Okay, cool. Something to play with over the weekend. For IP Autoconfig on
the internal LANs.... do I leave the field after it blank, or do I have to
enter something akin to IPv4's 192.168.x.y ? Forgive me is that is a dumb
question, but I am not at all familiar with IPv6 yet.
Thanks
David
On Fri, Feb 5, 2016 at 9:00 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com>
wrote:
> Hi David,
>
> We recently added DHCPv6 client support (which Comcast requires), so if
> you built an image recently you should have it:
>
> *If* you wanted to enable IPv6:
> --
> Network tab -> IP Version: [ IPv4 & IPv6 ]
>
> Network tab -> Connection Type: [ DHCP/DHCPv6 ]
>
> Network tab -> Internal Interfaces: -> IPv6 Autoconfig: [ enabled ] for
> any internal LAN that you want IPv6 Enabled using "Prefix Delegation"
>
> Network tab -> External DHCPv6 Client Settings: (the defaults should be
> fine)
> --
>
> > Which now begs the question whether I should enable it on my AstLinux
> box which is what is ordinarily connected to the cable modem. If I do
> enable it, what affect does it have.... will systems on my local LAN be
> issued IPv6 addresses as well as IPv4? Are there any security or firewall
> implications? Is there any benefit?
>
>
> Do you need IPv6 enabled now ? most likely no.
>
> Will enabling IPv6 have any security or firewall implications ? most
> likely no, a lot of effort has been made to make dual-stack IPv4/IPv6
> seamless. But never say never.
>
> Should you enable it ? your call, but I would think you do, if not only
> to learn about IPv6. Worst case the "Network tab -> IP Version:" master
> switch can disable IPv6 if needed.
>
> Personally, I have had IPv6 enabled for well over 5 years using Hurricane
> Electric's https://www.tunnelbroker.net . Looking forward to getting
> "native" IPv6 support from my ISP some day.
>
> One thing to remember is IPv6 is 'routed' so you are protected by
> iptables's stateful inspection and not by NAT. You don't port-forward to
> internal devices, but rather you selectively route IPv6 to internal devices.
>
> If you currently have firewall rules limiting kids "screen time" make sure
> they are not IPv4-only rules. The time-schedule-host-block plugin should
> also work with IPv6. Most all modern devices today will try to support
> IPv6 if available.
>
> Lonnie
>
>
> On Feb 4, 2016, at 9:13 PM, David Kerr <da...@kerr.net> wrote:
>
> > Yesterday I connected my MacBook directly to my cable modem as I was
> testing whether AstLinux impacted speedtest results having just been
> upgraded to Comcast higher speed service -- answer no, or if it does it is
> negligible.
> >
> > However I happened to notice in Network Settings that in addition to the
> regular IPv4 address, DHCP had also returned a IPv6 address. This is the
> first time I have noticed this and I suppose it means that Comcast now
> supports IPv6
> >
> > Which now begs the question whether I should enable it on my AstLinux
> box which is what is ordinarily connected to the cable modem. If I do
> enable it, what affect does it have.... will systems on my local LAN be
> issued IPv6 addresses as well as IPv4? Are there any security or firewall
> implications? Is there any benefit?
> >
> > Anyone done this and/or have advice?
> >
> > Thanks
> > David
>
>
>
>
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> pay...@krisk.org.
>
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
