IPv6 Passthrough?

My IPTV box uses IPv6 through the router supplied by my ISP. If I connect the IPTV box to the TC with it in router mode using any of the three IPv6 setting options of host, tunnel or router, the IPTV box doesn't work. I tried a different router with an IPv6 passthrough setting option and the IPTV box worked with that one in router mode.
I prefer to use my TC as the primary router but my IPTV box only works with it in bridge mode. Does anyone know how to configure a Time Capsule for IPv6 passthrough?

Erik,
Thanks for your reply ...
I have upgraded the software on my ASA 5505 yesterday from 8.2 to 8.4, and I have to tell you ... I have never been so excited by an ASA upgrade ... anyway ... I triend to use a Cisco 3560G-PS-S as a tunnel endpoing on the inside of my network but appearently the software on this hardware does not support this command "tunnel mode ipv6ip" which makes it impossible to set up a tunnel ... I got the tunnel up but there is no way to ping the other site of the IPv6 tunnel ...
Anyway ... I discoveren what NAT rules / object groups / access-lists I need in order to create the NAT rule ... but there is something wlse that I don;t understand...
What IPv6 addresses have you configured on the inside/outside of your ASA?
And what IPv6 addresses have you configured on your iternal hosts on the "inside" of your network?
I recon that the "inside" hosts uses your Ipv6 endpoint device as a defaut gateway and that this tunnel endpoint uses the tunnel interface as a default gateway ... and that this device is also handing out the IPv6 addressesin your "inside" network right?
And what IPv6 address do you have configured on the outside/inside of the ASA? is that the /64 you get from the tunnel provider (Hurricane Electric or Sixxs) and I guess this traffic is routed to the tunnel endpoint device as well?
So IPv6 firewalling is not possible?
Let me know if I have it correct ...
Thanks,
Iwan

Similar Messages

Allowing an IPv6 Tunnel Broker to passthrough ASA

I am in the process of setting up an IPv6 Tunnel Broker on a 1811 router I have in my home lab so I can start working with IPv6 and getting access to IPv6 only websites and/or content. I believe that I have the 1811 setup correctly but am having problems getting the Tunnel Broker traffic (which is IPv4 based) to pass through my ASA. I know that I need to allow protocol 41 to come through from the outside but cant seem to find a way to get it to go through.
I am using 8.2.5 firmware on my 5505. I would prefer to not have to upgrade to 8.3 or 8.4 because of the way the NAT rules and some other things change. My ISP only offers me a single IP address. Would prefer not to have to upgrade to business service to get multiple ip addresses. I have been looking for docs on how to do this but so far havent found anything that points me in the right direction.
Ran a protocol capture and noticed this error in the ASDM log - 3Jan 18 2012 19:16:20209.51.181.2regular translation creation failed for protocol 41 src Inside:192.168.1.100 dst Outside:209.51.181.2
In looking at the rules, it appears that I need an access rule to allow the protocol 41 traffic to go outbound.
Added these lines to the ASA config -
object-group protocol IPV6inIP
protocol-object 41
access-list inside_access_in line 2 extended permit object-group IPV6inIP any any
Still getting the above error after putting the config lines just listed. Beginning to suspect that the 8.2.5 binary doesnt support protocol forwarding. I dont see the traffic leaving the ASA, so that would seem to indicate that 8.2.5 cant do protocol forwarding in the NAT rules.
Any suggestions/links appreciated,
Ron

Erik,
Thanks for your reply ...
I have upgraded the software on my ASA 5505 yesterday from 8.2 to 8.4, and I have to tell you ... I have never been so excited by an ASA upgrade ... anyway ... I triend to use a Cisco 3560G-PS-S as a tunnel endpoing on the inside of my network but appearently the software on this hardware does not support this command "tunnel mode ipv6ip" which makes it impossible to set up a tunnel ... I got the tunnel up but there is no way to ping the other site of the IPv6 tunnel ...
Anyway ... I discoveren what NAT rules / object groups / access-lists I need in order to create the NAT rule ... but there is something wlse that I don;t understand...
What IPv6 addresses have you configured on the inside/outside of your ASA?
And what IPv6 addresses have you configured on your iternal hosts on the "inside" of your network?
I recon that the "inside" hosts uses your Ipv6 endpoint device as a defaut gateway and that this tunnel endpoint uses the tunnel interface as a default gateway ... and that this device is also handing out the IPv6 addressesin your "inside" network right?
And what IPv6 address do you have configured on the outside/inside of the ASA? is that the /64 you get from the tunnel provider (Hurricane Electric or Sixxs) and I guess this traffic is routed to the tunnel endpoint device as well?
So IPv6 firewalling is not possible?
Let me know if I have it correct ...
Thanks,
Iwan

Is KVM VGA Passthrough Possible on Macbook Pro Mid 2014?

I've been using Arch on and off for a couple years on different hardware, and this time I'm trying to get it to work semi-flawlessly on my mid 2014 Macbook Pro. My Linux skills are meager, so I need some help understanding if VGA passthrough is possible on this machine, and if it is, how to set it up. I have hope that it might work after reading this blog and the Arch forums. An outline of my current setup follows. I will also document progress and research for anyone who might want to try this in the future.
Here are the specifications for this machine:
Processor: 2.5 GHz Intel Core i7
Memory: 16 GB 1600 MHz DDR3
Graphics: Intel Iris Pro 1536 MB, Nvidia GT 750M 2 GB
I have successfully dual-booted Mac OS X Yosemite and Arch with EFI on a btrfs partition using this blog and the wiki as starting points. Somlo's research also helped. All the basic functionality works (networking, WiFi, etc.), and I am able to boot the physical Arch partition as a Virtualbox VM with the help of the wiki. However, I'm having trouble with getting the integrated Intel graphics to work. The following command:
lspci | grep VGA
prints the Nvidia card specifications, and nothing about the Intel graphics.
Reading this blog, it looks like someone had to apply a "grub gmux" patch to grub to disable the Nvidia card at boot. I feel uncomfortable installing anything other than the official Arch packages, so I have to know if installing a patched grub is still necessary, and if installing it would still allow me to use VGA passthrough in KVM.
My ambitious to-do list looks like this:
1. Dual-boot Mac OS X and Arch with btrfs. -done
2. Setup the physical Arch partition to boot in Virtualbox. -done
3. Get Intel graphics to work on Arch ideally with OpenGL support. -done
4. Get Enlightenment working as the desktop environment on Arch. -done
5. Get Qemu+KVM to boot off the physical Mac OS X partition. -tbd
6. Enable VGA passthrough for Mac OS X from Qemu+KVM. -tbd
7. Install Windows as a VM in Qemu+KVM. -tbd
8. Enable VGA passthrough for Windows from Qemu+KVM. -tbd
9. Work and do research on Mac OS X from Arch, play hardcore 3D games on WIndows from Arch, play around with Arch, and live happily ever after. -tbd
Can anyone help me with this? Thanks in advance for any hints/input.
Edit:
The Ubuntu forums has something about getting the two graphics cards to be recognised by using `refind` instead of `grub`. I was able to set up `refind` to boot using the `efi-stub`, but:
$ lspci
00:00.0 Host bridge: Intel Corporation Crystal Well DRAM Controller (rev 08)
00:01.0 PCI bridge: Intel Corporation Crystal Well PCI Express x16 Controller (rev 08)
00:01.1 PCI bridge: Intel Corporation Crystal Well PCI Express x8 Controller (rev 08)
00:14.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB xHCI (rev 05)
00:16.0 Communication controller: Intel Corporation 8 Series/C220 Series Chipset Family MEI Controller #1 (rev 04)
00:1b.0 Audio device: Intel Corporation 8 Series/C220 Series Chipset High Definition Audio Controller (rev 05)
00:1c.0 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #1 (rev d5)
00:1c.2 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #3 (rev d5)
00:1c.3 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #4 (rev d5)
00:1c.4 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #5 (rev d5)
00:1f.0 ISA bridge: Intel Corporation HM87 Express LPC Controller (rev 05)
00:1f.3 SMBus: Intel Corporation 8 Series/C220 Series Chipset Family SMBus Controller (rev 05)
01:00.0 VGA compatible controller: NVIDIA Corporation GK107M [GeForce GT 750M Mac Edition] (rev a1)
01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev a1)
03:00.0 Network controller: Broadcom Corporation BCM4360 802.11ac Wireless Network Adapter (rev 03)
04:00.0 Multimedia controller: Broadcom Corporation 720p FaceTime HD Camera
05:00.0 SATA controller: Samsung Electronics Co Ltd Apple PCIe SSD (rev 01)
06:00.0 PCI bridge: Intel Corporation Device 156d
07:00.0 PCI bridge: Intel Corporation Device 156d
07:03.0 PCI bridge: Intel Corporation Device 156d
07:04.0 PCI bridge: Intel Corporation Device 156d
07:05.0 PCI bridge: Intel Corporation Device 156d
07:06.0 PCI bridge: Intel Corporation Device 156d
08:00.0 System peripheral: Intel Corporation Device 156c
still only shows the Nvidia card. The boot options suggested by this blog did not change anything. However, this very helpful discussion led me to this on-going project. I patched the kernel according the instructions in the said project's `readme`, and Arch is now able to see the two graphics cards and an extra Intel audio controller.
$ lspci
00:02.0 VGA compatible controller: Intel Corporation Crystal Well Integrated Graphics Controller (rev 08)[/bold]
00:03.0 Audio device: Intel Corporation Crystal Well HD Audio Controller (rev 08)
01:00.0 VGA compatible controller: NVIDIA Corporation GK107M [GeForce GT 750M Mac Edition] (rev a1)
Also, I was able to fire up Enlightenment using the Intel graphics card and `0xbb`'s `gpu-switch` script. After using some post-installation tips from this, the computer started getting hot. I followed this thread to get it back to normal.
Edit:
So I finally got some time to experiment on this. I ended up installing Gnome 3 after trying out Enlightenment, KDE Plasma 5, and Cinnamon. I thought Gnome 3 and Cinnamon had the best Hi-DPI support of those four. Cinnamon's look was too much trouble for me to configure, so I ended up choosing Gnome 3.
To achieve the graphics card passthrough, I tried setting up and starting a VM in `virt-manager`, but starting the VM would cause Arch to freeze. Finally, I tried following the instructions on the wiki, this thread, and the Arch forums. I haven't yet tried booting the Windows installer, but the following are the steps I took so far:
1. Uninstall all `nvidia` drivers from my system.
2. Blacklist the `nouveau` driver.
3. Add `pci-stub` to the modules array in `mkinitcpio.conf`.
4. Recreate the `initramfs`.
5. Add `intel_iommu=on pci-stub.ids=10de:0fe9,10de:0e1b,8086:156c` to the `refind.conf` `options` line.
- These three IDs are ones for the Nvidia graphics, Nvidia sound, and the "Intel Corporation Device" (probably the HDMI port, or something related to the
ethernet card), which belong to the same "IOMMU group". What was curious was that a Gigabit ethernet controller would appear in the IOMMU group iff I had
an ethernet cable connected to my thunderbolt port. I don't know if I have to add the ID for this, but so far there are no complaints about it in `dmesg`.
6. Install `ovmf-svn` from the AUR.
6. Follow the "Binding a device to vfio-pci" section documented at https://bbs.archlinux.org/viewtopic.php?id=162768.
7. Follow the "Testing if its working out" section documented at https://bbs.archlinux.org/viewtopic.php?id=162768.
So far, the test at step 7 is failing -- I get a `vfio-pci 0000:01:00.0: Invalid ROM contents` complaint in `dmesg`, and I see a prompt in the `qemu` window. I'm supposed to be getting a black `qemu` window, and a prompt on an external monitor which I haven't connected yet. I read the comments on this blog about graphics card ROM and EFI compatibility, and it looks like my graphics card ROM can't be read. I also read that the graphics card ROM would only be read once by qemu/KVM and saved as a file for later use, so all I need to do to get around that is pass a snapshot of the ROM of the Nvidia GT 750M card to qemu/KVM. Apparently, "You can download the 750m rom files directly from Lenovo's website on the support page" according to this thread, but all I see is this. I will continue hunting around for a ROM file for this graphics card.
Last edited by rb3 (2015-06-05 02:01:20)

It`s not beacuse of the case. I have the same problem with a macbook pro retina 15 late 2013 (I7 - 2.3 Ghz, 16 GB, 512 SSD, GT750M) with windows 8.1 on bootcamp. The temperature is higher than yosemite. It gets easily at 80 celsius in a demanding game, while on yosemite it barely reaches 55-60 under heavy load. It`s beacuse of windows, and these are the temperatures, I got the same average 55-60 in windows and 45 celsius in yosemite. I read on the forums and I tried evend with a cooler pad. But it doesn`t seem to be any improvement with lowering the temperature in windows.

How can I disable 1142N from providing IPv6 access ?

subject says it all, I failed to find the command in configuration..

Hi Andre,
As per my knowledge, you cant disable from ur AP.
Ipv6 is currently not support on any of the Cisco AP's in autonomous mode. However, they will be able to pass ipv6 traffic.
May be newer IOS version like : Cisco IOS Release 15.2(4)JA supports IPv6 protocols
Regards

PMTU discovery in IPv6 based on IPV6_RECVPATHMTU in Solaris 10

Our application works with raw sockets and needs to discover PMTU of IPv6 paths.
According to the RFC-3542 (http://tools.ietf.org/html/rfc3542, section 11) the socket option IPV6_RECVPATHMTU allows applications to know about the change of path MTU by receipt of new ancillary data item (IPV6_PATHMTU) which is delivered to recvmsg() without any actual data. Following construction should be used to enable this option:
int on = 1;
setsockopt(fd, IPPROTO_IPV6, IPV6_RECVPATHMTU, &on, sizeof(on));In the online Sun documentation I found that this socket option is supported since Solaris 10 (http://docs.sun.com/app/docs/doc/816-5177/ip6-7p).
However, in our test this socket option appears to be not working. After decrease of the PMTU via ifconfig and sending a big enough packet an ICMP (Packet Too Big) is received but there is no event with ancillary data item on the socket.
One peculiarity that may be essential is that our application binds to a specific port in a raw socket (i.e. to IP address : port pair).
Does anyone have information if the IPV6_RECVPATHMTU socket option is really supported in Solaris 10?
Probably, ICMP should be off to be able to receive this event with ancillary data on the socket?
Will appreciate any ideas how to make it working.
Thanks in advance,
Mike.

Hi,
I have a Sunfire V100 - and have the exact same problem. The settings are correct; I have configure dual-NIC cards many times in the past - but this issue is simply eluding me. I can swap in a Linux machine in router / ip forwarding mode and there are no problems, but when I put back in the Sunfire I encounter the same issues you have.
In effect, packets from the LAN arrive at the NIC on the Solaris machine, but then don't get forwarded to the other NIC's gateway. I'm at a loss, but I have seen this problem pop-up (without answer) a half-dozen times in this forum alone, and multiple times on different support sites. Did you (or anyone) ever come across a solution for this? Is this not some easily overlooked yet possibly cryptic flag or variable that I've missed? Anyone?

Cannot deploy to localhost:7001 / how to remove the IPV6 from Jdeveloper ?

Hi,
Who could help on a deployment issue?
I have a Weblogic admin server running on http://localhost:7001 and have access to the admin console.
I developed a test application and deployed it on the Integrated Weblogic server (port 7101) and is running.
When I try to deploy on the managed admin server, the deployment is correct but it generates an IPV6 addresse
( http://[2001:0:4137:9e76:2cd9:2c5e:af7f:ae32]:7001/GoogleMapApp )
that I cannot use, as I don't use such addresses on the development laptop.
I want to get the addresses
http://127.0.0.1:7001/GoogleMapApp
or
http://localhost:7001/GoogleMapApp
Thanks
[07:23:17 PM] ---- Deployment started. ----
[07:23:17 PM] Target platform is (Weblogic 10.3).
[07:23:18 PM] Retrieving existing application information
[07:23:18 PM] Running dependency analysis...
[07:23:18 PM] Building...
[07:23:21 PM] Deploying 2 profiles...
[07:23:21 PM] Wrote Web Application Module to C:\JDeveloper\mywork\GoogleMap\ViewController\deploy\GoogleMap_ViewController_webapp1.war
[07:23:21 PM] Wrote Enterprise Application Module to C:\JDeveloper\mywork\GoogleMap\deploy\GoogleMap_application1.ear
[07:23:22 PM] Redeploying Application...
[07:23:28 PM] [Deployer:149192]Operation 'deploy' on application 'GoogleMap_application1' is in progress on 'AdminServer'
[07:23:34 PM] [Deployer:149194]Operation 'deploy' on application 'GoogleMap_application1' has succeeded on 'AdminServer'
[07:23:34 PM] Application Redeployed Successfully.
[07:23:34 PM] The following URL context root(s) were defined and can be used as a starting point to test your application:
[07:23:34 PM] http://[2001:0:4137:9e76:2cd9:2c5e:af7f:ae32]:7001/GoogleMapApp
[07:23:34 PM] Elapsed time for deployment: 17 seconds
[07:23:34 PM] ---- Deployment finished. ----
------------------

HI,
In your JDeveloper Init file please set the following JAVA_OPTION to disable IPv6
-Djava.net.preferIPv4Stack=true"
You can enable above option in the following file of JDeveloper: *"jdeveloper\jdev\bin\jdev.boot"*
compiler.vmargs = -Xmx1024m -Djava.net.preferIPv4Stack=trueThanks
Jay SenSharma
http://middlewaremagic.com/weblogic/ (Middleware Magic Is Here)

Direct Access on Windows Server 2012 R2 and IPV6

I have a question about IPV6 and Direct Access in Server 2012 R2. Without using UAG is it still mandatory to have IPV6 enabled in the intranet?
Kristopher Turner | Not the brightest bulb but by far not the dimmest bulb.

Hi,
DirectAccess uses IPv6 with IPsec to create a secure connection between DirectAccess client computers and the internal corporate network.
However, DirectAccess does not necessarily require connectivity to the IPv6 Internet or native IPv6 support on internal networks. Instead, it automatically configures and uses IPv6 transition technologies to tunnel IPv6 traffic across the IPv4 Internet (6to4,
Teredo, IP-HTTPS) and across your IPv4-only intranet (NAT64 or ISATAP).
For detailed information, please view the link below,
Plan the DirectAccess Infrastructure
http://technet.microsoft.com/en-us/library/jj574101.aspx
Hope this helps.
Steven Lee
TechNet Community Support

Cisco asa 5505: No traffic lan to wan with IPv6

Hello everybody,
I have a Cisco ASA 5505, public ipv6 in outside interface, private ipv6 in LAN, from router I can ping any ipv6 in Internet and ping my LAN ipv6. Traffic doesn't go through router.
This is my configuration.
interface Vlan1
nameif inside
security-level 100
ip address PRIV-Saturn1 255.255.255.0
ipv6 address fc00::1/7
ipv6 enable
interface Vlan2
nameif outside
security-level 0
ip address PUBLIC26 255.255.255.248
ipv6 address xxxx:yyyy:67:36::2/64
ipv6 enable
ipv6 nd suppress-ra
access-list Dynamic_Filter_ACL extended permit tcp any6 any6
ipv6 route outside ::/0 xxx:yyyy:67:36::1
Am I omitting anything?
Thanks in advance for the help.
Jos P

Since you're using IPv6 private addressing (fc00::) on the inside, you need a dynamic NAT entry to translate your private IPv6 addresses to a public one.
Alternatively, you could just use a subnet of your registered IPv6 block for the inside network and not worry about NAT.

Problem with VPN Client passthrough on ASA 5505

I am having a problem with passing through a VPN client connection on an ASA 5505. The ASA is running version 8 and terminates an anyconnect VPN. The ASA is using PAT. When the inside user connects with the VPN client, it connects but no traffic passes through the tunnel. I see the error
305006 regular translation creation failed for protocol 50 src INSIDE:y.y.y.y dst OUTSIDE:x.x.x.x
UDP 500,4500 and ESP are allowed into the ASA. Ipsec inspection has also been setup on a global policy, but the user still cannot pass traffice to the remote VPN he is connected through.
At the Main Office we have an ASA 5510 that terminates a site to site VPN, allows remote connections with PAT and allows passthrough no problems. Any ideas?

I am having a simuliar issue with my ASA 5505 that I have set up. I am trying to VPN into the Office. I have no problem accessing the Office network when I am on the internet without the ASA 5505. After I installed the 5505, and there is internet access, I try to connect to the Office network without success. The VPN connects with the following error.
3 Dec 31 2007 05:30:00 305006 xxx.xx.114.97
regular translation creation failed for protocol 50 src inside:192.168.1.9 dst outside:xxx.xx.114.97
HELP?

Welcome to the IPv6 Community

Welcome to the CSC IPv6 Community. We encourage everyone to share their knowledge and start conversations on issues such as adding IPv6 capability to your networks and discuss challenges and successes around network services migration. All topics are welcome, including routing address management, translation, tunneling, firewall, security, DNS, MTU, applications and protocol stack issues.
Remember, just like in the workplace, be courteous to your fellow forum participants. Please refrain from using disparaging or obscene language or posting advertisements.
Cheers,
Dan Bruhn
CSC Community Manager

hiLisa_K8 wrote:
This is the place where LogMeIn users can ask, learn, and share about LogMeIn products and services. Everyone is invited to participate and we hope that your experience here is positive, fun, and informative. How you can participate:Explore: Use the search box at the top to quickly find what you are looking for.
Ask: Can’t find an answer? Post your question on the appropriate board. Press the blue NEW MESSAGE button to begin.
Accept: If someone gives you the right answer, remember to 'Accept' their response as a solution so the next person can find the same solution quickly.
Appreciate: If someone helps you, give them a Kudos by clicking the star button. Welcome: If you are new, reply to this thread and introduce yourself, or ask a question to help you get started.
Report: If you find something weird or broken or have an idea on how to improve the community, please let us know in the Community Feedback board.
Respect: We have some guidelines that we expect all community members to follow, so have a look but more importantly… Have fun! For more tips and tricks read our Getting Started Guide.Thank you for participating in the LogMeIn Community! Happy posting! Sincerely,
Lisa Kate
LogMeIn Community Manager

How do I configure ISP native IPv6 connectivity?

Hi!
I'm a network engineer for SECOM, an ISP in Southeastern Colorado. We will be making native IPv6 connectivity available to residential subscribers soon, and I've been tasked with verifying support for our IPv6 platform on home router products.
I have an AirPort Extreme purchased new in November of '09 that is running version 7.5.1, which I believe is completely current.
Under the IPv6 tab in my Advanced settings, I have the following configuration:
IPv6 Mode: Router
Block incoming IPv6 connections: NOT checked
Configure IPv6: Manually
WAN IPv6 Address: fdXX:XXXX:XXXX:a000::2
WAN IPv6 Prefix Length: 64
IPv6 Default Route: fdXX:XXXX:XXXX:a000::1
LAN IPv6 Address: fdXX:XXXX:XXXX:c000::1
(As you can see, I'm using ULA's for testing purposes, and I've replaced the global bits with X's for security.)
The problem is, if I plug a host into one of the LAN ports and assign it an address from the same /64 subnet (e.g. fdXX:XXXX:XXXX:c000::2), the host can't ping the Airport's assigned LAN address.
It can ping:
* the Airport's link-local IPv6 address, and
* the Airport's IPv4 192.168.x.x address
Also (and I'm gratified that this part is working), my CE router can ping the Airport's WAN IPv6 address!
So my question is, is there something in the IPv6 configuration I'm misunderstanding? Has anyone else gotten native statically-configured IPv6 working on the AirPort Extreme?
Thanks very much in advance,
John E. / SECOM
P.S. - I have verified with a packet capture that the AirPort extreme is not responding at all for the configured LAN IPv6 address; i.e., the ICMPv6 neighbor solicitation goes unanswered.
P.P.S. - I have tried a Windows 7 host, a Windows XP host, and an IPv6-certified multitester from JDSU. All exhibit the same symptoms.

I have follow your instruction to connect to my ISP as it shows the following message:
Serial connection established.
using interface sppp0
connect: sppp0 <--> /dev/ttya
local IP address xxxxxxxx
remote IP address 1.1.1.1
But when I ping www.sun.com, it shows:
www.sun.com unknown.
I start Mozilla and it said www.sun.com not found etc...
What has gone wrong?
Do I have to configure some files such as:
/etc/resolv.conf
/etc/hosts
/etc/hostname ?
or any other steps that can help me to connect to the internet?
Thanks...

How to handle changing IPv6 network configurations

Hi,
I run a Mac Mini as a server with OS X Server 10.8.5/2.2 on it using an internet connection with DS-lite. The server runs fine on a private IPv4 and a public IPv6 assigned by the ISP thrugh my router. Now from time to time (on some really odd days 5 times a day) my ISP decides to change my IPv6 prefix and as a consequence the IPv6 of my server. This results in a warning and some services seem to work not always properly. When I handle the warning and update the network configuration (although all relevant pieces of configuration that are shown along this proces remain unchanged), everything is back to normal.
Now I wonder whether there is better way to handle changing IPv6 prefixes while everything else is unchanged? Any thougths? Thanks. Steffen

I'll add my 2 cents too Sudheer...
I suppose your versioning strategy should take into account your particular circumstances, impact analysis, ESB architecture etc...
In our case it makes sense to version the service operations because we have some consumers that want to stay on the older version & other that want to move with the changing versions...
We've noticed that SAP, with the standard delivered enterprise services also version step the service operations so you esentially have 2 service contracts but one that caters for additional fields/functionality. The consumer uses the service operation that they prefer.
The other possibility, if you are in a position to make the new fields 'optional' then you could do that without impacting all the consumers, the consumers that have the additional info to pass in the request can do so & the other consumers can carry on business as usual.
Then you could also version step the entire service, that would entail making use of a new software component version but this would entail new endpoints & depending on your architecture it could impact all your consumers. If you're using an integrated ESB architecture, your consumers would have one endpoint & the ESB would route the request to the relevant service version.
So you could minise impact on the consumers & develop a good versioning strategy depending on what your current situation is.
Regards, Trevor

How can I disable IPv6 EUI randomization with group policy?

I need to turn off IPv6 EUI address randomization. It can be done in netsh (a few commands) or powershell (Set-NetIPv6Protocol -RandomizeIdentifiers Disabled). How can I do this in group policy without scripting?

Hi Jordan,
Before going further, I hope that the suggestion provided by Martin can be helpful.
It seems that we can't configure this setting via native policy.To configure IPv6 settings,
we need to download ADMX files for IPv6. However, per the following article, the IPv6 settings that can be configured are:
Enable all IPv6 components
(Windows default)
Disable all IPv6
components (the setting you probably want)
Disable 6to4
Disable ISATAP
Disable Teredo
Disable Teredo and 6to4
Disable all tunnel
interfaces
Disable all LAN and PPP
interfaces
Disable all LAN, PPP and tunnel
interfaces
Prefer IPv4 over IPv6
How to Disable IPv6 through Group Policy
http://social.technet.microsoft.com/wiki/contents/articles/5927.how-to-disable-ipv6-through-group-policy.aspx
TechNetSubscriber Support
If you are TechNetSubscription user and have any feedback on our support quality, please
send your feedback here
Best regards,
Frank Shen
Please read the question before marking things as answers.

How can i disable ipv6 in OL7?

Hi everybody,
how can i disable ipv6 on my OL7 box?
In /etc/sysctl.d i have test it with the file: ipv6.conf:
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.<interface>.disable_ipv6 = 1
But this doesnt work.
Does anybody know how can i disable IPv6 in Oracle Linux 7?

What I would recommend is not to set implicit or redundant parameters:
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
There is no need to disable the "default" interface, since it is already included in the "all" statement.
I do not know, but there could be a possibility that such statements disable the network card in question, but in turn enable every other. In such case, your 2nd statement invalidates the first. Perhaps that was was part of the problem when using your other configuration.

How can I turn off IPv6 temporary addresses in a enterprise environment

So in a default configuration Vista and Windows 7 clients will use IPv6 temporary address (per RFC 3041), but I would like to be able to disable this with a GPO.
I know I can do this by using a startup script tied to a GPO using the netsh interface ipv6 set privacy state=disabled store=persistent but I really do not want to run a logon script especially when as you can see in the command it is a persistent
setting.
Any ideas on using a registry based GPO for this?

Hi,
OK, I understand what you want. But after I use the Process Monitor to capture the behavior, I found that a lot of registry keys would be changed. So you can not set it via registry unless the IPv6 is disabled.
Thanks for understanding.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
Thank you again for the answer.
As a follow up question... How does one suggest/request a change in default behavior in a MS product?
While the RFC 3041 addresses might be nice to have for the average consumer they are not ideal in a enterprise environment. I have found that the temporary addresses will register in DNS, but this doesn't completely solve the issue of tracking and accountability,
you would still need a application to query, correlate and store that information.
So it would be nice if the business versions of Windows Vista/7/2K8 and the next client OS would not have this behavior by default.

IPv6 Passthrough?

Similar Messages

Maybe you are looking for