[stavros]

Well then you set your firewall to default-deny. It doesn't make sense to hobble the internet just because NATs are inadvertently a convenient firewall.

[mort96]

And how do I assign the devices globally unique IP addresses? SLAAC is only for local addresses, right?

[stavros]

Wouldn't IPv6 work for that?

[mort96]

I don't know what you mean. I asked what process you would use to assign IPv6 addresses.

[stavros]

Maybe I'm not understanding the use case. Why can't you use DHCPv6 or SLAAC wherever the device is deployed?

[mort96]

DHCP doesn't give you a globally unique IP address...

If you're suggesting getting using a non-unique DHCP-assigned local IP address, I don't understand what difference you think v6 does compared to v4.

[stavros]

DHCP does give you a globally unique IP address when your ISP has allocated a prefix to your router, that's how all the Internet-connected IPv6 devices get their addresses. Where is our misunderstanding?