I use openWrt on a router, in a straightforward router mode (behind ISP’s modem in bridge mode). It seems that by default openWrt enables IPv4 and IPv6 for both WAN and LAN. I know very little on the subject, so I wanted to run a few questions by you guys before I do something stupid with my confi…

To disable IPv6 completely, in my opinion the only option is to compile from source and roll your own image. I wish this kind of build were available. Disabling v6 is safe and will not break any application generally speaking.

[image] Are there benefits to use IPv6 in a home router? Installing and Using OpenWrt I would approach this slightly differently. If your ISP does a reasonable job with providing IPv6 access without any major issues and if you can get a sane configuration established, ther…

[image] SharkScout: So I see very little benefits in enabling IPv6 on LAN, and non-trivial complexity increase because of it. Well, the IPv6 net consistently performs better for me, most likely since there are a whole lot less people using it. It's also a bit better on privacy as your clients…

Wow. I've just unchecked "Use builtin IPv6-management" on all interfaces, thinking that would disable IPv6. Turns out some of my devices have been on IPv6 for years, that's reassuring...

[image] SharkScout: IPv6 on LAN complicates the configuration Were you happy with the answers because we saw no response? The short story is, there is no reason not to use IPv6. If you face any issue, we love to help! Furthermore, the defaults in OpenWrt should do the trick automatically. If …

So I have disabled IPv6 in the end. While I appreciate the advice was generally to enable it, I just found it easier to deal only with IPv4. In terms of setting firewall, IP, etc it was just easier to deal only with one protocol. It all worked fine. Thanks for all the help!

I removed the wan6 zone from the firewall configuration. Basically, I am not forwarding IPv6 packets in the network.

[image] ppmm: How do you accomplish this? As already mentioned on the Forum there is a more elegant way to block IPv6 without disabling it at a system level (via sysctl) or by recompiling your image from source. This is not a universal solution, of course, but in most cases this method elimi…

Another way is to make sure there's no ipv6 address anywhere root@WNDR4300-2:~# ip add | grep t6 root@WNDR4300-2:~#

Ah thanks for that. I will revisit this when I have more time.

Disabling IPv6 on OpenWrt

Installing and Using OpenWrt Network and Wireless Configuration

vgaetera March 17, 2021, 11:58pm 2

How to completely disable IP6