Skip to main content

EdgeRouter Comcast IPv6

Last Updated: May 6, 2015

Comcast IPv6 Config​

Here is my IPv6 configuration that I use on my Edge Router with Comcast.

Notes:

eth5 : WAN interface

eth1: LAN interface

When you are done pasting this into your configuration file type load in the console.

Interface Configuration​

eth5

     ethernet eth5 {
        address dhcp
        description WAN
        dhcpv6-pd {
            no-dns
            pd 1 {
                interface eth1 {
                    host-address ::1
                    prefix-id :1
                    service slaac
                }
                prefix-length 60
            }
        }
        duplex auto
        firewall {
            in {
                ipv6-name WANFW
                name WAN_IN
            }
            local {
                name WAN_Local
            }
        }
        speed auto
    }

eth1

     ethernet eth0 {
        address 192.168.0.1/24
        description LAN
        duplex auto
        speed auto
    }

Offload Configuration​

    offload {
        ipv6 {
            forwarding enable
        }
    }

Firewall​

Currently a work in progress...

    ipv6-name WANFW {
        default-action drop
        description "Firewall to block incoming connections from IPv6 Tunnel"
        rule 10 {
            action accept
            description "Allow ping replies aka ICMP Echo Reply"
            icmpv6 {
            }
            protocol icmpv6
        }
        rule 15 {
            action accept
            description "May cause fragmentation issues otherwise"
            icmpv6 {
                type time-exceeded
            }
            protocol icmpv6
        }
        rule 30 {
            action accept
            description "Allow established TCP connections"
            protocol tcp
            tcp {
                flags ACK
            }
        }
        rule 35 {
            action accept
            description "Allow stateless UDP"
            protocol udp
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable