IPv6 through 6rd for internet WAN

Question

I've read an article about setting up SSL-tunnels with 6rd but what about setting up IPv6 internet connectivity through 6rd? 
 My ISP currently only supports IPv6 through 6rd. I am really confused as to how I can set this up on the XG. 
 I have the following info from my ISP: 
 IPv4 BR address: 213.167.115.92 IPv4 Prefix: 0 IPv6 Prefix: 2a01:79c:: IPv6 Prefix Length: 30 IPv6 DNS: 2a01:798:0:8012::4 
 Please advice!

TronyTigno · Accepted Answer

After many attempts, I finally am able to get IPv6 working. :) I tried to create a 6RD tunnel many times and it just never connected. :( This last attempt, I used 6in4, for the heck of it, instead of 6RD. To my surprise, it worked. :) I was reading that 6RD is a feature of 6in4 so I tried it. 6in4 will not automatically assign your local IPv6 subnet but that can be calculated (as mentioned) or obtain that information from your ISP. 
 
 I created the steps below (for my own sanity) but hopefully it will help someone else. It's a very easy step-by-step walk through. 
 
 Items required: Public IPv4 address provided by ISP Internal IPv6 subnet provided by ISP. Calculated or provided by ISP. ISP Border Relay or Border router IPv4 address. 
 --- Step #0 : !!! SAVE YOUR CURRENT CONFIGURATION !!! 
 System &rarr; Administration &rarr; Backup & Restore Save your backup in a safe and easy access location 
 --- Step #1 : Add 6in4 tunnel (not 6RD) 
 System &rarr; Network &rarr; IP Tunnel Click Add Tunnel name: &ldquo;free form&rdquo; Tunnel Type: 6in4 Zone: WAN Local Endpoint: Public IPv4 address provided by ISP Remote Endpoint: ISP Border Relay or Border router IPv4 address. Click Save. 
 A pop-up window will be displayed asking for a static route Destination IP: :: (colon 2x) Prefix: 0 (zero) Leave distance at 1 Click Save 
 --- Step #2 : Enable IPv6 on LAN interface 
 System &rarr; Network &rarr;Interfaces Click to choose your internal LAN port Click IPv6 Configuration box IP Assignment: Static Insert internal IPv6 subnet provided by ISP with a 1 added to the end Example: 2000:abcd:abcd:4321::1 /62 Click Save Click OK at warning window 
 --- Step #3 : Add IPv6 policy to allow traffic. 
 Policies &rarr; Click IPv6 tab &rarr; Add firewall rule &rarr; User/Network Rule Create rule with any-in any-out FOR NOW. Lockdown in step #6 Rule name: &ldquo;free form&rdquo; Identity: off Source: Zone, Any Destination: Zone, Any Action: accept Routing: all off Everything else: off 
 --- Step #4 : Test your IPv6 from the firewall. 
 SSH into the firewall. (or direct console) Click 5. Device management Click 3. Advanced Shell From the prompt ping &ldquo;ipv6.google.com&rdquo; Example: # ping6 ipv6.google.com At this point, ping should reach the internet. If not, troubleshoot or back out. 
 --- Step #5 : Enable IPv6 router advertisements on LAN. (or use DHCPv6) 
 System &rarr; Network &rarr; IPv6 Router Advertisement Click add Interface: click your LAN port Prefix Advertisement Configuration: Insert a /64 subnet portion of your overall /62 Example: 2000:abcd:abcd:4323:: Click Save 
 --- Step #6 : Lockdown your IPv6 policy from step #3. 
 Policies &rarr; Click IPv6 tab Click on the policy created in step #3 Do not do extra work. Just copy your favorite IPv4 firewall policy to IPv6 
 --- Step #7 : Success!!! Conduct final IPv6 tests from the LAN workstations.

TronyTigno · Answer

It looks like you got the most difficult part out of the way, which is getting your device connected to the internet using IPv6. :) 
 
 You are correct regarding the subnetting and I stand corrected, which I missed a using the next octet over. Here is the breakdown using website: http://www.gestioip.net/cgi-bin/subnet_calculator.cgi

IP address 
 2000:abcd:abcd:4321::/62

type 
 GLOBAL-UNICAST

network 
 2000:abcd:abcd:4320::

Prefix length 
 62

network range 
 2000:abcd:abcd:432 0 :0000:0000:0000:0000- 2000:abcd:abcd:432 3 :ffff:ffff:ffff:ffff

total IP addresses 
 73786976294838206464

Breaking down your /62 network into individual /64's, you will have the following sub-networks to use for each separate VLAN: 
 2000:abcd:abcd:4320::/64 2000:abcd:abcd:4321::/64 
 2000:abcd:abcd:4322::/64 
 2000:abcd:abcd:4323::/64 
 If you have a /60, you have a bunch more subnets to use. 
 Do not forget to match your IPv6 Router Advertisements with your respective VLANs. 
 
 It seems those are the only pieces missing. 
 
 Anyway, I hope I answered your question. Please advise when you do get it working. I'm very curious. :) 
 
 Thanks.

DavidOkeyode · Answer

@Kenneth Andr&eacute;Kr&oslash;genes - here's the link to the youtube video that I made that answers your question :) - www.youtube.com/watch