[SOLVED] PPPoE & IPv6

[mahescho]

Hi,

I've setup a PPPoE interface which should work in dual stack mode with fixed IPv4 and IPv6 addresses. I want to set the IPv6 address. I've set IPv6 to "static" but the address does not get set. The interfaces always uses a generated IPv6 address.

How to fix this?

TIA
Matthias

[bartjsmit]

It's very unusual for an ISP to expect you to set your WAN IPv6 address as a static. I have my WAN set to DHCP6 and this gives me a link local (fe80::) IPv6 address in the OPNsense gateway list. You can also use the 'track interface' option for the WAN in OPNsense - YMMV.

Remember that there is no NAT in a (sane) IPv6 configuration. The source for internal hosts is the IPv6 IP of the internal host, not the "public" IP of the NAT router, like in IPv4. You firewall the hosts directly. Remember to allow ICMPv6 as a lot of stuff depends on it.

A static ISP assignment is through a delegation of a number of IPv6 /64 subnets bundled in a /56, or a /48 range if your ISP is generous. Set your LAN interface to a static and configure Services, Router Advertisements, [LAN] to enable SLAAC for your internal clients. Most OS will obfuscate the address through the RFC 4941 Privacy Extension. Port scanning is a nigh impossible task in IPv6 anyway, due to the size of the address space.

http://cav6tf.org is a cute test site. Watch the turtle swim.

Bart...

[mahescho]

Thanks for you time tying to explain IPv6 to me but that was not the question :)

What I get is a static /64 prefix for the WAN interface an /56 prefix for internal use. When I connect by PPPoE the PPPoE interfaces gets an IP of the /64 prefix. I know that NAT is not required when using IPv6. When I e.g. want to use the public IPv6 address of the firewall to act as reverse proxy or mail relay I need a static IPv6 address.

Trust me, I know IPv6 and how it works and how it's intended :) So there is no need to argue about the purpose of a static IPv6 address :) I just want to know how to set it on a PPPoE interface ...

[mahescho]

Issue fixed by: https://github.com/opnsense/changelog/blob/master/doc/18.7/18.7.4#L18

The best way to setup IPv6 on a PPPoE interface is to do it this way:

https://wiki.opnsense.org/manual/how-tos/ipv6_dsl.html

And then set the static IP by creating a virtual IP.