Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[go6henk]

I have a DIR-645 but i cannot get the ipv6 firwall running, when defining a rule no ipv6 traphic goes pass the firewall not to or from the internet.
maybe someone has an example?? how to configure ipv6 ranges

[Patrick533]

Your firewall should look like the below pic.

This will block everthing comming in, but allow everthing going out. Very much acts like SPI.

Let me know if that works out for you.

[go6henk]

Unfortunately this does not work i am getting the following error
"the source and destination address cannot be the same"

eg; source lan range 2a01:: protocol all (also tried tcp)

dest wan range :: ports 1 to 65535

also no success

[go6henk]

[go6henk]

[Patrick533]

Hmm,

This firewall looks different then mine, I have a different router but so far all of the IPV6 stuff is the same across the series.

Do you have the latest firmware?

Have you tried "::" in all 4 spots. On my firmware you specify the range in 1 box, in yours you use 2 boxes. Does it error when you try all 4?

[PacketTracer]

Hi together,

I guess this firewall version wants to have IPv6 ranges in the form <start address> to <end address> instead of using prefixes of the form <address>/<length> or "::" as placeholder for all addresses.

In addition you must use protocol=any because besides TCP you also want allow UDP and ICMPv6 to go out.

So I propose the following settings:

Name: "out all"
Schedule: "Always"
Source:
     Interface: "LAN"
     IP Address Range: 0:0:0:0:0:0:0:0   (:: should work either)
                                 -
                                ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
Protocol: "any"
Destination:
     Interface: "WAN"
     IP Address Range: 0:0:0:0:0:0:0:0   (:: should work either)
                                 -
                                ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Port Range doesn't matter and can't be changed, when Protocol=any

Hope it works.
PT
   

[Patrick533]

Hi together,

I guess this firewall version wants to have IPv6 ranges in the form <start address> to <end address> instead of using prefixes of the form <address>/<length> or "::" as placeholder for all addresses.

In addition you must use protocol=any because besides TCP you also want allow UDP and ICMPv6 to go out.

So I propose the following settings:

Name: "out all"
Schedule: "Always"
Source:
     Interface: "LAN"
     IP Address Range: 0:0:0:0:0:0:0:0   (:: should work either)
                                 -
                                ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
Protocol: "any"
Destination:
     Interface: "WAN"
     IP Address Range: 0:0:0:0:0:0:0:0   (:: should work either)
                                 -
                                ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

Port Range doesn't matter and can't be changed, when Protocol=any

Hope it works.
PT
   

Thank you Sir! Every time these questions come up I wish you were in my time zone, or continent.


Bis bald

Patrick

[go6henk]

Unfortunately nothing works, i think i have to wait until the next firmware upgrade.
thaks anyway for being helpful

[FurryNutz]

Maybe someone can review your router settings with you using Link> teamviewer if your interested. Its safe and secure.