Hi David, We recently added DHCPv6 client support (which Comcast requires), so if you built an image recently you should have it:
*If* you wanted to enable IPv6: -- Network tab -> IP Version: [ IPv4 & IPv6 ] Network tab -> Connection Type: [ DHCP/DHCPv6 ] Network tab -> Internal Interfaces: -> IPv6 Autoconfig: [ enabled ] for any internal LAN that you want IPv6 Enabled using "Prefix Delegation" Network tab -> External DHCPv6 Client Settings: (the defaults should be fine) -- > Which now begs the question whether I should enable it on my AstLinux box > which is what is ordinarily connected to the cable modem. If I do enable it, > what affect does it have.... will systems on my local LAN be issued IPv6 > addresses as well as IPv4? Are there any security or firewall implications? > Is there any benefit? Do you need IPv6 enabled now ? most likely no. Will enabling IPv6 have any security or firewall implications ? most likely no, a lot of effort has been made to make dual-stack IPv4/IPv6 seamless. But never say never. Should you enable it ? your call, but I would think you do, if not only to learn about IPv6. Worst case the "Network tab -> IP Version:" master switch can disable IPv6 if needed. Personally, I have had IPv6 enabled for well over 5 years using Hurricane Electric's https://www.tunnelbroker.net . Looking forward to getting "native" IPv6 support from my ISP some day. One thing to remember is IPv6 is 'routed' so you are protected by iptables's stateful inspection and not by NAT. You don't port-forward to internal devices, but rather you selectively route IPv6 to internal devices. If you currently have firewall rules limiting kids "screen time" make sure they are not IPv4-only rules. The time-schedule-host-block plugin should also work with IPv6. Most all modern devices today will try to support IPv6 if available. Lonnie On Feb 4, 2016, at 9:13 PM, David Kerr <da...@kerr.net> wrote: > Yesterday I connected my MacBook directly to my cable modem as I was testing > whether AstLinux impacted speedtest results having just been upgraded to > Comcast higher speed service -- answer no, or if it does it is negligible. > > However I happened to notice in Network Settings that in addition to the > regular IPv4 address, DHCP had also returned a IPv6 address. This is the > first time I have noticed this and I suppose it means that Comcast now > supports IPv6 > > Which now begs the question whether I should enable it on my AstLinux box > which is what is ordinarily connected to the cable modem. If I do enable it, > what affect does it have.... will systems on my local LAN be issued IPv6 > addresses as well as IPv4? Are there any security or firewall implications? > Is there any benefit? > > Anyone done this and/or have advice? > > Thanks > David ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
