EdgeMax / EdgeRouter IPv6 Base Firewall Rules

gistfile1.txt

edit firewall ipv6-name WAN6_IN
set default-action drop

set rule 10 action accept
set rule 10 description "Allow Established/Related"
set rule 10 protocol all
set rule 10 state established enable
set rule 10 state related enable

set rule 20 action drop
set rule 20 description "Drop Invalid"
set rule 20 protocol all
set rule 20 state invalid enable

set rule 30 action accept
set rule 30 description "Allow ICMPv6"
set rule 30 protocol icmpv6

commit
save


edit firewall ipv6-name WAN6_LOCAL
set default-action drop

set rule 10 action accept
set rule 10 description "Allow Established/Related"
set rule 10 protocol all
set rule 10 state established enable
set rule 10 state related enable

set rule 20 action drop
set rule 20 description "Drop Invalid"
set rule 20 protocol all
set rule 20 state invalid enable

set rule 30 action accept
set rule 30 description "Allow ICMPv6"
set rule 30 protocol icmpv6

set rule 40 action accept
set rule 40 description "Allow DHCPv6 Client/Server"
set rule 40 destination port 546
set rule 40 source port 547
set rule 40 protocol udp

commit
save


set interfaces ethernet eth0 firewall in ipv6-name WAN6_IN
set interfaces ethernet eth0 firewall local ipv6-name WAN6_LOCAL

commit
save