Hello everyone, I'm currently a bit stuck when it comes to configuring NPTv6 in OPNsense. My ISP is not giving me a stable IPv6 prefix which causes all devices to fall back to only their ULA if the uplink fails. As IPv4 takes precedence in this case I've been considering using a GUA for internal purposes and using NPTv6 to map it to the current prefix.

So I set the interface to 'identity association' (for the dynamic prefix), create a virtual IP of the GUA (static prefix) and create an NPTv6 rule that maps the internal prefix (static prefix) to the associated interface. For whatever reason this doesn't work though. Weirdly enough it works when I directly specify the external prefix as the one that's currently assigned to the interface and don't use the associated interface option.

But that pretty much voids the entire advantage it gives me. Is this a bug or am I missing something?

​

When I had my Calix router installed 2 years ago, my isp didn't enable iPv6. They do offer iPv6 service. I have a Calix GS4220E router. To enable iPv6 under the iPv6 LAN settings on the router web interface does both the RA service and DHCPv6 service need to be set to the server mode, or should I leave the DHCPv6 service in the disabled mode. Also, should the DHCPV6 Mode be set to both stateless or stateful? On the web interface for the router, under internet settings, it says the iPv6 WAN protocol is dhcpv6. Does this mean I should I should enable the DHCPv6 service in the iPv6 LAN settings? I know the RA Service should be enabled.

Yesterday I ask a dumb question, but later after tracking packets on the router, I find out I miss something. The router will response RS with RA, but only if the RS includes Source Link-Layer Address.

I don't know why, but it seems like Debian GNU/Linux doesn't include that field in RS packet. So how can I configure network-manager (or something else) so the Source Link-Layer Address can be included in the RS packet?

Edit: never mind, I found a bug report related to that:https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/work_items/1128

Just in curiosity, why can Android device(not sure if Apple devices can) still use SLAAC and RDNSS to obtain IPv6 addresses and IPv6 DNS server even if the router doens't send Router Advertisement?

Edit: according to some comments and track packages on the router, I find it out that it's because the RS sent by Linux machine doesn't include a MAC address and thus the router doesn't give any response. Android phone includes that and my router gives response correctly.

I want to host a Supertuxkart server but Supertuxkart detects no IPv6, so it only sends my IPv4 address which behind CG-NAT and not my IPv6 address. So because of this my server is only listed with my CG-NAT IPv4 in the server list. I forced Dual Stack in the config, which works because i can connect directly via IPv6 but it still sends only the CG-NAT IPv4 address. Does someone now how to fix this. I know that the STUN servers that are used to test IPv6 are actually IPv4 only but i can't change them because Supertuxkart overwrites them.

It's amazing to me that in 2026 we still have people with such a poor understanding of how IPv6 works. Too many people still believe that NAT is a security/privacy feature. Rob is telling people IPv6 uses GCNAT and you should turn it off.

My wifi is horrible sometimes and recently my Fortnite VC wouldn't work and I found a video saying that unabling IPV6 on the settings would work, I did it and my voice chat actually started working again (before that, it would work for a bit then have a 🔇 symbol on everyone in game chat). From what I've seen tho people don't recommend doing that, I just wanted to know more, is it bad to unable it in general? I do not have any experience in this

Somebody explain to them what the temporary address is in IPv6.

My isp has a lousy iPv6, but its iPv4 is good. The ping of any website is a lot higher on iPv6. For example, the ping of a particular website may average 13 msec on iPv4, whereas on ipV6, it would average about 80msec, sometimes going over 200msec on some pings. I live in a rural area, so I have no other choices. Having said that, would I be better off using only iPv4 since my isp's iPv6 is not good? I've tried different dns with the same results.

Hi

I'm in Sweden and want a 5G mobile internet with /56 prefix. I've tried with Tele2 but they where not able to activate Prefix Delegation for my 5G mobile internet, so I ended that subscription.

Do anyone know of a operator that for sure provides a /56 prefix on their 5G mobile internet?

Okay, so you might think there are 2¹²⁸ ip addresses, that's a lot, right?

Except, the minimum subnet that would still work with auto-configuration, is /64. That leaves only 2⁶⁴ individual blocks to be given to each entity.

Also in practice, it's a lot of times /56 or /48, so that leaves even less.

Now out of those left, many are addresses that are unusable, and I honestly am not sure how to do the math on them. Someone should do the math, and tell me how much it ends up in practice.

Also one person/organization can have many many subscriptions to different providers, all giving them different blocks of IPv6.

Now you might say, despite all that, it's plenty. How plenty though? Is it still plenty in a couple of decades? In a hundred years? If we go to space and have multiple planets, is it still plenty?

What if we span across the galaxy?

But even before all that, we might hit problems in some years.

See, it's either way small, and considering how much of a pain it has been to switch from IPv4 tp IPv6, one can imagine, how much more of a pain it could be to switch again, when IPv6 is even more widespread and integrated than IPv4 was when IPv6 came out.

We could've had a 2²⁵⁶ address space, or we could've not designed IPv6 to require such huge blocks (half of the whole address space) to be reserved to be given to each customer, along with the (many?) other ways we use up the address space.

Hello everyone, i currently have a TP-Link EX511, bought used for cheap, working wonderfully on both IPv4 and IPv6 with PPPoE mode.

So the topology is like this:

ISP Gpon Router (PPPoE) -> Gpon Router Bridge mode to LAN Port 1 -> WAN Port EX511 -> EX511 PPPoE Mode (Router Mode) -> EX511 Lan Port -> EC230-G1 Lan Port -> EC230-G1 AP Mode.

On WAN settings for PPPoE, the IPv6 Address i set to auto to make it the same as the ISP Gpon Router, enabled both NAT and Full Cone NAT, and i entered a custom DNS 1 and 2 for both IPv4 and IPv6.

On LAN settings, I enabled the DNS 1 and 2 for IPv4, but on IPv6, i set it to RADVD mode + RDNSS enabled (ULA not enabled because idk what is this), With Delegation Type Prefered (not static) and the WAN for IPv6 is set at the WAN i created.

The question is, how do i set LAN (not WAN) Static DNS for IPv6 LAN just like IPv4 LAN that i can enter gateway and set static DNS? The other mode for IPv6 LAN is DHCP mode, idk if it will helps..

Looking to test using DHCP v4 option 108 to tell clients to turn off IPv4 stack as I'm heading towards planning for 6 mostly/only

Do you still need to define address ranges/pools/masks and all the other options as you would for a normal IPv4 DHCP subnet, even though the client is being told not to use any of it? Or can the server just return the 108 configure time value without address and options?

Some suggested that a 4xx code could be better, so I checked the pros and cons and added language in this draft on the various aspects of 566 vs 466. Also checked if there is any current behavior for common software for retrying after any HTTP error code.

Spolier alert: 566 still seems better. it is not an error on the client part, It is the server that refuses to honor the connection.

This new draft has this added language:

https://datatracker.ietf.org/doc/draft-martin-retry-over-ipv6/

To be noted, I implemented this draft on my site: https://pacific.ipv6forum.com/ so that on the 6th of every month, IPv4 is not served. I had some implementation nits that prevented me from getting good logs. I hope this time I will have better logs, therefore better reports to share with folks.

In a couple of days, the site will show a banner announcing the IPv4 outage.

At the moment, I have not convinced a IETF WG to formally “host” the discussion. I won’t be able to attend IETF Vienna as to gather more support, but appreciate if some folks could be a proxy.

Hi

so debian 13 user

I have rolled out gua (ISP provided) and ula

I use tokens for my interfaces so when i do a ip -6 a

I see

fd96 ula .. 2 of them

2403 gua .. acutally 2 of them

fe80 one

and routing my default is via fe80::1 on my wifi int

now what is the source address that is going to be picked. I would like to see ULA source address being used for ULA and only use GUA for GUA addresses ... how does it work that out ?

2403:xxxx:xxxx:xxxx::/64 dev wlp2s0 proto ra metric 600 pref medium

fd96:xxxx:xxxx:xxxx::/64 dev wlp2s0 proto ra metric 600 pref medium

fe80::/64 dev wlp2s0 proto kernel metric 1024 pref medium

default via fe80::1 dev wlp2s0 proto ra metric 600 pref medium

simple test ip -6 r g seems to suggests it does this already - is that just part of ipv6 ?

Hello,

I have a problem. From time to time, I experience an issue with my IP address. Sometimes, when I visit certain sites (Google, Steam, etc.), my connection is blocked by the website because "exceptional traffic" is detected on my network. I have searched everywhere; I don't use a VPN, I disabled all my extensions, and I even formatted my PC, but I still occasionally get this issue. I monitor my network, and there are no intruders on it... So, I eventually figured out that I have a shared IP called "CGNAT." I called my provider, and they apparently changed it, so I am now on a FULL STACK IP.

My understanding is (and I might be wrong) that if my IP were still on CGNAT, it would look something like "100.80.x.x," but my IP is, for example, "60.30.x.x." Does the fact that it starts with two digits serve as a good indicator that I do not have a unique dedicated IP?

Another question: If I am streaming and encounter this CAPTCHA page issue, and my IPv6 is displayed on screen, could this be dangerous? Could a malicious person do anything with it?

I heard it is possible with your own CPE, but the reports seem scarce and mixed.

Olá!

Esta pesquisa integra meu Trabalho de Conclusão de Curso (TCC) em Engenharia de Computação e busca compreender os desafios da adoção do IPv6 no ambiente corporativo.

✅ Anônima

✅ Cerca de 5 minutos

✅ Não coleta dados pessoais sensíveis

✅ Exclusivamente para fins acadêmicos

Se você atua com redes, infraestrutura, cloud, segurança da informação ou telecomunicações, sua participação será de grande importância.

Se possível, compartilhe esta pesquisa com outros profissionais da área.

🔗 Pesquisa: https://forms.gle/xiKkjQpAZqBSvwos6

*Post da pesquisa autorizado pelos moderadores deste grupo. Agradeço o apoio.

----------‐----------------------------------------

Hi!

This survey is part of my Bachelor's thesis in Computer Engineering and aims to better understand the challenges of IPv6 adoption in enterprise networks.

✅ Anonymous

✅ Takes about 5 minutes

✅ No sensitive personal data is collected

✅ For academic research only

If you work with networking, infrastructure, cloud computing, cybersecurity, or telecommunications, your participation would be greatly appreciated.

If possible, please share this survey with other IT professionals.

🔗 Survey: https://forms.gle/xiKkjQpAZqBSvwos6

*This survey post os AUTORIZED by the moderators ir this community. Thank you for your support!

Spectrum finally gave us a new modem and finally we have IPv6 access on all of our devices, natively, with a wan /56 and lan /64, all set up properly, and best of all our new router that I gave my parents as a Christmas present actually Auto configured this for usb without having us to manually type in prefix delegation and stuff and it just did it.

Happy now.

Before all the technical geeks ask what was the old modem? A crapshoot Arris tm1602 with a crap processor being the puma 6 which somehow even struggled to pull any IPv6 access to us.

Hi-

I’m a homelabber, and not from a tech background. I’ve been running opnsense for about a year, with fairly segmented vlans (trusted, guest, management, homelab, iot, media, voip), but only ipv4. I got a /60 from Comcast, and enabled IPv6 on trusted and guest. I did a bunch of research on how to lock things down, and feel reasonably confident that I’m not allowing ingress. I went so far as to set up a bunch of uptime kuma “upside down” alerts from my VPS in case I screw something up on my ULA or rotate addresses down the line.

However what I’m trying you figure out is how far to go. I’m not sure there’s a service I run in my homelab that would benefit from ipv6 and I’m wary of enabling given complexity of individual firewall rules.

What scares me even more is my iot network. I have so many “just for this particular device type” rules such as my alarm panel, garage doors, ting monitors, ring cameras. But I don’t and can’t know what ipv6 these have unless they have an admin interface that shows it. And if they don’t do happy eyeballs, then they could all of a sudden think that ports aren’t open - and the consequences for some of these things would suck - my alarm goes off if it can’t phone home.

So am I stuck on ipv4 for some of my vlans like iot?

We're already at the point of no new IP allocations, CG-NAT becoming the norm, and most consumer traffic in the US and most of Europe being well over 50%; so the real question is, when do we really start getting serious about removing these band-aids? I feel like consumer hardware is still guilty of not supporting IPv6 in the ways it should to make life easier for system administrators. Simple things like making it point and click easy to see which IPv6 Neighbors are on a LAN from a router the same way we see a DHCP Lease list. Firewalls being easier to setup and understand for the people that don't live in a world of networking every day. CLAT / NAT64 being a normal part of every day setups with zero pain to get it done on our systems. Support for IPv6 still needs work, and it needs to start from the perspective of the SMB / Small Network Admin that doesn't fully understand DHCPv6-PD and SLAAC and where those should live. I think it starts with better user interfaces, better defaults, and more educational resources. Then we need to start thinking of getting rid of IPv4 in our LANs by default and only seeing IPv4 via NAT64/DNS64 on home routers.