IPv6 Router Setting Reference

Maintained by Team 6Bogon <6bogon-sec at googlegroups dot com>

Packet & Route Filter Recommendations

Team 6Bogon maintains a Packet Filter and Route Filter Recommendations for IPv6 at xSP routers document describing packet and route filtering recommendations for use on border routers speaking IPv6 at xSPs.

Accept Base Filter Templates

IPv6 Bogon List

Please see the bogon reference for a full range of IPv4 and IPv6 bogon lists, including IPv6 fullbogons.

Disclaimer

Team 6Bogon and Team Cymru assume no responsibility whatsoever for any damages resulting from the use of these documents.

IPv6 Cisco IOS accept-base-template

ipv6 prefix-list ipv6-global-route deny   2001:0DB8::/32 le 128
ipv6 prefix-list ipv6-global-route permit 2001:0000::/32
ipv6 prefix-list ipv6-global-route permit 2001:0200::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0400::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0600::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0800::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0A00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0C00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:0E00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1200::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1400::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1600::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1800::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1A00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:1C00::/22 le 64
ipv6 prefix-list ipv6-global-route permit 2001:2000::/20 le 64
ipv6 prefix-list ipv6-global-route permit 2001:3000::/21 le 64
ipv6 prefix-list ipv6-global-route permit 2001:3800::/22 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4000::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4200::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4400::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4600::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4800::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4A00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:4C00::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2001:5000::/20 le 64
ipv6 prefix-list ipv6-global-route permit 2001:8000::/19 le 64
ipv6 prefix-list ipv6-global-route permit 2001:A000::/20 le 64
ipv6 prefix-list ipv6-global-route permit 2001:B000::/20 le 64
ipv6 prefix-list ipv6-global-route permit 2002:0000::/16 le 64
ipv6 prefix-list ipv6-global-route permit 2003:0000::/18 le 64
ipv6 prefix-list ipv6-global-route permit 2400:0000::/12 le 64
ipv6 prefix-list ipv6-global-route permit 2600:0000::/12 le 64
ipv6 prefix-list ipv6-global-route permit 2610:0000::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2620:0000::/23 le 64
ipv6 prefix-list ipv6-global-route permit 2800:0000::/12 le 64
ipv6 prefix-list ipv6-global-route permit 2A00:0000::/12 le 64
ipv6 prefix-list ipv6-global-route permit 2C00:0000::/12 le 64

IPV6 JUNIPER JUNOS ACCEPT-BASE-TEMPLATE

policy-options {
    policy-statement ipv6-route-filter {
        term ipv6-global-route {
            from {
                route-filter 2001:0DB8::/32 orlonger reject;
                route-filter 2001:0000::/32 exact;
                route-filter 2001:0200::/23 prefix-length-range /23-/64;
                route-filter 2001:0400::/23 prefix-length-range /23-/64;
                route-filter 2001:0600::/23 prefix-length-range /23-/64;
                route-filter 2001:0800::/23 prefix-length-range /23-/64;
                route-filter 2001:0A00::/23 prefix-length-range /23-/64;
                route-filter 2001:0C00::/23 prefix-length-range /23-/64;
                route-filter 2001:0E00::/23 prefix-length-range /23-/64;
                route-filter 2001:1200::/23 prefix-length-range /23-/64;
                route-filter 2001:1400::/23 prefix-length-range /23-/64;
                route-filter 2001:1600::/23 prefix-length-range /23-/64;
                route-filter 2001:1800::/23 prefix-length-range /23-/64;
                route-filter 2001:1A00::/23 prefix-length-range /23-/64;
                route-filter 2001:1C00::/22 prefix-length-range /22-/64;
                route-filter 2001:2000::/20 prefix-length-range /20-/64;
                route-filter 2001:3000::/21 prefix-length-range /21-/64;
                route-filter 2001:3800::/22 prefix-length-range /22-/64;
                route-filter 2001:4000::/23 prefix-length-range /23-/64;
                route-filter 2001:4200::/23 prefix-length-range /23-/64;
                route-filter 2001:4400::/23 prefix-length-range /23-/64;
                route-filter 2001:4600::/23 prefix-length-range /23-/64;
                route-filter 2001:4800::/23 prefix-length-range /23-/64;
                route-filter 2001:4A00::/23 prefix-length-range /23-/64;
                route-filter 2001:4C00::/23 prefix-length-range /23-/64;
                route-filter 2001:5000::/20 prefix-length-range /20-/64;
                route-filter 2001:8000::/19 prefix-length-range /19-/64;
                route-filter 2001:A000::/20 prefix-length-range /20-/64;
                route-filter 2001:B000::/20 prefix-length-range /20-/64;
                route-filter 2002:0000::/16 prefix-length-range /16-/64;
                route-filter 2003:0000::/18 prefix-length-range /18-/64;
                route-filter 2400:0000::/12 prefix-length-range /12-/64;
                route-filter 2600:0000::/12 prefix-length-range /12-/64;
                route-filter 2610:0000::/23 prefix-length-range /23-/64;
                route-filter 2620:0000::/23 prefix-length-range /23-/64;
                route-filter 2800:0000::/12 prefix-length-range /12-/64;
                route-filter 2A00:0000::/12 prefix-length-range /12-/64;
                route-filter 2C00:0000::/12 prefix-length-range /12-/64;
            }
            then accept;
        }
        then reject;
    }
}

IPv6 Force10 FTOS accept-base-template

ipv6 prefix-list global-route
 deny   2001:0DB8::/32 le 128
 permit 2001:0000::/32
 permit 2001:0200::/23 le 64
 permit 2001:0400::/23 le 64
 permit 2001:0600::/23 le 64
 permit 2001:0800::/23 le 64
 permit 2001:0A00::/23 le 64
 permit 2001:0C00::/23 le 64
 permit 2001:0E00::/23 le 64
 permit 2001:1200::/23 le 64
 permit 2001:1400::/23 le 64
 permit 2001:1600::/23 le 64
 permit 2001:1800::/23 le 64
 permit 2001:1A00::/23 le 64
 permit 2001:1C00::/22 le 64
 permit 2001:2000::/20 le 64
 permit 2001:3000::/21 le 64
 permit 2001:3800::/22 le 64
 permit 2001:4000::/23 le 64
 permit 2001:4200::/23 le 64
 permit 2001:4400::/23 le 64
 permit 2001:4600::/23 le 64
 permit 2001:4800::/23 le 64
 permit 2001:4A00::/23 le 64
 permit 2001:4C00::/23 le 64
 permit 2001:5000::/20 le 64
 permit 2001:8000::/19 le 64
 permit 2001:A000::/20 le 64
 permit 2001:B000::/20 le 64
 permit 2002:0000::/16 le 64
 permit 2003:0000::/18 le 64
 permit 2400:0000::/12 le 64
 permit 2600:0000::/12 le 64
 permit 2610:0000::/23 le 64
 permit 2620:0000::/23 le 64
 permit 2800:0000::/12 le 64
 permit 2A00:0000::/12 le 64
 permit 2C00:0000::/12 le 64

IPv6 H3C accept-base-template

ip ipv6-prefix global-routes deny   2001:0DB8:: 32 less-equal 128
ip ipv6-prefix global-routes permit 2001:0200:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0400:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0600:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0800:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0A00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0C00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:0E00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1200:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1400:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1600:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1800:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1A00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:1C00:: 22 less-equal 64
ip ipv6-prefix global-routes permit 2001:2000:: 20 less-equal 64
ip ipv6-prefix global-routes permit 2001:3000:: 21 less-equal 64
ip ipv6-prefix global-routes permit 2001:3800:: 22 less-equal 64
ip ipv6-prefix global-routes permit 2001:4000:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4200:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4400:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4600:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4800:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4A00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:4C00:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2001:5000:: 20 less-equal 64
ip ipv6-prefix global-routes permit 2001:8000:: 19 less-equal 64
ip ipv6-prefix global-routes permit 2001:A000:: 20 less-equal 64
ip ipv6-prefix global-routes permit 2001:B000:: 20 less-equal 64
ip ipv6-prefix global-routes permit 2002:0000:: 16 less-equal 64
ip ipv6-prefix global-routes permit 2003:0000:: 18 less-equal 64
ip ipv6-prefix global-routes permit 2400:0000:: 12 less-equal 64
ip ipv6-prefix global-routes permit 2600:0000:: 12 less-equal 64
ip ipv6-prefix global-routes permit 2610:0000:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2620:0000:: 23 less-equal 64
ip ipv6-prefix global-routes permit 2800:0000:: 12 less-equal 64
ip ipv6-prefix global-routes permit 2A00:0000:: 12 less-equal 64
ip ipv6-prefix global-routes permit 2C00:0000:: 12 less-equal 64

IPv6 alaxala accept-base-template

AX7700R/7800R/7800S series, AX3600S/AX6300S/AX6700S series

AX7700R/7800R/7800S series

network-filter name documentation-prefix
 2001:0DB8::/32 between 32 128

network-filter name ipv6-global-prefix
 2001:0000::/32 exact
 2001:0200::/23 between 23 64
 2001:0400::/23 between 23 64
 2001:0600::/23 between 23 64
 2001:0800::/23 between 23 64
 2001:0A00::/23 between 23 64
 2001:0C00::/23 between 23 64
 2001:0E00::/23 between 23 64
 2001:1200::/23 between 23 64
 2001:1400::/23 between 23 64
 2001:1600::/23 between 23 64
 2001:1800::/23 between 23 64
 2001:1A00::/23 between 23 64
 2001:1C00::/22 between 22 64
 2001:2000::/20 between 20 64
 2001:3000::/21 between 21 64
 2001:3800::/22 between 22 64
 2001:4000::/23 between 23 64
 2001:4200::/23 between 23 64
 2001:4400::/23 between 23 64
 2001:4600::/23 between 23 64
 2001:4800::/23 between 23 64
 2001:4A00::/23 between 23 64
 2001:4C00::/23 between 23 64
 2001:5000::/20 between 20 64
 2001:8000::/19 between 19 64
 2001:A000::/20 between 20 64
 2001:B000::/20 between 20 64
 2002:0000::/16 between 16 64
 2003:0000::/18 between 18 64
 2400:0000::/12 between 12 64
 2600:0000::/12 between 12 64
 2610:0000::/23 between 23 64
 2620:0000::/23 between 23 64
 2800:0000::/12 between 12 64
 2A00:0000::/12 between 12 64
 2C00:0000::/12 between 12 64

route-filter name ipv6-global-prefix
 seq 10 match network-filter documentation-prefix
 seq 10 drop
 seq 20 match network-filter ipv6-global-prefix
 seq 20 accept
 seq 999 drop

AX3600S/AX6300S/AX6700S series

ipv6 prefix-list ipv6-global-route seq 10 deny 2001:0DB8::/32 le 128
ipv6 prefix-list ipv6-global-route seq 20 permit 2001:0000::/32
ipv6 prefix-list ipv6-global-route seq 30 permit 2001:0200::/23 le 64
ipv6 prefix-list ipv6-global-route seq 40 permit 2001:0400::/23 le 64
ipv6 prefix-list ipv6-global-route seq 50 permit 2001:0600::/23 le 64
ipv6 prefix-list ipv6-global-route seq 60 permit 2001:0800::/23 le 64
ipv6 prefix-list ipv6-global-route seq 70 permit 2001:0A00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 80 permit 2001:0C00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 90 permit 2001:0E00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 100 permit 2001:1200::/23 le 64
ipv6 prefix-list ipv6-global-route seq 110 permit 2001:1400::/23 le 64
ipv6 prefix-list ipv6-global-route seq 120 permit 2001:1600::/23 le 64
ipv6 prefix-list ipv6-global-route seq 130 permit 2001:1800::/23 le 64
ipv6 prefix-list ipv6-global-route seq 140 permit 2001:1A00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 150 permit 2001:1C00::/22 le 64
ipv6 prefix-list ipv6-global-route seq 160 permit 2001:2000::/20 le 64
ipv6 prefix-list ipv6-global-route seq 170 permit 2001:3000::/21 le 64
ipv6 prefix-list ipv6-global-route seq 180 permit 2001:3800::/22 le 64
ipv6 prefix-list ipv6-global-route seq 190 permit 2001:4000::/23 le 64
ipv6 prefix-list ipv6-global-route seq 200 permit 2001:4200::/23 le 64
ipv6 prefix-list ipv6-global-route seq 210 permit 2001:4400::/23 le 64
ipv6 prefix-list ipv6-global-route seq 220 permit 2001:4600::/23 le 64
ipv6 prefix-list ipv6-global-route seq 230 permit 2001:4800::/23 le 64
ipv6 prefix-list ipv6-global-route seq 240 permit 2001:4A00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 250 permit 2001:4C00::/23 le 64
ipv6 prefix-list ipv6-global-route seq 260 permit 2001:5000::/20 le 64
ipv6 prefix-list ipv6-global-route seq 270 permit 2001:8000::/19 le 64
ipv6 prefix-list ipv6-global-route seq 280 permit 2001:A000::/20 le 64
ipv6 prefix-list ipv6-global-route seq 290 permit 2001:B000::/20 le 64
ipv6 prefix-list ipv6-global-route seq 300 permit 2002:0000::/16 le 64
ipv6 prefix-list ipv6-global-route seq 310 permit 2003:0000::/18 le 64
ipv6 prefix-list ipv6-global-route seq 320 permit 2400:0000::/12 le 64
ipv6 prefix-list ipv6-global-route seq 330 permit 2600:0000::/12 le 64
ipv6 prefix-list ipv6-global-route seq 340 permit 2610:0000::/23 le 64
ipv6 prefix-list ipv6-global-route seq 350 permit 2620:0000::/23 le 64
ipv6 prefix-list ipv6-global-route seq 360 permit 2800:0000::/12 le 64
ipv6 prefix-list ipv6-global-route seq 370 permit 2A00:0000::/12 le 64
ipv6 prefix-list ipv6-global-route seq 380 permit 2C00:0000::/12 le 64