Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:network:ipv6:ipv6.nat6 [2023/03/27 06:33] – [Troubleshooting] vgaetera | docs:guide-user:network:ipv6:ipv6.nat6 [2023/09/17 23:39] – [Introduction] vgaetera | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| * Creating a subnet for when the network doesn' | * Creating a subnet for when the network doesn' | ||
| * Being provided a smaller prefix than a /64 or worse, none at all or a ULA address. | * Being provided a smaller prefix than a /64 or worse, none at all or a ULA address. | ||
| - | * Follow | + | * See also: [[docs: |
| ===== Command-line instructions ===== | ===== Command-line instructions ===== | ||
| Line 26: | Line 26: | ||
| ==== 2. Network ==== | ==== 2. Network ==== | ||
| - | Disable IPv6 source | + | Disable IPv6 source |
| <code bash> | <code bash> | ||
| Line 45: | Line 45: | ||
| # Runtime configuration | # Runtime configuration | ||
| - | nft list ruleset | + | ip -6 address show; ip -6 route show table all |
| + | ip -6 rule show; nft list ruleset | ||
| # Persistent configuration | # Persistent configuration | ||
| - | uci show firewall | + | uci show network; |
| - | </ | + | |
| - | + | ||
| - | ===== Extras ===== | + | |
| - | ==== Selective IPv6 masquerading ==== | + | |
| - | Enable selective IPv6 masquerading for a specific source subnet. | + | |
| - | + | ||
| - | <code bash> | + | |
| - | # Configure firewall | + | |
| - | uci -q delete firewall.@zone[1].masq6 | + | |
| - | uci -q delete firewall.nat66 | + | |
| - | uci set firewall.nat66=" | + | |
| - | uci set firewall.nat66.family=" | + | |
| - | uci set firewall.nat66.proto=" | + | |
| - | uci set firewall.nat66.src=" | + | |
| - | uci set firewall.nat66.src_ip=" | + | |
| - | uci set firewall.nat66.target=" | + | |
| - | uci commit firewall | + | |
| - | / | + | |
| </ | </ | ||