29
Votes

IPv6 Firewall rules - TL-R605 v1 1.1.1

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
123...
 
29
Votes

IPv6 Firewall rules - TL-R605 v1 1.1.1

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
IPv6 Firewall rules - TL-R605 v1 1.1.1
IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-08-22 18:22:05 - last edited 2023-01-30 03:58:59
Model: ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.1.1

Starting to play around with IPv6 and it all works so fare very well... although I'm curious if I can find somewhere in the controller settings to adjust/manage firewall rules for IPv6.

 

Currently ports and services are exposed to the Internet via IPv6, of course I can do host based firewalls, but preferably do it on the router for the whole LAN.

 

To decrease the attack surface, I currently disabled IPv6 and enable it only when I play around with it.

 

#1
Options
2 Accepted Solutions
Re:IPv6 Firewall rules - TL-R605-Solution
2023-01-30 03:43:17 - last edited 2023-03-13 01:27:48

Dear @paderijk, @m.fessler, @SuperUserOne, @ldev, @sgo, @Probi,

 

Thanks for your continuous attention to this thread. Sorry that it seems the firmware for supporting IPv6 Firewall rule has been postponed, we haven't been informed when the new firmware that supports IPv6 Firewall rules will get ready to release yet. 

 

According to the past release order, I would expect that the Omada Controller v5.9 would support IPv6 configuration first, and then the Omada Gateway would release the firmware to support IPv6 firewall rules in the year. As for whether the updated firmware would be for both v1 and v2 on the ER605, I will try and provide an update for you when we get a notice of the firmware release for the IPv6 firewall feature, or when we get our hands on the new firmware for trial.

 

*Please note that the information provided here is based on the current information we have, it's provided for informational purposes only, not a guarantee or a promise. Any plans are subject to change, the final firmware releases shall prevail.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*
Recommended Solution
#31
Options
Re:IPv6 Firewall rules - TL-R605-Solution
2023-03-13 01:27:18 - last edited 2023-04-27 01:27:40

Hello @Gigawebs 

 

Controller 5.9 has added the IPv6 ACL for Omada EAPs and Switches. I think the IPv6 ACL for Omada Routers like ER605 V2 might be added soon in the next Controller version. Sorry that I don't have further information right now, will try to provide an update when there is more came out.

 

*Please note that the information provided here is based on the current information we have, it's provided for informational purposes only, not a guarantee or a promise. Any plans are subject to change, the final firmware releases shall prevail.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*
Recommended Solution
#35
Options
84 Reply
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-08-24 06:56:03 - last edited 2021-08-30 01:19:50

@paderijk 

 

I asked a similar question a few weeks ago. No response yet. Hopefully they will have something soon or tell us it isn't coming and we can look at alternative gateway devices. Personally I really like the Omada system. Just need some higher end options for gateway devices. Devices with more VPN throughput, Wireguard support, IPv6 Support, and Stateful Firewall rules both WAN to LAN and LAN to LAN. Later they could even offer more options with IDS/IPS, DNS filtering, Web Content Filtering, etc.

#2
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-08-24 07:32:57 - last edited 2021-08-30 01:19:50

@Jackace 

 

@Fae any thoughts you can share on this subject. 

#3
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-08-25 04:04:27 - last edited 2021-08-30 01:19:50

Dear @paderijk,

 

paderijk wrote

@Jackace 

 

@Fae any thoughts you can share on this subject.

 

This has been forwarded to the developer team for further evaluation.

 

As far as I know, it's planned to be added gradually in the near future (it's only for reference).

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*
#4
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-08-30 00:43:45 - last edited 2021-08-30 01:19:50

@Fae Thanks, there is definitely demand for this feature. I asked a similar question before that went unanswered, so it is good to know the request has at least been recorded.

 

Without this a transparent firewall is needed, or more likely a non-Omada router instead. It is a pretty basic feature that is very important. I, too, have simply disabled IPv6 for the time being. At a bare minimum there needs to be an ability with SLAAC to block all new incoming requests.

#5
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2021-11-16 17:08:23

@Fae  - Any updates on this subject? My ISP is pushing more and more IPv6 (IPv4 is still available), but I really would like to make my network future ready.

#6
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2022-01-18 18:35:09

@Fae - Curious if there is any update or guidance? Thanks in advance!

#7
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2022-01-19 01:27:41

Dear @paderijk,

 

paderijk wrote

@Fae - Curious if there is any update or guidance? Thanks in advance!

 

Sorry that I haven't received any update yet. But I know that the IPv6 firewall will be added in the subsequent updates.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*
#8
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2022-02-22 07:38:40

  @Fae 

 

Any New updates on this?

#9
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2022-03-27 21:30:53
I am also curious about this. I understand that some features might be released over time, but to offer IPV6 with no ability to protect the devices behind it seems a pretty significant gap that it should be a high priority to address.
#10
Options
Re:IPv6 Firewall rules - TL-R605 v1 1.1.1
2022-04-08 03:53:35

  @markab You're right. it is in no case recommended to use the router with IPv6, because you are more or less unprotected!

#11
Options

Information

Helpful: 29

Views: 20846

Replies: 84

Voters 26

voter's avatar
voter's avatar
voter's avatar
voter's avatar
+ 22 Voters