Modify or add an IPv6 link-local address for LAN interface

[TarteTatin]

Hi!

First post here, thank you for this great firewall, which I am currently trying to configure for my needs with IPv6.

I was wondering if there is a way to modify, or add IPv6 link-local addresses for each of my LAN interfaces (fe80::XXXX:XXXX:XXXX:XXXX/64).

To simplify the gateway of my servers in theses LAN.

Thanks!

[marcquark]

It should be there already, check out Interfaces->Overview, it should display the link-local address. The address is deterministic, it's based on the interface's MAC address (EUI-64).

[meyergru]

Theoretically, fe80::1/64 is a perfectly legal address and you should be able to set it,

You could also modify the interface MAC in order to get another EUI-64 from that, but it contains ff:fe in the middle.

[TarteTatin]

It should be there already, check out Interfaces->Overview, it should display the link-local address. The address is deterministic, it's based on the interface's MAC address (EUI-64).

Yes, I want to use another, simplier, IPv6 link-local address. Like fe80::1/64. It is possible on Cisco routers for example.

Theoretically, fe80::1/64 is a perfectly legal address and you you be able to set it, but it does not seem to be possible from OpnSense GUI as a VIP.

You could modify the interface MAC in order to get another EUI-64 from that, but it contains ff:fe in the middle.

Ok, thank you.

I will look for a way to modify it in command line, but not sure if it is possible.

[franco]

Just add a virtual IP link local address, but make sure it's /64.


Cheers,
Franco

[TarteTatin]

Hi Franco,

It works, thank you!

(Not possible to use the same IPv6, like "fe80::1/64", but it's sufficient to use an easy to remember address.)