Detailed IPv6 settings of OpenWrt

foreword

Recently, China Telecom is finally willing to issue the v6 address. It has to be configured for the router. It has been in the closed state before, and it is reset today. Since then, there are v4 and v6 dual public network addresses.


network structure

  • light cat is set to桥接
  • The router is set toPPPoE拨号
  • Other devices are 无线/有线connected to the router through
  • The following content is all performed on OpenWrt 22.03 and above

1. WAN port settings

Select 网络-> 接口-> WAN Interface -> Edit -> Advanced Settings

获取 IPv6 地址: Set as自动

IPv6 分配长度: Set as已禁用

Save the application after setting


2. LAN port settings

Select 网络-> 接口-> LAN Interface -> Edit -> Advanced Settings

IPv6 分配长度: set to 64(this is set according to the length allocated by the operator)

  • Then select DHCP服务器->IPv6设置
  • RA服务: Set as服务器模式
  • DHCPv6 服务: Set as服务器模式
  • NDP 代理: Set as已禁用

  • IPv6 RA设置as shown in the picture

Save the application after setting

Supplement: In the service mode, select the server mode if there is PD distribution, and select the relay mode if there is no PD distribution


3. NAT6 configuration

If the obtained IPv6 is a public network, this step is completely unnecessary!!

NAT6 configuration needs to complete the above steps

Select 网络-> 防火墙-> NAT规则, add a rule

  • 名称: nat6
  • 限制地址类型: Set as仅IPv6
  • 协议: Set as任何
  • 出站区域: Set aswan
  • 源地址: Set as任意
  • 目标地址: Set as任意
  • 操作: Set asMASQUERADE

Save the application after setting


4. Interface status

  • WAN

There are two interfaces for WAN, which are connected wanwithwan_6

In wan, fe80the IPv6 address at the beginning is a dhcpv6 address issued by an optical modem, which is a LAN address

In wan_6, the IPv6 address is the address you get after dialing, and this address is IPv6-PDdistributed according to

  • LAN

In lan, the 240eIPv6 address is issued according to IPv6-PDthe distribution, called, fdfe:f2da:46c8::1/64but the address issued to the LAN, one is a random address, and the other is a short address


5. Website testing

The following two websites are pure IPv6 websites. If you can visit them, it means that your IPv6 configuration is successful~

https://ipv6.test-ipv6.com/

https://6.ipw.cn/

Generally speaking

  • 240eChina Telecom
  • 2408It started with China Unicom
  • 2409It starts with China Mobile/Railcom

6. About port release

If you have a v6 address on the public network and want to set ddns, you need to allow the port, just go to the firewall and set it up, just like v4

网络-> 防火墙-> 端口转发, just add a rule, the default is shared by v4+v6


Afterword

Although IPv6 has been promoted, it may take 4-5 years for it to be truly popularized. But, I can use it, but I can’t

enjoy ~

Guess you like

Origin blog.csdn.net/a924282761/article/details/129067001