Differences

This shows you the differences between two versions of the page.

--- pfsense:network:disable_ipv6 [2023/04/21 22:40] – created peter
+++ pfsense:network:disable_ipv6 [2023/04/22 11:48] (current) – peter
@@ Line 1: / Line 1: @@
 ====== PFSense - Network - Disable IPv6 ======
-  * System --> Advanced --> Networking
+If IPv6 is not needed, then optionally disable it to simplify network management.
-    * Allow IPv6: **Not checked**.
-    * Prefer IPv4 over IPv6: **Checked**.
-  * Services --> DHCPv6 Relay: **Not Checked**.
+----
-  * Disable IPv6 on each of the interfaces (this will need to be re-run at the end of the tutorial for additional interfaces......)
-    * Interfaces --> WAN (pppoe0) --> General Configuration --> IPv6 Configuration Type: **None**.
-    * Interfaces --> LAN (em1) --> General Configuration --> IPv6 Configuration Type: **None**.
-    * Repeat for all other interfaces that this applies to.
-  * System --> Routing --> Gateways --> Default gateway IPv6: **None**.
+===== Networking =====
-  * Firewall rules to block IPv6
+Navigate to **System -> Advanced -> Networking**:
-    * You probably don’t need this as well but I also create firewall rules to block IPv6 so I can tell if something is not working or gets misconfigured.
-    * Firewall --> Rules --> LAN --> Rules --> Default allow LAN IPv6 to any rule: **Disable**. (but do not delete as you might want it for experimenting with later).
+  * Allow IPv6: **Not checked**.
+  * Prefer IPv4 over IPv6: **Checked**.
+<WRAP info>
+**NOTE:**  This sets up some firewall rules behind the scenes, but it does not stop pfSense from generating IPv6 traffic.
+</WRAP>
+----
+===== DHCPv6 Relay =====
+Navigate to **Services -> DHCPv6 Relay**:
+In **DHCP6 Relay Configuration**:
+  * Enable:  **Not Checked**.
+  * Click **Save** and apply.
+----
+===== Interfaces =====
+Disable IPv6 on each of the interfaces:
+==== WAN ====
+Navigate to **Interfaces -> WAN (pppoe0)**.
+In **General Configuration**:
+  * IPv6 Configuration Type: **None**.
+==== LAN ====
+Navigate to **Interfaces -> LAN (em1)**.
+In **General Configuration**:
+  * IPv6 Configuration Type: **None**.
+==== OTHER INTERFACES ====
+  * Repeat above instructions for all other interfaces that this applies to.
+----
+===== Gateways =====
+Navigate to **System -> Routing -> Gateways**.
+In **Default Gateway**:
+  * Default gateway IPv6: **None**.
+  * Click **Save** and apply.
+----
+===== Firewall Rules =====
+Firewall rules to block IPv6.
+<WRAP info>
+**NOTE:**  This is not necessarily needed, but a precaution if something is not working or gets misconfigured.
+</WRAP>
+Navigate to **Firewall -> Rules -> LAN**.
+    * Default allow LAN IPv6 to any rule: **Disable**.
+<WRAP info>
+**NOTE:**  Do not delete the IPv6 rule, as this may be wanted later, and easier then to just enable.
+</WRAP>