OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • ipv6 fw rule with dynamic prefix
« previous next »
  • Print
Pages: [1]

Author Topic: ipv6 fw rule with dynamic prefix  (Read 2398 times)

Perun

  • Jr. Member
  • **
  • Posts: 81
  • Karma: 0
    • View Profile
ipv6 fw rule with dynamic prefix
« on: September 25, 2018, 08:46:48 am »
Hi

how can I set a ipv6 firewall rule with a dynamic prefix?

Greetz
Logged

bartjsmit

  • Hero Member
  • *****
  • Posts: 1411
  • Karma: 156
    • View Profile
Re: ipv6 fw rule with dynamic prefix
« Reply #1 on: September 25, 2018, 10:17:13 am »
You can't. Either run a HE tunnel https://tunnelbroker.net/ or change to an ISP that is not stuck in the dark ages.

Bart...
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12612
  • Karma: 1082
    • View Profile
Re: ipv6 fw rule with dynamic prefix
« Reply #2 on: September 27, 2018, 12:58:41 pm »
This is on my long-term TODO list. Martin added a prefix merge feature for DHCPv6 / RADVD, but moving this into the firewall is trickier than just merging the prefixes on a flat config file rewrite.


Cheers,
Franco
Logged

torso70

  • Newbie
  • *
  • Posts: 1
  • Karma: 0
    • View Profile
Re: ipv6 fw rule with dynamic prefix
« Reply #3 on: September 08, 2020, 08:38:12 am »
In release 20.7.2. there is a new alias type based on MAC addresses. You could define rules based on MAC address for the hosts with dynamically assigned IPv6 prefixes.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 12612
  • Karma: 1082
    • View Profile
Re: ipv6 fw rule with dynamic prefix
« Reply #4 on: September 08, 2020, 09:39:35 pm »
I had to take a closer look, but yes, MAC alias resolves arp and ndp output so both IPv4 and IPv6 are supported.


Cheers,
Franco
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • ipv6 fw rule with dynamic prefix
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2022 All rights reserved
  • SMF 2.0.18 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2