This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to configure IPv6 HE Tunnel 6in4 - DHCP Ports Gateways RA etc

I'm running Sophos XG SFOS 17.1.3 MR-3. WAN is provided by PPPoE, Plusnet is my ISP and they don't do native IPv6. I wanted to see if I could get IPv6 set up on my network so signed up for a HE IPv6 tunnel.

I've scoured the internet for any guides but can't find anything that really helps. What do I need to configure to get my XG and the internal LAN using IPv6?

Things I've tried / got set up:

1. Set up the IP Tunnel as 6in4, Zone is WAN, Local Endpoint is the static IPv4 that is assigned to my WAN by Plusnet, Remote Endpoint is the IPv4 Server Address HE gives the tunnel.

2. On WAN interface checked the IPv6 checkbox and set IP assignment as static. Set IPv6/Prefix as the "Client IPv6 Address" as shown in the HE Tunnel, and set the Gateway IP as the Server IPv6 Address as shown in the HE Tunnel.

3. Set up an IPv6 Firewall rule to let anything from LAN to WAN.

4. Set a static IPv6 address and GW on my test client (MacOS Mojave) - Router pointing to static IPv6 given to the WAN port on the XG, and the static IPv6 of the Mac an IPv6 that's within the subnet range.

But I can't pass any of the IPv6 website tests (e.g. https://test-ipv6.com)

Can anyone offer help on getting this working?

Thanks!

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi,

two things.

1/. the IPv6 is a completely seperate firewall in XG

2/. did you enable a MASQ (NAT), XG does not do IPv6 without a NAT.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 KeithThornburn over 6 years ago in reply to rfcat_vk

Hi Ian, thanks for taking the time to respond. I've read other posts you've been active in so thanks for dropping by.

I'm using the default "Use Gateway Specific Default NAT Policy".

For clarity I've added some screenshots showing my setup.
Cancel
Vote Up 0 Vote Down

Cancel
0 KeithThornburn over 6 years ago in reply to KeithThornburn

I also have the default ::1 route set up and pointing to the 6in4 tunnel.

Do I need to set a static IPv6 address to the WAN interface if I'm using the tunnel?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to KeithThornburn

Hi Keith,

I think part of the issue is the link is showing status down, you need to change the testing destination to something you can test in the wan link manager tab.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 6 years ago in reply to KeithThornburn

Hi Keith,

I think part of the issue is the link is showing status down, you need to change the testing destination to something you can test in the wan link manager tab.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 KeithThornburn over 6 years ago in reply to rfcat_vk

I've always had the link status showing down for my WAN, even just the normal fibre PPPoE connection, and it hasn't had any affect on my connectivity. I just put it down to a buggy interface. Interestingly I can't ping the IPv4 PPPoE Gatway 195.166.130.251from my LAN but I can from a different network, e.g. at place of work, etc.
Cancel
Vote Up 0 Vote Down

Cancel