pfSense, IPv6, virtualized on dedicated server
... / pfSense, IPv6, virtualize...
BMPCreated with Sketch.BMPZIPCreated with Sketch.ZIPXLSCreated with Sketch.XLSTXTCreated with Sketch.TXTPPTCreated with Sketch.PPTPNGCreated with Sketch.PNGPDFCreated with Sketch.PDFJPGCreated with Sketch.JPGGIFCreated with Sketch.GIFDOCCreated with Sketch.DOC Error Created with Sketch.
Question

pfSense, IPv6, virtualized on dedicated server

by
HendrikV
Created on 2018-02-09 18:06:05 (edited on 2024-09-04 14:24:43) in Dedicated Servers

Hi there,

Some notes, helping those that also suffers with IPv6 on OVH's setup, especially with pfSense

{NETBLOCK}: 2001:41d0:xxxx:xxxx::/64
{GATEWAY}: 2001:41d0:xxxx:xxff:ff:ff:ff:ff

1) Create a gateway, let's call it "OVH-ipv6"
At the bottom, after opening the Advanced settings, there is an advanced setting that you want to enable:
**Use non-local gateway** (The explanation should explain....)
2) WAN Interface configured with static IP in {NETBLOCK}, select the gateway "OVH-ipv6" for the IPv6 default gateway
3) FreeBSD/pfSense (at least 2.4.2 & 2.4.2_1) seems to ignore the {GATEWAY}'s ICMP6, neighbor solicitation, and neither does it seem to request/solicit those NDP messages :frowning:

The solution (thus far for me):
**ndp -s 2001:41d0:xxxx:xxff:ff:ff:ff:ff 00:ff:ff:ff:ff:fc**

However, it seems that the actual traffic for the NDP originates from 2001:41d0:xxxx:xxff:ff:ff:ff:fe or 2001:41d0:xxxx:xxff:ff:ff:ff:fd, which necessitates some extra routing and ndp entries ;(

ndp -s 2001:41d0:xxxx:xxff:ff:ff:ff:fe 00:ff:ff:ff:ff:fc
ndp -s 2001:41d0:xxxx:xxff:ff:ff:ff:fd 00:ff:ff:ff:ff:fd

route add -inet6 ndp -s 2001:41d0:xxxx:xxff:ff:ff:ff:fe -iface {WAN_INT}
route add -inet6 ndp -s 2001:41d0:xxxx:xxff:ff:ff:ff:fd -iface {WAN_INT}

Problems:
This is assumed the MAC addresses of the OVH routers stays the same/similar.

/me wishes for **routed** IPv6 options from OVH ;(


Replies are currently disabled for this question.