Filtering/Dropping IPv6 on IPv4-only Devices?

Hi All -
Got an interesting requirement that (for something seemingly simple) has been remarkably challenging to locate a solution for...
Having a problem with random IPv6 traffic showing up on the enterprise LAN from time to time and freaking out certain network-connected devices that don't know how to process it (CPU 100%, etc.). So I'm looking for a way to filter/drop that IPv6 traffic at the network edge. I can certainly set the core 6500's not route (or even ignore) IPv6, but that still doesn't stop it from running around WITHIN a VLAN.
Is there a way that a IPv4-only device can identify IPv6 traffic (by a protocol type code or something along that line) so that it can be filtered/dropped before it even makes it onto the backbone?
Thanks in advance!
Mike

Mike-
Good question! The first thing I thought of was VACL's, but VACLs w/IPv6 are not supported on the 6000 series switch.
http://www.cisco.com/en/US/tech/tk389/tk814/technologies_configuration_example09186a00808122ac.shtml#vacl
Are the 6500's your access layer? Are they your L3 gateway? Is it possible for you to find the device(s) running IPv6 and correct them?

Similar Messages

IPv6 in IPv4 Tunneling

Any support for IPv6-in-IPv4 tunneling, e.g. HE, for us whose ISP do not do native IPv6 or 6RD?

Gabby wrote:
http://www6.nohold.net/Cisco2/ukp.aspx?pid=93&vw=1&articleid=23904
All of the Linksys devices currently support only Internet Protocol version 4 (IPv4) addressing. However, WRT610N and E4200 nominally support the latest Internet Protocol version 6 (IPv6) but these products are NOT yet IPv6 compliant.
NOTE: Future firmware releases of Linksys devices will be available to support IPv6.
This information is OUTDATED.

My MacBook was wiped of all my music and everything else, and now my iTouch is the only device with my entire music database. My iTouch is old. (Version 6.1.6, Model number: MC547LL/A) Is there any way I can put all the music on my iTouch onto my Mac

My MacBook was wiped of all my music and everything else, and now my iTouch is the only device with my entire music database. My iTouch is old. (Version 6.1.6, Model number: MC547LL/A) Is there any way I can put all the music on my iTouch back onto my MacBook? I hate that I could lose my entire music library by dropping my iTouch in the toilet.
I've tried to plug in my iTouch into my MacBook, but I can't seem to give the music-transfusion without subscribing to iTunes Match or just completely wiping my iTouch.
PLEASE HELP MEEEEE

Your i-device was not designed for unique storage of your media. It is not a backup device and media transfer was planned with you maintaining a master copy of your media on a computer which is itself independently backed up against loss. To use a device with a different setup you transfer the old library from a computer or a backup directly to the new setup, not the device to the library. Media syncing is one way, computer to device, updating the device content to the content on the computer, not updating or restoring content on a computer. The exception is iTunes Store purchases which can be transferred to a computer.
iTunes Store: Transferring purchases from your iOS device or iPod to a computer - http://support.apple.com/kb/HT1848 - only purchases from iTunes Store
For transferring other items from an i-device to a computer you will have to use third party commercial software. See this document by turingtest2: Recovering your iTunes library from your iPod or iOS device - https://discussions.apple.com/docs/DOC-3991

OpenVPN IPv6 client, IPv4 server, Port forwarding?

I'd like to use an anonymous VPN with OpenVPN, but my new ISP only gives IPv6 addresses and IPv4 only via DualStack lite (4in6).
As a consequence, my machine is only reachable with IPv6 Port Forwarding.
The VPN-Provider only supports IPv4.
Now the question:
Can I reach my machine through IPv6 Port forwarding with OpenVPN and get a static IPv4 and Port forwarding(v4) from him?
As I see it:
I should be able to establish a connection with the VPN. I get a static address and the provider is forwarding the ports. Because I made the connection TO him it doesn't matter which ports are open on my side. Right?
Or is it the other way around, that both need ports that can be forwarded?

I guess you mean forwarding from WAN (server) to LAN (client) (both static IPs)?
(Server must be your Internet gw/router.)
NAT requires the ipfw firewall running so you need to add these ports (TCP? and/or UDP?) to the "allowed in" list for the server public/WAN IP. Turn on logging of denied packets to see what happens.

Managing DirectAccess clients in IPv4 only networks

We are in the process of implementing DirectAccess with Server 2012 R2. So far, it looks very promising. Clients can communicate from our management servers exactly as desired. However, we would like to provide a way for our Help Desk to connect to those
machines (for instance, to be able to initiate remote control).
ISATAP is technically no longer supported, as well as it seems there are some risks/challenges associated with it anyways. I was wondering if anyone has come up with any good solutions for this. Since it would just be for a few, I was thinking about also
configuring the server to allow inbound VPN for IPv6 only and just have our Help Desk users initiate a VPN connect to the server the few times this functionality would be necessary. Has anyone done anything like that? I haven't set up VPN in Windows Server
in at least 8 years, so any advice would be helpful. If you have any other suggestions, I'd also be happy to accept that.
Thanks!

Start from Server 2008R2 the VPN become totally different from 2003, such as if you have Win7&Win8 client you need deploy the CA and more you'd better to learn some DA related deploy article first:
[Tutorial] Configuring Direct Access on Server 2012 R2
http://jackstromberg.com/2013/12/tutorial-configuring-direct-access-on-server-2012-r2/
Prerequisites for Deploying DirectAccess
http://technet.microsoft.com/en-us/library/dn464273.aspx
DirectAccess Deployment Guide
http://social.technet.microsoft.com/Forums/en-US/e34ba9c5-fdca-4634-90dc-594f00e2ec73/managing-directaccess-clients-in-ipv4-only-networks?forum=winser

Using NI488.2, is it possible to configure the Interface card as a 'Listen-only' device

At one time,the older gpib.dll supported the ability to change an interface card register in order to allow the card to function as a Talk-Only or Listen-Only device. I want to do that with version 1.7 of NI488.2. How would I do that? If I switched to VISA, would I be allowed to do this?

Hi..
We use a number of different NI Gpib cards here at work in conjunction with some RF test equipment in a development environment. Most of this equipment will only work in a Talker-Only mode and are meant to dump data to a Pen Plotter. My objective is to write a universal application that will allow the PC to emulate a plotter in a 'listen-only' mode. Some of our PCs are older ISA versions (Win98,etc) where others are PCI (Win2000,XP). I want to write the software so that any of these platforms could be used.
Any suggestions would be appreciated..
Jim

Columns in af:table rendering multiple times when filtering drop-down list

Technology: JDeveloper 10.1.3.0.4 SU5, ADF Faces/BC
Page design:
Master-detail jspx.
Each section is an af:table.
Drop-down lists created using instructions from http://www.oracle.com/technology/products/jdev/tips/muench/screencasts/editabletabledropdown/dropdownlistineditabletable.html?_template=/ocom/technology/content/print
Requirement:
Data in a drop-down list on a child record needs to be filtered based on data from one or more columns in the currently selected row of the parent record.
Issue:
Drop-down lists have been successfully filtered using a couple of different methods, however, any time the data from the parent record is used to filter the data the columns in the child af:table begin to render multiple times. Navigating through the parent rows may cause the child records to have the correct number of columns displayed or multiple copies of the columns displayed.
Removing any reference to the parent view object and hard-coding values instead causes this behavior to disappear.
Each of the following methods has been tried. Each filters drop-down list data correctly and each causes apparently random extra column renders.
1.     Cascading lists as per: http://www.oracle.com/technology/products/jdev/tips/mills/cascading_lists.html
2.     Drop-down list based on view object that takes parameters.
3.     Set where clause for drop down list in a method on the app module.
4.     Set where clause for drop-down list in a new selection listener method for the af:table.
Question:
Is there a solution available that will filter the drop-down lists correctly and prevent the extra columns from being rendered?
Thank you for any help that you can provide,
Joanne

bump

Using iMessage on Wi-fi only device

How can I use old iPhone 4S iMessage over Wi-fi only...
I am borrowing a friend's old iPhone 4S to use as a Camera and Wi-fi only device in Italy for two weeks. After much ado, I set up a new Apple ID, erased hers from the iPhone 4S, added mine and logged into my email. Email now works - to and from the Wi-fi only iPhone 4S.
However, I cannot get iMessage to work under my new Apple ID. It used to work with my friend's Apple iD, but all of my messages show up on her new iPhone 6. The iPhone 4S still registers her phone number and says the carrier is Verizon, although it is not connected to Verizon. Her phone number is active with her new iPhone 6 on Verizon Wireless.
I want to use iMessage from this Wi-fi only iPhone 4. Help! iMessage is frozen at "Waiting for activation". I should be able to use iMessage from this old iPhone 4S over Wi-fi, right?. I have an iPad Mini at home (Wi-fi only) that I can iMessage to and from quite easily.
Any insights? I would love to use this in Europe for two weeks.
Version 8.2
Model MD277LL/A
Daphne

Maybe this can help: Using FaceTime behind a firewall

IPv6 plus IPv4 on Solaris 8/9

Can IPv6 and IPv4 be enabled together on Solaris 8 or Solaris 9? If so can they be used inter changably in any fashion?
Does introduction of IPv6 change any network cards?
If a machine is enabled with IPv6 alone, then how will it interact with machines supporting IPv4?
Thanks a lot in anticipation of your answers.

Yes you can run the protocols together. They run on the same net card at the same time.
They are not "interchangeable" as you put it. IPv6 is not compatible with IPv4 in the sense that a pure IPv6 host cannot communicate with a pure IPv4 host, which answers another of your questions I think.
If you have a pure IPv4 box A and a pure IPv6 box B you need a gateway C that runs both protocols and can route between them.
And yes, your network card is "changed", in that it now passes IPv4 and IPv6 packets up to the kernel.

Convert from IPv6 to IPv4

Hi,
when using: request.getRemoteAddr() I get the ip in IPv6 format.
But, I am using maxmind to get geo information, which needs ip in IPv4 format.
How can I convert from IPv6 to IPv4?
Thanks.

I'm not too familiar with IP6, but I think it is controlled by the OS and hardware. Windows Vista, for example, uses ip6 by default, so you would need to switch to ip4 in order to get request.getRemoteAddr() to display as ip4 (such as it does running on my MacBook Pro)
If you are trying to get ip4 for all clients that connect and you don't know their OS, you can try some third party freeware programs out there like IPConvert.

Where is 'Textures' in the filters drop down menu?

In the filters drop down menu there are no TEXTURES. How can I install or access this.

Filter>Filter Gallery>Textures

Filtered the data to get only one data per day

Hi,
From the excel file below I have Power (from Hg Lamp) vs date.
I would like to filtered the data to have only one data per day. So when there are many data for one day, I want the data with Max Power (and delete the others).
In the test vi below I filtered data by compared the data 1 by 1. So I reduced the number of data but I still have date with many data.
I would like to count the number of data per days and keep the data with max power, but I don't know how to do it.
If you have any ideas...
Thanks
Geof
Attachments:
Test.xls ‏227 KB
Test.vi ‏48 KB

I did it
Thanks
Attachments:
Test.vi ‏48 KB

Want to use Droid X2 as a wi-fi only device with no data plan

Hello,
How would I go about using my Droid X2 as a Wi-Fi only device? I want to downgrade to a 'dumb phone' but yet I would still like to keep the Droid X2 to play games, browse the Internet, etc. all over a Wi-Fi connection - essentially use it as a tablet.
Thanks in advance for any replies!

Just activate the basic phone on your line. This will automatically de-activate the Droid X2. You should still be able to use it as a wi-fi only device.
Be sure to log into your MyVerizon account to confirm that you no longer have a data plan associated with the line. It should be cancelled when you activate the basic phone, but you should check just to be sure.

GPIB as listen only device = pseudo analyzer?

Ok, I get the impression from "Configuring an IEEE 488 Interface Board for Listen-Only or Talk-Only Operations Using NI-488.2" article that, if one is ingenious enough, he can make his own "SPY" program that can function to watch other GPIB devices on the IEEE bus talk...thus creating a poor man's analyzer. I realize there is GPIB+ hardware that you can buy that does this but I'm interested in leveraging my existing equipment. If this can be done, are there any cons? I.E, if you are able to watch, would you be able to discern traffice between different devices appropriately?
Maybe someone already has an app. that does this.
Thnx for any info.

Another potential problem is that if your system does serial polls, the response will be prepended to the subsequent data read. This is because most serial polls do not have EOI asserted. The listen-only device will receive the one byte, which is not a complete message. The next received message will be appended to the serial poll byte.
This may also not be a problemm if you are trying to spy on a very simple controller<>device application, but is one additional caveat.

GRC Controls Suite Support for IPV6 and IPV4

Dear all
Please can you help to confirm whether latest version of GRC Controls Suite support the co-existence of IPv4 and IPv6 or capable of transporting IPv6 and IPv4 traffic within it?
Any help much appreciated?
best regards
Vineet

Please see MOS Note ID: 741001.1 - GRC Suite Certification Matrix
If the information you need is not there, I strongly recommend open an SR to find out and let us all know!

Filtering/Dropping IPv6 on IPv4-only Devices?

Similar Messages

Maybe you are looking for