u/Proof_Bodybuilder740

Hello everyone,

I'm currently trying to get multihoming without BGP on OPNsense to work. Uplink A has a /56 delegation that I use to provide GUAs for each device. Uplink B is using the cellular network and receives a /128 GUA and a /128 ULA. If uplink A goes down I want to route the traffic with NAT over uplink B. None of the IPv6 addresses are static.

I've been setting it up and it works if I specify the /128 GUA as a translation address. If I just specify the interface address it will unfortunately translate to the ULA and not work. Is there a way to fix this without scripting?

Looking forward to your responses!

Hello everyone,

I'm currently trying to get multihoming without BGP on OPNsense to work. Uplink A has a /56 delegation that I use to provide GUAs for each device. Uplink B is using the cellular network and receives a /128 GUA and a /128 ULA. If uplink A goes down I want to route the traffic with NAT over uplink B. None of the IPv6 addresses are static.

I've been setting it up and it works if I specify the /128 GUA as a translation address. If I just specify the interface address it will unfortunately translate to the ULA and not work. Is there a way to fix this without scripting?

Looking forward to your responses!

Hello everyone, I'm currently a bit stuck when it comes to configuring NPTv6 in OPNsense. My ISP is not giving me a stable IPv6 prefix which causes all devices to fall back to only their ULA if the uplink fails. As IPv4 takes precedence in this case I've been considering using a GUA for internal purposes and using NPTv6 to map it to the current prefix.

So I set the interface to 'identity association' (for the dynamic prefix), create a virtual IP of the GUA (static prefix) and create an NPTv6 rule that maps the internal prefix (static prefix) to the associated interface. For whatever reason this doesn't work though. Weirdly enough it works when I directly specify the external prefix as the one that's currently assigned to the interface and don't use the associated interface option.

But that pretty much voids the entire advantage it gives me. Is this a bug or am I missing something?

Hello everyone, I'm currently a bit stuck when it comes to configuring NPTv6. My ISP is not giving me a stable IPv6 prefix which causes all devices to fall back to only their ULA if the uplink fails. As IPv4 takes precedence in this case I've been considering using a GUA for internal purposes and using NPTv6 to map it to the current prefix.

So I set the interface to 'identity association' (for the dynamic prefix), create a virtual IP of the GUA (static prefix) and create an NPTv6 rule that maps the internal prefix (static prefix) to the associated interface. For whatever reason this doesn't work though. Weirdly enough it works when I directly specify the external prefix as the one that's currently assigned to the interface and don't use the associated interface option.

But that pretty much voids the entire advantage it gives me. Is this a bug or am I missing something?