transix (インターネットマルチフィード)、Xpass (アルテリア) などの IPoE (IP over Ethernet) IPv6 接続に DS-Lite トンネルを張り IPv4 とのデュアルスタック接続を行う手順です。
gw.transix.jpdgw.xpass.jpdslite.v6connect.net{
"network": {
"wan6": {
"@type": "interface",
"proto": "dhcpv6",
"device": "sfp0",
"reqaddress": "none",
"reqprefix": "auto",
"norelease": "1",
"ip6ifaceid": "::1",
"ip6assign": "64"
},
"wan4": {
"@type": "interface",
"proto": "dslite",
"peeraddr": "gw.transix.jp",
"tunlink": "wan6",
"encaplimit": "ignore",
"mtu": "1460"
},
"lan0": {
"@type": "interface",
"proto": "static",
"netmask": "255.255.255.0",
"ipaddr": "192.168.100.1",
"device": "br0",
"ip6assign": "64",
"ip6hint": "01"
},
"@": [
{
"@type": "device",
"type": "bridge",
"name": "br0",
"ports": [
"eth0",
"eth1",
"eth2",
"eth3",
"sfp1",
"sfp2",
"sfp3"
],
"bridge_empty": "1",
"stp": "0"
}
]
},
"dhcp": {
"@": [
{
"@type": "dnsmasq",
"domainneeded": "1",
"localise_queries": "1",
"rebind_protection": "1",
"rebind_localhost": "1",
"expandhosts": "1",
"cachesize": "1000",
"authoritative": "1",
"readethers": "1"
}
],
"lan0": {
"@type": "dhcp",
"interface": "lan0",
"start": "100",
"limit": "150",
"leasetime": "12h",
"ra": "server",
"dhcpv6": "server",
"ndp": "relay"
},
"wan6": {
"@type": "dhcp",
"interface": "wan6",
"ignore": "1",
"master": "1",
"ra": "relay",
"dhcpv6": "relay",
"ndp": "relay"
}
},
"firewall": {
"@": [
{
"@type": "defaults",
"syn_flood": "1",
"input": "REJECT",
"output": "ACCEPT",
"forward": "REJECT"
},
{
"@type": "zone",
"name": "lan",
"network": [
"lan0"
],
"input": "ACCEPT",
"output": "ACCEPT",
"forward": "ACCEPT"
},
{
"@type": "zone",
"name": "wan",
"network": [
"wan4",
"wan6"
],
"input": "REJECT",
"output": "ACCEPT",
"forward": "REJECT",
"masq": "1",
"mtu_fix": "1"
},
{
"@type": "forwarding",
"src": "lan",
"dest": "wan"
},
{
"@type": "rule",
"name": "Allow-DHCP-Renew",
"src": "wan",
"proto": "udp",
"dest_port": "68",
"target": "ACCEPT",
"family": "ipv4"
},
{
"@type": "rule",
"name": "Allow-Ping",
"src": "wan",
"proto": "icmp",
"icmp_type": "echo-request",
"family": "ipv4",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-IGMP",
"src": "wan",
"proto": "igmp",
"family": "ipv4",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-DHCPv6",
"src": "wan",
"proto": "udp",
"dest_port": "546",
"family": "ipv6",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-MLD",
"src": "wan",
"proto": "icmp",
"src_ip": "fe80::/10",
"icmp_type": [
"130/0",
"131/0",
"132/0",
"143/0"
],
"family": "ipv6",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-ICMPv6-Input",
"src": "wan",
"proto": "icmp",
"icmp_type": [
"echo-request",
"echo-reply",
"destination-unreachable",
"packet-too-big",
"time-exceeded",
"bad-header",
"unknown-header-type",
"router-solicitation",
"neighbour-solicitation",
"router-advertisement",
"neighbour-advertisement"
],
"limit": "1000/sec",
"family": "ipv6",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-ICMPv6-Forward",
"src": "wan",
"dest": "*",
"proto": "icmp",
"icmp_type": [
"echo-request",
"echo-reply",
"destination-unreachable",
"packet-too-big",
"time-exceeded",
"bad-header",
"unknown-header-type"
],
"limit": "1000/sec",
"family": "ipv6",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-IPSec-ESP",
"src": "wan",
"dest": "lan",
"proto": "esp",
"target": "ACCEPT"
},
{
"@type": "rule",
"name": "Allow-ISAKMP",
"src": "wan",
"dest": "lan",
"dest_port": "500",
"proto": "udp",
"target": "ACCEPT"
}
]
},
"system": {
"@": [
{
"@type": "system",
"hostname": "my-awesome-router",
"timezone": "JST-9",
"zonename": "Asia/Tokyo"
}
]
}
}