How to get IPv6 from Wireguard to OPNsense?

[novel]

Hi,


My ISP gives me ONLY IPv4. I paid a VPS then I installed Wireguard VPN on the VPS, then IPv4 and comes to OPNsense's WAN.  OPNsense run as Wireguard client. This setup works fine.

The problem is that I cannot get from VPS IPv6 IP to OPNsense's WAN. Wireguard server on the VPS works fine with IPv6, I tested on my linux laptop. I made a wireguard client on my linux laptop then I connected directly to VPS with IPv4 and IPv6.


So I would like to get directly from VPS to OPNsense's Wan then traffic goes to LAN . I read a lot of examples here but I didn't solve it.

VPS gives a IPv6 with /64 subnet but I can get one more with /64 subnet.

[novel]

I was wonder nobdy here know something for my question? I will try to make simpler. My setup is ISP --> Wireguard server on VPS --> Wireguard client on OPNsense wg0 --> WAN --> LAN


In the past I had IPv6 from ISP but IPV6 cannot pass from OPNsense. The problem is OPNsense.


Actually I would like to setup IPv6 on OPNsense?

[RamSense]

maybe this guides can help you getting started:
https://homenetworkguy.com/how-to/set-up-a-fully-functioning-home-network-using-opnsense/
or ipv6 only: https://homenetworkguy.com/how-to/configure-ipv6-opnsense-with-isp-such-as-comcast-xfinity/

his tutorials have helpt me also in the beginning to get things started.

[novel]

maybe this guides can help you getting started:
https://homenetworkguy.com/how-to/set-up-a-fully-functioning-home-network-using-opnsense/
or ipv6 only: https://homenetworkguy.com/how-to/configure-ipv6-opnsense-with-isp-such-as-comcast-xfinity/

his tutorials have helpt me also in the beginning to get things started.

I read all of them with no luck.

[tiermutter]

You cannot delegate a /64 to your LAN, though what you need is NAT for IPv6 using ULAs in LAN (and other interfaces if needed).

Please provide screenshots of you intefaces overview first.

Then you need to enable manual configuration for LAN interface, go to services/router advertisements and select assisted mode for LAN.
Next go to interfaces/virtual IPs and add ULA address for LAN interface, e.g. fd00:10:10:10::1/64.
Then go to firewall/NAT/outbound and select hybrid mode. Add a manual rule with interface = WG network, IP version = v6, source address = fd00:10:10::/64

Make sure your LAN clients gets v6 addresses via SLAAC, e.g. fd00:10:10:10:1234:abcd:a1b2:e3f6

I guess this should work, I only do so for my VPN client networks to give them v6 connectivity without delegeting GUAs (since this is not really static in my case).

[novel]

You cannot delegate a /64 to your LAN, though what you need is NAT for IPv6 using ULAs in LAN (and other interfaces if needed).

Please provide screenshots of you intefaces overview first.

Then you need to enable manual configuration for LAN interface, go to services/router advertisements and select assisted mode for LAN.
Next go to interfaces/virtual IPs and add ULA address for LAN interface, e.g. fd00:10:10:10::1/64.
Then go to firewall/NAT/outbound and select hybrid mode. Add a manual rule with interface = WG network, IP version = v6, source address = fd00:10:10::/64

Make sure your LAN clients gets v6 addresses via SLAAC, e.g. fd00:10:10:10:1234:abcd:a1b2:e3f6

I guess this should work, I only do so for my VPN client networks to give them v6 connectivity without delegeting GUAs (since this is not really static in my case).

there isn't  services/router advertisements

my devices connects to user interface not Lan.

[tiermutter]

 

you need to enable manual configuration for LAN interface,

[tiermutter]

The do it all for "User" interface ;)

[novel]

The do it all for "User" interface ;)

I said there isn't manual configuration in services

[tiermutter]

It is in Interface config, not services...

[novel]

It is in Interface config, not services...

I found it Now?
Router Advertisements  assisted?

not pinging

All devices gets ipv6 but actually not work

[novel]

Can anyone help??

[tiermutter]

Then go to firewall/NAT/outbound and select hybrid mode. Add a manual rule with interface = WG network, IP version = v6, source address = fd00:10:10::/64

Done?

[novel]

Then go to firewall/NAT/outbound and select hybrid mode. Add a manual rule with interface = WG network, IP version = v6, source address = fd00:10:10::/64

Done?

Yes! I have been attached pictures. Vpn interfaces is wg0

[novel]

Is anybody here to help me?


I've attached routes from my opnsense