Aller à :navigation, rechercher
Wiki

IPv6Prefix delegation with an AVM!Fritzbox

De Securepoint Wiki





























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden
































{
























Example configuration for using IPv6 prefix delegation with a UTM behind a Fritzbox

Last adaptation to the version: 12.7.2

New:
  • Updated to Redesign of the webinterface

notemptyThis article refers to a Beta version





  • Note

    This article includes descriptions of third-party software and is based on the status at the time this page was created.
    Changes to the user interface on the part of the manufacturer are possible at any time and must be taken into account accordingly in the implementation.
    All information without warranty.


    • Settings in AVM Fritzbox
    • Login to the configuration interface (in the default settings at https://192.168.178.1)
    • In the network settings for IPv6, the option Enable DHCPv6 server in FRITZ!Box for home network must be selected
    • Select suboption Assign DNS server, prefix (IA_PD) and IPv6 address (IA_NA)














    Configuration on the UTM:
    Edit interfaces













    UTMuser@firewall.name.fqdn
    External interface
    Typically A0, LAN1 or eth0 - depending on the hardware used

    connected to the Internet via NAT router

    Menu Network Network Configuration  Area Network Interfaces / Edit External Interface / Tab General

    DHCP Client IPv4 & IPv6
    Router Advertisement: Off
    IPv6 Prefix Delegation On

    UTMuser@firewall.name.fqdn
    Internal interface
    E.g. A1, LAN2 or eth1 - depending on the used hardware

    (must be configured for all internal interfaces that are to distribute a public IPv6 address to clients (and thus also receive one themselves).

    Menu Network Network Configuration  Area Network Interfaces / Edit Internal Interface / Tab General

    DHCP Client Off
    Router Advertisement: On


    IPv6 Prefix Delegation: Off

    Add default route UTMuser@firewall.name.fqdn
    Add default route

    Gateway Type: IP
    Gateway: LAN1
    IPv6: On

    In order for the IPv6 addresses to be routed, a default route must be added under Network Network Configuration  Area Routing button Add Default Route.
    Save

    UTMuser@firewall.name.fqdn
    Network configuration with IPv6 prefix delegation

    • The external interface should get an dynamic … /64 IPv6 address after a short moment
      If there is a 128 address here, the settings in the Fritzbox must be verified
    • The internal interface(s) should, after a brief moment, receive a dynamic ... /64 IPv6 address from another network.
      In the picture only configured for LAN2

    Create network objects and packet filter rules













    UTMuser@firewall.name.fqdnFirewall
    Network object internal_v6
    Firewall Network Objects  button Add Object

    Name: internal_network_v6

    Type: Network (interface)
    Adresse: LAN2
    Zone: internal

    For systems set up before v12.4: internal_v6

    UTMuser@firewall.name.fqdnFirewall
    Network object Internet_v6

    Name: Internet_v6
    Type: Network (address)
    Adresse:    ⸬/0 
    Zone: external
    For systems set up before v12.4: external_v6

    UTMuser@firewall.name.fqdnFirewall
    Possible packet filter rule

    Source: internal_network_v6

    Target: internet_v6
    Service: default-internet
    Action: Accept

    NAT
    Type: NONE No NAT!

    Now Fritzbox and Securepoint UTM run in dual-stack mode

    Récupérée de "https://wiki.securepoint.de/index.php?title=UTM/NET/IPv6Prefix-Delegation_mit_Fritzbox&oldid=93335"