Configure IPv6
Internal1 Interface
EUI-64 is used to create the set ip6-subnet. I use the ff:fe format address.
Use the Internal1 MAC Address
set ip6-subnet ::1:xxxx:xxff:fexx:xxxx/64
MAC address if AB:CD:EF:GH:IJ:KL would be set ip6-subnet ::1:ABCD:EFff:feGH:IJKL/6
Internal1 interface is on my Comcast interface (WAN2)
Comcast will give you a full /60 block. It is 16 x /64 blocks of IPv6 addresses. The first network is created with ::1 and 0.0.0.1::.
set ip6-subnet ::1:xxxx:xxff:fexx:xxxx/64
set subnet 0:0:0:1::/64
The IPv6 configuration information for first IPv6 /64 address.
config ipv6
set ip6-mode delegated
set ip6-allowaccess ping fabric
set ip6-reachable-time 30000
set ip6-retrans-time 3000
set dhcp6-prefix-delegation enable
set ip6-send-adv enable
set ip6-other-flag enable
set ip6-delegated-prefix-iaid 1
set ip6-upstream-interface “wan2”
set ip6-subnet ::1:xxxx:xxff:fexx:xxxx/64
config ip6-delegated-prefix-list
edit 1
set upstream-interface “wan2”
set delegated-prefix-iaid 1
set subnet 0:0:0:1::/64
set rdnss-service default
next
end
config dhcp6-iapd-list
edit 8
next
edit 1
set prefix-hint ::/64
next
end
end
next
DMZ Interface
No SLAAC on DMZ. So you won’t have config ip6-delegated-prefix-list. DMZ is on my AT&T Fiber (WAN1).
edit “dmz”
set vdom “root”
set ip 192.168.1.173 255.255.255.0
set allowaccess ping
set type physical
set monitor-bandwidth enable
set role dmz
set snmp-index 3
config ipv6
set ip6-mode delegated
set ip6-allowaccess ping
set dhcp6-prefix-delegation enable
set ip6-delegated-prefix-iaid 1
set ip6-upstream-interface “wan1”
set ip6-subnet ::1:xxxx:xxff:fexx:xxxx/64
config dhcp6-iapd-list
edit 1
set prefix-hint ::/64
next
end
end
next
Internal6 (InternalA on 61F)
config ipv6
set ip6-mode delegated
set ip6-allowaccess ping
set dhcp6-prefix-delegation enable
set ip6-send-adv enable
set ip6-other-flag enable
set ip6-delegated-prefix-iaid 1
set ip6-upstream-interface “wan2”
set ip6-subnet ::6:xxxx:xxff:fexx:xxx/64
config ip6-prefix-list
edit 2601:402:8201:3a86::/64
next
end
config ip6-delegated-prefix-list
edit 1
set upstream-interface “wan2”
set subnet 0:0:0:6::/64
set rdnss-service default
next
end
config dhcp6-iapd-list
edit 1
set prefix-hint ::/64
next
end
end
next