assinging private ipv6 addresses in LAN dhcpv6

assinging private ipv6 addresses in LAN dhcpv6

assinging private ipv6 addresses in LAN dhcpv6
assinging private ipv6 addresses in LAN dhcpv6
2023-08-19 00:57:41 - last edited 2023-08-19 01:00:56
Model: ER8411  
Hardware Version: V1
Firmware Version:

I do have 2 wan connections and my ISP's provide ipv6.

 

I configured my WAN's and get can the ipv6's on my wan interfaces.

 

 

 

I'm wondering why we can't use private IP addresses within FD00::/7 

 

  0      
  0      
#1
Options
8 Reply
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-08-21 02:58:46

Hi @Bonesoul 

Thanks for posting in our business forum.

Any luck with "FD00::/7"?

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#2
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-08-21 11:03:01

  @Clive_A 

 

nope, no luck :/

 

  0  
  0  
#3
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-08-22 07:07:53

Hi @Bonesoul 

Thanks for posting in our business forum.

Will send emails to the team as feedback. Thanks a lot for bringing this up to us.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#4
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-08-23 00:37:34

thanks, waiting for the the news.

 

From my educated guess, assigning private ipv6's within the network would require a NAT6 implementation, which seems to missing atm.

  0  
  0  
#5
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-08-26 11:50:09

An great example why we need to be able to use fd00/7 addresses with NAT6 support (private ipv6 addresses - www.wikiwand. com/en/Unique_local_address) and only deliver them in home / business networks to local nodes: 

 

www.reddit. com/r/homelab/comments/161axo7/just_found_out_all_ipv6_devices_in_my_home/

 

CDN media

 

Without fd00/7 addresses and assigning public ipv6 addresses, your network is basically vulnerable to external access without proper ipv6 firewall configuration (which i wonder if with current omada ACL rules possible for ipv6 traffic?)

 

  0  
  0  
#6
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2023-12-29 06:40:57

Hi  @Clive_A 

 

Any update on this?

  1  
  1  
#7
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
2024-04-30 18:16:57

also looking for an update on this.

  0  
  0  
#8
Options
Re:assinging private ipv6 addresses in LAN dhcpv6
3 weeks ago - last edited 3 weeks ago

  @Bonesoul 

I'm encountering same problem recently after bought a Wi-Fi 7 router(Archer BE550), the short answer from my aspect is:

TP-Link just does not support NAT6(or the condition to build a private IPv6 LAN) in their consumer grade product

 

To avoid port scanner from public internet(which already observed from my machine's log), I want to change my IPv6 setup from pass through to DHCPv6 since a single public address on my WAN port is enough for home network usage, but i found no matter what kind of private local IPv6 address I've try, It's always prompted for Invalid address.

 

So if you want to enable DHCPv6 in a TP-Link router, you must use an address block from 2000::/3, e.g. 2001:1111:2222:3333::/64, otherwise, you will get an invalid address error.

 

Even if you pick an address block from 2000::/3 and set it into the DHCPv6, your IPv6 still will not work, because the TP-Link router does not have NAT6 capability to translate between IPv6 WAN and LAN, I have made countless search and query through internet and GPTs, and read the whole user manual and data sheet on TP official site about my router, they only mentioned the support of NAT(yes, every Wi-Fi router on market should support NAT4), not NAT6

 

By now, from my view, if you cannot set a firewall on modem(if modem are responsible for PPPoE), the only choice if you pick a TP router, is use bridge mode(pass through) if you still want reach global IPv6 network, or just disable IPv6 entirely on your network.

  0  
  0  
#9
Options