this post was submitted on 18 Jun 2024
34 points (92.5% liked)

Selfhosted

40132 readers
538 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

My ISP recently made IPv6 available and I'm trying to figure out how to make it work with my network. The setup I have is an OPNsense box connected to my ISP's router and I'm using it to isolate my homelab from the rest of the network. However, the machines on my OPNsense LAN aren't being assigned IPv6 addresses that allow them to connect to the internet.

I can ping IPv6 sites from my OPNsense box and I see that it's being assigned a /64 prefix from the ISP router. If I use my laptop to connect to my ISP's router, I can visit IPv6 sites just fine as well. My devices in the OPNsense LAN also have IPv6 addresses and can ping each other using IPv6 but not the internet.

Are there special settings that I need to set for OPNsense to make this setup work? I've tried reading up on the different modes like SLAAC but I'm not quite grasping the concepts.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 4 months ago* (last edited 4 months ago) (2 children)

If you're getting a /64 from your ISP via DHCPv6, you likely need to send a prefix hint. I'd guess /60. Then you'll have multiple /64s to work with on your inside interfaces.

Who is the ISP?

[–] [email protected] 2 points 4 months ago* (last edited 4 months ago)

If it's any use, here are the WAN IPv6 options (auto, manual, or IPv6CP Extension) for the ZTE-ZXHN-F670, it's set to auto right now:

And these are the available LAN settings:

[–] [email protected] 1 points 4 months ago (1 children)

I'm located in Vietnam; the ISP is Viettel (probably not useful information, but hey, why not).

Is it possible to send the hint from OPNsense itself? I mentioned in the original post that OPNsense is behind the ISP router (ZTE-ZXHN-F670) which I kind of don't want to touch due to the fact that the terminology is quite different and that the ISP people come over to run tests on it whenever there are service issues. Either way, I've already tried to search through the settings and couldn't find any options for setting the prefix hint on the WAN side. I'm open to digging though those settings again if you're familiar with the router.

[–] [email protected] 1 points 4 months ago

Is it possible to send the hint from OPNsense itself?

Yes, to me it sounds like you're already getting a big enough prefix from your ISP (all devices getting a /64), but you'll have to request a bigger prefix from OPNsense. I believe it should give you the options to do this when you set the IPv6 mode to DHCPv6 on OPNsense, but I can't say if your ISP router will handle it.