Niti
← Back to the guide library

Essentials

Allow IPv6 through the firewall

Let only the right device and port through the modem.

IPv6 avoids NAT, but that does not mean the modem accepts every inbound connection. The firewall remains an important layer of protection.

Why does the modem block incoming traffic?

Each device may have a public IPv6 address. If the modem accepted every inbound connection, cameras, NAS devices, and computers would expose services to the Internet. Many modems therefore block new inbound connections by default until an administrator allows them.

General steps

  1. Sign in to the modem administration page with your administrator account.
  2. Find the Firewall or IPv6 Firewall section.
  3. Allow the port for the correct device, or choose a lower protection level for that device only when the modem offers no port-specific rule.

Detailed steps for Viettel, VNPT, and FPT modems

Test it yourself

On the hostname page choose Port check, select IPv6, and enter the correct port. The test runs from the Niti server, so it already checks from outside.

Open the dashboard to check a port