I'm in wellington on the 27.252.128.0/22 subnet. I have noticed there is now IPv6 via dhcpv6.
I'm using an edgerouter-lite, and thought id share my config, and start a thread to discuss any teething pains.
i had a wee bit of trouble with routing, but after configuring it to use eui64, it seemed to work. annoyingly vyatta wouldnt let me commit that config because the ipv6 address was already present.
Remember: if using ipv6, dont forget to properly firewall. especially if you're advertising onto lan, as there is no nat (internal devices are externally reachable).
set interfaces ethernet eth0 vif 10 address dhcp
set interfaces ethernet eth0 vif 10 address dhcpv6
set interfaces ethernet eth0 vif 10 dhcp-options default-route update
set interfaces ethernet eth0 vif 10 dhcp-options default-route-distance 210
set interfaces ethernet eth0 vif 10 dhcp-options name-server no-update
set interfaces ethernet eth0 vif 10 dhcpv6-options
set interfaces ethernet eth0 vif 10 dhcpv6-pd rapid-commit enable
set interfaces ethernet eth0 vif 10 firewall in name WAN_IN
set interfaces ethernet eth0 vif 10 firewall local ipv6-name WAN_LOCAL_6
set interfaces ethernet eth0 vif 10 firewall local name WAN_LOCAL
set interfaces ethernet eth0 vif 10 ipv6 address autoconf
set interfaces ethernet eth0 vif 10 ipv6 dup-addr-detect-transmits 1
set firewall ipv6-name WAN_LOCAL_6 default-action drop
set firewall ipv6-name WAN_LOCAL_6 enable-default-log
set firewall ipv6-name WAN_LOCAL_6 rule 10 action drop
set firewall ipv6-name WAN_LOCAL_6 rule 10 state invalid enable
set firewall ipv6-name WAN_LOCAL_6 rule 20 action accept
set firewall ipv6-name WAN_LOCAL_6 rule 20 state established enable
set firewall ipv6-name WAN_LOCAL_6 rule 20 state related enable
set firewall ipv6-name WAN_LOCAL_6 rule 100 action accept
set firewall ipv6-name WAN_LOCAL_6 rule 100 protocol icmpv6
set firewall ipv6-name WAN_LOCAL_6 rule 200 action accept
set firewall ipv6-name WAN_LOCAL_6 rule 200 destination port 546
set firewall ipv6-name WAN_LOCAL_6 rule 200 protocol udp
set firewall ipv6-name WAN_LOCAL_6 rule 200 source port 547
set firewall ipv6-receive-redirects disable
set firewall ipv6-src-route disable
I'll check out how the performance is. Ive heard people have been having a lot of dns issues in wellington lately, perhaps due to the rollout?
dns can sometimes be unpredictable when ipv6 is in use because it alternates between giving you ipv4 A records and ipv6 AAAA records.
My DNS has been pretty solid because rather using vodafones notorious server, i have unbound running on my router, giving secure, reliable, fast resolving. for those on ubiquiti or openwrt, id recommend this.
The main issue here in wellington appears to be DHCPv4, hopefully now ipv6 may provide a fallback, and possibly more reliability, at least in cases where theres problems on the v4 side
The prefix is 2407:7000:f01c:0:[duid]/64
where duid is based on your mac address