blog/setup-ipv6-pfsense-zen/

[utterances-bot]

How to Setup IPv6 with Pfsense - Mark Allison

https://markallison.co.uk/blog/setup-ipv6-pfsense-zen/

[firrsefu]

In case other people find Mark's excellent guide useful, here are some changes I had to make:

For my Zen connection with a pfSense firewall running 2.6.0-RELEASE I had to also enable "Do not wait for a RA" ("Required by some ISPs, especially those not using PPPoE"), under Interfaces >> WAN >> DHCP6 Client Configuration. Otherwise my firewall just sat there waiting for an IPv6 Router Advertisement from Zen and didn't ask for an IPv6 prefix via DHCPv6.

Also, after enabling IPv6 Android 12 phones would constantly connect and disconnect from the wireless network with the (very briefly displayed!) message "Connected to device. Can't provide Internet" or similar. I fixed that by configuring IPv6 DNS servers under:

• Services
  • DHCPv6 Server & RA
    • Interface
      • Router Advertisements
        • DNS Configuration
          • Server 1 & Server 2.

I used 1.1.1.1's IPv6 DNS servers (2606:4700:4700::1111 and 2606:4700:4700::1001). Something wasn't working well with how Android 12 checked that the wireless network had Internet connectivity and how the phones were getting the DNS server information - but that fixed it.

[limitedAtonement]

This is a great guide! I still have so many questions. When unsolicited traffic for one of my computers is routed to my WAN, how does it know where to send that traffic? Is that because the router has a routing table based on what it finds out through SLAAC?
What if one of my servers picks up address A, then the power goes out at my house, everything boots back up, and that server gets address B through SLAAC? Is there some way to make sure that doesn't happen?

[limitedAtonement]

I don't use Zen (I'm in United States), but when I go to https://test-ipv6.com/, I get https://imgur.com/ag8dmqV I'm eager to fix it, but I feel like I still have a lot to learn.