv6 up faster instead of having to wait 10-20 minutes after a restart of the connection which can happen (sometimes it doesn't restart so need to perform a full reboot)

other reason is to see if can get zenarmour also working with IPv6 as whenever enable it, it takes down DHCPv6 and can't re-enable unless I stop the zenarmour service and prevent it from starting after a reboot. Happens even in bypass mode. Have raised the issue with their support and waiting for an update.

[defaultuserfoo]

Ok, so it didn't look right ...

[walkerx]

Ok, so it didn't look right ...

sorry the instructions didn't match up, so wasn't sure if correct

[defaultuserfoo]

Well, "didn't look right" is about as helpful as "something doesn't work" ...