• 1 Post
  • 77 Comments
Joined 1 year ago
cake
Cake day: June 4th, 2023

help-circle



















  • Domi@lemmy.secnd.metoSelfhosted@lemmy.worldHelp with IPv6
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    5 months ago

    Off the top of my head, why did you set the prefix to 0x1? I was under the impression that it only needs to be set if there are multiple vlans

    I have multiple VLANs, 0x1 is my LAN and 0x10 is my DMZ for example. I then get IP addresses abcd:abcd:a01::abcd in my LAN and abcd:abcd:a10::bcdf in my DMZ.

    However, I get a /56 from my ISP wich gets subnetted into /64. I heard it’s not ideal to subnet a /64 but you might want to double check what you really got.

    what are your rules for the WAN side of the firewall?

    Only IPv4 + IPv6 ICMP, the normal NAT rules for IPv4 and the same rules for IPv6 but as regular rule instead of NAT rule.

    My LAN interface is only getting an LLA so maybe it’s being blocked from communicating with the ISP router.

    If you enable DHCPv6 in your network your firewall should be the one to hand out IP addresses, your ISP assigns your OPNsense the prefix and your OPNsense then subnets them into smaller chunks for your internal networks.

    It is possible to do it without DHCPv6 but I didn’t read into it yet since DHCPv6 does exactly what I want it to do.