新三、NEWIFI3\D2：ipv6 nat6折腾日记

xoyo***

这都2024年了，ipv6设置问题大抵已经没有需求了。但是少数情况还是存在不少需求，主要是一些厂区、学校等特殊地方，他们根本没有下发pd前缀，哪怕是ula的前缀也是没有的。我们来看看openwrt官方是怎么说的：

• IPv6 multihoming without BGP.
• Performing stateless 1:1 NAT for migration purposes.
• Your ISP uses a dynamic prefix and you need stable addressing.
• Creating a subnet for when the network doesn't support subnetting.
• Being provided a smaller prefix than a /64 or worse, none at all or a ULA address. （获得比 /64 更小的前缀，或者更糟的是，根本没有前缀或 ULA 地址。）
  

很不幸的是，我这里的情况就是最后一个，不过我这里是直接/128地址。



首先我这里用的设备是新三，固件是官方的OpenWrt，版本是最新的发行版23.05.3，安装完成之后ssh到路由器，使用下面的脚本来初始化：

1. 
   
2. touch /tmp/ini.first.sh
   
3. cat > /tmp/ini.first.sh << EOF
   
4. #!/bin/sh /etc/rc.common
   
5. # 1. system
   
6. uci set system.cfg01e48a.hostname='Ubuntu24.04'
   
7. uci set system.cfg01e48a.zonename='Asia/Shanghai'
   
8. uci set system.cfg01e48a.timezone='CST-8'
   
9. uci commit system
   
10. 
    
11. # network
    
12. uci set network.globals.ula_prefix='fd3d::/48'
    
13. uci set network.lan.ipaddr='192.168.90.1'
    
14. uci set network.wan.peerdns='0'
    
15. uci add_list network.wan.dns='8.8.8.8'
    
16. uci add_list network.wan.dns='114.114.114.114'
    
17. uci set network.wan6.reqaddress='try'
    
18. uci set network.wan6.reqprefix='auto'
    
19. uci set network.wan6.peerdns='0'
    
20. uci add_list network.wan6.dns='2400:3200::1'
    
21. uci add_list network.wan6.dns='2001:4860:4860::8888'
    
22. uci set network.wan6.sourcefilter="0"  # Disable IPv6 source filter on the upstream interface.
    
23. uci commit network
    
24. 
    
25. # wireless 2.4
    
26. uci set wireless.radio0.country='CN'
    
27. uci set wireless.radio0.channel='6'
    
28. uci set wireless.default_radio0.ssid='H3C'
    
29. uci set wireless.default_radio0.hidden='1'
    
30. uci set wireless.default_radio0.encryption='sae'
    
31. uci set wireless.default_radio0.key='mylife88'
    
32. # wireless 5.0
    
33. uci set wireless.radio1.country='CN'
    
34. uci set wireless.radio1.channel='149'
    
35. uci set wireless.default_radio1.ssid='H3C'
    
36. uci set wireless.default_radio1.hidden='1'
    
37. uci set wireless.default_radio1.encryption='sae'
    
38. uci set wireless.default_radio1.key='mylife88'
    
39. uci commit wireless
    
40. 
    
41. # dhcp
    
42. uci set dhcp.lan.start=3
    
43. uci set dhcp.lan.limit=30
    
44. uci set dhcp.cfg01411c.sequential_ip=1
    
45. uci set dhcp.lan.ra_default="1"
    
46. uci commit dhcp
    
47. 
    
48. # firewall zone  001 Enable IPv6 masquerading on the upstream zone.
    
49. uci set firewall.@zone[1].masq6="1"  
    
50. uci commit firewall
    
51. 
    
52. sleep 8
    
53. 
    
54. reboot
    
55. EOF
    
56. 
    
57. 
    
58. # 5. Make the script executable and enable it    #修改权限，并生效
    
59. chmod +x /tmp/ini.first.sh
    
60. /tmp/ini.first.sh
    
61. 
    

复制代码

重启之后，就已经设置好了。

主要的设置参考官方就是下面两步：

1. # Configure firewall
   
2. uci set firewall.@zone[1].masq6="1"
   
3. uci commit firewall
   
4. service firewall restart
   
5. 
   
6. # Configure network
   
7. uci set network.wan6.sourcefilter="0"
   
8. uci commit network
   
9. service network restart

复制代码

查了好久的资料，都说是新版Op采用了nftables，搞了很久都没搞明白，最后实在没办法了，还是op官方给力。

参考资料
1. OpenWRT使用nftables实现IPv6 NAT
2. OpenWrt官方NAT66 and IPv6 masquerading

ca97***

我这里比你稍微好一点，有/64的前缀，可以给局域网内支持的设备，都发一个ipv6的公网地址

从18.06.9版本，就支持ipv6了