FireBrick IPv6 Tunnel

From AAISP Support Site

To add a tunnelled IPv6 block to your FireBrick (2500/2700) and advertise it on your LAN subnet is do the following:

Create a route:

<route ip="::/0" gateway="81.187.81.187"/>

Here, 81.187.81.187 is the AAISP side Tunnel endpoint, and we've created an IPv6 default route to it - if you are using someone else for the Tunnel, then use their endpoint.

Update your subnet to include:

  • ra="true"
  • ra-mtu="1480" (1472 if over ppp)
  • ra-dns ="2001:8b0::2020 2001:8b0::2021"
  • and add an IPv6 address from your block to the ip= element.

The smaller MTU is required due to the IPv6 packets being placed inside IPv4 packets.

Once saved, machines on your LAN should be given IPv6 addresses, and they will use the FireBrick as their IPv6 gateway, which in turn will use the Tunnel endpoint.

Add a rule to allow the tunnel in

You'll need to allow the tunnel into your FireBrick with a rule such as:

Retrieved from ‘http://support.aa.net.uk/index.php?title=FireBrick_IPv6_Tunnel&oldid=324’