diff --git a/sw/buildroot_overlay/etc/sysctl.d/ipv6_local_only.conf b/sw/buildroot_overlay/etc/sysctl.d/ipv6_local_only.conf
new file mode 100644
index 0000000..f56fdc4
--- /dev/null
+++ b/sw/buildroot_overlay/etc/sysctl.d/ipv6_local_only.conf
@@ -0,0 +1,8 @@
+# Disable IPv6 autoconfiguration to avoid obtaining a routable IPv6 address.
+#
+# The IPv6 interface will only have a link-local address.
+# This reduces the risk of accidentally making the device accessible
+# to the public internet.
+
+net.ipv6.conf.eth0.autoconf=0
+net.ipv6.conf.eth0.accept_ra=0