|
samh
|
 |
« on: February 18, 2008, 03:54:44 pm » |
|
We are looking to compile a list of firewall/CPE devices that by default (With no major changes except maybe a firmware update) support IPv6 over IPv4 tunnels. (Protocol 41 tunneling).
If you are passing your tunnel over a commercial firewall to terminate on a machine behind it, then please let us know what version hardware and firmware you are having success with.
So far we have tested in house:
# Linksys WRT54G firmware 4.21.2
# Linksys WRT54GL firmware 4.30.7 & 4.30.11
# D-Link DGL-4100 firmware 1.6 & 1.7
All of which work.
|
|
|
|
« Last Edit: July 28, 2008, 09:45:45 am by broquea »
|
Logged
|
|
|
|
|
amph
Guest
|
|
« Reply #1 on: February 23, 2008, 07:16:40 pm » |
|
Hmm, not sure if it counts as proprietary  but I imagine any firewall/router/modem device that is capable of DDWRT/OpenWRT would be capable of this. It is interesting though to see which are capable of it out of the box. amph |
|
|
|
|
Logged
|
|
|
|
yorick
Newbie
Posts: 15
|
|
« Reply #2 on: April 16, 2008, 10:34:27 am » |
|
Works on Nokia IP boxen running CheckPoint. Tested with IPSO 4.1-build045 and CheckPoint VPN-1 NGX R65 HFA02 + ipv6 hotfix. The documentation leaves something to be desired, and tunnels cannot be terminated on the VRRP (virtual) address of a pair. On a single machine, it works fine.
|
|
|
|
|
Logged
|
|
|
|
dragoon
Newbie
Posts: 29
|
|
« Reply #3 on: June 05, 2008, 01:12:02 pm » |
|
SpeedTouch 546v6 Firmware 7.4.1.7
|
|
|
|
|
Logged
|
|
|
|
|
avongauss
|
|
« Reply #4 on: June 05, 2008, 05:14:11 pm » |
|
D-Link DGL-4500, Firmware 1.02, Virtual Server Rule (protocol 41 to endpoint)
|
|
|
|
|
Logged
|
|
|
|
lorenzoz
Newbie
Posts: 7
|
|
« Reply #5 on: June 27, 2008, 02:54:56 am » |
|
Asus WL500g.P support Proto-41-Passthrought but don't work with AICCU (Heartbeat Tunnel)
|
|
|
|
|
Logged
|
|
|
|
|
broquea
|
|
« Reply #6 on: August 11, 2008, 11:33:26 pm » |
|
Linksys WRT610N passes protocol 41 out of the box.
Friend is seeing if he can get dd-wrt running on it as well, but at least it does this. Sadly for such a new product, still no native IPv6 support in their firmware/interface.
|
|
|
|
|
Logged
|
|
|
|
|
drydog
|
|
« Reply #7 on: November 17, 2008, 05:37:17 pm » |
|
We are looking to compile a list of firewall/CPE devices that by default (With no major changes except maybe a firmware update) support IPv6 over IPv4 tunnels. (Protocol 41 tunneling). I use D-Link Gaming Router DGL-4300 fw 1.7. I have NAT enabled. The router works with HE's IPv6 Tunnel Broker out-of-the-box. This is a regular IPv4-only router. Direct IPv6 Support with D-Link Routers Also, D-Link is supposed to support IPv6 directly in some of their (newer?) routers. They are: D-Link IPv6 support: DI-784 abg, DI-524 bg, DI-624 bg, WBR-1310 g, WBR-2310 g rangebooster, DIR-615 n. See Ref: http://www.ipv6.org.tw/summit2008/doc/1-4-4.pdfIt would be nice if HE can provide configuration instructions for these routers (although I could probably figure it out myself eventually once I get one). |
|
|
|
« Last Edit: November 17, 2008, 05:43:08 pm by drydog »
|
Logged
|
|
|
|
|
broquea
|
|
« Reply #8 on: November 22, 2008, 12:03:03 pm » |
|
D-Link DIR-615, not 100% confirmed yet, but after reviewing a user's screen shots of the device's web interface out of the box, it appears to let you configure a 6in4 tunnel on it, and plug in the routed /64 to hand out to your LAN. I'm going to run out to a store and see if I can get one. Mostly for personal use at home, aside from testing it for this HCL. I'll post some screen shots if I can get one and confirm. I'll have screen shots that hopefully I can sort into example configurations. EDIT - Looks like this model needs to be HARDWARE Rev. C EDIT 2 - http://ftp://ftp.dlink.com/Gateway/dir615_revC/Manual/dir615_revC_manual_300.pdf start at their page 48, does native, pppoe, 6to4, 6in4 |
|
|
|
« Last Edit: November 22, 2008, 02:05:20 pm by broquea »
|
Logged
|
|
|
|
|
drydog
|
|
« Reply #9 on: November 25, 2008, 12:15:03 am » |
|
The IPv6 configuration choices for D-Link 615 n are
- Link-Local
- Static IPv6 Stateful or Stateless
- DHCPv6 Stateful or Stateless
- IPv6 over PPPoE Stateful or Stateless
- 6 to 4 Tunneling Stateful or Stateless
- IPv6 in IPv4 Tunneling Stateful or Stateless
I think Hurricane electric uses IPv6 in IPv4 Tunneling, as 6 in 4 Tunneling is for isolated networks.
For Stateful or Stateless I think that's just a local (site) choice whether the D-Link router assigns an address with it's own Router Advertisement Network Discovery Protocol daemon (Stateless) or each host sets it's IPv6 address (Stateful). I could be wrong.
Question: are these statements correct?
|
|
|
|
|
Logged
|
|
|
|
limemonkey
Newbie
Posts: 2
|
|
« Reply #10 on: January 28, 2009, 09:29:06 am » |
|
FRITZ!Box Fon WLAN 7170, Firmware-Version 29.04.67 passes protocol 41, but has no Interface to control this beheviour.
Works perfectly from a Mac with os x 10.5.
|
|
|
|
|
Logged
|
|
|
|
itechie
Newbie
Posts: 2
|
|
« Reply #11 on: July 25, 2009, 04:49:07 pm » |
|
Apple Time Capsule firmware 7.4.2
|
|
|
|
|
Logged
|
|
|
|
|
Ninho
|
|
« Reply #12 on: August 07, 2009, 09:00:51 am » |
|
Old Thomson or Alcatel Speedtouch 510 v4 (firmware 4.2.7.16).
Built-in protocol 41 helper need be disabled ("unbound"), and a NAT rule added specifically to pass proto 41 datagrams to the machine serving as gateway.
In addition for HE tunnels to work (but not 6in4 in general) firewall rules have to be added so that the Speedtouch answers pings.
|
|
|
|
|
Logged
|
|
|
|
|
jrowens
|
|
« Reply #13 on: August 20, 2009, 02:59:27 am » |
|
FWIW, this cheap Actiontec GT701-wg DSL modem passes prot 41 just fine. That is what you mean, right, not that it has to be able to participate in any IPv6 itself?
Firmware is QW06.5-3.60.3.0.8.6-GT701-WG. It's the freebie that came with the DSL service.
|
|
|
|
|
Logged
|
|
|
|
dataless
Newbie
Posts: 23
|
|
« Reply #14 on: August 20, 2009, 10:09:06 am » |
|
I'm using an old Secure Computing SG570 with firmware Version 3.1.4u5 and it allows tunnels with zero configuration.
It has built in IPv6 support that can be enabled if your ISP supports IPv6, Comcast does not at this time so I cannot test that side of things. I turned the IPv6 support off because of this.
I did ssh into the router and setup my HE tunnel through the CLI at one point, but it doesn't save the changes upon reboot so I opted not to use this method. I setup a VMware CentOS to handle IPv6 and DNS locally, it also worked fine when I used a Windows 7 machine to connect directly to the tunnel as well.
|
|
|
|
|
Logged
|
|
|
|
|
