Re: Openbsd pf firewall ipv6 routing

On Thu, Jul 29, 2021 at 10:10 PM Irshad <onlineirshad1@icloud.com> wrote:
> I have following setup at home ,I am sharing internet with neighbour , our ISP provides IPV6
> With 2001:16a2:cdd2:xx00::/56 prefix delegation , until now I was only using IPv4 NAT with following setup
>
> ISP-Router————OPENBSD/PF————VLAN10—openWRT—------------Macbook
> | ____VLAN20__openWRT____ ____ some Devices
> |
> |
> Neighbour Access Point
>
> Recently I tried to enable IPv6 in openbsd
> i can ping6 google.com from openbsd firewall itself
> but i cannot route ipv6 traffic from LAN side devices
> i can get ipv6 address assigned to my LAN devices
>
> ps:isp provides only dynamic ip's not static
>
> /etc/hostname.iwn0
> inet6 autoconf -soii -temporary
> inet 192.168.100.177 255.255.255.0
>
> Ifconfig iwn0
> inet 192.168.100.177 netmask 0xffffff00 broadcast 192.168.100.255
> inet6 2001:16a2:cdd2:xx00:xxx:faff:fe92:c7c6 prefixlen 64 autoconf pltime 86081 vltime 86081
>
> This is connecting to ISP Router with ipv4 LAN side ip
>
> And NAT with pf firewall
>
> vlan10
> /etc/hostname.vlan10
> 192.168.10.1/24 192.168.10.255 parent em0 vnetid 10
> inet6 autoconf
>
> ifconfig vlan10
> inet 192.168.10.1 netmask 0xffffff00 broadcast 192.168.10.255
> inet6 fe80::5e26:aff:fe0e:d6ea%vlan10 prefixlen 64 scopeid 0x8
>
> ip forwarding for ipv6
> sysctl net.inet6.ip6.forwarding=1
>
> rad.conf(5)
> interface vlan10 {
> prefix 2001:16a2:cdd2:xx01::/64
> }
>
> openbsd netstat -nr
> Destination Gateway Flags Refs Use Mtu Prio Iface
> default fe80::1%iwn0 UGS 0 90 - 12 iwn0
>
> macOS netstat -nr
> Internet6:
> Destination Gateway Flags Netif Expire
> default fe80::5e26:aff:fe0e:d6ea%en0 UGcg en0
> 2001:16a2:cdd2:9500::/64 link#4 UC en0
> 2001:16a2:cdd2:xx00:1c07:xxc4:1577:55e1 8:6d:41:de:6d:4a UHL lo0

You might want to consider using dhcpcd, in ports, to help you with
the PD and doling out /64s to your networks.