Home Network Community > Deco > Why I cannot setup firewall rules for IPv6 in my deco app?
< Deco

Why I cannot setup firewall rules for IPv6 in my deco app?

Why I cannot setup firewall rules for IPv6 in my deco app?

Why I cannot setup firewall rules for IPv6 in my deco app?
Why I cannot setup firewall rules for IPv6 in my deco app?
2025-09-28 07:29:14 - last edited 2025-09-28 07:54:35
Model: Deco X50   Deco M9 Plus   Deco M5  
Hardware Version: V1
Firmware Version: 1.6.7

I composed my home wifi mesh by 2 X50 + 2 M9 Plus + 2 M5 with one of the X50 as main router. 

 

My ISP recently changed to Map-E so I cannot setup my port forward to allow and limit the incoming connection. I have to access my server through IPv6. Although the ONU from my ISP has a firewall that can block incoming connection, I have to turn it off if I still want to access the services I provided by my own server. But it means all my devices in the network would be exposed the the Internet. 

 

I want to add some firewall rules for IPv6 on my deco routers, so I can expose only necessary ports for my services. But I found that the setting of firewall rules do not appear in the app, although the manual show it should be there. 

 

The manual: 

 

My App:

 

Sorry for the Japanese, I just want to make sure it is in the same language as the manual. 

 

 

  1      
 
  1      
 
#1
Options
5 Reply
Re:Why I cannot setup firewall rules for IPv6 in my deco app?
2025-09-28 12:32:12
Currently the Deco app does not provide custom IPv6 firewall rule settings, even if the manual may show such options. With MAP-E/IPv6 you can reach your server, but it also means that all devices are visible to the internet unless filtered by another firewall. The Deco system only supports basic IPv6 security features (like SPI firewall enabled by default), but not granular port-based rules. If you need to allow only specific IPv6 ports, the only workaround is to place an additional firewall/router in front of your Deco, or check with your ISP if they can provide configuration options. At the moment it is not possible to create detailed IPv6 firewall rules directly in Deco
Play Advanced
  2  
  2  
#2
Options
Re:Why I cannot setup firewall rules for IPv6 in my deco app?
2025-09-28 16:50:40

  @programus 

 

According to our knowledge base, most Deco models do support IPv6 Internet connectivity, but only a select few Deco models (such as Deco BE65-5G, Deco X50-4G, Deco X20-4G, Deco X10-4G, Deco X80-5G, and Deco X50-5G) offer an IPv6 Firewall feature that allows you to expose specific IPv6 ports of specific hosts to the public Internet. However, this feature is only available when the Deco is operating in 'Wi-Fi Router' mode, and not in '4G/5G Router' mode. For most other Deco models, there is no mention of granular, custom IPv6 firewall rule settings or port-based filtering in the knowledge base.

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  1  
  1  
#3
Options
Re:Why I cannot setup firewall rules for IPv6 in my deco app?
2025-09-29 04:02:11

  @programus 

Hi, welcome to the community.

I'm afraid it is also due to the current internet connection type "Map-E(OCN)". Neither "Map-E(OCN)" nor "V6 Plus" allows configuring IPV6 Firewall Settings.

But other common internet connection types, such as Dynamic IP, PPPOE support extra IPV6 Firewall configuration.

 

Thank you very much.

Best regards.

 

▶Check What's Currently Going on With Deco ▶Parental Control Upgrade on HomeCare Models ▶Deco BE85 1.2.0 Enhanced Mesh Backhaul Stability and Device Roaming Experience ▶Deco BE65/BE65 Pro 1.2.0 Enhanced Mesh Network Stability and System Security ▶Deco BE75 1.1.0 Added WireGuard VPN, Manual Channel Selection and More Try to leave a Message if urgent help is required.
  0  
  0  
#4
Options
Re:Why I cannot setup firewall rules for IPv6 in my deco app?
2025-10-04 02:18:57

  @HelpFixDecoApp Thank you for your details. Unfortunately, it seems all models you mentioned are not saled in my area. By the way, does this mean the feature would be available only when all the devices in the mesh are one of the models you mentioned or just the main device is enough?

HelpFixDecoApp wrote

  @programus 

 

According to our knowledge base, most Deco models do support IPv6 Internet connectivity, but only a select few Deco models (such as Deco BE65-5G, Deco X50-4G, Deco X20-4G, Deco X10-4G, Deco X80-5G, and Deco X50-5G) offer an IPv6 Firewall feature that allows you to expose specific IPv6 ports of specific hosts to the public Internet. However, this feature is only available when the Deco is operating in 'Wi-Fi Router' mode, and not in '4G/5G Router' mode. For most other Deco models, there is no mention of granular, custom IPv6 firewall rule settings or port-based filtering in the knowledge base.

 

  0  
  0  
#5
Options
Re:Why I cannot setup firewall rules for IPv6 in my deco app?
2025-10-05 00:17:06

  @programus 

 

Sorry for the late reply. Yes all deco's in the network would need to support it. So you could have two Deco X20-4G and three Deco X50-5G and you would be fine, But you couldn't have three Deco X50-5G and two XE75 pro decos.

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  0  
  0  
#6
Options

Information

Helpful: 1

Views: 291

Replies: 5

About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.