# OPNsense + openWRT 开启ipv6访问设置

**URL:** https://eijil.com/t/opnsense-openwrt-ipv6/391
**Category:** 其它
**Created:** [October 6, 2022, 4:33pm UTC](https://eijil.com/t/opnsense-openwrt-ipv6/391 "2022-10-06T16:33:01Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Tristan](https://eijil.com/user_avatar/eijil.com/tristan/32/986_2.png) [@Tristan](https://eijil.com/u/Tristan)
#### Post date: [October 6, 2022, 4:33pm UTC](https://eijil.com/t/opnsense-openwrt-ipv6/391/1 "2022-10-06T16:33:01Z")

</div>

**opnsense** 作为 **主路由** ， **opnwrt** 作为透明网关（ **旁路由** ）的情况下：

1. opensense 中 interfaces → WAN → **IPv6** Configuration Type 选择为 **DHCPv6** 。下面勾选 Send IPv6 prefix hint 和 Use IPv4 connectivity。

2. opensense 中 interfaces → LAN → IPv6 Configuration Type 选择 **Track Interface** 。下面IPv6 Interface选择 **WAN** 。

3. openwrt中，网络-DHCP/DNS-高级设置，取消勾选 禁止解析 IPv6 DNS 记录，openwrt重启后，记得重新取消勾选，这玩意儿是默认强制勾选的。(万恶的openwrt!)

opnsense会在wan口上自动创建所有设备分配ipv6地址的防火墙规则。如下，wan口放行RS和RA。

 ![1](https://eijil.com/uploads/default/original/2X/8/86889f7550fb2b7f57de49f88b5bb51543524e05.jpeg)

上面个的规则，防火墙仅仅开启了udp，所以在外网是无法ping到内网的ipv6地址的。这也是很多测试ipv6网站提示配置有错误的原因。

如果直接使用openwrt的话，默认情况下外网是可以ping到内网ipv6任何地址的。

也因为如此，不得不让opnsense当成了主路由。

---

<div class="post-metadata">

### Author: ![Tristan](https://eijil.com/user_avatar/eijil.com/tristan/32/986_2.png) [@Tristan](https://eijil.com/u/Tristan)
#### Post date: [October 17, 2022, 12:40pm UTC](https://eijil.com/t/opnsense-openwrt-ipv6/391/2 "2022-10-17T12:40:42Z")

</div>

[opnsense-beginner-professional.pdf](https://eijil.com/uploads/short-url/kioQaz2ntwxImft6024xLMEinlV.pdf) (17.0 MB)

---

<div class="post-metadata">

### Author: ![Tristan](https://eijil.com/user_avatar/eijil.com/tristan/32/986_2.png) [@Tristan](https://eijil.com/u/Tristan)
#### Post date: [October 18, 2022, 9:49am UTC](https://eijil.com/t/opnsense-openwrt-ipv6/391/3 "2022-10-18T09:49:22Z")

</div>

[Rick Graziani - IPv6 Fundamentals\_ A Straightforward Approach to Understanding IPv6-Cisco Press (2017).pdf](https://eijil.com/uploads/short-url/yhdY9VOiSSifdb4Gt80NVq0SdOL.pdf) (14.5 MB)

---

<div class="post-metadata">

### Author: ![Tristan](https://eijil.com/user_avatar/eijil.com/tristan/32/986_2.png) [@Tristan](https://eijil.com/u/Tristan)
#### Post date: [April 18, 2023, 12:39pm UTC](https://eijil.com/t/opnsense-openwrt-ipv6/391/4 "2023-04-18T12:39:34Z")

</div>

> **[How to Configure IPv6 in Your Home Network with ISP such as Comcast Xfinity](https://homenetworkguy.com/how-to/configure-ipv6-opnsense-with-isp-such-as-comcast-xfinity/)**
>
> Going beyond the basics of home networking

这篇文章可以看看