Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- interfaces {
- ethernet eth0 {
- address dhcp
- description Internet
- dhcpv6-pd {
- pd 0 {
- interface eth1 {
- host-address ::1
- prefix-id :0
- service dhcpv6-stateless ### dhcpv6-stateless instead of slaac
- }
- prefix-length 64
- }
- rapid-commit enable
- }
- duplex auto
- firewall {
- in {
- ipv6-name WANv6_IN
- name WAN_IN
- }
- local {
- ipv6-name WANv6_LOCAL
- name WAN_LOCAL
- }
- }
- speed auto
- }
- ethernet eth1 {
- address 10.0.0.1/24
- address fe80::1/64 ### I added this in to make sure we always get this link-local (non-routable) address for this interface.
- description Local
- duplex auto
- ipv6 {
- dup-addr-detect-transmits 1
- router-advert {
- cur-hop-limit 64
- link-mtu 0
- managed-flag false ### We want this false because we like false flag ops- are not managing addresses
- max-interval 600
- name-server 2620:0:ccc::2 ### This is put out in the Router Advertisement, but windows won't pick it up (opendns)
- other-config-flag true ### We want this true because we want to give out more configuration options (DNS)
- prefix ::/64 {
- autonomous-flag true
- on-link-flag true
- valid-lifetime 2592000
- }
- reachable-time 0
- retrans-timer 0
- send-advert true
- }
- }
- speed auto
- }
- ### RIP ETH2 ###
- service {
- ### OTHER SERVICES ###
- dhcpv6-server {
- shared-network-name INTERNAL { ### You can name this whatever you want
- subnet fe80::1/128 { ### This is a workaround to a bug or something. Usually you'd want to put in the subnet you're managing, like 2601:a1a1:b2b2:beef::/64. Also, if your ISP decides to give you a different /64 network then you'd have to change this config too, ugh. Keep it link-local for simple networks.
- name-server 2001:4860:4860::8888 ### Google's IPv6 DNS address, this is the information that is given to clients
- }
- }
- }
- ### MORE SERVICES AND THINGS ###
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement