NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi RKB853 ipv6 firewall
Hey all, Our iSP recently enabled ipv6, and it's all working. I get ipv6 on WAN, and LAN, but I'm missing some info regarding Firewall and public reachability. As there are no ipv6 filtering ...
What a fascinating question! Thanks for bringing this up.
First, I have no idea what the answer is.
Second, I just now did a test:
- My Windows 10 computer Firewall is set to allow ICMP (ping) from both the Local LAN and Public networks.
- Opened a command window (often called a DOS window) and typed ipconfig /all
- Copied the IPv6 address (preferred) Why are there so many IPv6 addresses???
- I disconnected my Android phone from the Orbi to use LTE data.
- Opened the HE.NET app.
- Selected Ping from the drop down menu
- Selected V6
- Entered the IPv6 address of my Windows 10 computer
- The app correctly deduced that I am on Spectrum.
- Got 100% packet loss.
So, my conclusion is that the Orbi Firewall allows connections to be set up from the Orbi LAN, but not to the Orbi LAN from outside.
I notice that on the Orbi web interface, Advanced Tab, Advanced Settings Menu, IPv6 there is a radio button at the bottom of the screen that offers a choice of IPv6 Filtering "Secured" or "Open". Mine is set at the default of Secured. I changed the setting from Secured to Open and hit Apply. Repeated the experiment several time and the result is always the same: 100% packet loss. I notice that the Help information for this screen says nothing about this setting. (Not much in the way of "Help")
There is a really nice article on IPv6 firewall here:
https://arstechnica.com/gadgets/2007/05/ipv6-firewall-mixed-blessing/
My sense is that Netgear blocks incomming IPv6 connections by default, just as it blocks IPv4 connections. I do not see any method to forward ports in terms of IPv6.
Like I said.... I don't know.
Hey! Thanks!
Hmm, I did see other peoplem in other places mentioning the filtering button, but I do not have.
What Firmware version are you on? I'm on: V4.6.3.16_2.0.51
and my ipv6 config for WAN is DHCP.
I've done similar test and conclude the Orbi system must have a hidden ipv6 Firewall enabled I guess.
To answer your question on how many ipv6 adresses...
2 Global, which are the public ones, one is based on your MAC adress, the other one is generated to have more privacy, and is the one being used on public routing.
Then you have link only for internal network neighbourg devices and one for loopback.
(I fall into this trap all the time...)
I have the original (2016) Orbi ac. Netgear appears to remove settings with each new product. There is never any explanation. Things just disappear. Must be the case with this IPv6 Secured vs. Open setting. One would think that eventually there will be a need to allow internet traffic into the LAN. I searched for IPv6 DDNS and got..... no hits. With ISP's free to change addresses on subscribers at will I have no idea how one would set up an IPv6 resource that can be followed the way we do with IPv4 DDNS.
Thanks for the information about IPv6.