IPv6 and FreeNAS

[George51]

Sure I am being dense, and missing something stupid. And a good time to caveat I am only just getting used to IPv6 - my knowledge is extremely limited.

Trying to get IPv6 working on my network, have (I believe) set it up correctly on my pfSense box. On my other devices I can connect to and ping ipv6 only websites - for example ipv6.google.com

On FreeNAS however, I have enabled IPv6 autoconfigure on the primary interface, I see on the dashboard that it is picking up IPv6 default routes etc, however it is only showing the IPv4 address. Not a drama, maybe it doesn't display both.
However from shell when I ping ipv6.google.com it does not work I get:

Code:

ping: cannot resolve ipv6.google.com: Unknown server error

Some googling led me to believe I needed a IPv6 capable nameserver.

I've currently got

192.168.1.1 (my pfsense box)
8.8.8.8

I've tried adding a variety of what I think may be appropriate as my third: IE the pfsense link local address, or its full ipv6 address, neither seem to make a difference.

 

[scrappy]

Are you using ping6 command to ping ipv6 addresses?

 

[scrappy]

I've currently got

192.168.1.1 (my pfsense box)
8.8.8.8

Those are IPv4 DNS addresses.

For Google's IPv6 DNS servers you can use the following:

• 2001:4860:4860::8888
• 2001:4860:4860::8844

You could also try Quad9's DNS with the following:

• Secure IPv6 Primary: 2620:fe::fe Blocklist, DNSSEC, No EDNS Client-Subnet
• Secure IPv6 Secondary: 2620:fe::9 Blocklist, DNSSEC, No EDNS Client-Subnet
• Unsecured IPv6 Primary: 2620:fe::10 No blocklist, no DNSSEC,No EDNS Client-Subnet
• Unsecured IPv6 Secondary: 2620:fe::fe:10 No blocklist, no DNSSEC,No EDNS Client-Subnet

 

[George51]

Are you using ping6 command to ping ipv6 addresses?

I knew it would be me thick. Thank you, now the ping works and I can get a reply form ipv6.google which proves IPv6 is working on my box, now to progress onto setting it up in my jails too.

Those are IPv4 DNS addresses.

For Google's IPv6 DNS servers you can use the following:

• 2001:4860:4860::8888
• 2001:4860:4860::8844

You could also try Quad9's DNS with the following:

• Secure IPv6 Primary: 2620:fe::fe Blocklist, DNSSEC, No EDNS Client-Subnet
• Secure IPv6 Secondary: 2620:fe::9 Blocklist, DNSSEC, No EDNS Client-Subnet
• Unsecured IPv6 Primary: 2620:fe::10 No blocklist, no DNSSEC,No EDNS Client-Subnet
• Unsecured IPv6 Secondary: 2620:fe::fe:10 No blocklist, no DNSSEC,No EDNS Client-Subnet

I prefer using my pfSense box as a DNS Resolver, so I will be removing googles 8.8.8.8, I was also under the impression that if you had a dual stack, an IPv4 address would work for both - I don't know why or were I got this assumption from. And after you first reply, when I tried the ping6 I only had the 2 original IPv4 DNS servers in.

EDIT: Quick further question: why does the widget for the Primary NIC on the dashboard only display the IPv4 address? Is that normal?

 

[scrappy]

Quick further question: why does the widget for the Primary NIC on the dashboard only display the IPv4 address? Is that normal?

I don't know if it's normal or not, but my system doesn't show an IPv6 address either.

I prefer using my pfSense box as a DNS Resolver

I have a similar setup with pfSense and would agree that using Unbound as a resolver is your best option.