A basic guide for configuring IPv6 on PFSense (2.7.2) with Aquiss (should probably also work for OPNsense).
A special thanks to our customer, James Wolf, who has created this guide.
Enabling IPv6 GloballySystem -> Advanced -> Networking
Configuring the WAN Interfaces -> WAN
Configuring the LAN Interfaces -> LAN![bde5429fa6fbe11730b1cec9bb739199a0125cd0?t=d46f43597e419246166524b04e78de1b](https://support.aquiss.net/en/download/bde5429fa6fbe11730b1cec9bb739199a0125cd0?t=d46f43597e419246166524b04e78de1b)
Choose an address from within your allocation, configure a/64
Now make sure other devices on your network can configure v6 addresses - In this example, we use SLAAC (Router Mode Unmanaged)
Services -> Router Advertisement
![3249caf2daa3c508312f9893e0686796fedc2115?t=a427faf42b6ef4a049e768fd42054c85](https://support.aquiss.net/en/download/3249caf2daa3c508312f9893e0686796fedc2115?t=a427faf42b6ef4a049e768fd42054c85)
Configuring your firewall NB: how open or restrictive you configure the rules here is entirely up to you - I will only mention one rule that is required for stable operation - the rest is up to you..
Firewall -> Rules -> WAN The rule could do with some fine-tuning to be more restrictive and only allow specific DHCP traffic, but
without it, you may find that your ipv6 connectivity is unstable (keeps dropping) as the dhcp conversation may be blocked.
![b3d9ca253c3d86dfcd67d194b5f9f384dcf79092?t=1938a5598b266e0e603cef5132a2eb8e](https://support.aquiss.net/en/download/b3d9ca253c3d86dfcd67d194b5f9f384dcf79092?t=1938a5598b266e0e603cef5132a2eb8e)
You should now have a fully operational IPV6
configuration and be able to connect to services over v6 rather than v4.
Diagnostics and Checks![2895308397aea3049c38389680b2730bab095e75?t=9b293677ef9c7062572c1a6008134077](https://support.aquiss.net/en/download/2895308397aea3049c38389680b2730bab095e75?t=9b293677ef9c7062572c1a6008134077)
Your status should look something like this
![06b7432c8991f3f5f3e6eaf961167657f4837bbe?t=459cbe7308b6524a4abdfeee84d7fef0](https://support.aquiss.net/en/download/06b7432c8991f3f5f3e6eaf961167657f4837bbe?t=459cbe7308b6524a4abdfeee84d7fef0)
You can ignore the fact that the WAN interface has a link-local address(fe80::) configured - this is 100% normal in the v6 world