So I seem to have managed to get IPv6 working somewhat? When I poll for my public IP on
icanhazip.com I only get my IPv4 address, but all other tests on testipv6.com (10/10 score) and ipv6-test.com (18/20 score) seems to pass. For some reason ipv6test.google.com seems to fail.
I followed the guide posted before, link has over
here.
So the instructions are mostly the same.
In my case:
CODE
WAN: pppoe0 (on eth0)
LAN: eth1
IPTV: eth2
First we set up firewall rules for IPv6.
WAN6_IN
» Click to show Spoiler - click again to hide... «
CODE
edit firewall ipv6-name WAN6_IN
set default-action drop
set rule 10 action accept
set rule 10 description "allow established"
set rule 10 protocol all
set rule 10 state established enable
set rule 10 state related enable
set rule 20 action drop
set rule 20 description "drop invalid packets"
set rule 20 protocol all
set rule 20 state invalid enable
set rule 30 action accept
set rule 30 description "allow ICMPv6"
set rule 30 protocol icmpv6
top
WAN6_LOCAL
» Click to show Spoiler - click again to hide... «
CODE
edit firewall ipv6-name WAN6_LOCAL
set default-action drop
set rule 10 action accept
set rule 10 description "allow established"
set rule 10 protocol all
set rule 10 state established enable
set rule 10 state related enable
set rule 20 action drop
set rule 20 description "drop invalid packets"
set rule 20 protocol all
set rule 20 state invalid enable
set rule 30 action accept
set rule 30 description "allow ICMPv6"
set rule 30 protocol icmpv6
set rule 40 action accept
set rule 40 description "allow DHCPv6 client/server"
set rule 40 destination port 546
set rule 40 source port 547
set rule 40 protocol udp
top
So this is where configuration for us Malaysian users on PPPoE differs. While the Medium article uses eth1 as WAN, we have to use pppoe0 as WAN.
CODE
set interfaces ethernet eth0 vif 500 pppoe 0 firewall in ipv6-name WAN6_IN
set interfaces ethernet eth0 vif 500 pppoe 0 firewall local ipv6-name WAN6_LOCAL
The Medium article suggests using SLAAC
CODE
edit interfaces ethernet eth0 vif 500 pppoe 0
set dhcpv6-pd pd 0 prefix-length /64
set dhcpv6-pd pd 0 interface eth1 host-address ::1
set dhcpv6-pd pd 0 interface eth1 prefix-id :0
set dhcpv6-pd pd 0 interface eth1 service slaac
top
So then we have to enable IPv6 on the WAN interface
CODE
set interfaces ethernet eth0 vif 500 pppoe 0 ipv6 enable
And also enable autoconfig
CODE
set interfaces ethernet eth0 vif 500 pppoe 0 ipv6 address autoconf enable
Local LAN (in my case LAN1) should be showing something like 2001::, but WAN (pppoe0) seems to show a link local address for some reason.
Any ideas?
UPDATE 23:42 - Seems like IPv6 is a little hit or miss, sometimes it works on service restart and sometimes it doesn't. Wonder what's going on.
This post has been edited by ncys1: Oct 4 2017, 11:43 PM 
Oct 4 2017, 04:59 PM
Quote
0.0210sec
0.34
6 queries
GZIP Disabled