Community discussions

 
AlexT
just joined
Topic Author
Posts: 17
Joined: Thu Mar 29, 2018 9:51 am

Blocking IPv6 through the EoIP tunnel

Thu May 10, 2018 1:58 pm

Hi!
How to disable ipv6 advertise through the EoIP tunnel?
In the bridge settings, where the EoIP tunnel was added, I successfully blocked DHCPv4 (drop udp on 67-68), but I can not understand how to block the IPv6.
Please, help.
 
User avatar
Anumrak
Long time Member
Long time Member
Posts: 683
Joined: Fri Jul 28, 2017 2:53 pm

Re: Blocking IPv6 through the EoIP tunnel

Thu May 10, 2018 2:19 pm

IPv6 using neighbor discovery protocol, so just disable it on EoIP interface or on hardware interface into lan.
 
AlexT
just joined
Topic Author
Posts: 17
Joined: Thu Mar 29, 2018 9:51 am

Re: Blocking IPv6 through the EoIP tunnel

Thu May 10, 2018 2:27 pm

which ports use NDP?
 
User avatar
Anumrak
Long time Member
Long time Member
Posts: 683
Joined: Fri Jul 28, 2017 2:53 pm

Re: Blocking IPv6 through the EoIP tunnel

Thu May 10, 2018 2:37 pm

which ports use NDP?
It's ICMPv6 protocol. Number 58 on IPv6 layer. Like OSPF protocol is number 89 on IP layer.
 
User avatar
doneware
Trainer
Trainer
Posts: 421
Joined: Mon Oct 08, 2012 8:39 pm
Location: Hungary

Re: Blocking IPv6 through the EoIP tunnel

Wed May 16, 2018 12:30 pm

In the bridge settings, where the EoIP tunnel was added, I successfully blocked DHCPv4 (drop udp on 67-68), but I can not understand how to block the IPv6.
what do you want to pass through the tunnel? probably it is easier to block stuff using ethertype filtering.
[admin@tgcpe2] /interface bridge filter> add mac-protocol=ipv6 action=drop in-interface=thenameofyoureoiptunnel
#TR0359

Who is online

Users browsing this forum: No registered users and 4 guests