This topic

Yet another pfSense IPv6 question

websavages — Sun, 18 Feb 2024 17:46:18 GMT

Hi all,

Running pfSense on a host with dual NICs. WAN is connected directly to the ONT.

I've followed the instructions found here inc. ensuring that the firewall rules exist to allow IPv6 traffic out. Yet sadly no joy when trying to contact the outside world using IPv6.

As you can see from the below I am getting assigned, well I think I am, an IPv6 address. But when I try a traceroute6 from an internal host to www.google.com it dies after the router (see last image). Using traceroute the IPv4 version does work as expected.

pfSense version

status of interfaces

WAN config

Firewall rules

traceroute6 output

Any ideas?

Cheers ws

Re: Yet another pfSense IPv6 question

Les-Gibson — Sun, 18 Feb 2024 18:58:24 GMT

You might be better off following this guide. How to Configure pfSense: The Ultimate Setup Guide for 2024 (comparitech.com)

Re: Yet another pfSense IPv6 question

brookheather — Sun, 18 Feb 2024 19:59:45 GMT

Your settings look OK - they match my IPv6 settings on my pfSense router. I'm not sure you are getting an IPv6 address on LAN - it should be something like 2a00:23c8:xxxx:xxxx:yyyy:yyyy:yyyy:yyyy - at least that is what mine looks like. By the way you can change MTU to 1500 but that won't fix your curreny IPv6 issue. What do you have on the WAN firewall rules? I have a WAN rule for IPv4+IPv6 ICMP (ping).

On LAN interface settings you need to set IPv6 Configuration Type to Track Interface and IPv6 Interface to WAN. IPv6 Prefix ID can be set to 1. You will also need to change the WAN_PPPOE Monitor IP to something like 1.1.1.1 as the BT gateway router won't respond to pings.

Re: Yet another pfSense IPv6 question

websavages — Sun, 18 Feb 2024 21:29:52 GMT

Thanks, will take a look

Re: Yet another pfSense IPv6 question

websavages — Sun, 18 Feb 2024 21:44:35 GMT

@brookheather I've assigned a static ipv6 address to my LAN. Am looking to run IPv6 internally as well.

static settings

Default gateways

In terms of WAN firewall rules, it's deny everything. I would expect the IPv6 ICMP reply packets to be allowed through as they are related, as it happens with IPv4

Cheers ws

Re: Yet another pfSense IPv6 question

brookheather — Sun, 18 Feb 2024 22:38:26 GMT

You can't set a static IPv6 address on the LAN interface - change the config type to Track Interface.

Re: Yet another pfSense IPv6 question

websavages — Tue, 20 Feb 2024 07:22:00 GMT

Thank you @brookheather for your help.

Cheers ws