[sirsalomon]

Der Thread ist zwar schon älter, aber vielleicht lebt er noch

Die USG bekommt direkt eine IPv6? Meines Wissens ist die USG mit der aktuellen Firmware (4.3.43.xxxx ist der Dev-Stand) nur über das JSON-File in der Lage IPv6 zu verarbeiten, wobei ich das stark hoffe.

"Hoffe" aus dem Grunde, mein Glasfaser soll morgen angeschlossen werden, ich wohne aber nicht in Eurem Einzugsgebieten, sondern im nördlichen Bereich von NRW.

Hier mal das JSON-File, mit dem IPv6 auf der WAN-Seite, als auch auf der LAN-Seite funktionieren soll:

Code:

{
    "firewall": {
        "group": {
            "address-group": {
                "WAN_Gateway": {
                    "address": [
                        "xx.xx.xx.xx",
                        "xx.xx.xx.xx",
                        "xx.xx.xx.xx"
                    ],
                    "description": "Unitymedia"
                }
            }
        },
        "name": {
            "WAN_IN": {
                "rule": {
                    "6001": {
                        "action": "accept",
                        "description": "From_Extern_To_Win10-RDP",
                        "destination": {
                            "address": "172.16.1.110"
                        },
                        "log": "enable",
                        "protocol": "tcp_udp"
                    },
                    "6002": {
                        "action": "accept",
                        "description": "From_Extern_To_Minecraft",
                        "destination": {
                            "address": "172.16.1.51"
                        },
                        "log": "disable",
                        "protocol": "tcp_udp"
                    }
                }
            }
        },
        "ipv6-name": {
            "wan_in-6": {
            "default-action": "drop",
            "description": "wan_in",
            "enable-default-log": "''",
                "rule": {
                    "1": {
                        "action": "accept",
                        "description": "Allow Enabled/Related state",
                        "state": {
                            "established": "enable",
                            "related": "enable"
                            }
                    },
                    "2": {
                        "action": "drop",
                        "description": "Drop Invalid state",
                        "log": "enable",
                        "state": {
                            "invalid": "enable"
                            }
                    },
                    "5": {
                        "action": "accept",
                        "description": "Allow ICMPv6",
                        "log": "enable",
                        "protocol": "icmpv6"
                    }
                }
            },
            "wan_local-6": {
            "default-action": "drop",
            "description": "wan_local",
            "enable-default-log": "''",
                "rule": {
                    "1": {
                        "action": "accept",
                        "description": "Allow Enabled/Related state",
                        "state": {
                            "established": "enable",
                            "related": "enable"
                        }
                    },
                    "2": {
                        "action": "drop",
                        "description": "Drop Invalid state",
                        "log": "enable",
                        "state": {
                            "invalid": "enable"
                        }
                    },
                    "5": {
                        "action": "accept",
                        "description": "Allow ICMPv6",
                        "log": "enable",
                        "protocol": "icmpv6"
                    },
                    "6": {
                        "action": "accept",
                        "description": "DHCPv6",
                        "destination": {
                            "port": "546"
                        },
                        "protocol": "udp",
                        "source": {
                            "port": "547"
                        }
                    }
                }
            }
        }
    },
    "interfaces": {
        "ethernet": {
            "eth0": {
                "address": [
                    "xx.xx.xx.xx/29",
                    "xx.xx.xx.xx/29",
                    "xx.xx.xx.xx/29"
                ],
                "duplex": "auto",
                "speed": "auto",
                "ipv6": {
                    "dup-addr-detect-transmits": "1",
                    "router-advert": {
                        "cur-hop-limit": "64",
                        "link-mtu": "0",
                        "managed-flag": "true",
                        "max-interval": "600",
                        "other-config-flag": "false",
                        "prefix": {
                            "::/64": {
                                "autonomous-flag": "true",
                                "on-link-flag": "true",
                                "valid-lifetime": "2592000"
                            }
                        },
                        "reachable-time": "0",
                        "retrans-timer": "0",
                        "send-advert": "true"
                    }
                }
            },
            "eth1": {
                "ipv6": {
                    "dup-addr-detect-transmits": "1",
                    "router-advert": {
                        "cur-hop-limit": "64",
                        "link-mtu": "0",
                        "managed-flag": "true",
                        "max-interval": "600",
                        "other-config-flag": "false",
                        "prefix": {
                            "::/64": {
                                "autonomous-flag": "true",
                                "on-link-flag": "true",
                                "valid-lifetime": "2592000"
                            }
                        },
                        "reachable-time": "0",
                        "retrans-timer": "0",
                        "send-advert": "true"
                        }
                }
            },            
            "eth2": {
                "address": [
                    "dhcp"],                    
                    "dhcpv6-pd": {
                        "pd": {
                            "0": {
                            "interface": {
                                "eth0": {
                                    "host-address": "::1",
                                    "prefix-id": ":1",
                                    "service": "slaac"
                                }
                            },
                            "prefix-length": "60"
                        }
                    },
                    "rapid-commit": "enable"
                },
                "duplex": "auto",
                "speed": "auto"
            }
        },
        "loopback": {
            "lo": "''"
        }
    },
    "service": {
        "nat": {
            "rule": {
                "2001": {
                    "description": "From_Extern_To_Win10-RDP",
                    "destination": {
                        "address": "xx.xx.xx.xx"
                    },
                    "inbound-interface": "eth0",
                    "inside-address": {
                        "address": "172.16.1.110"
                    },
                    "log": "enable",
                    "protocol": "tcp_udp",
                    "type": "destination"
                },
                "2002": {
                    "description": "From_Extern_To_Minecraft",
                    "destination": {
                        "address": "xx.xx.xx.xx"
                    },
                    "inbound-interface": "eth0",
                    "inside-address": {
                        "address": "172.16.1.51"
                    },
                    "log": "disable",
                    "protocol": "tcp_udp",
                    "type": "destination"
                }
            }
        }
    }
}

Die fixed-IPv4-Adressen basieren noch auf dem derzeitigen Anschluss bei Unitymedia. Da die USG zwei WAN-Ports hat, ist das an sich kein Problem.

Weitere technische Fragen habe ich mal in einem anderen Beitrag geschrieben, da sie hier eventuell nicht passend sind.