opn_add_icmpv6_rules
Set up mandatory ICMPv6 firewall rules for IPv6 operation. Automatically adds five RFC 4890 rules for Neighbor Discovery and ping6 to keep NDP, RA, and PMTUD functional on an interface.
Instructions
Create essential ICMPv6 firewall rules required for IPv6 operation.
Use this when setting up IPv6 on an interface. ICMPv6 is MANDATORY for IPv6 — without it, Neighbor Discovery (NDP), Router Advertisements (RA), and Path MTU Discovery (PMTUD) all break.
Creates 5 rules per RFC 4890:
NDP Neighbor Solicitation (link-local -> multicast)
NDP Neighbor Advertisement (link-local -> any)
NDP Router Solicitation (link-local -> all-routers multicast)
NDP Router Advertisement (link-local -> all-nodes multicast)
ICMPv6 Echo (ping6) inbound
Savepoint protection applies on OPNsense < 26.7 only: there changes auto-revert in 60 seconds unless confirmed with opn_confirm_changes. OPNsense 26.7 removed the savepoint API upstream, so on 26.7+ changes apply immediately and are NOT rolled back automatically. Check opn_mcp_info first: if 'savepoint_support' is false, take a config backup with opn_download_config before changing rules that could lock you out.
Parameters:
interface: target interface (e.g. 'lan', 'opt1', 'opt2')
Returns: dict with 'revision' (str), 'rules' (list of created UUIDs), and instructions to confirm.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| interface | No | lan |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||