Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Router - PFSense (beta 2.1): Difference between revisions

← Older edit
Content deleted Content added
Camlin (talk | contribs)
78 edits
No edit summary
AA-Andrew (talk | contribs)
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,619 edits
mNo edit summary
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
This is a short guide on getting a pfSense 2.0-[[IPv6]] and the 2.1 beta to connect to AAISP as a dual stack router and firewall. If you want more detail, pretty pictures and a full step by step guide, then post on the Discussion page and I'll consider it.
This is a short guide on getting a pfSense 2.0-[[IPv6]] and the 2.1 beta to connect to AAISP as a dual stack router and firewall. If you want more detail, pretty pictures and a full step by step guide, then post on the Discussion page and I'll consider it.


There is now a guide for more recent versions of pfSense (2.1.2+) that is also available here: [[Router_-_PFSense_v2.1.2%2B]]
Also, there is now a guide for more recent versions of pfSense (2.1.2+) that is also available here: [[Router - PFSense]]


= pfSense with IPv4 and IPv6 =
= pfSense with IPv4 and IPv6 =
Line 47: Line 47:
=== IPv6 ===
=== IPv6 ===
* Set the [[IPv6 Configuration|IPv6 configuration]] type on your PPPoE interface to DHCPv6
* Set the [[IPv6 Configuration|IPv6 configuration]] type on your PPPoE interface to DHCPv6
* Set the [[IPv6]] on LAN to <your /64 range>::1 (it doesn't have to be 1) and the mask to 64. eg 2001:8b0:fc5c:6a01::1.
* Set the [[IPv6]] on LAN to <your /64 range>::1 (it doesn't have to be 1) and the mask to 64. e.g. 2001:8b0:fc5c:6a01::1.
* Services -> DHCPv6 Server/RA. Set Router Advertisements to Unmanaged
* Services -> DHCPv6 Server/RA. Set Router Advertisements to Unmanaged


Line 54: Line 54:
If you have additional interfaces then simply add another /64 on your AAISP control page and then set the [[IPv6]] address to <another one of your /64s>::1. Then set RA to unmanaged as above for that interface
If you have additional interfaces then simply add another /64 on your AAISP control page and then set the [[IPv6]] address to <another one of your /64s>::1. Then set RA to unmanaged as above for that interface


Unmanaged really means use "radvd" ie auto addressing based on subnet and MAC address. There are several other options and these are described nicely on the page but unmanaged gets you up and running quickly.
Unmanaged really means use "radvd" i.e. auto addressing based on subnet and MAC address. There are several other options and these are described nicely on the page but unmanaged gets you up and running quickly.


Add some [[IPv6]] rules - eg on the LAN interface: "allow from LAN subnet to any".
Add some [[IPv6]] rules - e.g. on the LAN interface: "allow from LAN subnet to any".


Test with something like "ping6 -n www.google.com" (adjust for OS)
Test with something like "ping6 -n www.google.com" (adjust for OS)
Line 73: Line 73:
*[https://redmine.pfsense.org/issues/3097 redmine.pfsense.org/issues/3097]
*[https://redmine.pfsense.org/issues/3097 redmine.pfsense.org/issues/3097]


[[Category:IPv6]] [[Category:Router]]
[[Category:3rd Party Routers|PFSense]]
Retrieved from "http://support.aa.net.uk/Router_-_PFSense_(beta_2.1)"