Comments on: IPv6 on m0n0wall http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/ Ninjas. Badgers. Linux. Me. Wed, 30 Nov 2011 22:40:46 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Tom http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/comment-page-1/#comment-112 Tom Wed, 09 Feb 2011 16:17:24 +0000 http://www.ninjabadger.net/?p=124#comment-112 The first step, in m0n0wall at least, is to head into 'System: Advanced' and check the box that says 'IPv6 Support'. Without that, you won't have half the options you need. From memory, the GUI of pfSense is very similar, but to my knowledge it's got very flakey support for IPv6 (or none, if you count only stable releases). I'd check that your build actually has v6 support first. LAN: Add the IPv6 prefix in the appropriate box, enable RA. WAN: This is dependant on your ISP. Is it Andrews & Arnold? If so, you just need to the 'IPv6 mode' to 'PPP', and the routing of your prefix from the LAN to the world will 'just work'. :) The firewall, from memory, doesn't allow any v6 out by default (in contrast, it does for v4). On the 'IPv6 Rules' page you should just be able to add a rule that allows anything from the 'LAN subnet', to anywhere. And that's job done. I believe there's a predefined rule for blocking known aliens on the WAN, but my memory is hazy in that respect. Hope this helps! The first step, in m0n0wall at least, is to head into ‘System: Advanced’ and check the box that says ‘IPv6 Support’. Without that, you won’t have half the options you need.

From memory, the GUI of pfSense is very similar, but to my knowledge it’s got very flakey support for IPv6 (or none, if you count only stable releases). I’d check that your build actually has v6 support first.

LAN: Add the IPv6 prefix in the appropriate box, enable RA.
WAN: This is dependant on your ISP. Is it Andrews & Arnold? If so, you just need to the ‘IPv6 mode’ to ‘PPP’, and the routing of your prefix from the LAN to the world will ‘just work’. :)

The firewall, from memory, doesn’t allow any v6 out by default (in contrast, it does for v4). On the ‘IPv6 Rules’ page you should just be able to add a rule that allows anything from the ‘LAN subnet’, to anywhere. And that’s job done. I believe there’s a predefined rule for blocking known aliens on the WAN, but my memory is hazy in that respect.

Hope this helps!

]]> By: wiz561 http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/comment-page-1/#comment-111 wiz561 Wed, 09 Feb 2011 14:26:18 +0000 http://www.ninjabadger.net/?p=124#comment-111 I'm attempting to do this same exact thing with pfsense intead of m0n0wall. A few questions... - Did you just put in the IPv6 address (2001:400::/64) in the "LAN" tab, and put the gateway in? - Did you have to enable rtadvd? DHCPv6? - Did you have to enable any firewall rules? - Did you have to do anything to the WAN interface? My ISP gave me a /64. There's not many tutorials out there on how to configure pfsense/m0n0wall with a single /64 space. I'm hoping that you can shed some additional light on how you got it working. I’m attempting to do this same exact thing with pfsense intead of m0n0wall.

A few questions…

- Did you just put in the IPv6 address (2001:400::/64) in the “LAN” tab, and put the gateway in?
- Did you have to enable rtadvd? DHCPv6?
- Did you have to enable any firewall rules?
- Did you have to do anything to the WAN interface?

My ISP gave me a /64. There’s not many tutorials out there on how to configure pfsense/m0n0wall with a single /64 space. I’m hoping that you can shed some additional light on how you got it working.

]]> By: dave_06 http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/comment-page-1/#comment-95 dave_06 Mon, 22 Feb 2010 22:17:44 +0000 http://www.ninjabadger.net/?p=124#comment-95 no, not a CCNA module as such, theres a lot of politics about there actually being a CCNA module, but as luck would have it, our lecturer is a CCAI and has taught us so that those of us who want to go on and take the cisco exams are prepared to do so. Think i will, even as a programmer its another skill to my bow! no, not a CCNA module as such, theres a lot of politics about there actually being a CCNA module, but as luck would have it, our lecturer is a CCAI and has taught us so that those of us who want to go on and take the cisco exams are prepared to do so. Think i will, even as a programmer its another skill to my bow!

]]> By: Tom http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/comment-page-1/#comment-94 Tom Mon, 22 Feb 2010 21:54:28 +0000 http://www.ninjabadger.net/?p=124#comment-94 Nice one! Was that a CCNA module? IIRC the CCNA1 skills test was just subnetting, heh. IPv6 is a whole 'nother headache though. If you're not completely awake it just plain hurts! Nice one! Was that a CCNA module? IIRC the CCNA1 skills test was just subnetting, heh.

IPv6 is a whole ‘nother headache though. If you’re not completely awake it just plain hurts!

]]> By: dave_06 http://www.ninjabadger.net/2010/02/17/ipv6-on-m0n0wall/comment-page-1/#comment-93 dave_06 Mon, 22 Feb 2010 18:35:30 +0000 http://www.ninjabadger.net/?p=124#comment-93 I think this is the first time I can properly relate to one of your posts having just studied a module about IP & Subnetting :) Got my exam back today - 92% :D I think this is the first time I can properly relate to one of your posts having just studied a module about IP & Subnetting :) Got my exam back today – 92% :D

]]>