New provider - no IPv6 WAN

Networking & Firewalls
1

Hey all,

I am using pfsense CE 2.7.2

Today I switched providers, from cable to fiber. The cableprovider just DHCP for IPv4 and IPv6. I got a public V4 and V6 on my WAN interface.

My new fiber provider uses PPPoE. Everything works fine, but I can’t get a public IPv6 IP on my wan. It is showing a fe80 address. IPv6 works, because my lan clients al get an IPv6 via track interface and the internet is accessable with IPv6.

I tried diffrent things, like only requesting a prefix and don’t wait for RA, but I don’t seem to get a public V6 on WAN.

How do I fix this?

Thanks in advance.

2

I have no idea since I disable IPV6, maybe post in the Netgate forums as well.

3

What ist your setting on WAN for “IPv6 Configuration Type” ?

4

Thank you both for replying!

As it turns out, my ISP only delivers a prefix and no IP for my WAN interface. IPv6 is still a learningcurve for me, but this should be a normal thing with some ISP’s…

Does anyone know how I should expose my VPN server via IPv6?

@LTS_Tom I will post this same question at Netgate forums!

5

Because some ISP only have IPv6 or dualstack lite and then there is a great opportunity that the VPN will not work, depend on how the ISP tunnels the IPv4 traffic.

I got this not long ago: ISP dualstack VPN to IPv4 adress, VPN connected, but nothing realy work, ping, http worked, but https, ssh did’t work over the tunnel. I still don’t know why. VPN to the IPv6 adress works fine.

6

@Varmandra I have fulltime dual stack and the VPN server is perfectly accessible via IPv4. For futureproofing and learning New stuff I also want to expose the server via IPv6.

7

@ipv4please

For VPN you have server site und client site, when on the server site only IPv4 is available to connect to the VPN, a client with only IPv6 or dualstack lite can have problems with the VPN connection, depent on how the ISP on the client site tunnel the IPv4 traffic. There happens some magic on the IPS client site nobody realy know.

In the past I have the problem that most clients with IPS has IPv6 only or dualstack lite (some could work without promblems, don’t know why) were not able to connect to the VPN. (or one wired thing with connected but not fully working)

That’s why I realy quickly change it to IPv4 and IPv6 is available on the VPN server site.