@roblugg 

Hi,

Some router models have received firmware updates that add an "IPv6 firewall rules" option to the Advanced -> IPv6 menu in the web management interface.

As the Archer BE230 is one of TP-Link's latest models there is a good chance that it already has this feature, but it would require someone who actually owns a BE230 to confirm it.

  @woozle So, it actually has a whole IPv6 menu option on the side in advanced settings. Just no idea what to do there really as very much an amateur. Here's what it looks like. I saw someone on another thread say you needed to copy/clone the MAC address from the Hyperoptic router so have followed those instructions but do i need more/different info/settings elsewhere do you happen to know?

  @roblugg 

On router models that have the IPv6 Firewall Rules option it is located right below the "MAC Clone" option.

If you have scrolled all the way down and the webpage ends at "MAC Clone", then it means your router unfortunately doesn't have the IPv6 Firewall Rules yet.

  @roblugg 

Enter the number of the "Port" that you want to forward and the "Internal IP" (IPv6) address to which you want to forward that port.

If you know the type of "Protocol", then select it. Otherwise just select "All".

"Service Name" can be anything you like.
 

Of course you will have to setup a working IPv6 Internet connection first before that IPv6 firewall stuff is of any use.

  @roblugg where it asks for internal IP I mean.

  @roblugg 

Yes, it asks for the long IPv6 address (the one that usually starts with a 2).

A link-local IPv6 address (one that starts with fe80) will not work.

  @woozle Thanks, but where would I find the IPv6 address starting 20? does it come from the server or my ISP?