Today or tomorrow or over the weekend, one of my LANs is going fully IPv6. No more IPv4, not even dual-stack.

Let's see how this experiment goes.

Has anyone done this before?

Router: Mikrotik RB750Gr3 and UniFi 100mbps.

What I'm doing is creating a new VLAN which is IPv6 only. I'm not crazy, I still have my normal VLAN for normal stuff. Anyway, anything that connects to the new LAN will only have IPv6 addresses.

Things That Work

1. This is GMail. Google is damn good. Not a single IPv4 address in sight.

Things That Don't
1. One of my webhosts is not on IPv6.
2. Any website that doesn't have IPv6.

Problems and Solutions
1. Crazy long addresses - DNS
2. Firewall - ?
3. Mikrotik's hopeless IPv6 Router Announcements (RA) - ?
4. DDNS for IPv6 - ?
5. Security concerns since everything is accessible from the internet. (Yay, no more port fort-porwarding)


This post has been edited by soonwai: Mar 24 2018, 03:58 AM

Good luck. I would be surprised if everything goes smoothly as the implementation in Malaysia is still lacking I feel. Keep us updated bro. I am very interested to see if all goes well.

I don't brain why you want to go IPV6 on home network?

How u going to be 100% IPV6? please share

At this stage it's an experiment. You're using IPv4 right? Why do you use IPv4?

Yes, will share once I get everything sorted out.

This post has been edited by soonwai: Mar 23 2018, 05:21 PM

My first question is : Why need to apply IPV6 on LANs network?

Then I found this : https://www.networkcomputing.com/networking...ipv6/1148014746

However, I dont like to type super long ip address for firewall filtering rules if I have a choice. 192.168.x.x just too easy to remember and typing.

Good luck for your test.

Yes, that's a big problem, the long IP addresses. But that's why we have DNS. My plan to avoid remembering ipv6 addresses is to use DNS. for example: mbpr.local and router.local are my MacBook and router respectively.

If it a success, then a lot of company might need your expertise.

As now most of the service provider are giving IPv6 instead of IPv4 cause IPv4 are running out soon and very precious.

That is a good approach for single IP. For firewall filtering rules for IP range, you still have to key in the long address.

I still prefer IPv4 for Lan networks and the IPs just more than enough even for a big company. For Wan Network, IPv6 is a must in future.

Actually I am still wondering why IPv6 is faster than IPv4, as processor have less number to process then speed should be faster. If considering Lan network only.

Probably you can share your finding such as speed test and packet loss test then compare between the two.

Too bad some of my online services do not support IPV6 yet so no I will stick to IPV4 only.

Oops, you’re right. For firewalls, have to key in long addresses. For one thing, no NAT, so less work for the router. The article that you posted is quite good info.

wow

So, which ISP is providing pool of IPv6 address to u? But telco for mobile devices are still using private IPv4 right? If yes, why telco no implement IPv6 for all devices?

Bad thing: security.
By doing this, it means every devices are on wan network, and individual device firewall is critical now. We still remember the scary wannacry ransomware, u are safe when u are behind router if no port forwarding setup, unless you purpose execute it in lan network.

Good thing:
Faster network, no nat.
We no need to do port forwarding , but only port opening.
P2P network is easy and file sharing is more direct.
No need router? Only switch?

I am not expert on IPv6 , please share your info , thanks yah bro...

this IPv6... no more NAT right?
like... I can access your server using IPv6 without need router to port forward?

Yeah, no more NAT, no need port forward. Convenient but have to give security more thought.
Try this:
http://[2001:e68:5428:25cf:1001:f249:bfaa:4c14]:8082
That's a http server running on my iPhone 6s displaying its camera.

I'll leave it on for a few minutes in case anyone wants to have a go at hacking my iPhone.

Offline for now. Need to use phone.

This post has been edited by soonwai: Mar 29 2018, 06:25 PM

Before this I tried to implement a native ipv6 at my house as well my blog (hosted using vps) surprisingly, it went well (my house and blog using native ipv6). However it was long time ago, I think around 2016. Some of the website (like malaysia banking website) still not yet implement ipv6.
I keen to know about ipv6 setup using mikrotik. Its confusing yet fun

On Apr 28, I asked Unifi to give me a /56 prefix.
July 14, I asked Unifi to give me a /56 prefix again.

So far, still no go.

This post has been edited by soonwai: Jul 14 2018, 05:23 PM

not really check this statistics you will be surprised how high is malaysia IPv6 adoption is,and it was a second highest IPv6 adoption in asia after india
https://www.google.com/intl/en/ipv6/statist...y-ipv6-adoption

I wonder why u need /56 instead of /64 prefix?

So I can setup /64 subnets. Example for guest wifi, etc.