Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 28 subscribers
  • Views 5328 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nest Protect Requires IPV6

NashBrydges

Hi,

I am trying to setup 2 Nest Protect at my home and running Sophos XG Home. During setup, I've come to learn that in order for them to communicate together (so that if one alarm goes off so does the other) I need to have IPV6 enabled on my Sophos XG. Sophos is handling all of the routing on my network. The Nest devices need to obtain a DHCP IPV6 address and they use the IPV4 to connect to the outside.

Question is, I have no idea how to turn this on or enable DHCP for IPV6. Hoping someone here can point me in the right direction.

I've located the IPV6 DHCP settings on my LAN Interface but what would I enter for a IPV6/prefix or gateway IP? Is that all I have to do and the Nest devices will get an IPV6 address?

By the way, the Nest devices are connected via a VLAN on my LAN interface (not sure if that changes anything). Any help would be appreciated.



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    for this to work you will need to have an external IPv6 address assigned and a /56 subnet which you will need to manually assign to your internal networks.

    You will also need setup IPv6 firewall rules. The limitation of the XG and IPv6 is you will need to use MASQ on your interface.

    If you only receive an IPv6 on your external interface, you can use any IPv6 internally because the XG masks it.

    internal IPv6 range could be 2001:abcd:f00d:0000/64. If you use 2001:abcd:f00d::1/64 as your LAN interface address, that is also your gateway and DNS.

    I would suggest using a subset of the range for your DHCP server eg 2001:abcd:f00d::0000::0011 to 2001:adcb:f00d:0000::003f which will give you about 40 addresses.

    Ian

Reply
  • 0

    Hi,

    for this to work you will need to have an external IPv6 address assigned and a /56 subnet which you will need to manually assign to your internal networks.

    You will also need setup IPv6 firewall rules. The limitation of the XG and IPv6 is you will need to use MASQ on your interface.

    If you only receive an IPv6 on your external interface, you can use any IPv6 internally because the XG masks it.

    internal IPv6 range could be 2001:abcd:f00d:0000/64. If you use 2001:abcd:f00d::1/64 as your LAN interface address, that is also your gateway and DNS.

    I would suggest using a subset of the range for your DHCP server eg 2001:abcd:f00d::0000::0011 to 2001:adcb:f00d:0000::003f which will give you about 40 addresses.

    Ian

Children