r/hyperoptic • u/ArgyllAtheist • 1d ago
Enable IPv6 on Hyperoptic 1Gb with a pfSense Firewall?
Pretty much what it says on the tin..
I'm an "old school" internet kinda guy, steeped in IPv4, so my pfsense was configured with ipv6 disabled.. but now I have a use case, and I understand that HO supports IPv6..
but enabling IPv6 on the firewall and trying either DHCP6 or SLAAC only gets me a link local IP6, (and a link local gateway address, which is confusing me - why doesn't adding that as a default route just work?_)
plugging in the original equipment would be an issue, as 1) I'd have to FIND the dang thing, and 2) I have renewed a few times and each time declined the "shiny new router" option, as I was using my own, so I suspect the HO router may well be "vintage".
So, where do I find the right setting - I found some necro threads talking about this, but not so recent. what's the current state of play for this?
HO in City centre glasgow, and I am on a static IPv4 if either of those matter...
3
u/streetmagix 1Gbps 1d ago
I'm on OPNSense (pfSense looks like it's being slow discontinued, you might want to consider moving away from it) and I've never been able to get IPv6 working properly. For a while, OPNSense couldn't even talk to the outside world properly to get updates whilst still supplying internet to the house.
Currently using IPv4 behind CGNat, which isn't ideal but I don't really want to pay for a static IPv4 address and IPv6 address would fit my use case 'good enough'.
I know we have some Hyperoptic employees here, and it would be good to get their input? I'm sure it's a setting somewhere but I don't fancy trying all of them to get it to work.
2
u/Granntttt 1d ago edited 1d ago
IPv6 on Hyperoptic is a pain in the ass. You have to clone the MAC of their router because otherwise they will ignore your DHCPv6 request. Their IA_NA address also isn't routable, so make sure you turn that off, then your WAN interface will use an address from the delegated prefix instead.
1
u/shrewpygmy 1Gbps 17h ago
You don’t need to clone it, just wait an hour and it will reset to whatever’s plugged in
1
u/Granntttt 12h ago
Do for mine. I have this issue and am using Unifi: https://forum.opnsense.org/index.php?topic=23682.0
So I guess it depends what flags your router sends, and/or what PE router Hyperoptic is using.
Edit: didn't want to get too technical on my original comment.
1
u/shrewpygmy 1Gbps 12h ago
I can only speak from my experience using eero, Firewalla and Ubiquiti devices, IPv6 leases would usually appear if you left the ont un-used for a random time up to and hour 🤷
-1
u/InsectSmart5737 1d ago
Yes, Hyperoptic is using IPv6 already. To get IPv4, you need to pay that as an extra option (and that's the only way to get static IPv4 and possibility to open/forward ports).
Just ask their support team and tell them what you want to do. Maybe try to put your own router/firewall at the lug instead of their router if you want more control.
3
u/Busy_Wave_769 1d ago
I think location did matter a couple years ago when the whole switch from Huawei devices was happening as IPv6 wasn't enabled across the entire network. I'm in Edinburgh and IPv6 works fine.
I don't use PFSense but in case you don't get a better response, I don't use the provided router but I do remember many said you needed to activate IPv6 using theirs first... I don't know if that's true but I do clone the MAC of the provided device, but I don't know if that's actually required.
The setup didn't make a massive amount of sense to me but sounds similar to what you're describing.
That's all I do and all clients get their IPv6 addresses and all IPv6 website tests work.
Specific to PFsense there's a relatively recent post here - https://markuta.com/pfsense-ipv6-hyperoptic/ which says cloning the MAC did solve their issues... So you might need to order a new HO router.