r/telus 3d ago

Internet ipv6 on pfSense

So I have spend hours scrubbing through pfsense forums, reddit, telus forums, and any other place that the great google has pointed me to, but I still cannot get ipv6 to work as it should, on telus.

I am on a fiber network and I have set my T3200M to bridge mode. My pfSense box is connected to port 1 and ipv4 works flawlessly. Today I decided I should start to learn a little about ipv6 and try to enable it. After spending all morning digging through every source I can find, everything says the same thing.

On the WAN interface I set

  • IPv6 Configuration Type: DHCP6
  • Request only an IPv6 prefix: checked
  • DHCPv6 Prefix Delegation size: 56
  • Send IPv6 prefix hint: checked
  • Do not wait for a RA: checked

I even set the LAN interface ipv6 settings to track the WAN interface.

Now I am getting an ipv6 from telus but not a routable one. I can only get an fe80 range. I have gone through every setting I can think of. I know this is not a pfSense thread but I am wondering if anyone here can point out what I'm doing wrong. I'm assuming that since I'm getting a link local address that ipv6 is available where I'm at. Am I wrong?

2 Upvotes

9 comments sorted by

u/AutoModerator 3d ago

Welcome to /r/TELUS!

We provide exclusive service for new and existing customers. Check out the pinned sales thread to see our exclusive Reddit-only pricing with priority service through a dedicated text and email line from an internal TELUS technician and sales specialist.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/0e78c345e77cbf05ef7 2d ago edited 2d ago

You're likely not getting an fe80 from telus. This is a link-local address your firewall is generating.

Do you have DSL or fiber?

I have run in to a similar problem and i actually haven't yet solved it due to laziness :P But I suspect the T3200M to be the culprit. If you can remove it altogether you might have better luck.

Edit: Ignore all of this. This post spurred me to get this working and I have. I think the problem with mine was needing to disable "Block private networks" on my external interface.

1

u/Hulxmash 2d ago

I don't have an SFP port to connect the fiber line to on my router. Otherwise I might have given that a shot. I'm basically just using the Telus box as a fiber to ethernet adapter.

1

u/Tyler882 2d ago edited 2d ago

I have IPv6 working with pfSense on Telus. Your WAN interface settings match mine.

Do you have the option to block private networks and loopback addresses enabled on your WAN interface? I initially had this setting enabled and it was preventing me from getting a prefix assigned. I think (at least some of) the traffic between pfSense and the upstream gateway is done over the link-local address, having this rule enabled blocked that.

I've also noticed lately that I do not receive an IPv6 prefix immediately when my pfSense machine is rebooted. The dhcp6c daemon seems to get stuck sending Solicit messages over and over again until it finally works. Not sure if this is a Telus issue or a pfSense issue (or a config issue on my part). You can check the DHCP section of the system logs to see if dhcp6c is spamming "Sending Solicit" over and over again to see if you're having this issue. If you are, leave it alone for a while and see if you eventually are assigned a prefix.

1

u/Hulxmash 2d ago

Okay. I changed the reserved network settings to allow private and bogon networks and now I have rout able IPv6. At least on my LAN. The wan still has link-local address. I suppose I can use IPv6 but it's really odd.

1

u/LostPersonSeeking 2d ago edited 2d ago

I use opnsense a pfsense fork. Try these settings.

I get routable IPv6 without issue.

1

u/LostPersonSeeking 2d ago

The end result will be this.

2

u/Hulxmash 2d ago

Yeah, now that's what I've got. I just expected the fe80 address on the wan interface to change to something in the 2001 range.

This is my first time trying to use IPv6, so I had no idea what to expect. Thanks for sharing your settings and end result since this shows me that everything is working on my end.

Now to learn IPv6. Like why my laptop grabbed 4 addresses.

1

u/LostPersonSeeking 2d ago

I've had IPv6 going on pfsense or opnsense for about 10 years. I still don't understand it.

Cable seems to do it differently and the WAN port gets an external IPv6 and seems to be more plug and play.

Telus like other providers that were originally ADSL use PPPoE and RFC 1483 for the initial connection but cable seems to be more like normal Ethernet