On Thu, Jul 29, 2021 at 10:10 PM Irshad <onlineirsh...@icloud.com> wrote:
>                         I have following setup at home ,I am sharing internet 
> with neighbour , our ISP provides IPV6
> With 2001:16a2:cdd2:xx00::/56 prefix delegation , until now I was only using 
> IPv4 NAT with following setup
>
> ISP-Router————OPENBSD/PF————VLAN10—openWRT—------------Macbook
>         |                                                        
> ____VLAN20__openWRT____ ____ some Devices
>         |
>         |
> Neighbour Access Point
>
> Recently I tried to enable IPv6 in openbsd
> i can ping6 google.com from openbsd firewall itself
> but i cannot route ipv6 traffic from LAN side devices
> i can get ipv6 address assigned to my LAN devices
>
> ps:isp provides only dynamic ip's not static
>
> /etc/hostname.iwn0
> inet6 autoconf -soii -temporary
> inet 192.168.100.177 255.255.255.0
>
> Ifconfig iwn0
> inet 192.168.100.177 netmask 0xffffff00 broadcast 192.168.100.255
> inet6 2001:16a2:cdd2:xx00:xxx:faff:fe92:c7c6 prefixlen 64 autoconf pltime 
> 86081 vltime 86081
>
> This is connecting to ISP Router with ipv4 LAN side ip
>
> And NAT with pf firewall
>
> vlan10
> /etc/hostname.vlan10
> 192.168.10.1/24 192.168.10.255 parent em0 vnetid 10
> inet6 autoconf
>
> ifconfig vlan10
> inet 192.168.10.1 netmask 0xffffff00 broadcast 192.168.10.255
> inet6 fe80::5e26:aff:fe0e:d6ea%vlan10 prefixlen 64 scopeid 0x8
>
> ip forwarding for ipv6
> sysctl net.inet6.ip6.forwarding=1
>
>  rad.conf(5)
> interface vlan10 {
> prefix 2001:16a2:cdd2:xx01::/64
> }
>
> openbsd  netstat -nr
> Destination                        Gateway                        Flags   
> Refs      Use   Mtu  Prio Iface
> default                            fe80::1%iwn0                   UGS        
> 0       90     -    12 iwn0
>
> macOS netstat -nr
> Internet6:
> Destination                             Gateway                         Flags 
>         Netif Expire
> default                                 fe80::5e26:aff:fe0e:d6ea%en0    UGcg  
>           en0
> 2001:16a2:cdd2:9500::/64                link#4                          UC    
>           en0
> 2001:16a2:cdd2:xx00:1c07:xxc4:1577:55e1 8:6d:41:de:6d:4a                UHL   
>           lo0

You might want to consider using dhcpcd, in ports, to help you with
the PD and doling out /64s to your networks.

Reply via email to