topic Re: New Router settings in Archive

New Router settings

pavilion — Wed, 07 Jul 2021 15:01:54 GMT

I've replaced my Sky Router with a TP-Link VR2800 which seems a lot better in comparison. I just need to know please what I put into the IP6 firewall settings to complete setup.

TIA

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 16:37:15 GMT

@pavilion

You should use DHCPv6 Prefix Delegation (PD) for acquiring the IPv6 block (https://www.tp-link.com/uk/support/faq/852/)

Re: New Router settings

pavilion — Wed, 07 Jul 2021 16:39:01 GMT

thank you. no additional config to the ipv6 firewall?

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 16:40:48 GMT

@pavilion

Hope, unless you have server(s) running internally that need an IPv6 let through the firewall, eg: it should be firewalled by default.

Re: New Router settings

pavilion — Wed, 07 Jul 2021 16:52:23 GMT

it is. There is the ipv4 and ivp6 SPI firewall which are both enabled by default, and another entry seperate marked IPV6 Firewall and seem to only pick up internal network equipment when i click the scan button

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 17:00:11 GMT

@pavilion

That is correct for IPv6, the firewall will pass the traffic out (and corresponding return traffic) but it will require an IPv6 address forwarding from the public IPv6 to its private IPv6 address when you have a server internally. You should, of course, enable the IPv6 firewall but that should be the default action anyway. To confirm that clients are picking up the IPv6 address type 'what is my ipv6 address' on Google.

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 17:03:37 GMT

@pavilion

Of course, I forgot to add, you should be running SLACC on the LAN.

Re: New Router settings

pavilion — Wed, 07 Jul 2021 17:05:59 GMT

thanks mate. Seems all i had to do was switch from RADVD to DCHPv6 server and make sure delegated was checked. The router has handled the rest automatically. When I set up the router it had the option to choose Sky(MER) from a list of ISP' and from there all i had to do aside from the above was enable IPV6.

Thanks again 🙂

Re: New Router settings

pavilion — Wed, 07 Jul 2021 17:08:24 GMT

as these pictures

Re: New Router settings

pavilion — Wed, 07 Jul 2021 17:16:52 GMT

i have no option for slacc?

EDIT: found it lol there are so many options on this compared to the sky router

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 17:10:20 GMT

@pavilion

I'll check those for you once the pictures are approved but are sure you have everything set up correctly. 😎

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 17:12:17 GMT

@pavilion

SLACC is usually the default anyway, so don't worry about that fact. If it is authenticating without DHCP Option 61 then it's working correctly.

Re: New Router settings

mae-3 — Wed, 07 Jul 2021 17:34:17 GMT

@pavilion

The firewall with IPv6 Stateful Packet Inspection (SPI) is correctly configured. This basically means that clients can talk to IPv6 public servers and the return traffic for those connections only pass through the firewall. 😀

Re: New Router settings

pavilion — Wed, 07 Jul 2021 18:15:46 GMT

all sorted then. thanks so much mate! thats great.