How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
For over a year i have been using m0n0wall for its IPv6 connectivity. It isn't perfect, as m0n0wall still has a lot of IPv6 functionality missing (e.g. traffic shaping). But it does have extraordinarily simple IPv6 Tunnel Broker setup.
Now pfSense 2.1 has been released, with (hopefully) more IPv6 support than m0n0wall. On the other hand, the setup of an IPv6 tunnel is extraordinarily complicated. Now that i've spent three hours trying to make it work, i can finally document my results. It is filled with a lot out confusing, non-obvious, out-of-order, duplicated setup. Furthermore, there are still bugs that can cause your configuration to become invalid; requiring you to delete everything and start over.
Having said all that, here's how you configure IPv6 Hurricane Electric Tunnel Broker in pfSense.
But first the confusing background
But before we can setup anything, we have to take a moment to realize something utterly confusing, non-obvious, non-intuitive:
i have two network cards in my router:
But IP (Internet Protocol) traffic does not go out my WAN
This means that pfSense creates another interface:
So my connection to the internet actually goes out this virtual interface. This becomes important, because only
In order to have IPv6 support, we will actually be creating a 4th interface; one that is dedicated to only IPv6 traffic:
Your Tunnel info
First we need your tunnel information from your TunnelBroker page:
This first section are addresses related to your tunnel connection to Hurricane Electric (addresses that will be assocated with your WAN interface and gateways). The second section is your "LAN" addresses.
Configuring pfSense 2.1 with a Hurricane Electric Tunnel Broker tunnel
Create A New Tunnel Interface
Create a new IPv6 interface
Now that we've created a tunnel, we are going to create a separate IPv6-only interface that will send traffic out that tunnel.
This was recently discussed on both the NANOG and pfSense Mailing lists, and it intrigued me, as I've been wanting to do the same for some time. In the list discussions, someone posted this set of instructions. I haven't tried them myself yet, but they look technically sound.
Also look at https://rcs.pfsense.org/projects/pfsense/repos/pfSense-smos to integrate into the GUI
The IPv6 board on the forum has all the info. http://forum.pfsense.org/index.php/board,52.0.html