AT&T gave me IPv6 on the BGW-210 700.
IPv6
Status Available
Global Unicast IPv6 Address 2600:1702:980:25e0::1
Link-local IPv6 Address fe80::eea:c9ff:feb8:84e0
IPv6 Addressing Subnet (including length) 2600:1702:980:25e0::/64
IPv6 Delegated Prefix Subnet (including length) 2600:1702:980:25ef::/64
Fortinet and I found 3rd party sites on how to enable it. WAN2 has both IPv4 and IPv6. Next step was using the Delegated Prefix Subnet on the 60E 8 routing layer ports.
IPv6 Delegated Prefix:
2600:1702:980:25ef/64
Start Range: 2600:1702:980:25ef:0:0:0:0
End Range: 2600:1702:980:25ef:ffff:ffff:ffff:ffff
No. of host: 18446744073709551616
Subnet this into 8 networks
2^3 = 8
You take the power of 3 and add it to 64
/64 + 3 = /67
You take the block to the left of 25ef
You create an interesting mask 1110b nibble
8 4 2 1 16 constant
1 1 1 0 = 14 mask nibble
subtract them
16 constant
- 14 mask nibble
2 interesting nibble
So it becomes 2600 1702 980 25ef then 0,2,4,6,8,a,c,e.
Each of the 8 ports has been assigned its own /67 block.
2600 1702 980 25ef 0000 /67
2600 1702 980 25ef 2000 /67
2600 1702 980 25ef 4000 /67
2600 1702 980 25ef 6000 /67
2600 1702 980 25ef 8000 /67
2600 1702 980 25ef A000 /67
2600 1702 980 25ef C000 /67
2600 1702 980 25ef E000 /67
Internal 1 got this range.
2600 1702 980 25ef 0000 0000 0000 0000 to 2600 1702 980 25ef 1FFF FFFF FFFF FFFF
I decided to create inside each /67 a address that mirrored my IPv4.
port, ipv4, ipv6
1 172.16.5.0/24 2600:1702:980:25ef:0172:16:5:0/67
2 172.16.1.0/24 2600:1702:980:25ef:2172:16:1:0/67
3 172.16.2.0/24 2600:1702:980:25ef:4172:16:2:0/67
4 172.16.3.0/24 2600:1702:980:25ef:6172:16:3:0/67
5 172.16.10.0/24 2600:1702:980:25ef:8172:16:10:0/67
6 192.168.0.0/24 2600:1702:980:25ef:a192:168:0:0/67
7 192.168.3.0/24 2600:1702:980:25ef:c192:168:3:0/67
DMZ 192.168.1.0/24 2600:1702:980:25ef:e192:168:1:0/67
Bind9 and Bind9 v6 on PriDNS and SecDNS work with no log errors.
The tricky part was setting up the reverse DNS.
tracert6 ipv6.google.com
traceroute to ipv6.l.google.com (2607:f8b0:4009:803::200e) from 2600:1702:980:25ef:e192:168:1:12, 30 hops max, 60 bytes packets
1 2600:1702:980:25ef:e192:168:1:173 (2600:1702:980:25ef:e192:168:1:173) 0.688 ms 0.320 ms 0.320 ms
2 * * *
3 2001:506:6000:136:71:156:218:70 (2001:506:6000:136:71:156:218:70) 24.147 ms 23.168 ms 22.233 ms
4 2001:506:6000:136:71:156:218:68 (2001:506:6000:136:71:156:218:68) 22.949 ms 23.077 ms 22.725 ms
5 2001:1890:ff:ffff:12:122:22:58 (2001:1890:ff:ffff:12:122:22:58) 29.278 ms 29.394 ms 29.399 ms
6 2001:1890:c01:52:12:255:10:56 (2001:1890:c01:52:12:255:10:56) 29.783 ms 29.323 ms 28.014 ms
7 2607:f8b0:8213::1 (2607:f8b0:8213::1) 29.258 ms 29.042 ms 28.430 ms
8 2001:4860:0:100d::e (2001:4860:0:100d::e) 30.054 ms 30.574 ms 30.545 ms
9 2001:4860:0:100d::5 (2001:4860:0:100d::5) 30.535 ms 30.406 ms 30.035 ms
10 * 2001:4860::c:4000:d29f (2001:4860::c:4000:d29f) 29.949 ms *
11 2001:4860::9:4000:eec9 (2001:4860::9:4000:eec9) 30.013 ms 29.998 ms 29.914 ms
12 2001:4860:0:1::33 (2001:4860:0:1::33) 29.520 ms 29.009 ms 28.625 ms
13 ord37s08-in-x0e.1e100.net (2607:f8b0:4009:803::200e) 28.912 ms 28.898 ms 28.767 ms