wikiOPNsense disable IPv6
If the open source firewall OPNsense is to be used exclusively with IPv4, it is recommended to deactivate IPv6.[1] To do this, perform the following steps (tested with OPNsense 19.7):
Dashboard view
![In Interfaces ‣ [WAN]' set IPv6 Configuration Type to None and click Save.](//www.thomas-krenn.com/de/wikiDE/images/thumb/9/9b/OPNsense-switch-IPv6-off-02-IPv6-remove-WAN.png/120px-OPNsense-switch-IPv6-off-02-IPv6-remove-WAN.png)
In Interfaces ‣ [WAN]' set IPv6 Configuration Type to None and click Save.
![In Interfaces ‣ [LAN]' set IPv6 Configuration Type to None and click Save.](//www.thomas-krenn.com/de/wikiDE/images/thumb/9/97/OPNsense-switch-IPv6-off-03-IPv6-remove-LAN.png/120px-OPNsense-switch-IPv6-off-03-IPv6-remove-LAN.png)
In Interfaces ‣ [LAN]' set IPv6 Configuration Type to None and click Save.
Click Apply changes.
The changes have been applied.
In Firewall ‣ Rules ‣ LAN remove the IPv6 rule.
Click Apply changes.
The changes have been applied.
In Firewall ‣ Settings ‣ Advanced deactivate the option Allow IPv6 and click Save.
The changes have been applied.
The dashboard view does not show any error any more.
![In Interfaces ‣ [WAN]' set IPv6 Configuration Type to None and click Save.](/en/wiki/File:OPNsense-switch-IPv6-off-02-IPv6-remove-WAN.png)
![In Interfaces ‣ [LAN]' set IPv6 Configuration Type to None and click Save.](/en/wiki/File:OPNsense-switch-IPv6-off-03-IPv6-remove-LAN.png)
References
- ↑ Re: DHCPv6 runs although not needed with PPPoE and RA/PD (forum.opnsense.org, 06.01.2019) If you see DHCPv6 running and it's red, IPv6 is misconfigured and should be disabled.
 |
Author: Werner Fischer Werner Fischer, working in the Knowledge Transfer team at Thomas-Krenn, completed his studies of Computer and Media Security at FH Hagenberg in Austria. He is a regular speaker at many conferences like LinuxTag, OSMC, OSDC, LinuxCon, and author for various IT magazines. In his spare time he enjoys playing the piano and training for a good result at the annual Linz marathon relay.
|
