How to set up IPv6 on AX88U PRO

[nishadrox]

I have a ZTE Fibre broadband ONT which looks like below:

Screenshots of ASUS AX88U PRO:

How do I set up ipv6 with above details on my ASUS AX88U PRO?

Thanks in advance!

 

[bennor]

Asus support has a general support document (from 2023) on how to setup IPV6 that may or may not be relevant to your question.

[IPv6] How to set up IPv6 in ASUS router? | Official Support | ASUS Global

You may want to see, if you haven't already, if there is specific support forum for your broadband provider to see if anyone in those forums can answer if any specific settings that may be needed for IPv6 on your broadband provider's service. Like what the IPv6 Connection Type setting should be.

 

[nishadrox]

Asus support has a general support document (from 2023) on how to setup IPV6 that may or may not be relevant to your question.

[IPv6] How to set up IPv6 in ASUS router? | Official Support | ASUS Global

You may want to see, if you haven't already, if there is specific support forum for your broadband provider to see if anyone in those forums can answer if any specific settings that may be needed for IPv6 on your broadband provider's service. Like what the IPv6 Connection Type setting should be.

This doc is not helpful at all, already saw it.
But thanks!

Unfortuantely there are no other forum posts related to my ISP.

 

[bennor]

Unfortuantely there are no other forum posts related to my ISP.

Who is the ISP?

 

[nishadrox]

Who is the ISP?

Sri Lanka Telecom (An ISP from Sri Lanka)

Won't the values in the screenshots above help with the configuration?

 

[bennor]

Normally you would just connect the Asus router to the ONT and see if it works. If it doesn't, then there may be specific settings that are broadband provider specific that may need to be configured within the router. For IPv6 not every broadband provider uses or indicates the specific settings one needs to set or configure in their Asus router GUI. In some cases a broadband provider may not even support IPv6 even though their equipment they provide to the customer may indicate settings for IPv6.

There is some discussion that may or may not be relevant to your question from about a year ago over on Reddit where a person there asked about setting up an Asus router with SLT fiber.

https://www.reddit.com/r/srilanka/comments/113mriq/anyone_can_guide_me_with_slt_fiber_router_to_asus

One person in that discussion indicated IPv6 buffering issues with the (Connection Type) Native setting on the Asus router. They discuss their workaround which was to change Native to "FLET's IPv6 service". Note: that is what worked for their specific setup, it may not work for yours.

 

[Tech9]

This ONT is a router as well, Asus IPv6 configuration must be Passthrough. This Asus router is in double NAT with private WAN IP address.

 

[nishadrox]

This ONT is a router as well, Asus IPv6 configuration must be Passthrough. This Asus router is in double NAT with private WAN IP address.

I changed it to Passthrough and now IPv6 seems to be working!

Is it ok to have it as Passthrough? Any security issues?

I have configured DNS over TLS on ASUS WAN conenction, and also configured IPv6 DNS servers for the same DNS provider. Will this all work with Passthrough?

 

[heysoundude]

Will your ISP allow you to bridge their gateway equipment? (this means turning the routing capabilities of the ISP equipment off)
doing so will put all security and privacy under your control/responsibility.
Double NAT is one way to stay more private

 

[nishadrox]

Will your ISP allow you to bridge their gateway equipment? (this means turning the routing capabilities of the ISP equipment off)
doing so will put all security and privacy under your control/responsibility.
Double NAT is one way to stay more private

Staying private is good I guess

Will ASUS IPv6 DNS servers work properly in this Double NAT mode?

 

[bennor]

Will your ISP allow you to bridge their gateway equipment?

In the Reddit link I posted above one person describes doing exactly that. They contacted the broadband provider (SLT) and asked them to put the fiber ONT/router into bridge mode. The person in that reddit post gives a lengthy reply on a couple of approaches.

 

[Tech9]

Double NAT is one way to stay more private

With IPv6 enabled in Passthrough there is no double NAT for IPv6. There is no NAT.

 

[Tech9]

Will ASUS IPv6 DNS servers work properly in this Double NAT mode?

Must be working, but you client has to be IPv6 capable on IPv6 enabled network. Is this the reason for enabling IPv6? CGNAT ISP?

 

[nishadrox]

With IPv6 enabled in Passthrough there is no double NAT for IPv6. There is no NAT.

So is this risky? Having no NAT at all for IPv6 as it is in Passthrough mode?

Sorry, I'm not very knowledgeable in this network stuff.

 

[Tech9]

I know nothing about your ISP, I don't know why this ISP device is in router mode and can it be used bridge mode, I don't know why you enabled IPv6 on your Asus router. Currently your IPv4 network is in double NAT, perhaps even tipple NAT if your ISP uses CGNAT, your IPv6 network is managed by the ISP device in Passthrough configuration, etc. When you enable/disable options on your router(s) there is a reason behind it. What is the reason behind this setup? What do you want to achieve, what wasn't working before? "Not very knowledgeable" and playing with settings can be risky.

 

[nishadrox]

I know nothing about your ISP, I don't know why this ISP device is in router mode and can it be used bridge mode, I don't know why you enabled IPv6 on your Asus router. Currently your IPv4 network is in double NAT, perhaps even tipple NAT if your ISP uses CGNAT, your IPv6 network is managed by the ISP device in Passthrough configuration, etc. When you enable/disable options on your router(s) there is a reason behind it. What is the reason behind this setup? What do you want to achieve, what wasn't working before? "Not very knowledgeable" and playing with settings can be risky.

I just like to try out new technologies/standards. No special reason for enabling IPv6.

To enable IPv6 on ISP router I had to use a different broadband username, with "v6" added as a suffix. And on the ASUS router I tried different methods and IPv6 didn't work for some reason. Then finally updated ASUS router to Passthrough mode and now it seems to be working.

 

[heysoundude]

I just like to try out new technologies/standards. No special reason for enabling IPv6.

To enable IPv6 on ISP router I had to use a different broadband username, with "v6" added as a suffix. And on the ASUS router I tried different methods and IPv6 didn't work for some reason. Then finally updated ASUS router to Passthrough mode and now it seems to be working.

@Tech9 and I have differing opinions on this, but my outlook&attitude is more in line with yours, so here is my support:

Things should make more sense to you once you get some education- Hurricane Electric offers a free IPv6 course. The first 2-3 levels should get most people understanding, and can be accomplished in an hour or 2 at IPv6.he.net/certification

 

[nishadrox]

Thanks for the advice, I appreciate it!

 

[Crimliar]

Is this risky??? If you are using IPv6 there is still a router firewall there. So unless you turn the firewall off, or poke holes in it, then you'll be covered against "unsolicited access".
*It can get complex if you are running a server using the IPv6 address and your ISP treats the IPv6 addresses as dynamic!

 

[nishadrox]

Is this risky??? If you are using IPv6 there is still a router firewall there. So unless you turn the firewall off, or poke holes in it, then you'll be covered against "unsolicited access".
*It can get complex if you are running a server using the IPv6 address and your ISP treats the IPv6 addresses as dynamic!

Yes, the firewall is on. And no, I'm not going to run any server.