For each existing IPv4 network, you must create an equivalent IPv6 network under LAN interfaces. Here, the settings for interface binding, routing tag, and VLAN ID must match the settings of the corresponding IPv4 network settings. Because a device can have multiple IPv6 addresses, you must add statically configured IPv6 addresses under IPv6 addresses.
Entries in the LAN interfaces table have the following meaning:
- Interface active
- Activates or deactivates this LAN interface.
- Interface name
- Enter a name for the logical IPv6 interface which is to apply to the physical interface (interface assignment) and the VLAN ID.
- Interface assignment
- Select the physical interface to be combined with the VLAN ID to form the logical IPv6 interface. With IPv6, the mapping "any" used with IPv4 is no longer possible.
- VLAN-ID
- Select the VLAN ID to be combined with the physical interface to form the logical IPv6 interface.
- Interface tag
- The interface tag that you enter here is a value that uniquely identifies the network. All packets received by this device on this network will be internally marked with this tag. The interface tag enables the routes which are valid for this network to be separated even without explicit firewall rules.
- Auto configuration
- Enable or disable the automatic configuration of addresses (SLAAC or DHCPv6) for this interface in the client role.
Important: If the device itself sends router advertisements from this interface, it does not produce IPv6 addresses from received router advertisements from other routers, even when auto-configuration is enabled.
- Accept router advertisements
- Enables or disables the processing of received router advertisement messages. With processing disabled, the device ignores any prefix, DNS and router information received via router advertisements.
- Forwarding
- Enables or disables the forwarding of data packets to other interfaces. With forwarding disabled, no router advertisements are transmitted from this interface.
- MTU
- Here you set the valid MTU for the corresponding link.
- Firewall active for this interface
- If the global firewall is enabled for IPv6 interfaces, you can disable the firewall for an individual interface here.
- ND-Proxy
- Enables or disables the IPv6 Neighbor Discovery proxy. The ND proxy corresponds to the IPv4 counterpart ARP proxy. The ND proxy integrates remote IPv6 stations into your local network as if they were physically located within it. The router then responds to neighbor discovery packets on behalf of the remote station.
Possible scenarios:
- An upstream router does not support DHCPv6 prefix delegation. The downstream router enables the ND proxy and uses the same /64 prefix on its LAN and WAN interfaces. The LAN prefix is generated from the router advertisement of the upstream router of the WAN interface. This enables communication between LAN stations and WAN stations that use the same /64 prefix.
- A VPN gateway assigns dial-up clients an IPv6 address from the same prefix that is already configured on a local interface. This router must enable the ND proxy to allow communication between dial-in clients and stations on the local LAN with the same IPv6 prefix. This scenario is analogous to the ARP proxy for IPv4.
- Comment
- Enter a descriptive comment for this entry.
