Sunday, December 23, 2018

Subnetting a IPv6 /48 across multiple VLANs?

(x-post from pfsense as it's more general networking)

My ISP doesn't provide dual-stack IPv6.

Hence, I created a Hurricane Tunnelbroker IPv6 tunnel, and added it to my pfSense router (Netgate SG-3100) using this guide:

http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf

Most things work, I got the dancing Kame turtle etc. Only issue was some sites had higher latency - but I think this is due to the way HE routes traffic from me here in Australia, to the US etc.

I then found out that our ISP can provide a IPv6 tunnel (which I suspect goes over Hurricane anyhow), however, they only provide a single routed /64 - not a /48.

According to this answer on ServerFault, subnetting a IPv6 /64 is not recommended, and will break many things.

Currently, I have pfSense configured with IPv6 RA using the /64 from Hurricane - I've been told I should be using the /48 instead - which I will change it to.

However, how do I take the /48 from HE (2600:70ff:c097::/48), and allocate part of it to each VLAN in pfSense?

https://i.imgur.com/Pph5krs.png

https://i.imgur.com/ZeCwICR.png

Any other advice on the proper way to do this?



No comments:

Post a Comment