Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
22.7 Legacy Series
»
Missing something with ipv6
« previous
next »
Print
Pages: [
1
]
Author
Topic: Missing something with ipv6 (Read 826 times)
icsy7867
Newbie
Posts: 9
Karma: 1
Missing something with ipv6
«
on:
December 16, 2022, 11:30:18 pm »
My ISP gives me a single /64 block, and I was hoping to share this across multiple interfaces/VLAN (About 3 in total, not very many.
While I can easily track the WAN interface using the /64 block, this isnt ideal.
What I was going to try, was to create a DHCPv6 server for each interface with a /72 block, and then use a router advertisment. This seems to work, and the clients on the specific interfaces do get a valid IPV6 address, but I cannot ping/access anything externally.
I.E: ping6 google.com does not get replies. I feel like there is fundamentally something I am missing here, and was curious if anyone had any ideas what I am doing wrong (If this is even possible!)
Thank you!
Few additional details while I am thinking about it.
Ipv6 is enabled in the firewall settings.
I also added incoming and outgoing allow all rules for ipv6 on the interface.
«
Last Edit: December 17, 2022, 12:38:40 am by icsy7867
»
Logged
Patrick M. Hausen
Hero Member
Posts: 6807
Karma: 572
Re: Missing something with ipv6
«
Reply #1 on:
December 17, 2022, 12:56:39 am »
You cannot have anything smaller than /64 on a broadcast interface. Period. Bad news, but that is how IPv6 works.
ULA is dysfunctional for most scnearios. I recommend getting/borrowing one or more GUA /64s, for example from your company that might have a real assignment or from a friend with a fixed /56 from their ISP.. Then use NPT6 to translate to your ISP's /64 ...
Register for a tunnel with Hurricane Electric and use that prefix ..
HTH,
Patrick
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
icsy7867
Newbie
Posts: 9
Karma: 1
Re: Missing something with ipv6
«
Reply #2 on:
December 17, 2022, 02:06:24 pm »
Thanks for the explanation.
After reading that I decided to backup. I deleted all my dhcpv6 servers and I set a single interface to "tracked" and pointed it to my WAN that pulled the prefix.
My LAN interface pulls an ipv6, but I cannot ping6 from the WAB or the LAN. It either just gets 100% packet loss or a "no route to host"
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
22.7 Legacy Series
»
Missing something with ipv6