Access to router over IPv6 (Web, SSH)

[atam]

Hi. My ISP doesn't issue public IPs (v4), CGNAT-ed only. It does, however, issue IPv6 /56 prefixes, which I use. Wondering how to achieve the following (KN-1811):

1. Set up direct access to the Web interface over IPv6. AFAUI the built-in IPv6 firewall blocks all inbound traffic (not initated by the device). How do I enable certain categories of inbound traffic?

2. Enable access over telnet/ssh using IPv6? I tried checking off the appropriate check-boxes and setting up 22/23 ports forwarding in Web UI but it doesn't seem to work for IPv6.

Thanks in advance.

[ru.celebi]

I’m in the same situation as you — my ISP only provides IPv4 through CGNAT, but I do receive a public /56 IPv6 prefix, which I actively use.

1. Web Interface Access over IPv6

You can access Keenetic's web interface remotely via IPv6, but only if HTTP is enabled.
HTTPS does not work at all, because Keenetic does not have a valid SSL certificate installed by default. That’s why HTTPS connections are rejected by browsers.

To enable HTTP access:

• Go to Users & Access > Management Access in the Keenetic web interface.

• Enable the "Remote web access" option.

• Make sure only HTTP is selected (HTTPS won’t work without a valid certificate).

• Copy the device's IPv6 address from the interface.

• Access it in your browser like this:

  http://[your_ipv6_address]

2. Telnet and SSH Access over IPv6

• Telnet works over IPv6. You can connect to Keenetic using a Telnet client and the device’s global IPv6 address.

• SSH does not work over IPv6, even if it’s enabled in the web interface.
  This is likely because Keenetic does not support SSH over IPv6 at all (at least in current firmware versions).