Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register
Options

Setup IPv6 network

frefre Newbie ✭
edited November 2023 in Mid Range Firewalls

I have a TZ-300 and I'm trying to setup a simple IPv6 network. Unfortunately, the Windows computer is not getting internet access. See below my steps. I guess there is some minor adjustment required that I'm missing.


At firewall, I've set:

  • Appliance - Base settings - Enable IPv6
  • Network - DNS - IPv6 (top) - specify IPv6 DNS servers manually: 2606:4700:4700::1111 and 2620:fe::fe
  • Network - DHCP server - IPv6 (top) - Enable DHCPv6 server
  • Network - DHCP server - IPv6 (top) - Add dynamic: prefix 2001:db8:abcd:12::
  • Network - DHCP server - IPv6 (top) - Add dynamic: range start 2001:db8:abcd:12::1
  • Network - DHCP server - IPv6 (top) - Add dynamic: range end 2001:db8:abcd:12::100
  • Network - DHCP server - IPv6 (top) - Add dynamic - DNS: domain name "test2222"
  • Network - DHCP server - IPv6 (top) - Add dynamic - DNS: Inherit DNS


The interface I'm working is X3, with a cable directly to a Win10 machine.

At X3 interface I've set:

  • Interface 'X3' Settings for IPv6 - general - IP Assignment "static"
  • Interface 'X3' Settings for IPv6 - general - IPv6 Address 2001:db8:abcd:12::101
  • Interface 'X3' Settings for IPv6 - general - Enable Router Advertisement
  • Interface 'X3' Settings for IPv6 - advanced - Enable Listening to Router Advertisement
  • Interface 'X3' Settings for IPv6 - router advertisement - Enable Router Advertisement
  • Interface 'X3' Settings for IPv6 - router advertisement - managed
  • Interface 'X3' Settings for IPv6 - router advertisement - other configuration


At Windows 10, I've set:

  • Enabled IPv6 protocol (automatically get IPv6 address and DNS servers)


At Windows 10 I'm getting IPv6 address from DHCPv6 and also DNS from DHCpv6. But at gateway is an autogenerated IPv6 (starting with "fe80"), expected was the X3 IPv6 address. So I forced IPv6 gateway with the X3 IPv6 address:

New-NetRoute -DestinationPrefix "::/0" -NextHop 2001:db8:abcd:12::101


I've also created "access rules" from X3 to WAN allowing everything IPv6.

Category: Mid Range Firewalls
Reply
Tagged:

Answers

  • Options
    frefre Newbie ✭

    To clarify, I have a working IPv6 at WAN port.

  • Options
    ArkwrightArkwright All-Knowing Sage ✭✭✭✭

    But at gateway is an autogenerated IPv6 (starting with "fe80"), expected was the X3 IPv6 address.

    That's normal. That's the link-local IP of the Sonicwall's interface in that network.

    Are there any hits on your -> WAN access rules from this zone?

Sign In or Register to comment.