Configure as below using the GUI.
Enable IPv6 in pfSense®:
- Click "System" then "Advanced"
- Click the "Networking" tab
- Tick the "Allow IPv6" option
- Click "Save" at the bottom
Firstly your WAN interface:
- Select "Interfaces"
- Select your "WAN" interface
- In the "General Configuration" section, set "IPv6 Configuration Type" as "DHCP6"
- In the "DHCP6 Client Configuration" section, set the following...
- Options -> Advanced Configuration: untick
- Use IPv4 connectivity as parent interface: tick
- Request only an IPv6 prefix: tick
- DHCPv6 Prefix Delegation size: 56
- Send IPv6 prefix hint: tick
- Debug: untick
- Do not wait for a RA: untick
- Do not allow PD/Address release: untick
- Click "Save"
Secondly, the LAN interface:
- Select "Interfaces"
- Select your "WAN" interface
- In the "General Configuration" section, set "IPv6 Configuration Type" as "Track Interface"
- In the "Track IPv6 Interface" which will have just appeared:
- Set "IPv6 Interface" as "WAN"
- "IPv6 Prefix ID" as "0"
- Click "Save"
Allow pfSense to reload the interfaces and you're done.
According to RFC 4890 you should always allow the following ICMP types:
- Destination Unreachable
- Packet Too BIg
- Time Exceeded
- Parameter Problem
...and optionally...
- Echo Request & Echo Response
Validate your configuration at http://test-ipv6.com/ and/or http://ipv6-test.com/
Note: IPv6 is now available on all ADSL2 and all Internode NBN products.
Disclaimer: We have no affiliation with Internode. The above is provided without warranty.
Disclosure
We are dealers for both Exetel (Dealer BA1372) and TPG (Dealer NAUAAH).
By using the above links or codes when signing up, we get a tiny commission and as your dealer can assist you with configuration problems etc.
If you need something faster, we can also provide recommendations for faster and higher SLA services available in your area.
I also had to uncheck the “Block bogon networks” option on the WAN interface.