IPv6
from Shimitar@downonthestreet.eu to selfhosted@lemmy.world on 16 Apr 18:52
https://downonthestreet.eu/post/610727
from Shimitar@downonthestreet.eu to selfhosted@lemmy.world on 16 Apr 18:52
https://downonthestreet.eu/post/610727
I noticed by accident that in my home network IPv6 is not functional, so I decided to fix that, and started studying about IPv6.
I have an opnSense firewall which connect to my ISP port as WAN, and then the LAN. The point is that o do not get a GUA on my WAN, but I get it if I connect directly a pc to the ISP port…
The opnSense seems to be configured properly, and the ISP itself do provide IPv6 as I can get a GUA address when I connect my Linux laptop to the ISP router, so I am not sure…
Anybody has any hints?
threaded - newest
Are you using a VPN? A lot of the VPN vendors disallow IPV6.
Nope, no vpn
shot in the dark, because I’ve made that mistake before, if you got dyndns setup, it needs to be from the server not the router for ipv6 to work.
Mm no, not using dyndns. I am missing IPv6 support on the LAN side… But I have it on the wan side
You can technically use the IPv6 local space just like IPv4 and NAT it all, but it’s so much nicer to have globally routable addresses
Is it a subnet level address or only a single interface level address. Many ISPs, in the US at least, don’t supply a block of addresses, just one. If you’re only getting a single IP address or it’s using 6rd (like my ISP) or similar really old, transitional technologies, then you won’t be able to assign a unique GUA to your LAN (separate from the WAN address) and so you’ll need additional routing configuration like NAT to properly route to locally defined IPv6 addresses.
Personally, I gave up on trying to get things to work with 6rd since NAT is way easier on IPv4 since it was never intended to be necessary on IPv6. But ISPs are just cheap, lazy, or actively trying to make self-hosting on residential plans more difficult in order to drive people to business plans and prevent businesses from using cheaper residential plans by keeping IP addresses dynamic and thus complicating DNS.
If you are getting a subnet of addresses, then ensure that configuration on the LAN side is set up properly https://docs.opnsense.org/manual/ipv6.html
How do I find out if the ISP is handling me a single address or a /64 or whatever?
What IPv6 Configuration Type are you using on the WAN interface? The Interfaces -> Overview page should also show it based on the /48 or whatever at the end of the IP and if you’re using DHCPv6 then often you can request how many with the Prefix Delegation Size option, though it’s not guaranteed they’ll actually give you that large of a block or even pay any attention to that option.
Not familiar with opnSense, but on your PC, you can check the address it assigns - if it’s /128, it’s a single address.
My ISP does not assign a prefix for delegation unless you specifically ask for it. I had to add “request_prefix 1” to my dhclient.conf file to get a /64 I assume opnSense has a friendly setting somewhere for that. For me, the key phrase was ‘prefix delegation.’ After I got that, I could search around and get my solution.
Like nuclear fusion, IPv6 is one of those things that feels like it’s constantly about 20 years away, no matter how long we work on it.
lol
Using it on all my devices. It’s there, globally and working. What feels constantly away is getting rid of IPv4.
Set the LAN ipv6 to track interface and it should work. You will likely also need to set a static ipv6 address on your LAN that is within the address given. SLAAC should take care of the rest.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
[Thread #240 for this comm, first seen 17th Apr 2026, 00:10] [FAQ] [Full list] [Contact] [Source code]
GUA?