Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
userdoc:tt_ipv6_ula_nptv6_config [2017/06/03 17:11] abelbeck [Unique Local Addresses (ULA)] |
userdoc:tt_ipv6_ula_nptv6_config [2017/06/04 13:27] abelbeck [Example IPv6 ULA / NPTv6 Setup] |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== IPv6 ULA / NPTv6 Configuration ====== | ====== IPv6 ULA / NPTv6 Configuration ====== | ||
- | AstLinux supports IPv6 Unique Local Addresses (ULA) with Network Prefix Translation (NPTv6) to assign static local routable IPv6 subnets which can be have their prefix mapped 1:1 to Global Unicast Addresses (GUA) for public | + | AstLinux supports IPv6 Unique Local Addresses (ULA) with Network Prefix Translation (NPTv6) to assign static local routable IPv6 subnets which can be have their prefix mapped 1:1 to Global Unicast Addresses (GUA) for global |
This feature is often used in conjunction with: | This feature is often used in conjunction with: | ||
**[[userdoc: | **[[userdoc: | ||
- | !!Note: AstLinux 1.3.0 or later is required!! | + | Should everyone configure IPv6 with ULA / NPTv6 ? Not everyone. For some, simply selecting " |
+ | Listed are common situations when IPv6 with ULA / NPTv6 is useful, if any applies continue reading below: | ||
+ | |||
+ | * OpenVPN Server - you want to route IPv6 in the tunnel | ||
+ | * Downstream IPv6 subnets that are statically defined | ||
+ | * Transition from IPv4 to IPv6 but don't want GUA's everywhere | ||
+ | * Define static firewall rules based on ULA's | ||
+ | * Want to design an IPv6 network containing minimal ISP //owned// IPv6 prefixes | ||
+ | |||
+ | |||
+ | !!Note: AstLinux 1.3.0 or later is required!! | ||
===== Unique Local Addresses (ULA) ===== | ===== Unique Local Addresses (ULA) ===== | ||
Line 29: | Line 39: | ||
===== Global Unicast Addresses (GUA) ===== | ===== Global Unicast Addresses (GUA) ===== | ||
- | What is a GUA ? IPv6 GUA's are globally routable IPv6 addressed | + | What is a GUA ? IPv6 GUA's are globally routable IPv6 addresses |
!!Tip ->!! If the IPv6 address begins with '' | !!Tip ->!! If the IPv6 address begins with '' | ||
+ | |||
+ | If you want to connect to an IPv6 server on the internet, your device must either have a GUA, or a ULA with ULA->GUA prefix translation available. | ||
===== Network Prefix Translation (NPTv6) ===== | ===== Network Prefix Translation (NPTv6) ===== | ||
Line 69: | Line 81: | ||
Click **Configure Plugin**, set '' | Click **Configure Plugin**, set '' | ||
- | Define the global prefix, since were using dynamic DHCPv6 only specify the prefix length: | + | Define the global prefix, since we are using dynamic DHCPv6 only specify the prefix length: |
NET_PREFIX_TRANSLATION_GLOBAL_PREFIX="::/ | NET_PREFIX_TRANSLATION_GLOBAL_PREFIX="::/ | ||
Line 85: | Line 97: | ||
\\ | \\ | ||
- | Final note, carving | + | !!Important ->!! Carving |
- | ^ Suggestion on how to manage your ULA's with a GUA/60 prefix: ^^ | + | ^ Suggestion on how to manage your ULA's with a GUA/60 prefix: |
| GUA Prefix Delegation | ''< | | GUA Prefix Delegation | ''< | ||
| ULA's with Assign GUA Prefix | ''< | | ULA's with Assign GUA Prefix | ''< | ||
Line 95: | Line 107: | ||
For completeness, | For completeness, | ||
- | ^ Suggestion on how to manage your ULA's with a GUA/56 prefix: ^^ | + | ^ Suggestion on how to manage your ULA's with a GUA/56 prefix: |
| GUA Prefix Delegation | ''< | | GUA Prefix Delegation | ''< | ||
| ULA's with Assign GUA Prefix | ''< | | ULA's with Assign GUA Prefix | ''< | ||
| ULA's for Local IPv6 | ''< | | ULA's for Local IPv6 | ''< | ||
| ULA for OpenVPN | ''< | | ULA for OpenVPN | ''< | ||
- | ===== OpenVPN IPv6 ULA ===== | + | ===== OpenVPN |
The use of ULA's is particularly useful with VPN's since ULA's are static. | The use of ULA's is particularly useful with VPN's since ULA's are static. |