Enable IPv6 on a VPC with a Private Subnet and Egress-Only Internet Gateway

1 hour
  • 2 Learning Objectives

About this Hands-on Lab

All IPv6 addresses are public by default. But sometimes there’s a need to keep instances private. In this hands-on lab we are going to enable IPv6 on a VPC. We will then configure a subnet to be private, and then validate that our instance will not be accessible over the internet over IPv6.

NOTE: If you do not have IPv6 in your environment, please consider using Linux Academy Cloud Playground to validate the IPv6 connectivity.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Create a VPC

Add an IPv6 CIDR to the VPC.

Create an Egress-Only Internet Gateway

Create the egress-only internet gateway, and associate it to a Private Route Table.
Verify the connectivity to and from the private instance using the ping command.

Additional Resources

  1. Please make sure you are in the US-EAST-1 region.
  2. Enable IPv6 on the VPC.
  3. Set up the appropriate routes to support IPv6 communication to the internet
  4. Verify connectivity using IPv6 from our desktop

NOTE: If you do not have an environment that is IPv6 compatible, you can use Linux Academy Cloud Playground to verify IPv6 connectivity is working.

From a MAC/Linux computer, use the ping6 command to test connectivity when prompted. From a Windows PC use the command ping -6 (make sure you are pinging an IPv6 resource like ipv6.google.com)

Setup the egress-only internet gateway and verify that you can ping outbound, but not inbound to the private instance's IPv6 address.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?