Difficulty with IPv6 Configuration

[nornic]

Hello everyone,

I am having some issues with the network configuration of my Proxmox host, particularly with IPv6 setup. My provider has assigned me a /48 subnet, which is routed to the link-local address of the Proxmox host.

Here is what I am trying to achieve:

• The Proxmox host should receive an IPv6 address.
• I have a pfSense VM that should receive its own IPv6 address.
• This pfSense VM should manage a LAN with a /64 subnet.

My current /etc/network/interfaces file is configured as follows:

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet static
        address [my_public_ipv4]/25
        gateway [gateway_ipv4]
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up echo 1 > /proc/sys/net/ipv4/conf/eno1/proxy_arp

iface eno1 inet6 static
        address [my/48]::1/48
        gateway fe80::1
        up ip -6 route add [my/48]::/64 via [link_local_pfsense] dev vmbr0

auto vmbr0
iface vmbr0 inet static
        address [another_public_ipv4_subnet]/31
        bridge-ports none
        bridge-stp off
        bridge-fd 0

iface vmbr0 inet6 static
        address [my/48]:400::1/64

auto vmbr1
iface vmbr1 inet manual
        bridge-ports none
        bridge-stp off
        bridge-fd 0

source /etc/network/interfaces.d/*

I have enabled IPv6 forwarding in

/etc/sysctl.conf.

The pfSense VM is now online, but devices in the LAN behind the pfSense VM are behaving strangely. Some devices are not being firewalled correctly, and I can ping them from outside the network, which shouldn't be possible. Moreover, I can't seem to block this traffic via the pfSense firewall.

Could anyone please assist me with this? I'm stuck at this point.

 

[nornic]

Could it have something to do with the Router Advertisement? When I assign a static IPv6 address to a host, it seems to work without any issues. As soon as i turn off Router Advertisement and DHCPv6 it seem to work great. Any Ideas why?