Computer NetworksNETWORKS

IPv6 with OpenWrt



There are at least three ways to use IPv6 ith OpenWrt: Prefix Delegation, NDP Proxy and 6in4 tunnel with Hurricane Electric or the like. In this video we will walk through the configuration for each of them.

The IPv6 from Scratch Episodes are here:

Episode 1 https://youtu.be/oItwDXraK1M
Episode 2 https://youtu.be/jlG_nrCOmJc

0:00 IPv6 with OpenWrt
01:02 Option 1 – Prefix delegation
04:37 Special case: PPPOE
05:43 Firewall rules WAN side
06:54 LAN interface settings
10:23 Configuring DHCPv6 options
15:24 static leases and DNS
19:53 Option 2 – NDP proxy – no prefix delegation
21:54 Option 3 – 6in4 tunnel

YouTube: https://www.youtube.com/c/onemarcfifty
Twitter: https://twitter.com/onemarcfifty
Discord: https://discord.com/invite/DXnfBUG
Github: https://github.com/onemarcfifty
Patreon: https://patreon.com/onemarcfifty
Blog: https://www.onemarcfifty.com

source
ipv6

Alice AUSTIN

Alice AUSTIN is studying Cisco Systems Engineering. He has passion with both hardware and software and writes articles and reviews for many IT websites.

22 thoughts on “IPv6 with OpenWrt

  • I'm tuning up my openWRT with IPv6, thanks to this video.

    I don't have a fixed IPv6 prefix, I rather get a new one from the ISP every 24 hours or something. As explained in minute (15:40) I did get to assign a static node address to a server inside my LAN (this will be a second DNS server and other services). What I'd like to know is how to announce this server as a second DNS server, (as in the IPv6 Settings minute 11:57). I have checked "Local IPv6 DNS server" to announce the router as primary IPv6 DNS server, then I don't know input the secondary DNS server because I won't know exactly what IPv6 it will have. Is there a trick how to do it? Maybe something like minute 19:22? Thanks in advance.

  • Lovely stuff there Marc. Just one small problem which you carefully danced around, same as everybody else that talks about ipv6. HOW do you make firewall rules to allow incoming traffic for SLAAC hosts that refuse to register on your dhcp6. Which btw happens to be every phone out there. And it's not only google that's making a mess of things. God damn FreeBSD itself doesn't have a dhcp6 client for jails. And don't get me started on docker. So yeah, suggestion for next video: firewall rules for SLAAC. Pretty sure the C stands for Cancer.

  • Does anyone know what option 'ipv6' in PPPoE interface does? If I explicitly create a wan6 interface, it seems settings that option to '0' or '1' has no effect.

    config interface 'wan1'

    option device 'eth1'

    option proto 'pppoe'

    option username '<pppoe_username>'

    option password '<pppoe_password>'

    option ipv6 '0' # it doesn't matter if the value is '0' or '1'

    config interface 'wan1_6'

    option device '@wan1'

    option proto 'dhcpv6'

  • grobes video wie ich das mit ipv6 auf linux (oder *bsd) von hand machen muss mit telekom quatsch ipv6 (die hätten ruhig static raus geben können) wäre extrem schön 🙂
    gibt fast keine dokumentation über telekom ipv6.. wenn doch verlinkung(en) bitte 🙂

  • Thanks a lot for your videos about ipv6! Now the only thing left to figure out is how to properly set up dynamic dns on openwrt for a node on the LAN 🤔

  • Hey, How to get ipv6 if i have wwan (dump ap) instead of wan??

  • Can you recommend a good router that supports wrt and also support Wi-Fi 5+6 thanks

  • Interfaces>>Lan>>IPv6 Settings : Announced IPv6 DNS servers (1) and Announced DNS domains (2), may I know what is the difference between (1) and (2) ? I added the service provider DNS to (1), performance speeds up. (if not, there is a lag in performance). What should I fill in (2) if needed ? Please advise. Thanks !

  • How to do tunneling via teredo using Miredo instead of 6in4? because teredo is what Xbox uses, so it might be better for gaming on Xbox.

  • This is the best Ipv6 tutorial till date (at least for me). Never got it to work (unable to get a valid ipv6 address and failed the test ipv6 test site) a year ago and gave up. You have shown and explained the settings for Lan, Wan6 (recreated if deleted) and why certain check boxes must be unchecked. Follow your guide, it is a break through for me, got valid ipv6 addresses for all devices especially android phones. Currently, Openwrt 21.02.6, WAN side is using PPPOE, WAN6 recreated solution as per your guide. Lan & WAN6 follow your settings. For the WAN side Advanced Settings, I chose "Disabled" for "Obtain IPv6 address" and "UNcheck" "Delegate IPv6 prefixes". Actually I have tried Checked and UnChecked "Delegate IPv6 prefixes", but both options still intermittently failed the test ipv6 site for android phones and Windows 10 PC. My understanding is to unchecked "Delegate IPv6 prefixes" for WAN because WAN6 (recreated) already checked this option . Am I right ? Just want to know the correct settings. Thanks !

  • Is there a performance boost to the user by setting all these tweaks/settings in a home network?

  • For anyone else using Starlink, when they send back the DHCPv6 replies, the source is a global IP (2605:….).
    The firewall default 'Allow-DHCPv6' rule has 'Source address' set to fc00::.6. This blocks the Starlink DHCPv6 replies.
    When the router first comes up, these replies must be getting through because at first it gets a good IP address and Prefix Delegation.

    Presumably the firewall doesn't block the replies until it's fully up and running.

    After some period of time (5 to 20 minutes or so) the router would try to renew. This would fail, but it would keep it's IP address, but the Prefix Delegation would disappear.

    Frustrating.

    I just deleted the Source Address in the filter, so DHCPv6 replies can come from any source.

    It took port mirroring and Wireshark to figure it out, but it's working great now.

    Thanks again OneMarcFifty for all your great information.
    I hope this helps other Starlink/OpenWrt users.

  • This is an amazingly well explained video Marc. I have recently moved from an ISP who only had IPV4 addresses to an ISP that was able to give me an IPV6 address. I wish I came across this video earlier, as I had trouble with setting up a VLAN ID tag for my new connection. Luckily your VLAN video gave me a lot of good pointers to work from. Thanks again.

  • Thanks so much for this. It helped me understand and work through my Starlink setup.
    I wanted a my HomeAssistant, behind my router to have a routable address and ipv6 is my only choice since Starlink only gives a CGNAT IP address.
    I still have an issue where the Starlink PD disappears after 20 minutes or so. If I reboot the router I get the PD back, but I haven't found any other way.
    For now I just turn on DHCP, get the ipv6 IP, PD etc then set that as static. I'm hoping the PD disappearing is a temporary Starlink issue. Anyway….Thank you, thank you, thank you. I'm going now to add you to my Patreon support.

  • Hi Marc, tks for sharing.
    From ISP I have an ipv6-pd /64 on main router, if i use relay mode on second router clients can use ipv6 but lose after few minutes.

  • Thanks a lot for this video which helped me configure ipv6 successfully, but I'm still confused. ::5:0:0:0:245/::f:ffff:ffff:ffff:ffff confuses me, it is similar to "subnet mask" but I don't understand the meaning. I didn't find an explanation on IETF, I want to know how to use it, thanks!

  • Thank you very much for this tutorial. Helped me a lot !!!! I have an OpenWRT behind a fritzbox. Had to enable "Assign DNS server, prefix (IA_PD) and IPv6 address (IA_NA)" on the fritzbox under > "Home Network" > "Network" > "IPv6 Addresses"

  • my op wan6 can get ipv6(64) but lan cant nothing

Comments are closed.