瀹剁敤绾у埆璺敱鍣紝瀵?v6 鏀寔濡備綍锛?mesh 鐨勬敮鎸佸浣曪紵 AP+AC 鐨勬敮鎸佸浣曪紵

• 資深大佬 : shikkoku

  tplink 鏂板瀷鍙峰熀鏈凡缁忔敮鎸?SLACC 鍜?RDNSS锛岄┈鐢叉按鏄熷拰 fast 浠呯壒瀹氭柊鍨嬪彿鏀寔銆傝吘杈句笉澶竻妤氾紝H3C 瀹剁敤鍏ㄩ儴涓嶆敮鎸併€傜綉浠跺拰 Linksys 鏀寔搴︿笉浣炽€侫SUS 鐨勬敮鎸佸害姣旇緝楂樸€?60 浠呴儴鍒嗗瀷鍙锋敮鎸侊紝涓旀敮鎸佸害涓嶄匠锛堟湁 bug 锛夈€?/div>

• 資深大佬 : cpstar

  鍏跺疄 V6 闅愬惈鐫€涓€涓潙锛屼互寰€鐨?v4 NAT锛屼笉鍋?NAT锛屽杈瑰熀鏈笂涓嶇煡閬撻噷杈规槸鍟ワ紝浣嗘槸 V6 娌℃湁 NAT锛屾瘡涓?IP 鍘熷垯涓婄洿鎺ュ叏缃戞毚闇诧紝浜庢槸闃茬伀澧欏繀椤昏缃畬澶?/div>

• 資深大佬 : wazon

  鎴戜互鍓嶉棶杩囩被浼肩殑闂鍙緵鍙傝€冿細 https://www.v2ex.com/t/660812

  @cpstar 璺敱鍣ㄩ槻鐏鍗充娇鍏ㄥ紑濞佽儊涔熸病鏈?IPv4 閭ｄ箞澶с€係LAAC+闅愮鎵╁睍鐢熸垚鐨?IP 鍦板潃鍑犱箮鏃犳硶琚毚鍔涙壂鎻忋€佸彧浼氳鏈湴鎴栦富鍔ㄨ闂殑澶栭儴缃戠珯鑾风煡锛堝惈涓棿缁忚繃鐨?ISP 锛夛紝鍐嶅姞涓婄幇浠ｇ粓绔熀鏈兘鏈夊畬澶囩殑闃茬伀澧欙紝姘戠敤鐨勫畨鍏ㄦ€у凡缁忚冻澶熶簡銆?/div>

• 資深大佬 : shikkoku

  ipv6 鐨勯槻鐏鎴戦兘鍏虫帀鐨?/div>

• 資深大佬 : sasalemma

  @wazon 瀹為檯涓婁笉鏄悗缂€鐨勯棶棰樸€傚浜?v6 鏉ヨ锛屼粠璺敱鐨勮搴︼紝wan 鍙ｅ拰 lan 鍙ｅ繀鐒舵槸涓嶅悓缃戞锛屾墍浠ュ氨涓嶇 wan 鍙ｉ偅杈圭殑閭ｄ釜 v6 鍦板潃浜嗐€倃an 鍙ｆ棤璁哄湪 v4 杩樻槸 v6锛寃an 瀵逛簬涓€鑸汉鏉ヨ閮芥槸鈥滃澶栤€濓紝鐪嬬寰堜弗鏍笺€?br />
  lan 鍙ｈ繖杈圭殑鑾峰彇鐨勫墠缂€锛屽叾瀹炲彲浠ヨ嚜宸辨悳闆嗙殑锛屾瘮濡傜數淇¤嚜宸辨嫧鍙峰悗鐨勫墠 240e:1234:abcd:5678锛岃嚦灏戝湪鏌愪釜鏃堕棿鏂紝涓夋鍙樺寲锛岀浜屾鍙樺寲涔熶笉澶э紝鏈夌殑鏄椂闂寸殑璇濓紝涔熸槸鑳芥壂鎻忕殑锛屾瘯绔熻矾鐢辩殑 lan 鍙ｅ氨鏄?240e:1234:abcd:5678:2276::1 绠＄悊鍦板潃锛屼粠鑷繁鐨勭綉娈靛紑濮嬫壂銆?br />
  鑰屼竴鑸?lan 鍙ｈ繖杈癸紝濡傛灉鎸夌収 v4 鐨勬€濊矾锛屽嚑涔庢槸涓嶉槻鐨勩€傚鏋?web 鏈嶅姟鏄洃鍚?0.0.0.0:80 鍜?:::80,鐖嗙牬鐨勫彲鑳芥€ц繕鏄洰楂樼殑锛屼笉杩囩洰鍓嶅凡鐭ユ瘮濡?ASUS锛寃eb 鏈嶅姟鐩戝惉鍙湁 ipv4锛寁6 娌℃湁鐩戝惉锛屽€掓槸寮€浜?ssh+wan 鍙ｈ闂?ssh锛宻sh 灏辨槸鐩戝惉 v4+v6 浜嗭紝鍙紑鏀?ssh 鐨?lan 鍙ｈ闂紝ssh 灏卞彧鐩戝惉 v4锛屾墍浠ュ疄闄呭ぇ澶氭暟瀹剁敤璺敱锛屽ぇ澶氫篃鏄病鏈夊噯澶囧ソ鐨勩€?br />
  涓轰粈涔堟兂鐫€鍗曠函鐖嗙牬鍐呯綉涓€涓満鍣紝閭ｄ箞鍦板潃纭疄寰堥毦锛岀垎鐮存€诲紑鍏充笉瑕佸暐鏈夊暐锛?/div>

• 資深大佬 : elfive

  @shikkoku #1 鍏勫紵锛岀綉浠堕兘鏀寔濂藉骞翠簡鈥︹€?/div>

• 資深大佬 : noahzh

  涓嶇煡閬撳唴缃戜笂 ipv6 鏈変粈涔堟剰涔夊憖.

• 資深大佬 : cwbsw

  @sasalemma 鎵€浠ヤ笉瑕佺敤::1 銆傚悇绉嶅浐浠朵範鎯€х殑缁?LAN 鍙ｉ厤鍦板潃鐢?:1锛岃繖鏄?IPv4 鏃朵唬鐨勬儻鎬ф€濈淮锛屽瓨鍦ㄥ畨鍏ㄩ殣鎮ｃ€?/div>

• 資深大佬 : sasalemma

  @cwbsw 闂鍦ㄤ簬锛屾寜鐓?ipv4 鐨勬儻鎬ф€濈淮锛屾€昏鏈変竴涓€滄€昏澶団€濇潵鍒嗛厤鍓嶇紑鍚э紝鐒跺悗浠?isp 閭ｈ竟鑾峰緱鍓嶇紑锛岄粯璁ゅ氨鏄?:1 涓虹涓€涓€昏澶囦簡銆傝矾鐢辩殑 ip 鍦板潃绔熺劧涓嶆槸 SLAAC 涓€鏍凤紝鍚庣紑涓?MAC 鐢熸垚銆傝€岄潪鑷繁缂栬瘧鐨勫浐浠讹紝杩欎釜鍘嬫牴涓嶅瓨鍦ㄤ慨鏀圭殑鍙兘鎬с€?br />
  涓嶈繃閴翠簬褰撳墠鐨勪竴浜?IPV6 搴旂敤涓嶆垚鐔燂紝涓€浜涢粯璁ょ殑閰嶇疆鍊掓槸涓嶇粡鎰忓氨鍏充簡闂ㄧ殑銆侫SUS 鐨?1900P锛?750AC 涓€绫诲浐浠讹紝濡備笂鎵€璇撮粯璁ゅ紑鍚?ssh 鐨?wan 鍙ｈ闂紝鏄細鐩戝惉:::22锛屼絾鏄槻鐏閭ｈ竟锛寁4 浼氬紑鏀?wan 鐨?22 绔彛鍒版湰鏈猴紝V6 鐨勫榛樿杩樻槸绂佹 WAN 鎵€鏈夎繛鎺ュ叆鏈満鐨勶紝铏借 LAN 鏄叕缃戯紝浣嗛€昏緫绾胯矾涓婅闂繕鏄?internet–銆?wan–銆?lan 銆?br />
  鎵€浠ュ儚妤间笂璇寸殑锛屽叧闂?v6 澧欙紝鍦ㄨ繖涓繕娌￠噸瑙嗙殑 v6 鏃朵唬锛岃鐖嗙牬鎬诲紑鍏筹紝鍏冲鎵嶆槸閫佷汉澶寸殑琛屼负銆?/div>

• 資深大佬 : cwbsw

  @sasalemma 鎵€浠ヨ杩欐槸鍐欏浐浠剁殑浜烘儻鎬ф€濈淮鍟婏紝浜嬪疄涓婂苟娌℃湁蹇呴』::1 鐨勯檺鍒讹紝OpenWrt 灏卞彲浠ヨ嚜瀹氫箟锛孍UI64 銆乺andom 閮藉彲浠ャ€傚彟澶?LAN 鍙ｄ篃涓嶆槸涓€瀹氳閰?GUA锛屽唴缃戣闂敤 ULA锛岀敋鑷冲帇鏍逛笉閰嶅湴鍧€閮藉彲浠ョ殑銆?/div>

• 資深大佬 : sasalemma

  @cwbsw 杩欎釜鍊掓槸锛屽笇鏈涗互鍚庝細鏈夋墍鏀瑰杽锛岀洰鍓嶅氨鍙兘鑷繁鏀逛簡銆?/div>

• 資深大佬 : shikkoku

  @elfive #6 鎴戞病璇翠笉鏀寔鍟婏紝鎴戣鏀寔涓嶄匠鑰屽凡銆?/div>

• 資深大佬 : Kowloon

  @cwbsw
  缃戝叧鏄?::1 鏄竴涓棶棰橈紝涓€涓緥瀛愭槸澶╂触鑱旈€?BAS 鐨勯厤缃槸闅忔剰 Traceroute 涓€涓?PD 鐨?::/60 娈靛唴闅忔剰鍦板潃灏变細鍑烘潵瀵规柟鍏夌尗鎴栬€呰矾鐢卞櫒鐨勫湴鍧€锛岃繖涓湴鍧€涓嶄絾鏄?MAC 鐢熸垚鐨勶紝鑰屼笖璁颁笅杩欎釜鍦板潃绛夊湴鏂逛笅娆￠噸鏂版嫧鍙疯幏鍙栨柊鍦板潃锛屽啀娆?Traceroute 灏辫兘鍑烘潵鏂板湴鍧€銆傛垜涓嶇煡閬撹繖涓畻涓嶇畻鏄病鏈夋晥淇濇姢闅愮锛屾瘯绔熸毚闇蹭簡 MAC 鍦板潃涔熶笉鏄偅涔堝ソ銆?/div>

• 資深大佬 : wazon

  @sasalemma 浣犺鐨勮繖绉嶅▉鑳佹儏鍐典粎闄愮綉鍏宠澶囪嚜韬洃鍚簡瀵瑰寮€鏀剧鍙ｅ惂锛?/div>

• 資深大佬 : wazon

  @sasalemma
  鎯充簡涓嬶紝瀵逛簬浣犳墍璇磋繖绉嶆棤闃茬伀澧欎笅缃戝叧鑷韩闄疯惤鐨勯闄╋紝闇€瑕佹槸鍏惰嚜韬繍琛岀殑楂樻潈闄愭湇鍔★紝涓旀弧瓒充互涓嬫潯浠讹細
  1. 璇ユ湇鍔＄洃鍚簡[::]涓旇嚜韬病鏈?IP 娈电殑鏍￠獙
  2. 璇ユ湇鍔℃病鏈夎韩浠介獙璇佹垨鑰呭急瀵嗙爜
  3. 璇ユ湇鍔℃病鏈変娇鐢ㄨ杩愯惀鍟嗗睆钄界殑甯哥敤绔彛
  4. 缃戝叧鑷韩 lan 鏂瑰悜鐨勫叏鐞?IPv6 鍦板潃鍚庣紑涓?:1 鑰岄潪 SLAAC 锛堟殏鏃朵笉鏄緢娓呮鏄浐浠惰繕鏄笂娓哥殑鍘熷洜锛屾垜鑷繁鐨勮矾鐢卞櫒 lan 鍜?wan 鏂瑰悜閮芥槸 EUI64 銆傜綉涓婃悳浜嗕竴涓嬫埅鍥撅紝涓ょ鎯呭喌閮芥湁鐪嬪埌锛?br />
  瀵逛簬涓€鑸敤鎴疯€岃█锛岄珮鏉冮檺鐨勬湇鍔″氨璇ュ氨鏄矾鐢卞櫒鍚庡彴鐣岄潰锛屽叾閫氬父鐩戝惉 IPv4 鐨?80 銆佷笉鐩戝惉 IPv6锛屽▉鑳佷笉鏄緢澶с€?br />瀵逛簬鎶樿吘璺敱鍣ㄧ殑鐢ㄦ埛鑰岃█锛屽鏋滅綉鍏宠嚜韬?lan 鏂瑰悜鐨?IPv6 鍚庣紑涓?:1 銆佽繍琛屾湁鐩戝惉 IPv6 鐨勯珮鏉冮檺+寮辫闃叉湇鍔★紝涓旂鍙ｆ病鏈夎杩愯惀鍟嗘嫤鎴紝閭ｇ‘瀹炴湁涓€瀹氱殑椋庨櫓銆備笉杩囪繖浜涚敤鎴蜂竴鑸篃鏈夎兘鍔涢厤缃?IPv6 鐨勯槻鐏銆?br />

  @Kowloon 鎻愬嚭浜嗕竴绉嶄粠澶栭儴鍙戠幇 SLAAC 鍦板潃缃戝叧璁惧鐨勬柟娉曘€傝繖鏍风殑璇濊繍琛屽湪缃戝叧鐨勯珮鏉冮檺缃戠粶鏈嶅姟搴旇鑷冲皯婊¤冻 鏈?v6 鐨勫唴 /澶栭儴绔彛鎷︽埅銆佷笉鐩戝惉 IPv6 銆佸己韬唤楠岃瘉 涓殑鑷冲皯涓€涓€?br />
  鑷充簬鍐呯綉鐨?SLAAC 璁惧锛屾殏鏈彂鐜版槑鏄剧殑鍏綉鏆撮湶椋庨櫓銆?/div>

• 資深大佬 : mrzx

  @cpstar nat 璇炵敓涔嬪垵涓嶆槸涓轰簡瀹夊叏锛屼粎浠呮槸涓轰簡瑙ｅ喅 ipv4 鍦板潃涓嶅鐢ㄨ€岃璁＄殑銆傛墍璋撶殑鍦板潃闃叉毚闇茬瓑绛夊彧鏄檮甯︽晥鏋溿€?/div>

• 資深大佬 : mrzx

  @cpstar 琛ュ厖涓€鐐癸紝鎴戝閲岀殑璺敱鍣ㄦ槸 rb4011,鍐呯疆闃茬伀澧欙紝鏃╁紑鍚?deny ipv6 all 浜?鎴戠幇鍦ㄥ閲屽彧瑕佹槸鏀寔 ipv6 鐨勮澶囷紝閮芥湁涓€涓敮涓€鐨勫叕缃?ipv6 鍦板潃銆傜敤鐨勬槸闃块噷鐨?ipv6 dns

• 資深大佬 : mrzx

  @sasalemma 璺敱鍣ㄤ笂鑷甫 ipv6 闃茬伀澧欏姛鑳藉彲浠ヨВ鍐宠繖浜涢棶棰樸€傘€傘€傘€?/div>

• 資深大佬 : mrzx

  @sasalemma 鎴戝姞璺敱鍣ㄤ粠鏉ラ兘鏄笉寮€ web 鐨勶紝鍥犱负鏈煡鐨勫畨鍏ㄩ殣鎮ｈ皝涔熻涓嶅噯(鎴戞墜閲岃繕浠庡埆浜洪偅鎹炶繃鏉ョ殑娣变俊鏈?ssl vpn 0day 婕忔礊涓€鐩存病鐢紝鎵€浠ユ垜涓嶇浉淇℃湁缁濆鐨勫畨鍏?銆傘€傚嵆浣挎槸鎴戝紑鍚?telnet 鍜?ssh,涔熼檺瀹氫簡 acl.
  鍙湁瀹堕噷鐨?vpn pool 鍜?lan 鐨勫湴鍧€鍙互 ssh 鍜?telnet 鍒拌矾鐢卞櫒涓?/div>

• 資深大佬 : sasalemma

  @wazon

  ::1 闂鍙槸鎬濈淮鎯€э紝鐩稿浜庢煇浜涙湅鍙嬭鐨?ipv6 鍏綉鍦板潃绻佸锛屾壂鎻忛毦鐨勮娉曪紝涓嶆槸璇翠竴瀹氭湁椋庨櫓銆?br />
  浠讳綍绯荤粺鐖嗙牬閮芥槸鍩轰簬 0day 鎴栬€呭急瀵嗙爜锛屼笉瀹夊叏鎴栬€呬笉褰撹缃鑷寸殑銆?br />
  姣斿 openwrt 瀹樻柟鍥轰欢涓紝榛樿鎯呭喌涓嬫槸锛寃eb 鐨?80 鍜?443 锛堝惎鐢ㄧ殑璇濓級鏄洃鍚簬 0.0.0.0:80 / 0.0.0.0:443,V6 鏄洃鍚?[::]:80 / [::]:443锛屽彧鏄竴绉嶆€濈淮鎯€э紝鎴栬€呰瀹夊叏涓庢槗鐢ㄦ槸鐩稿鐨勶紝杩欎箞璁剧疆鍙槸闃叉闄や簡鏅€氭儏鍐垫槸鐢ㄩ粯璁ょ殑 3 绫诲湴鍧€ 192.168.1.1 璁块棶锛屾湰鏈?127.0.0.1 鐨勮闂紝杩樻湁 wan 鍙ｈ闂紝杩欐牱閰嶇疆鏄柟渚夸娇鐢紝闄ら潪涓汉瀵硅繖涓湁瀹夊叏瑕佹眰锛屽惁鍒欐湁浜涙湇鍔￠兘鏄洃鍚叏绔彛鐨勩€?br />
  鍏充簬璺敱鏈韩 LAN 鍙ｅ湴鍧€锛岀敤 ifconfig 鑳芥煡鍒帮紝瀹為檯涓婁袱涓湴鍧€鎯呭喌閮芥槸鏈夌殑锛堜釜浜哄疄娴嬶級锛?br />
  1.璺敱鎷ㄥ彿锛屽厜鐚ˉ鎺ワ紝骞夸笢鐢典俊锛屽甫 V4 鍏綉锛孡AN 鍙?V6 鍦板潃涓哄叏鐞冨湴鍧€锛?鍓嶇紑::1″锛岃矾鐢?ASUS AC1900P 銆?br />2.璺敱鎷ㄥ彿锛屽厜鐚ˉ鎺ワ紝骞夸笢绉诲姩锛孷4 鍐呯綉锛孡AN 鍙?V6 鍦板潃涓哄叏鐞冨湴鍧€锛孍UI64锛岃矾鐢?ASUS AC1200P 銆?br />
  绉诲姩鐨?WAN 鍙?LAN 鍙ｇ綉娈?2409:abcd 鏄浉鍚岀殑銆?br />
  涔熷彲鑳芥槸鍥轰欢鍘熷洜瀵艰嚧锛屼絾鐩墠涓ゅ湴璁惧鏃犳硶浜ゆ崲锛屾墍浠ユ病娉曟祴璇曘€?br />
  涓嶈繃濡備綘鎵€璇达紝鏃犺鍝釜鍦板潃锛屼竴鑸父瑙勭殑璁惧閮戒細绂佹杩炴帴鑷韩锛屼絾杩欎釜鍙兘鍙槸 bug锛屽洜涓鸿繖涓湪鑰嶅ぇ鐗岀殑 asus 瀹樻柟鍥轰欢涓紝鏃㈢劧寮€鍚?ssh 鐨?WAN+LAN 璁块棶锛屼负浠€涔堝氨浼氱洃鍚琜::]:22锛屼絾濂囪懇鐨勬槸锛寁4 鐨勫锛屼篃灏辨槸 iptables 寮€浜嗚浆鍙戝埌鑷韩锛岃€?ip6tables锛屼篃灏辨槸 v6 鐨勫锛屽苟娌℃湁寮€鍚€傜垎鐮磋 1.2.3 閮芥弧瓒虫墠鏈夊彲鑳斤紝鎵€浠ュ儚绉诲姩锛?0锛?43 閮藉皝鏉€浜嗭紝骞垮窞鍗楁矙鐢典俊甯?v4 鍏綉鐨?443 娌℃湁绂侊紝绂佷簡 80锛屽唴缃?v4 鐨勫皝浜?v6 鐨?80锛?43.

  鎵€浠ヨ杩欎釜鍙槸瀛樺湪闅愭偅锛屽鏋滅敤鍏朵粬涓嶅紑婧愬浐浠剁殑锛屽張娌℃湁寮€鏀?ssh 杩涘幓锛屼綘瀹為檯涓婁篃涓嶇煡閬撳紑浜嗕粈涔堢鍙ｏ紝姣斿涓€鑸殑瀹剁敤璺敱銆?br />
  ::1+鑾悕鍏跺鐨勭鍙?鍏抽棴鐨?ipv6 澧欙紝閭ｆ槸浠€涔堟牱瀛愩€傚彟澶栧儚 openwrt 榛樿鏄笉绂?ping 鐨勶紝::1 鍙槸鏇村鏄撴壘鍒版埧闂紝鎬庝箞杩涘眿锛屽氨鐪嬫椂鏁堜簡銆傚儚 v4 鍏綉鐨勫箍涓滅數淇★紝47锛?5 寮哄埗鏂嚎涓€娆★紝瑕佹槸鍐呯綉 v4锛屼竴鍛ㄤ笉鎹?v6 鍦板潃鐨勯偅绉嶃€?br />
  鑲栫敵鍏嬪彧鏄湁瓒冲鐨勬椂闂?鍘嬪姏銆?br />
  鍙﹀锛屾垜涓汉杩樻槸鍝釜瑙傜偣锛岃櫧鐒堕€昏緫涓婂唴缃戣澶囬兘鑾峰緱鐨勫叏鐞冪殑 ipv6 鍦板潃锛岃嚦灏戜粠閫昏緫閾捐矾涓婅锛岃繕鏄€氳繃 LAN—銆?WAN–銆?internet 鐨勶紝鎵€浠?ipv6 澧欏浜庡紑鏀惧唴缃戣澶囩敤鐨勬槸 FORWARD =銆? 灏辨槸淇楃О鐨勮浆鍙戯紒

  寮€澧欏氨鑳介伩鍏嶅緢澶氫笉蹇呰鐨勯殣鎮ｏ紝浠呮銆?br />
  濡傛灉鏄厜鐚嫧鍙凤紝瀹為檯涓婂摢涓?TR69 鐨勫悓鍩庣綉涓嶆槸涓€涓法澶ф棤姣旂殑婕忔礊锛?/div>

• 資深大佬 : sasalemma

  @mrzx You are right 锛?br />
  寮€澧欎繚骞冲畨锛岀幇鍦ㄧ殑鐖嗙牬锛岄櫎浜?0day 鑳界敱澶栫垎鐮达紝鍩烘湰閮芥槸閮芥槸鐢卞唴杩炲嚭鐨勶紝鍝€曟槸鏈€绠€鍗曟棤瓒ｇ殑澧欙紝閮戒繚骞冲畨銆?br />
  鐢卞唴灏卞緱闈犱富鍔ㄩ槻寰′簡銆?br />
  鎴戜釜浜哄缃戣闂畝鍗曠偣灏卞紑 ssh+绔彛杞彂鏉ヨ缃?web 銆?br />
  瀹夊叏鏄撶敤鐩稿鐭涚浘鐨勶紝鍙槸鍙嶅涓轰簡鐪佷簨鍏冲鐨勮涓猴紝鍜屾帰璁ㄤ笅 ::1 鎵弿闂銆?/div>

• 資深大佬 : tankren

  pfsense 鍟?绠€鍗曟槗鐢ㄨ繕瀹炵敤