PPPoE IPv6 Dual-Stack Home Setup

PPPoE IPv6 dual-stack setup для домашних и SOHO сетей с автоматическим получением IPv6 prefix через DHCPv6-PD и distribution через SLAAC.

Сценарий использования

  • Home Networks: Dual-stack интернет подключение
  • SOHO: Small office connectivity с IPv6
  • ISP Integration: Работа с провайдерами, поддерживающими DHCPv6-PD
  • Modern Stack: Full IPv4+IPv6 connectivity

Топология сети

         Internet (ISP)
               │
           PPPoE (pppoe0)
               │
         ┌─────┴─────┐
         │   VyOS    │
         │  Gateway  │
         └─────┬─────┘
               │ eth1 (LAN)
               │ IPv6 PD: ::/64
         ┌─────┴─────────┐
         │  Home Network │
         │  Devices with │
         │  SLAAC IPv6   │
         └───────────────┘

Требования

  • ISP support для DHCPv6 Prefix Delegation
  • VyOS 1.4+
  • PPPoE credentials от ISP

Конфигурация PPPoE с IPv6

PPPoE Interface

configure

# PPPoE на eth0 (WAN)
set interfaces pppoe pppoe0 source-interface 'eth0'
set interfaces pppoe pppoe0 authentication username 'your_isp_username'
set interfaces pppoe pppoe0 authentication password 'your_isp_password'

# IPv6
set interfaces pppoe pppoe0 ipv6 address autoconf
set interfaces pppoe pppoe0 ipv6 enable

# DHCPv6-PD (получить prefix от ISP)
set interfaces pppoe pppoe0 dhcpv6-options pd 0 length '56'
set interfaces pppoe pppoe0 dhcpv6-options pd 0 interface eth1 address '1'
set interfaces pppoe pppoe0 dhcpv6-options pd 0 interface eth1 sla-id '0'

commit

LAN Interface с IPv6

configure

# LAN интерфейс
set interfaces ethernet eth1 address '192.168.1.1/24'
set interfaces ethernet eth1 description 'LAN'

# Router Advertisement для SLAAC
set service router-advert interface eth1 prefix ::/64
set service router-advert interface eth1 name-server 'fe80::1'
set service router-advert interface eth1 other-config-flag

commit
save

Firewall для IPv6

configure

# IPv6 firewall WAN
set firewall ipv6-name WANv6_LOCAL default-action 'drop'
set firewall ipv6-name WANv6_LOCAL rule 10 action 'accept'
set firewall ipv6-name WANv6_LOCAL rule 10 state established 'enable'
set firewall ipv6-name WANv6_LOCAL rule 10 state related 'enable'

set firewall ipv6-name WANv6_LOCAL rule 20 action 'accept'
set firewall ipv6-name WANv6_LOCAL rule 20 protocol 'ipv6-icmp'

# DHCPv6
set firewall ipv6-name WANv6_LOCAL rule 30 action 'accept'
set firewall ipv6-name WANv6_LOCAL rule 30 protocol 'udp'
set firewall ipv6-name WANv6_LOCAL rule 30 destination port '546'
set firewall ipv6-name WANv6_LOCAL rule 30 source port '547'

commit
save

Проверка

# PPPoE status
show interfaces pppoe pppoe0

# IPv6 address
show interfaces pppoe pppoe0 brief

# DHCPv6-PD prefix
show dhcpv6 client leases

# Router Advertisement
show ipv6 route

# Test connectivity
ping6 2001:4860:4860::8888

Cloud Integration

Note для Cloud Providers

PPPoE обычно не используется в cloud environments (Yandex Cloud, VK Cloud) - они предоставляют прямое DHCP/Static подключение. Этот пример актуален для:

  • On-premises home deployments
  • Branch offices с DSL/Fiber PPPoE
  • Hybrid scenarios где VyOS в офисе подключается к ISP

Для cloud deployments см. другие примеры (Tunnelbroker IPv6, VPN scenarios).

Ссылки