Post #2985110
2026-04-14 20:58 UTC
@goetz@ipv6.social Some of the lessons might be obvious to some:
- Don't assume your ISPs implementation is functional - I had to diagnose the WAN link with them.
- Virtual IPs for redundancy run on link local IPs even if the bonded interfaces do not (fe80:...)
- Every VLAN needs a separate link local address
- SLAAC takes the interface prefix unless configured otherwise
- Run a test network in IPv6 only so there's no fallback to IPv4 and failure is immediately obvious
- Turn VPNs OFF!
Replies (1)
-
@pa3weg@mastodon.social 2026-04-14 21:01
@goetz@ipv6.social my implementation uses two redundant firewalls with high availability and virtual IPs for the WAN side. Getting this to work was a challenge because the ISP ended up misconfiguring their next hop and I spent quite some time "learning" about IPv6 from trying to get a link to work that was misconfigured upstream. This is my first time doing it so everything could have been wrong. It took quite some effort to explain my issues to the ISP not always using the right vocabulary