WAN (Internet connection)
Set how the router connects to the internet. Choose the type your ISP specifies and enter the values it needs.
Set the connection type
- Open NETWORK › WAN. Each interface in the wan zone has its own
connection type box. - Choose the connection type under IPv4.
- Fill in the fields for that type (see the tables below).
- Choose how IPv6 is obtained under IPv6. MAP-E and DS-Lite need IPoE.
- Click Save.
Saved changes become pending changes. Click Review changes at the top of the screen, apply them, and click Confirm within 5 minutes (see Applying changes).
If you change the connection type (IPv4 or IPv6), you are asked to confirm before saving. The WAN is briefly disconnected when the change is applied.
The Current status box on the right shows the link, IPv4 addresses, the IPv4 and IPv6 default routes and the IPv6 addresses. Check it after applying to see whether the connection is up.
If no interface is in the wan zone, this page is empty. Assign a NIC to the wan zone on NETWORK › Interfaces (see LAN, DHCP and DNS).
IPv4 connection types
| Type | When to use |
|---|---|
| DHCP (from upstream router) | Behind a home gateway or cable modem that hands out an address |
| Static IP | Your ISP assigned you a fixed address |
| PPPoE | Lines that log in with a user name and password |
| DS-Lite (e.g. transix) | IPv4 carried over IPv6 (DS-Lite) |
| MAP-E (e.g. v6 Plus, OCN Virtual Connect) | IPv4 carried over IPv6 (MAP-E) |
| Not used | No IPv4 |
Static IP
| Field | Description |
|---|---|
| Address | Address with prefix length, e.g. 203.0.113.2/24 |
| Gateway | The upstream router. Must be another address in the same network, e.g. 203.0.113.1 |
| DNS servers | Addresses used as upstream DNS servers. Separate several with commas |
PPPoE
| Field | Description |
|---|---|
| User name | The authentication ID from your ISP, e.g. user@example.ne.jp |
| Password | The password from your ISP. Once set, enter it only to change it |
| MTU | 1454 if empty. Range 1280–1492 |
The password is not written to the configuration file; it is kept in a separate store on the router. It is stored as soon as you click Save. If the line is already connected, Reconnect now appears. Click it to reconnect with the new password.
DS-Lite
| Field | Description |
|---|---|
| AFTR | The ISP device that carries IPv4 traffic. Enter its name or IPv6 address, e.g. gw.transix.jp. A name is resolved when the change is applied |
DS-Lite needs IPv6. Set IPv6 to IPoE or Static.
MAP-E
Enter the MAP-E values (the rule) by hand, as provided by your ISP.
| Field | Description |
|---|---|
| BR address | IPv6 address of the ISP border relay that carries IPv4 traffic |
| Rule IPv6 prefix | The IPv6 prefix the rule applies to. Enter the rule whose range contains your delegated prefix |
| Rule IPv4 prefix | The range of IPv4 addresses assigned by this rule |
| EA-bits length | Number of IPv6 prefix bits used to derive the IPv4 address and ports |
| PSID offset | Default 6 |
| Format | How the CE address (this router's IPv6 address) is built: draft03 (default) or RFC 7597. Most services in Japan use draft03 |
MAP-E always needs IPv6 set to IPoE. The router calculates the IPv4 address, the PSID and the usable ports from the prefix received on the WAN and the rule.
After applying, MAP-E in Current status shows the IPv4 address, the PSID, the number of ports in use and Available ports. If the received prefix does not match the rule, an error is shown there.
With MAP-E, each line can use only certain ports. Keep the following inside Available ports; otherwise the change cannot be applied:
- The External port of port forwards (see Firewall and port forwarding)
- The WireGuard and OpenVPN listen ports (see Remote access VPN)
How IPv6 is obtained
| Type | Description |
|---|---|
| Not used | No IPv6 |
| IPoE (RA and DHCPv6-PD) | Receives the address and route by RA and a delegated prefix by DHCPv6-PD. The prefix can be handed out to LANs |
| Static | Enter Address (e.g. 2001:db8::2/64) and Gateway |
With IPoE, choose the Requested prefix length: /48, /56, /60 or /64 (default /56). This is the length requested from the ISP by DHCPv6-PD.
Hand out the delegated prefix to LANs on NETWORK › LAN / IPv6 (see LAN, DHCP and DNS).
Notes for MAP-E and DS-Lite
- IPsec always uses UDP 500 and 4500. With MAP-E or DS-Lite, IKEv2, L2TP/IPsec and IPsec site-to-site VPNs cannot be reached from outside over IPv4. They can be reached over IPv6.
- To reach a VPN from outside over IPv4 with MAP-E, use WireGuard or OpenVPN with a listen port inside Available ports.
- IPsec site-to-site VPNs that this router initiates work from behind MAP-E or DS-Lite. NAT traversal (NAT-T) is used automatically (see Site-to-site VPN).
Permissions
This page belongs to the Interfaces and WAN area. Roles with view-only access can see the values but cannot change them (see Admin users and roles).