This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nest Protect Requires IPV6

Hi,

I am trying to setup 2 Nest Protect at my home and running Sophos XG Home. During setup, I've come to learn that in order for them to communicate together (so that if one alarm goes off so does the other) I need to have IPV6 enabled on my Sophos XG. Sophos is handling all of the routing on my network. The Nest devices need to obtain a DHCP IPV6 address and they use the IPV4 to connect to the outside.

Question is, I have no idea how to turn this on or enable DHCP for IPV6. Hoping someone here can point me in the right direction.

I've located the IPV6 DHCP settings on my LAN Interface but what would I enter for a IPV6/prefix or gateway IP? Is that all I have to do and the Nest devices will get an IPV6 address?

By the way, the Nest devices are connected via a VLAN on my LAN interface (not sure if that changes anything). Any help would be appreciated.



This thread was automatically locked due to age.
Parents
  • Hi,

    for this to work you will need to have an external IPv6 address assigned and a /56 subnet which you will need to manually assign to your internal networks.

    You will also need setup IPv6 firewall rules. The limitation of the XG and IPv6 is you will need to use MASQ on your interface.

    If you only receive an IPv6 on your external interface, you can use any IPv6 internally because the XG masks it.

    internal IPv6 range could be 2001:abcd:f00d:0000/64. If you use 2001:abcd:f00d::1/64 as your LAN interface address, that is also your gateway and DNS.

    I would suggest using a subset of the range for your DHCP server eg 2001:abcd:f00d::0000::0011 to 2001:adcb:f00d:0000::003f which will give you about 40 addresses.

    Ian

  • Hmmm, do I really need firewall rules for this since there is no external communication via IPV6? Once the devices get an address, it's used to communicate between devices within the network so nothing external. For this same reason, do I really need an external IPV6 WAN IP?

  • Hi NashBrydges,

    which model Nest Protect? I have reviewed there site for the fire alarms and there is no ethernet connection capability. All connections are via wifi or bluetooth.

    IPv6 for internal only sounds a little strange to me?

    Ian

  •  

    I was incredulous as well since their site has absolutely no mention of this requirement anywhere but I got this info directly from Nest Support. IPV6 required for device-to-device communications only and IPV4 required for external communications.

Reply Children