Tutorials · Routing & Internet
How to Start With IPv6 on a Business Network
A practical first step to IPv6: understand addressing, enable dual-stack on the edge and one VLAN, secure it and test.
Before you start
- An ISP that provides IPv6 (often a /48 or /56 prefix)
- Devices with IPv6 support
Step by step
Understand the prefix
Your ISP delegates a prefix such as 2001:db8:1200::/48. Each VLAN gets a /64, so you have thousands of subnets available.
Plan subnets
Mirror your IPv4 plan, for example VLAN 10 → 2001:db8:1200:10::/64.
Enable dual-stack on the edge
Configure IPv6 on the WAN and request prefix delegation from the ISP.
Enable IPv6 on one pilot VLAN
Add an IPv6 address to the VLAN interface and enable router advertisements.
interface vlan 10 ipv6 address 2001:db8:1200:10::1/64 ipv6 nd ra enable
Apply security
IPv6 firewall rules must match IPv4 policy. Block unsolicited inbound traffic; enable RA guard and DHCPv6 guard on access switches where supported.
Test
Visit an IPv6 test site and confirm both protocols work. Check DNS returns AAAA records.
Roll out gradually
Extend VLAN by VLAN and monitor.
Commands are generic, industry-standard examples. Exact syntax and menu names vary by model and firmware; check your device's manual on the Documentation page.
Pro tips
- Never leave IPv6 'accidentally on' without firewall rules.
- Document IPv6 alongside IPv4 in your IP plan.
FAQ
Frequently asked questions
Do I need NAT with IPv6?
Usually not. Security comes from firewall rules, not address translation.
Keep learning
Related guides
IP addressing and subnet planning
Read more →How to Set Up Dual-WAN Failover With a 4G LTE Backup
Keep a branch online when the fibre fails: add a 4G LTE link as a backup WAN with health checks and automatic failover.
Read more →How to Plan IP Addressing and Subnets for a Business Network
A clean IP plan makes networks easier to secure, troubleshoot and grow. Learn a simple scheme you can reuse on every site.
Read more →How to Configure DHCP Scopes, Reservations and Options
Hand out addresses reliably: one scope per VLAN, reservations for printers and cameras, the right DNS and gateway options and sensible lease times.
Read more →Stuck on a step?
Ask Navijin technical support or an authorised partner for help with your configuration.