Public IPv6 address not getting assigned to LAN connected device

[kada_harsh]

HI @experts,

I recently set up OPNsense router on a machine and my ISP provides IPv4 and IPv6 addresses shown below
https://ibb.co/RD9CBGy

But I dont see GLobal or Public IPv6 address transferred to LAN interface.

Form OPNsense POV,
I have already configured "IPv6 configuration type" as "Track Interface"
https://ibb.co/4NPvd5x

Coming to WAN configuration,
https://ibb.co/26TxHsW

WAN DHCPv6 config is,
https://ibb.co/CnQSfNm

Please let me know how to resolve this issue. :'(
For all clients connected to LAN, I get IPv6 addresses as shoen below
Ethernet adapter Ethernet 2:

   Connection-specific DNS Suffix  . : ipv6only
   Link-local IPv6 Address . . . . . : fe80::2827:2ed0:2b5e:5839%39
   IPv4 Address. . . . . . . . . . . : 10.212.46.10
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : fe80::a210:a2ff:feb6:f63%39
                                       10.212.46.1

No global IPv6 addresses are seen.


Thanks,
Kada

[kada_harsh]

Repasting working links
https://ibb.co/RD9CBGy

But I dont see GLobal or Public IPv6 address transferred to LAN interface.

Form OPNsense POV,
I have already configured "IPv6 configuration type" as "Track Interface"
https://ibb.co/4NPvd5x

Coming to WAN configuration,
https://ibb.co/26TxHsW

WAN DHCPv6 config is,
https://ibb.co/CnQSfNm

[dseven]

Your WAN IPv4 address is RFC1918, so I assume that OPNsense's WAN interface is connected to the LAN of some upstream ISP router? That upstream router will need to delegate an IPv6 prefix for OPNsense to use on its LAN(s).

[kada_harsh]

HI @Dseven, Thanks for replying.

Yes, My WAN IPv4 address is of RFC1918 range.
Yes, the OPNsense's WAN interface is connected to LAN of ISP router which is providing IPv6 and IPv4.

"That upstream router will need to delegate an IPv6 prefix for OPNsense to use on its LAN(s)." - How can I configure this, will it be possible to configure from ISP router? If not, what are the alternatives to do?

Also, if upstream router is not providing, then the alternative is to have a DHCPv6 in OPNsense?

Please let me know possible solutions?


Thanks,
Harshavardhan

[Patrick M. Hausen]

"That upstream router will need to delegate an IPv6 prefix for OPNsense to use on its LAN(s)." - How can I configure this, will it be possible to configure from ISP router? If not, what are the alternatives to do?

If it is possible depends on the ISP router. Since this is the OPNsense forum and probably very few if any people know the router you are using, you will have to check the vendor documentation for the questions if it is supported at all and if yes, how to configure it.

Also, if upstream router is not providing, then the alternative is to have a DHCPv6 in OPNsense?

No, at least not a fully working IPv6 connection. You could use ULA on LAN on OPNsense and perform NPT6, but if your WAN is not a point to point link but another broadcast medium (as seems to be the case from your posts), then neighbour discovery won't work, so the answer is essentially "no".

There is a new NDP proxy in the works by @Monviech that can hack around some of the restrictions but it's rather new and experimental and there is not yet much experience with it.

HTH,
Patrick

[Monviech (Cedrik)]

I created a new docs PR that outlined exactly what ndproxy needs to work correctly. Its very specific.

https://github.com/opnsense/docs/blob/079373120f32acb1fbd227d199861a6c1594f001/source/manual/ndproxy.rst

I would say the complexity of the infrastructure makes its difficulty intermediate. Definitely not a beginner friendly topic.