How to configure 6in4 tunnel with Hurricane Electirc on USG 50?

ftiraid
ftiraid Posts: 4
First Comment Friend Collector
in Security

I have a very old product - USG50 and would like to configure the 6in4 tunnel over PPPoE, but never got it successfully.

I read the article below, but my LAN client still can't get the IPv6 address and HE tunnel seems not working. Can someone teach me how to make it successfully?

https://community.zyxel.com/en/discussion/2747/how-to-establishing-an-ipv6-in-ipv4-tunnel-with-hurricane-electric

he:

image.png

Tunnel:

image.png

LAN:

image.png

Static route:

image.png

All Replies

  • WJS
    WJS Posts: 156  Master Member
    5 Answers First Comment Friend Collector Third Anniversary

    your prefix length should be 64 ?

  • ftiraid
    ftiraid Posts: 4
    First Comment Friend Collector

    Yes, with prefix 64, I can receive the IPv6 address, but I have some devices connected to a router that is under USG50, I want those devices to have the IPv6 address also, but I am not sure what the steps are.

  • WJS
    WJS Posts: 156  Master Member
    5 Answers First Comment Friend Collector Third Anniversary

    I mean set prefix 64 at RA filed

    image.png

    Devices are under USG50 might have ipv6 address.

  • ftiraid
    ftiraid Posts: 4
    First Comment Friend Collector

    Yes, I did that and received IPv6 address.

    image.png
    Screenshot 2024-03-25 184234.png

    And another router's WAN has IPv6 address.

    image.png

    But router's LAN and device under the router didn't have the IPv6 address

    image.png
    image.png

  • WJS
    WJS Posts: 156  Master Member
    5 Answers First Comment Friend Collector Third Anniversary

    It sounds like your are talking about the LAN of the third party router under the USG.

    I thought you have to allow RA traffic on Router. Maybe you can try to capture traffic on Router's LAN to see if any ICMPv6 .

  • ftiraid
    ftiraid Posts: 4
    First Comment Friend Collector

    Prefix /64,

    PC under USG:

    image.png

    PC under another router can't receive RA packets, but if the router connects to another IPv6 environment (not USG), the router can send the RA packets without making any changes.

    image.png

    I don't know if there is any configuration I need to change on USG for prefix /48?

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 897  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments

    Hi @ftiraid ,

    Greeting Forum, Please kindly find index. We need further information.

    on the other hands, USG50 is too old, For security issue and support,

    We recommend you replace to the new FLEX/ATP

    Thanks

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）