Setting up a Zyxel router/firewall for IPv6 is definitely not straight forward, mainly because the device is powerful enough to be configured for a wide variety of different uses. But if you are just trying to get IPv6 working – and if your broadband provider is Charter or Comcast – these instructions should work for you. I’m partially building off the good work from MaineMike, and some of the documentation that can be hard to find on this. In this case, it’s a USG40 – but likely is same across many of the models.
Zyxel code in use for these screen shots and instructions:
[att=1]
Step 1 - Enable IPv6: Go to Configuration -> System -> IPv6 and Enable IPv6.
Step 2 - Create DHCPv6 Service Request Object: Go to Configuration -> Object -> DHCPV6 and add a service object with Request Type = Prefix Delegation and specify the WAN interface. In this screen shot, the service object has been given the name "MyPD".
[att=2]
Step 3 - Configure WAN Interface: Go to Configuration -> Network -> Interface -> Ethernet and edit the WAN interface. Click "Show Advanced Settings". Enable Interface. Enable IPv6. Check Enable Stateless Address Auto-Configuration (SLAAC) – this part may not be necessary. Select "Client" for DHCPv6. Check Request Address. In DHCPv6 Request Options click Add and select "MyPD" (or whatever you named it above).
[att=3]
Step 4 - Configure LAN Interface: Go to Configuration -> Network -> Interface -> Ethernet and edit your LAN interface. Click "Show Advanced Settings". Enable Interface. Enable IPv6. In Address from DHCPv6 Prefix Delegation click "Add", select "MyPD", and specify a suffix of ::0:0:0:1/64. Check Enable Router Advertisement. In the Advertised Prefix from DHCPv6 Prefix Delegation box click "Add", select "MyPD" and specify a suffix of ::0/64.
[att=4]
Step 5 – CLI commands
First SSH in and then:
Type “enable” and ENTER
Type “configure terminal” and ENTER
Type “interface WAN” and ENTER (Where “WAN” is whatever name you use)
Type “ipv6 nd ra accept” and ENTER
Type “exit” and ENTER
Type “exit” and ENTER
Type “copy running-config startup-config” and ENTER
Validate routing table by typing:
“show ipv6 route”
Step 6 – At this point, you should be able to see IPv6 addresses being assigned from your ISP. Go to Configuration -> Network -> Interface -> Ethernet and you should start to see something like this:
[att=5]
Step 7 – you can also check your config by SSH’ing into the Zyxel and executing the command “show running-config”. Output should look something like this:
[att=6]
Step 8 – Now see if you can Ping a Google IPv6 DNS address from your Zyxel. Go to Maintenance -> Diagnostics -> Network Tool and select the Network Tool “PING IPv6”, and enter the IP address “2001:4860:4860::8888”. Then click “Test”. You should see something like this:
[att=7]
Step 9 – Check the client devices on your network and see if they are receiving IPv6 assignments. The above should definitely work for Comcast and Charter. Likely for most broadband providers.
↧