NAT with IPv6 (Forced by ISP)

Posted on

Problem :

My ISP has recently decided that “high bandwidth clients” are now forced to use IPv6. While I can plug my laptop with Win7 directly into the modem and I have access, connecting routers or my smoothwall firewall directly to the modem nets a failed connection.

Is there any type of linux setup that I could use to accept an IPv6 connection on eth0, and have that NAT out to devices on eth1?

I understand all of the benefits of using IPv6, but I have a ton of concerns. For example, I have some legacy hardware that cannot communicate via IPv6. I also don’t want my ISP aware of the number of devices on my network. Last thing I need is them jacking up my rates because my tv, pc, laptop, phone, etc. are all connected. I also want to be able to VPN in like I currently do (well, used to at this point) and see all of my devices.

tl;dr: is there any simple or pre-packaged way to connect an IPv6 modem to a dual nic linux box and use that box as a ipv4 router for your local network? The OS doesn’t matter so long as it works.

Reference links

Will the removal of NAT (with the use of IPv6) be bad for consumers?

Without NAT on IPv6, and only one DNS name, how do i talk to my servers?

IPv6 tunnel from behind an ISP-level NAT

The solution here is still a bit unknown.

  • I tried a Netgear N600 (~$80 at Walmart). It could not connect to the internet.
  • I tried a Linksys AC1750 (~$190 at Staples). Even with IPv6 right on the box, I couldn’t get it to connect.
  • I tried plugging straight in with Win7, internet works fine, but ICS, while I could set it up, wouldn’t work as intended.
  • Had the ISP bring out their router. They plugged it in and BAM, working flawlessly.

Anyway, I don’t have a real answer to this. All I’ve got is “I can throw hardware at it, but until the ISP uses theirs, I’m SOL”.

Solution :

If you have available hardware to use, consider installing pfSense firewall. It has support for IPv6, various VPN and a mile long list of other features equival to $50k-100k Cisco devices.
It has some learning curve, but if you are up for it you won’t need anything else.

Leave a Reply

Your email address will not be published. Required fields are marked *