force LAN IPv6 suffix

[almodovaris]

I have the LAN have a v6/t6 (track WAN) IPv6 address. It has /62 suffix.

How do I force a /64 suffix for LAN only? I want to keep the track WAN option.

[WN1X]

What size prefix are you getting on the WAN?

[almodovaris]

WAN has /64 alotted to it, but the IPv6-PD is /60.

[almodovaris]

I fixed it with a hack. I have applied Step 3 from https://docs.opnsense.org/manual/how-tos/ipv6_dsl.html

[franco]

Why is that a hack. I don't understand.


Cheers,
Franco

[almodovaris]

The WAN used to have public /64 IPs. It no longer haves them. Now it's a private /64. And it fixed the /62 into a /64 range for LAN.

[Patrick M. Hausen]

You cannot have a /62 on LAN. If DTAG delegates you a /62 the intention is to use up to 4 separate /64s. All boradcast interfaces have /64 in IPv6. Always.

[franco]

Yes, it just sounds like it wasn't configured properly, hence me doubting the "hack" part of the fix.


Cheers,
Franco

[almodovaris]

Then I would like to have a checkbox to force a /64, nothing else.

If it matters, I have the internet provider Ziggo from the Netherlands. It behaves pretty much like FLETS from Japan.

[Patrick M. Hausen]

No, no, no  :)

If your provider delegates you a /62 you must ask for a /62. If they delegate a /56 you must ask for a /56.
It's only that the assignment to any local interface will always be a /64 because there are no other prefix lengths on local interfaces in IPv6. It's always /64.

HTH,
Patrick

[almodovaris]

In OpenWRT I have a /60 on the LAN. And it works.

[franco]

I still don't understand. Sure, /60 works in some ways, but only if the WAN gets a PD like /56. So what are we comparing? And how does this translate to discussing /62 vs. /64? It sounds like the OPNsense is behind the OpenWRT. The description of the problem leaves out the setup that is at play here..

And to reiterate. Track interface NEVER assigns anything other than /64.


Cheers,
Franco

[almodovaris]

Oh, boy. Track WAN assigns to LAN /62 in one location (behind OpenWRT) and /60 at another house (immediately behind Ziggo modem/router, that is in its DMZ).

In both cases a public /64 gets assigned to WAN.

[franco]

Nevermind, going to pass on this.


Cheers,
Franco