Help setting up IPv6 on my OpenWRT router

Installing and Using OpenWrt
1

Hello, i'm trying to configure IPv6 on my home network. My network setup is as follows:

My ISP is Deutsche Telekom. I have a VDSL connection. The DSL connection terminates at a DraTek Vigor167 modem/router. Behind the modem is an OpenWRT router. This acts as a central router with multiple VLANs. The VLANs are distributed to the devices via a switch. My Vigor has the following IPv6 configurations.

2025_11_03_Netzwerk-ipv6
2025_11_03_Netzwerk-ipv61079×489 27.7 KB

2025_11_03_Netzwerk-ipv4
2025_11_03_Netzwerk-ipv41078×480 26.1 KB

Behind this is my OpenWRT router. How do I need to configure my WAN / LAN interface (eth2 / eth0) so that I can access the internet via IPv6? Here my “/etc/config/network”:

root@rome01:~# cat /etc/config/network 

config interface 'loopback'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'
	option device 'lo'

config globals 'globals'
	option ula_prefix 'fd11:971c:e6b2::/48'
	option packet_steering '1'

config interface 'dmz'
	option proto 'static'
	option ipaddr '192.168.20.1'
	option netmask '255.255.255.0'
	option device 'br-lan.20'

config interface 'wlan'
	option proto 'static'
	option ipaddr '192.168.30.1'
	option netmask '255.255.255.0'
	option _orig_ifname 'wlan wlan0 wlan3'
	option _orig_bridge 'true'
	option device 'br-wlan'
	option delegate '0'

config interface 'lan'
	option proto 'static'
	option ipaddr '192.168.10.1'
	option netmask '255.255.255.0'
	option device 'br-lan.50'
	option delegate '0'

config interface 'transfer'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option device 'br-transfer'

config interface 'wan'
	option proto 'static'
	option ipaddr '192.168.0.2'
	option netmask '255.255.255.248'
	option gateway '192.168.0.1'
	option device 'eth2'
	option dns_metric '0'
	option delegate '0'

config interface 'openvpn'
	option proto 'static'
	option ipaddr '192.168.190.1'
	option netmask '255.255.255.0'
	option metric '0'
	option device 'br-lan.10'

config interface 'plex'
	option proto 'static'
	option ipaddr '192.168.120.1'
	option netmask '255.255.255.0'
	option device 'br-lan.120'
	list dns '192.168.20.20'

config interface 'cups'
	option proto 'static'
	option netmask '255.255.255.0'
	option ipaddr '192.168.110.1'
	option device 'br-lan.110'
	list dns '192.168.20.20'

config interface 'VOIP'
	option proto 'static'
	option netmask '255.255.255.0'
	option ipaddr '192.168.140.1'
	option device 'br-lan.140'

config interface 'elk'
	option proto 'static'
	option ipaddr '192.168.150.1'
	option netmask '255.255.255.0'
	option device 'br-lan.150'

config interface 'admin'
	option proto 'static'
	option ipaddr '192.168.200.1'
	option netmask '255.255.255.0'
	option device 'br-admin'

config device
	option name 'br-wlan'
	option type 'bridge'
	option ipv6 '1'
	list ports 'br-lan.30'

config interface 'snmp'
	option proto 'static'
	option device 'br-lan.100'
	option ipaddr '192.168.100.1'
	option netmask '255.255.255.0'

config device
	option type 'bridge'
	option name 'br-ha'
	option ipv6 '1'
	list ports 'br-lan.130'

config interface 'hassio'
	option proto 'static'
	option device 'br-ha'
	option ipaddr '192.168.130.1'
	option netmask '255.255.255.0'
	option delegate '0'

config device
	option name 'eth0'
	option ipv6 '0'

config device
	option name 'eth1'
	option ipv6 '0'

config device
	option name 'eth2'
	option ipv6 '1'

config device
	option name 'phy0-ap0'
	option ipv6 '0'

config device
	option name 'phy1-ap0'
	option ipv6 '0'

config device
	option name 'phy1-ap1'
	option ipv6 '0'

config device
	option type 'bridge'
	option name 'br-admin'
	list ports 'br-lan.200'

config device
	option type 'bridge'
	option name 'br-lan'
	list ports 'eth0'
	option ipv6 '1'

config bridge-vlan
	option device 'br-lan'
	option vlan '1'
	list ports 'eth0'

config device
	option type 'bridge'
	option name 'br-transfer'
	list ports 'br-lan.1'

config bridge-vlan
	option device 'br-lan'
	option vlan '10'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '20'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '30'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '50'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '100'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '110'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '120'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '130'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '140'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '150'
	list ports 'eth0:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '200'
	list ports 'eth0:t'

Thank you in advance for your help.

2

This is the failure.

You have a good dedicated modem, just use it as such - let OpenWrt terminate the PPPoE session (and do the VLAN tagging as well). See e.g. Configuration Issues OpenWRT 19.07.3 and DrayTek Vigor 130 - #4 by slh for an example of the draytek side of things (should be the very similar across all draytek devices).

IF the vigor handles DHCPv6-PD correctly, the default wan&&wan6 should do the right thing as well, but you really don't want that (as it makes a mess out of port forwardings and traffic rules). You want your OpenWrt router to terminate the PPPoE and hold the WAN IP, to avoid double NAT and all the 'fun' with IPv6 traffic rules/ firewalling.

3

If I use PPPoE dial-up via the OpenWRT router, how do I ensure that I can reach my modem via its FQDN?