I was able to get one of these working with some pain but I believe mostly because of some firmware bugs in the Zywall firmware.
Please... point out issues.. this is working for me but is it "right" is the question.
This is how I got it working so I hope this is of some use to others.
This assumes you have the latest firmware on the Zywall and an NVG589 (on mine it's 3.30(BDQ.4))
and that you already have IPv6 enabled by AT&T with your /60
(to check, see broadband tab in your 589 config - make sure IPv6 status = available, etc)
This info was cobbled from the documentation which is confusing to say the least.
1. Enable IPv6 on your Zywall.
Configuration -> System -> IPv6 then check the box and hit apply at the bottom.
2. Go to Configuration -> Object -> DHCPv6 -> Request
Hit add
Name: Request_WAN1_PD
Request Type: Prefix Delegation
Interface: WAN1
Hit OK.
3. Go to configuration -> Network -> Interface -> Ethernet Tab
Edit WAN1
Tick "Enable IPv6"
Hit "Show Advanced"
Tick "Enable Stateless Address Auto-configuration (SLAAC)"
Under "Address from DHCPv6 Prefix Delegation" hit add
Select "Request_WAN1_PD" fron the dropdown under "Delegated Prefix"
Enter "::1/128" for Suffix Address
Click OK at the bottom
4. Edit WAN1 again (yes... gotta do it again or it won't work)
Hit "Show Advanced"
Under "DHCPv6 Setting" set DHCPv6 to "Client"
Under "DHCPv6 Request Options" hit add
In the window that appears select "Request_WAN1_PD" fron the drop down.
Hit OK on the dialog.
Hit OK on the WAN1 Edits.
At this point you should see that WAN1 has grabbed an address.
5. We will edit LAN1
Edit Lan1
Hit "Show ADvanced Settings"
Tick "Enable IPv6"
Under "IPv6 Router Advertisement Setting" tick "Enable Router Advertisement"
Under "Advertised Prefix from DHCPv6 Prefix Delegation" hit add
Select "Request_WAN1_PD" from the dropdown
Enter "::0001/64" in the "suffix address" box.
(NOTE... "::1/64" for some reason just did not work for me, the UI kept giving me errors.)
Hit OK.
You should see some IPv6 addresses on LAN1 now.
Your computers should grab their IPv6 addresses now.
There are a lot of sites such as test-ipv6.com that can be used to verify your config.
Hope this helps someone.
↧