Welcome Guest ( Log In | Register )

5 Pages < 1 2 3 4 > » Bottom

Outline · [ Standard ] · Linear+

 [Guide] OPNsense Unifi setup with ipv6

views
     
Gaara92
post Nov 5 2021, 08:10 PM

Herald
****
Junior Member
612 posts

Joined: Mar 2008


QUOTE(erict68 @ Nov 5 2021, 06:48 PM)
I bought from taobao, here is the link https://detail.tmall.com/item.htm?id=612335...d=4736682625948
More products on their main page: https://cnction.tmall.com/index.htm?spm=a22....553b640aDHONHI
I'm using 3rd party forwarder to get it shipped to here.
*
oh well i don't understand chinese haha. I need to login to access the link you provided
TSpapyrous
post Nov 6 2021, 11:47 AM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
QUOTE(Gaara92 @ Nov 5 2021, 04:06 PM)
where can i buy it? i am lazy to find a mini pc then have to buy another pcie network card for additional ports. prefer one come with the ready made additional ports
*
can look at Yanling brand as well from AliExpress.
https://m.aliexpress.com/store/v3/home.html...ePath=index.htm

OEM brand for Protectli
erict68
post Nov 8 2021, 09:00 PM

Getting Started
**
Junior Member
85 posts

Joined: Oct 2004


Special thanks to papyrous as sharing the ipv6 configuration for opnsense, tested working with maxis fibre with new box
Anime4000
post Nov 12 2021, 09:54 PM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null


I use IPv6 to put some hexspeak:

CODE

IPv6 Address. . . . . . . . . . . : 2001:d08:e6:7a1b:dead:daff:fee1:b00b(Preferred)


Attached Image
Attached Image
Attached Image

My /64:
CODE
::dead:daff:fee1:b00b


My Server Address: [2001:d08:e6:7a1b:dead:daff:feed:f00d]:8080

This post has been edited by Anime4000: Nov 12 2021, 09:55 PM
TSpapyrous
post Nov 13 2021, 06:03 PM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
QUOTE(Anime4000 @ Nov 12 2021, 09:54 PM)
I use IPv6 to put some hexspeak:

CODE

IPv6 Address. . . . . . . . . . . : 2001:d08:e6:7a1b:dead:daff:fee1:b00b(Preferred)


Attached Image
Attached Image
Attached Image

My /64:
CODE
::dead:daff:fee1:b00b


My Server Address: [2001:d08:e6:7a1b:dead:daff:feed:f00d]:8080
*
noice. man of culture

This post has been edited by papyrous: Nov 13 2021, 06:50 PM
Gaara92
post Nov 13 2021, 10:04 PM

Herald
****
Junior Member
612 posts

Joined: Mar 2008


QUOTE(Anime4000 @ Nov 12 2021, 09:54 PM)
I use IPv6 to put some hexspeak:

CODE

IPv6 Address. . . . . . . . . . . : 2001:d08:e6:7a1b:dead:daff:fee1:b00b(Preferred)


Attached Image
Attached Image
Attached Image

My /64:
CODE
::dead:daff:fee1:b00b


My Server Address: [2001:d08:e6:7a1b:dead:daff:feed:f00d]:8080
*
rajin bos setup haha. Me myself just use EUI64 to configure for the interface
Anime4000
post Nov 14 2021, 04:54 PM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null


QUOTE(papyrous @ Nov 13 2021, 06:03 PM)
noice. man of culture
*
yeah, just to mess with sysadmin, tracker to show not regular user xD

QUOTE(Gaara92 @ Nov 13 2021, 10:04 PM)
rajin bos setup haha. Me myself just use EUI64 to configure for the interface
*
yes, I use EUI64 to make static IPv6
just get creative around ff:fe
Moogle Stiltzkin
post May 21 2022, 12:25 PM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
QUOTE(Anime4000 @ Oct 19 2021, 01:11 AM)
is like DHCP, either randomly generated or using EUI64 (MAC Address as IPv6 Address)

IPv6 has 2 type to hand out Address:
1. DHCPv6
2. NDP

DHCPv6 akin to IPv4 DHCP. Router are responsible to giving out address that you set.

NDP is different. Device ask router prefix and set own address either Randomly or EUI64.

EUI64 is Extended Unique Identifier, it using device MAC Address as IPv6 Address, good for Device Service like Printer & Server, NDP play well with EUI64, this way you can have Static IPv6

Plus, EUI64 + Link Local IPv6 will make your life easier, no matter what router/switch you choose or change, you still can connect without set anything.

I been using EUI64 + Link Local IPv6 on DBKL HP Printer, when they move other place, no need to configure even on new Router/Switch

EUI64 like Pendrive, Plug n Play.
*
sorry, a bit confused. i'm using pfsense fyi.

has the settings to enable ipv6 for tmnut unifi been updated from this article?
https://advanxer.com/blog/2015/03/configuri...on-pfsense/amp/


in the article they mention using dhcpv6, but comments here seem to allude that this is no longer the recommended setting? confused.gif


Anime4000
post May 21 2022, 06:17 PM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null


QUOTE(Moogle Stiltzkin @ May 21 2022, 12:25 PM)
sorry, a bit confused. i'm using pfsense fyi.

has the settings to enable ipv6 for tmnut unifi been updated from this article?
https://advanxer.com/blog/2015/03/configuri...on-pfsense/amp/
in the article they mention using dhcpv6, but comments here seem to allude that this is no longer the recommended setting?  confused.gif
*
IPv6 PPPoE has 2 type of Address

1. PPPoE Interface Address (/128)
This address is use for Router only

2. Prefix Address
This address for LAN use, it hand out address prefix (2001:a:b:c:smile.gif and prefix length (/64)

for PPPoE, must use DHCPv6 to obtain:
1. Interface Address
2. Address Prefix
3. Prefix Length

For LAN IPv6 distribution, use NDP

if you have /60 - /48 Prefix Length, then you can use DHCPv6 Server to hand out LAN IPv6, this way you can have extended or more subnet's
Moogle Stiltzkin
post May 22 2022, 12:17 PM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
hm.....

i sorta get what ur saying, but trying to translate that to how to configure pfsense to work with tmnut unifi ipv6 is a separate matter xd whether i managed to configure as u mentioned.

i mostly use this as a clue by the ts
https://forum.lowyat.net/topic/5204701

QUOTE
Go to [WAN] > ipv4 = PPPoE, ipv6 = DHCPv6. under PPPoE configuration, enter your Unifi username and password.
Scroll down under DHCPv6 client configuration, check > Use IPv4 connectivity

Go to [LAN] under IPv6 configuration type > Track Interface.
Track IPv6 interface > select WAN.
to use NDP, check [Allow manual adjustment of DHCPv6 and Router Advertisements]
then go to [Services] > Router Advertisements. select Stateless for Router Advertisements

May have to reboot system to bring DHCPv6 server up and running.

enjoy






as for the lan, all i could find was the dhcpv6 server RA, which i enabled.

Then i tested on mobile android, now ipv6 works whereas before it didn't.

I'm assuming this is the NDP you were talking about? cause thats the only option i could find in pfsense :{


from desktop, i get a 8/10 score here (the 2 parts it said had issue with was dns, and ICMP. for the dns portion, there is no dns hostname shown, not sure why hmm.gif )

https://ipv6-test.com/



and a perfect score here

https://ipv6test.google.com/
https://test-ipv6.com/

This post has been edited by Moogle Stiltzkin: May 22 2022, 12:21 PM
TSpapyrous
post May 23 2022, 10:07 AM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
QUOTE(Moogle Stiltzkin @ May 22 2022, 12:17 PM)
hm.....

i sorta get what ur saying, but trying to translate that to how to configure pfsense to work with tmnut unifi ipv6 is a separate matter xd whether i managed to configure as u mentioned.

i mostly use this as a clue by the ts
https://forum.lowyat.net/topic/5204701
as for the lan, all i could find was the dhcpv6 server RA, which i enabled.

Then i tested on mobile android, now ipv6 works whereas before it didn't.

I'm assuming this is the NDP you were talking about? cause thats the only option i could find in pfsense :{
from desktop, i get a 8/10 score here (the 2 parts it said had issue with was dns, and ICMP. for the dns portion, there is no dns hostname shown, not sure why  hmm.gif )

https://ipv6-test.com/
and a perfect score here

https://ipv6test.google.com/
https://test-ipv6.com/
*
Yes you are right, it should be under Router Advertisements.
using Stateless DHCP correct?

looking at netgate docs under DHCPv6/RA there’s a part about being unable to receive DNS info, can see if that helps solve it

Moogle Stiltzkin
post May 23 2022, 12:26 PM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
QUOTE(papyrous @ May 23 2022, 10:07 AM)
Yes you are right, it should be under Router Advertisements.
using Stateless DHCP correct?

looking at netgate docs under DHCPv6/RA there’s a part about being unable to receive DNS info, can see if that helps solve it
*
yes, u mentioned stateless so i set it to that in pfsense.

since ur using opnsense, so i then had to translate ur suggestion and make guesses what options these were in pfsense and adjust accordingly.

not sure about dns info but the internet works.

in ipv6 test i got a 8/10 rating in one of them. but in another site it was 10/10 no issues. google ipv6 also no issues. i also tested on mobile android and ipv6 seems to work from there (i noticed that mobiel android ipv6 only worked after i enabled the DHCPv6 RA. but if u don't, then seems only the desktop pc worked for ipv6 only hmm.gif )


TSpapyrous
post Jun 26 2022, 07:06 PM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
So funny thing happened, updated to 22.1.9 , rebooted and internet stopped working.
tried switching to another router and error shows.. PAP authentication error.
called TM to come and fixed it, password was changed and no problem running on that router.

switched back to Opnsense today because i’m running on Proxmox, updated and rebooted to run a new kernel, and Opnsense stopped working again.
showing PAP authentication error once again

TSpapyrous
post Jun 27 2022, 12:38 PM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
happened twice again, i suspect may be an issue with IPV6.

TM technician say on their side my username seems to freeze up. so unable to drop or connect.
nicholaswkc
post Jul 1 2022, 04:10 PM

Getting Started
**
Junior Member
71 posts

Joined: Dec 2021


Support OPNSense.
Moogle Stiltzkin
post Jul 10 2022, 12:32 PM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
QUOTE(papyrous @ Jun 27 2022, 12:38 PM)
happened twice again, i suspect may be an issue with IPV6.

TM technician say on their side my username seems to freeze up. so unable to drop or connect.
*
my internet also suddenly didn't work.

equipment and wiring all ok. rebooted everything still didn't work. modem showed no issues connecting ppoe, but log shows there is authentication issue.

so the technician just connected the default router and logged in fine.

after re-adding the cable back to pfsense, wan could connect fine.


so firstly excuse the layman talk, but i suspect the issue has something to do with how pfsense is communicating to unifi to login for internet access which somehow got stuck which resulted in no internet. so when using the default unifi router equipment to login, this somehow unstucked the login, which would explain why reconnecting the ethernet back to the pfsense router why wan could work fine now (because the account connection to unifi was unstuck).

i don't know the technical explanation for this, but this is what i discovered.

Theory #1, could be that my ip4/ip6 pppoe settings is done incorrectly which is why it resulted in this odd behaviour resulting in internet authentication failure. or the #2nd theory, could be some sort of bad stuff with tmnut end which results in this odd issue. thats all i could deduce from this hmm.gif but it's definitely not a hardware or wiring issue (in my case) cause i checked.


so no, i did not have to resort to resetting unifi password (fyi calling tmnut to reset the port didn't work, neither did restarting modem). just simply connecting to wan using the default unifi router, then replacing back the ethernet to the pfsense router (to connect to wan) seemed to fix the problem.


anyway i think u were spot on in regards to your comment


i'm not using opnsense, but my pfsense setting is roughly similar to yours hmm.gif if u figure out if the setting was done incorrectly somehow (which is causing this weird account froze/stuck behaviour, assuming the issue is on the pfsense/opnsense router settings side), i would love to know notworthy.gif

but for now, my temporary solution is to have the default router on standby to temporary login to wan to unstuck, then switch back to pfsense, if i encounter this issue again (thkfully this doesn't seem to occur very often afaik), before i bother calling up tmnut to look into it sweat.gif

This post has been edited by Moogle Stiltzkin: Jul 10 2022, 12:48 PM
TSpapyrous
post Jul 11 2022, 06:21 PM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
QUOTE(Moogle Stiltzkin @ Jul 10 2022, 12:32 PM)
my internet also suddenly didn't work.

equipment and wiring all ok. rebooted everything still didn't work. modem showed no issues connecting ppoe, but log shows there is authentication issue.

so the technician just connected the default router and logged in fine.

after re-adding the cable back to pfsense, wan could connect fine.
so firstly excuse the layman talk, but i suspect the issue has something to do with how pfsense is communicating to unifi to login for internet access which somehow got stuck which resulted in no internet. so when using the default unifi router equipment to login, this somehow unstucked the login, which would explain why reconnecting the ethernet back to the pfsense router why wan could work fine now (because the account connection to unifi was unstuck).

i don't know the technical explanation for this, but this is what i discovered.

Theory #1, could be that my ip4/ip6 pppoe settings is done incorrectly which is why it resulted in this odd behaviour resulting in internet authentication failure. or the #2nd theory, could be some sort of bad stuff with tmnut end which results in this odd issue. thats all i could deduce from this  hmm.gif but it's definitely not a hardware or wiring issue (in my case) cause i checked.
so no, i did not have to resort to resetting unifi password (fyi calling tmnut to reset the port didn't work, neither did restarting modem). just simply connecting to wan using the default unifi router, then replacing back the ethernet to the pfsense router (to connect to wan) seemed to fix the problem.
anyway i think u were spot on in regards to your comment
i'm not using opnsense, but my pfsense setting is roughly similar to yours  hmm.gif  if u figure out if the setting was done incorrectly somehow (which is causing this weird account froze/stuck behaviour, assuming the issue is on the pfsense/opnsense router settings side), i would love to know  notworthy.gif

but for now, my temporary solution is to have the default router on standby to temporary login to wan to unstuck, then switch back to pfsense, if i encounter this issue again (thkfully this doesn't seem to occur very often afaik), before i bother calling up tmnut to look into it  sweat.gif
*
lucky you. I tried using TMNut stock router no joy. still getting authentication error and had to call them. technician said if i face this error again to call TM and ask them to “release HSI”.
suspect IPv6 because i was messing around with turning IPv6 on/off.

did you update pfsense recently for this to happen?

Moogle Stiltzkin
post Jul 21 2022, 01:06 PM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
QUOTE(papyrous @ Jul 11 2022, 06:21 PM)
lucky you. I tried using TMNut stock router no joy. still getting authentication error and had to call them. technician said if i face this error again to call TM and ask them to “release HSI”.
suspect IPv6 because i was messing around with turning IPv6 on/off.

did you update pfsense recently for this to happen?
*
i''m not sure but i think ur right. i've used pfsense for years using ipv4 only, no issue. only recently i added the ipv6 based on your guide, but then i run into this issue where the unifi pppoe login gets stuck.

so the technician explained was, the pfsense router gets stuck for some reason (he doesn't elaborate why). So his solution was, use the stock unifi router and don't use back pfsense, if get stuck will void warranty (though that makes no sense if u don't tamper with their own equipment when switching back).

But his point was, the pfsense gets stuck, i suspect like u its something to do with ipv6.

i noticed when setting up the original stock unifi router, he asked to reset password. i think he did that to unstuck it (also based on what i read online. though he did not want to admit he had to do that to unstuck it).

i tried asking them what “release HSI” is, he claimed he don't know rolleyes.gif but i'll try that next time. did doing so fix your issue though?

is it possible to reset ur unifi password yourself? so don't have to call the technician over to do that? becauz seems like that would solve the issue if i encounter this next time hmm.gif


so anyway, i switch pfsense back to an older config where i used ipv4 only (no ipv6). This old setup worked fine for many years, so hopefully i won't encounter this stuck pppoe issue (which resulted in unable to relogin to pppoe again)

sweat.gif


hm i'm using the latest pfsense, no idea if that is the reason for the recent issues hmm.gif the only setting changed recently was just adding ipv6 to get that working, which is why i suspect that was the culprit.



QUOTE
I tried using TMNut stock router no joy


eh rely? i managed to get the stock tmnut router upon request the same day, didn't know this was hard to get hmm.gif had to pay for it though cauz warranty for old one expired sweat.gif i had an asus router i don't use but it's not using the stock firmware, so i could not use the unifi Isp requirements from the preselect list. So i'll have to reflash back to stock firmware, so i can use that as a backup for emergency to test the internet sweat.gif

This post has been edited by Moogle Stiltzkin: Jul 21 2022, 01:18 PM
TSpapyrous
post Jul 21 2022, 02:37 PM

Getting Started
**
Junior Member
214 posts

Joined: May 2017
QUOTE(Moogle Stiltzkin @ Jul 21 2022, 01:06 PM)
i''m not sure but i think ur right. i've used pfsense for years using ipv4 only, no issue. only recently i added the ipv6 based on your guide, but then i run into this issue where the unifi pppoe login gets stuck.

so the technician explained was, the pfsense router gets stuck for some reason (he doesn't elaborate why). So his solution was, use the stock unifi router and don't use back pfsense, if get stuck will void warranty (though that makes no sense if u don't tamper with their own equipment when switching back).

But his point was, the pfsense gets stuck, i suspect like u its something to do with ipv6.

i noticed when setting up the original stock unifi router, he asked to reset password. i think he did that to unstuck it (also based on what i read online. though he did not want to admit he had to do that to unstuck it).

i tried asking them what “release HSI” is, he claimed he don't know  rolleyes.gif  but i'll try that next time. did doing so fix your issue though?

is it possible to reset ur unifi password yourself? so don't have to call the technician over to do that? becauz seems like that would solve the issue if i encounter this next time  hmm.gif
so anyway, i switch pfsense back to an older config where i used ipv4 only (no ipv6). This old setup worked fine for many years, so hopefully i won't encounter this stuck pppoe issue (which resulted in unable to relogin to pppoe again)

sweat.gif
hm i'm using the latest pfsense, no idea if that is the reason for the recent issues  hmm.gif  the only setting changed recently was just adding ipv6 to get that working, which is why i suspect that was the culprit.
eh rely? i managed to get the stock tmnut router upon request the same day, didn't know this was hard to get  hmm.gif  had to pay for it though cauz warranty for old one expired  sweat.gif  i had an asus router i don't use but it's not using the stock firmware, so i could not use the unifi Isp requirements from the preselect list. So i'll have to reflash back to stock firmware, so i can use that as a backup for emergency to test the internet  sweat.gif
*
I have been using Opnsense IPv4/IPv6 for almost a year without issues actually. just the recent 22.1.9 update and reboot then start to have this issue.

I don’t think it is possible to reset Unifi password yourself.
the last time i tried talking to customer service to reset password, they say will send sms of new password. didn’t get it at all then technician came the next day to solve it, so I’m not sure if it can solve the issue, logically yes.

So mine got stuck 3 times, first time they change password.
then 2nd and 3rd time technician just make a phone call to solve it and he didn’t even have to come, no password change too

you mean you request new router from TM?
l thought you meant use the one given by TM in the beginning, mine still in good condition since the beginning of contract so just took it out to try.

Moogle Stiltzkin
post Jul 22 2022, 04:00 AM

Look at all my stars!!
*******
Senior Member
4,451 posts

Joined: Jan 2003
QUOTE(papyrous @ Jul 21 2022, 02:37 PM)
I have been using Opnsense IPv4/IPv6 for almost a year without issues actually. just the recent 22.1.9 update and reboot then start to have this issue.


i use the regular pfsense 1 year + but only using ipv4 without issue. only recently when added ipv6 then i started having this freeze issue at least once a month or 2-3 month roughly, when before i never had this issue


QUOTE(papyrous @ Jul 21 2022, 02:37 PM)
I don’t think it is possible to reset Unifi password yourself.
the last time i tried talking to customer service to reset password, they say will send sms of new password. didn’t get it at all then technician came the next day to solve it, so I’m not sure if it can solve the issue, logically yes.

So mine got stuck 3 times, first time they change password.
then 2nd and 3rd time technician just make a phone call to solve it and he didn’t even have to come, no password change too


o like this? well hopefully customer support will be enuff. i rather not call the technician over. is it true there is such warranty if u use ur own networking gear like router? technician claim should i decide to use my own router like the pfsense, if it resulted in tmnut account getting stuck/frozen again, then he claims warranty expire. But how does that work? it's not like i am flashing third party firmware onto the default tmnut router which i am not using. i keep the default router so i can use that to relogin because it should work, because by their logic, at that point i am using their own gear/setup so it should connect to the internet, so then they can't blame pfsense for why i cannot connect sweat.gif .

But he claims that for whatever reason, pfsense is causing the account login to get stuck (this part we can at least agree), there is no opinion why or any effort to troubleshoot this apparently (although i saw to fix this issue, he had to reset the tmnut password for isp rolleyes.gif ) This part we disagree, because since the issue seems to be on their end why my isp relogin seems to get stuck for whatever reason, they can't just simply deny to solve this issue (i assume password reset or whatever it is like they did for u but didn't what exactly?) under the basis u decide to connect using pfsense that gets it stuck yet again, can they? hmm.gif

i alrdy switch config to an old working one which only connects to ipv4 (but no ipv6), so hope i won't get this issue again, but i can't be completely certain until i've tested this for a while sweat.gif


QUOTE(papyrous @ Jul 21 2022, 02:37 PM)
you mean you request new router from TM?
l thought you meant use the one given by TM in the beginning, mine still in good condition since the beginning of contract so just took it out to try.
*
mine got lost ages ago. had to pay to get issued a new one sweat.gif

This post has been edited by Moogle Stiltzkin: Jul 22 2022, 04:09 AM

5 Pages < 1 2 3 4 > » Top
 

Change to:
| Lo-Fi Version
0.0270sec    0.41    6 queries    GZIP Disabled
Time is now: 25th November 2025 - 07:38 PM