Firewall and without firewall in IPv6 settings->Optain IPv6 address

Firewall and without firewall in IPv6 settings->Optain IPv6 address

Firewall and without firewall in IPv6 settings->Optain IPv6 address
Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-28 18:25:36 - last edited 2025-08-04 10:52:49
Model: Deco M5  
Hardware Version: V3
Firmware Version: 1.8.5

Hello,

In the Deco app->More->Internet connection->IPv6->Internet parameters, if I set IPv6 to dynamic, I have the following choices for the whay to optin IPv6 addresses in French : "pare-feu", "sans pare-feu", "non-adresse" and "auto".

These are realy strange translations, thanks for automatic translation which make non natural things! Non-adresse, I supose it is stateless (SLAAC)... is it? Because it is a very strange translation...

But Firewall (pare-feu) and without Firewall (Sans pare-feu), why these settings? How with or without firewall is a type of IPv6 assignation or a way to optain an IPv6? It looks like a mistake, a translation without context.

Because I read it was not possible to disable the IPv6 firewall on Deco. And "non-adresse", why should I set with or without firewall without enabling SLAAC?

I don't see how a firewall allow to get an IPv6 and how it could be the same setting than SLAAC on WAN side... And the documentation is absolutely not clear unfortunately.

  0      
  0      
#1
Options
1 Accepted Solution
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address-Solution
2025-08-02 20:46:09 - last edited 2025-08-04 10:52:49
Recommended Solution
  0  
  0  
#10
Options
9 Reply
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-29 09:39:09

  @Nardol 

Hi, Nice to see you again. It should be:

Get IPv6 Address

  • Auto

  • SLAAC

  • DHCPv6

  • Non-Address

I think the translation needs to be updated.

Usually, it is suggested to leave it as "Auto"

Here is a simple configuration guide for IPV6 configuration on Deco:

​​​​​​​https://www.tp-link.com/en/support/faq/2642/

Best regards.

  0  
  0  
#2
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-29 10:49:47

  @David-TP Thanks for your reply. The documentation I read was the same but in French. Unfortunately the parameters we have when selecting Dynamic IP are not specified in the article, which was the reason why I asked.

Now I better understand, it makes the settings more clear.

It would be good to have the ability to specify a prefix manually, for example in France Freebox does not use DHCPv6 PD sowe would have to specify manually the prefix or use Deco Bridge mode for IPv6 and I had not a realy good experience with this mode when I used it with another ISP.

  1  
  1  
#3
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-29 19:25:39

  @David-TP can you explain me more the option "non-address"?

Do I miss something when I say there is no way to specify a prefix manually?

And last question: are there other mechanismes to get the delegated prefix than DHCPv6 PD?

  0  
  0  
#4
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-30 02:34:13

  @Nardol 

Hi,

Non-address mode for IPv6 is often used when the ISP will not provide the full IPv6 address to the router's WAN, only the Prefix Delegation.

So under Deco APP>Internet Connection>IPV6, the IP Address under IPV6 connection is blank, but Deco could still send router advertisements, allowing connected devices

use the Prefix Delegation to configure their IPV6 addresses.

 

The Prefix Delegation can't be manually configured; otherwise, it won't be accepted by the ISP.

 

"And last question: are there other mechanismes to get the delegated prefix than DHCPv6 PD?"

Do you refer to the "Assigned Type" on the Deco APP? There are other options like:

  • ND Proxy
  • SLAAC+Stateless DHCP
  • DHCPv6
  • SLAAC+RDNSS

 

If you're interested, you can find more details here: 

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/uc_system/IPv6/vtgs_b_ipv6-deployment-guide-for-cisco/vtgs_b_ipv6-deployment-guide-for-cisco_chapter_01.pdf

 

Thank you very much.

Best regards.

 

  0  
  0  
#5
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-30 21:51:45 - last edited 2025-07-30 21:53:30

  @David-TP 

Thanks for your reply. Regarding the manual prefix configuration, I think there was a misunderstanding.

I am not trying to assign an arbitrary prefix manually, but rather to manually enter the prefix already assigned by my eventual future ISP (Free in France). This is because Free does not support DHCPv6-PD, so there is no way for the Deco to retrieve the prefix automatically in router mode.

This situation makes IPv6 unusable unless the Deco allows us to manually enter the delegated prefix — just like some routers do (e.g., OpenWRT or even some ISP boxes).

Would it be possible to submit this as a feature request? It would make the Deco more compatible with ISPs like Free and allow us to use IPv6 fully in router mode.

Also, when I asked about mechanisms to obtain the prefix, I was specifically referring to WAN-side prefix delegation, not LAN-side addressing for clients.

Thanks again for your support!

  0  
  0  
#6
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-31 02:17:39

  @Nardol 

Hi, thanks for the update.

I checked the web admin emulator of Archer AXE75, for example:

https://emulator.tp-link.com/AXE75v1/index.html#ipv6

Under "Get IPV6 address", there is one more option that Deco doesn't have, "Specified by ISP", which allows users to manually enter the prefix.

I wonder if that is what you wish to be supported on Deco.

  0  
  0  
#7
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-07-31 08:19:18 - last edited 2025-07-31 08:23:30

  @David-TP Yes, it is exactly what I wish to be supported on Deco.

And as I suppose there are no other solution to get a prefix (DHCPv6 prefix delegation is the only way to do as fare as I know), it would be the only solution for ISPs which does not provide DHCPv6-PD on their router.

  1  
  1  
#8
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address
2025-08-01 01:42:49

  @Nardol 

Thank you very much.

I'll note it down first and report to the senior engineer for further evaluation.

It is also suggested to start a new feature request here to see if other users might have a similar need.

https://community.tp-link.com/en/home/forum/2252

Best regards.

  0  
  0  
#9
Options
Re:Firewall and without firewall in IPv6 settings->Optain IPv6 address-Solution
2025-08-02 20:46:09 - last edited 2025-08-04 10:52:49
Recommended Solution
  0  
  0  
#10
Options