Auteur Sujet: Anyone got IPv6 working on pfSense? (Lu 462 fois)

Keyser · « **le:** 07 mai 2024 à 16:14:58 »

Hi All.

Sorry about the english post, but I don’t speak French.

I have had my SG-2100 pfSense running on Orange in France with the fs.com Gpon SFP module for almost 2 years - it has been working flawless with IPv4.

I never did get IPv6 working on this setup in pfSense, so I still only use IPv4.

Has anyone been able to get IPv6 including delegation fully working on pfSense with Orange? If yes, any guides, hint or tips on whats needed?

I’m very impressed with you guys on this forum - how you ever figured out all these needed “mods” to avoid the Livebox is REALLY impressive.

-Keyser

trekker92 · « **Réponse #1 le:** 07 mai 2024 à 16:25:57 »

Citation de: Keyser le 07 mai 2024 à 16:14:58

Hi All.

Sorry about the english post, but I don’t speak French.

I have had my SG-2100 pfSense running on Orange in France with the fs.com Gpon SFP module for almost 2 years - it has been working flawless with IPv4.

I never did get IPv6 working on this setup in pfSense, so I still only use IPv4.

Has anyone been able to get IPv6 including delegation fully working on pfSense with Orange? If yes, any guides, hint or tips on whats needed?

I’m very impressed with you guys on this forum - how you ever figured out all these needed “mods” to avoid the Livebox is REALLY impressive.

-Keyser

c'est là qu'on voit la renommée internationale de l'ingénierie française

here we can admire the international prestige of frenchy frogs engineers

Mastah · « **Réponse #2 le:** 07 mai 2024 à 17:28:54 »

Most explanation here will be on :
- opnsense
- networkd
- openwrt
- debian

Try to have a look if the ipv6 config for opnsense can transpose to pfsense and if not, maybe and if possible, switch to opnsense ?

Keyser · « **Réponse #3 le:** 07 mai 2024 à 18:45:02 »

When I did my config a couple of years ago it didn’t seem possible to get IPv6 going on pfSense due to missing DHCP options (raw) support in the pfSense DHCP6c binary. But since then pfSense has moved on from being based on BSD 12.3 to now BSD 15 which might have changed quite a few things.

So I just wanted to hear if anyone had any success / done it before me? It takes quite some time for me to test all the things due to translations, remote access (have to be sure to be able to come online again if the Orange failsafes kick in) and being a little out of my comfort zone :-)

Keyser · « **Réponse #4 le:** 07 mai 2024 à 18:52:19 »

Citation de: trekker92 le 07 mai 2024 à 16:25:57

c'est là qu'on voit la renommée internationale de l'ingénierie française
here we can admire the international prestige of frenchy frogs engineers

He he, true that. But being from Denmark I’m also a little surprised at all the “obstacles” Orange creates to prevent subscribers from just using their own equipment. It must be using a boatload of ressources (money) in manpower, configuration and testing to maintain and upgrade such a complicated setup.

Back in denmark you can plug your own router on just about any ISP’s Fiber or ADSL, and if you don’t want the trouble of the interface issues, any ISP will place their “livebox” in bridgemode so you still get the “raw” connection. None of this is possible with French ISPs as far as I can tell. They all go out of their way to make it impossible for you NOT to use their equipment on a end customer private ISP connection.

Kana-chan · « **Réponse #5 le:** 07 mai 2024 à 20:28:54 »

Well, in fact only Free has a router which can be bridge-moded ;-)

Denis M · « **Réponse #6 le:** 07 mai 2024 à 20:34:06 »

Hi,

there is indeed an operator that works like this, its name is MilkyWan.
It is an association of which many members are very active on this forum.

SolunarX · « **Réponse #7 le:** 10 mai 2024 à 18:06:17 »

Hi, yes, I have a working IPv6 setup (my WAN receives a prefix, which I then delegate to my interfaces, and I then configure a DHCPv6 server on each of my interfaces to obtain an IPv6. I've automated the management of the various options and set up a cron task to renew my option 90/11 once a day autonomously to prevent any interruptions.

Do you still need it? Could you tell me which version of pfSense you're running? I'll dump the firewall rules, my script, and briefly explain how it works if you're interested.

Keyser · « **Réponse #8 le:** 11 mai 2024 à 09:33:14 »

That is really amazing. I didn’t think it was possible yet.

I would really love to see how you have made that setup and what options/parameters you have set in your DHCP6c setup.

You are using Orange Fiber (pfsense as a replacement for a Livebox) right?

Looking forward to hear from you.

-Keyser

SolunarX · « **Réponse #9 le:** 11 mai 2024 à 14:28:19 »

It's possible, currently I have a GPON-ONU-34-20BI connected to my PFSense router, the optical fiber is directly connected to this GPON which is inserted into my PFSense router on the integrated WAN card. The Livebox is in the closet (and between us, I'm glad about it!!), and I control my entire apartment (servers, wall socket, Wi-Fi, IoT, ...) with this PFSense router (I'm waiting for XGS-PON to upgrade to a higher model

. The Orange WAN is in DHCP V4/DHCP V6 and my different VLANs are in static V4 and track interface to retrieve an IP delegated by Orange! All of this with an average uptime of 100 days (I only reboot the PFSense for updates) and a constant throughput of 1Gbps/1Gbps.

Can you just confirm which version of PFSense you have as well as the Livebox model you have (v5/v6)? I'm going to make a little guide on my Git next week, there's a lot of information to consider but I've configured most of the points to be modified by script so it should be pretty straightforward!