I use IPV6-PD to assign an IPV6 address to my LAN device. How do I configure a firewall? And how to enable RFC4941 and RFC7217 on the WAN port?

[lleachii]

@daiaji

Are there other options?

If you are worried about IPv6 privacy on your router addressing, see:

Cascading routers, dhcpv6 and unwanted EUI64 w/SLAAC on wan6

Interesting stuff! If have done the following but I am not sure if the outcome is the same as you have mentioned above: to /etc/sysctl.conf I added net.ipv6.conf.default.stable_secret=71c3:0126:4b41:96a4:a98f:5323:5341:2be9 rebooted and the check shows: sysctl -a | grep stable_secret sysctl: error reading key 'net.ipv6.conf.all.stable_secret': I/O error net.ipv6.conf.br-lan.stable_secret = 71c3:0126:4b41:96a4:a98f:5323:5341:2be9 net.ipv6.conf.default.stable_secret = 71c3:0126:4b41:96a4:a9…

There's a method to enable random IPs on the router. You router's IPv6 address will change on each reboot or up/down. Be sure to generate your own secret - do not use the secret generated in the posting!