FireBrick IPv6 Tunnel: Difference between revisions

Line 1:

[[File:2700-small.png|link=:Category:FireBrick]]

To add a ~~tunnelled~~ IPv6 block to your FireBrick (2500/2700) and advertise it on your LAN subnet is do the following:

To add a tunneled IPv6 block to your FireBrick (2500/2700) and advertise it on your LAN subnet do the following:

==Create a route:==

</syntaxhighlight>

Here, 81.187.81.~~187~~ is the AAISP ~~side~~ tunnel endpoint, and we've created an IPv6 default route to it - if you are using someone else for the tunnel, then use their endpoint.

Here 81.187.81.6 is the AAISP tunnel endpoint, and we've created an IPv6 default route to it - if you are using someone else for the tunnel, then use their endpoint.

==Update your subnet to include:==

==Update your LAN subnet to include:==

*ra="true"

*ra-mtu="1480" (1472 if MTU was 1492 before, eg over PPPoE)

*ra-dns ="2001:8b0::2020 2001:8b0::2021"

*ra-dns="2001:8b0::2020 2001:8b0::2021"

*and add an IPv6 address from your block to the ip= element.

*and add an IPv6 address from your block to the ip="" element.

The smaller MTU is required due to the IPv6 packets being placed inside IPv4 packets.

Line 20:

==Add a firewall rule to allow the tunnel in==

You~~'ll~~ need to allow the tunnel into your FireBrick with a rule such as:

You may need to allow the tunnel into your FireBrick with a rule such as:

Line 29:

</syntaxhighlight>

Then create a subnet entry with your ~~Routed~~ /64 (or /48) and firewall rule as above.

Then create a LAN subnet entry with your routed /64 (or /48) and firewall rule as above.