I guess we probably all do this, connect to our computers at home to check things out. I've just made some firewall changes in the office and want to confirm that it's accessible from the internet. It wasn't working so I went to google and did a "what is my IP" so I could put this IP in the ASDM log filter.
However, when I went to Google it said:
Just a little bit excited, since I haven't had this set up without a tunnel.
C:\Users\Tony>tracert facebook.com
Tracing route to facebook.com [2a03:2880:2130:cf24:face:b00c:0:25de]
over a maximum of 30 hops:
1 8 ms 4 ms 55 ms 2001:8003:821f:xxxx::1
2 4 ms 24 ms 3 ms 2001:8003:0:bdf:f0:9:1:0
3 6 ms 4 ms 6 ms 2001:8003:9a:1700:5:61:0:ea01
4 5 ms 6 ms 7 ms bundle-ether6.wel-core3.perth.telstra.net [2001:8000:0:2070:101:117:0:1]
5 41 ms 38 ms 38 ms bundle-ether7.fli-core1.adelaide.telstra.net [2001:8000:0:2000:5001:7001:0:1]
6 47 ms 48 ms 48 ms bundle-ether9.win-core10.melbourne.telstra.net [2001:8000:0:2000:4001:5001:0:1]
7 64 ms 60 ms 60 ms bundle-ether12.ken-core10.sydney.telstra.net [2001:8000:0:2000:3001:4001:0:5]
8 60 ms * 66 ms bundle-ether1.pad-gw11.sydney.telstra.net [2001:8000:0:2030:132:511:0:2]
9 * * 68 ms 2403:e800:105:36::1
10 210 ms 214 ms 212 ms 2403:e800:ff00:110::3e
11 *
Also, there's zero IPv6 config options on the Telstra router they have supplied me. <- I've still not been able to hack this :)
Cool. I abandoned my tunnel because it increased latency for IPv6 websites. Currently waiting, my provider has promised a DHCPv6 prefix delegation and I have multiple VLANs here. So IPv4 only for now.
That's why I abandoned mine. I didn't know they would be rolling out ipv6 to home users.
I want our ISP here in the office to push another VLAN down to our router that is IPv6, but they want an additional $32 per month for the IP addresses.
Is there any real benefit to being on IPv6 at the moment? Aside from being able to access things that are IPv6 enabled, I don't think there is anything only IPv6?
You don't have to NAT? (and can no longer multi-home without your own PI address and ASN....)
You can hard core all your default GWs to fe80::1 and configure all your link-local router addresses as fe80::1 and it still works, if you're game?
An additional $32 per month for an IPv6 subnet? They can stick it up their ****. It doesn't cost them anything. Maybe, perhaps maybe, a one-time setup fee.
Oh, and no benefits for the moment for IPv6 really. In fact, as much as I like new stuff and IPv6, I still feel a network behaver better on IPv4 only. But that can't last of course.
I've got TimeWarner Cable. I noticed a few weeks ago that if I enabled IPv6 on my outside interface I did in fact get an address. Unfortunately it doesn't go anywhere and I can't ping my gateway. So they must still be missing something in my area.
Quote from: routerdork on January 21, 2016, 08:09:01 AM
I've got TimeWarner Cable. I noticed a few weeks ago that if I enabled IPv6 on my outside interface I did in fact get an address. Unfortunately it doesn't go anywhere and I can't ping my gateway. So they must still be missing something in my area.
They are missing expertise and the ability to count to f.
I have it already since somewhere in 2012. My provider was probably the first one to have it available in Belgium. Ran perfectly with prefix delegation on my 877 but had to abondon it when I started using a 3550 with L3 interfaces as my home core switch. Set it up again recently on my SRX and got rid of the VLAN hassle. I think about 30% of traffic is now v6, major sites like google and facebook are all v6.
I believe I get a /56 prefix which is further divided into /64s with Prefix Delegation. I first tried manual configuration and subnetting but it wouldn't get routed. According to the provider I can only use PD with my non-business subscription. It has a dynamic v4 address but the v6 prefix has never changed as far I know.
I wonder if the providers implement some sort of firewalling, as the addresses are now globally routed?
Nice! I am still hit or miss on SuddenLinks Tech support person knowing what it is or not...
I have been begging to get on their Alpha or Beta testing but they will not respond.
Quote from: deanwebb on January 21, 2016, 10:29:38 AM
Quote from: routerdork on January 21, 2016, 08:09:01 AM
I've got TimeWarner Cable. I noticed a few weeks ago that if I enabled IPv6 on my outside interface I did in fact get an address. Unfortunately it doesn't go anywhere and I can't ping my gateway. So they must still be missing something in my area.
They are missing expertise and the ability to count to f.
We have a new provider that has announced fiber to the home coming to the area. However they are a ways out so for now it's them or Windstream.
http://blog.ipspace.net/2016/01/ipv6-address-allocation-is-operating.html?m=1#more
Had a chat with TimeWarner today. The rep told me that I will only get a v6 address once the v4 loop has been exhausted. I call BS. I know it doesn't work that way since I have an v4 address and received a v6 address when I enabled it. I just can't get anywhere. They locked up on that question. Morons.
Quote from: Reggle on January 21, 2016, 05:53:53 AM
An additional $32 per month for an IPv6 subnet? They can stick it up their ****. It doesn't cost them anything. Maybe, perhaps maybe, a one-time setup fee.
Oh, and no benefits for the moment for IPv6 really. In fact, as much as I like new stuff and IPv6, I still feel a network behaver better on IPv4 only. But that can't last of course.
THANK YOU. You have the same thought as I do. I was unsure if I was being unreasonable. You know what - I'm going to contact them now and say we're not paying the $32 a month but I'm happy to pay a one-off setup fee. And see what they say ;)
The driver for me to get v6 in the office is to really ensure we're moving with the times and future proofing our business. Plus, the "moving with the times" part means more working knowledge of v6 for me and my guys. My sys admin still disables v6 on all our Red Hat servers; I think this is due to previous experience of v6 dual stack causing issues with tomcat / apache etc. I'd expect it to be all good now though.
As I said above about the home v6 - there;s no config options in the ISP router for me to change anything in v6. The router doesn't even give any indication of IPv6 addressing.
Running ipconfig at home, looks like DHCPv6 is issuing addresses, but im unsure what the "temporary" addresses are; Windows says "depreciated".
Also, what's the reason behind no mask against the IPv6 address? How are you supposed to figure out what's in your network? Or is it always the same mask /64? I think it's been close to5 years since I played around with v6.
C:\Users\Tony>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Tony-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : gateway
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Physical Address. . . . . . . . . : 54-04-A6-3A-72-60
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Local Area Connection* 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : 16-D5-3D-28-7F-18
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . : home.local
Description . . . . . . . . . . . : Qualcomm Atheros AR9285 Wireless Network Adapter
Physical Address. . . . . . . . . : E4-D5-3D-28-7F-18
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:8003:821f:9400:1985:74d1:9a50:33fa(Preferred)
Temporary IPv6 Address. . . . . . : 2001:8003:821f:9400:3959:4353:5ec5:2f01(Preferred)
Temporary IPv6 Address. . . . . . : 2001:8003:821f:9400:a87c:3804:ee6d:b534(Deprecated)
Temporary IPv6 Address. . . . . . : 2001:8003:821f:9400:e50c:de37:4f45:91a2(Deprecated)
Link-local IPv6 Address . . . . . : fe80::1985:74d1:9a50:33fa%3(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.192.67(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 15 January 2016 12:14:18
Lease Expires . . . . . . . . . . : 23 January 2016 00:01:07
Default Gateway . . . . . . . . . : fe80::c6ea:1dff:fe44:4578%3
192.168.192.254
DHCP Server . . . . . . . . . . . : 192.168.192.250
DHCPv6 IAID . . . . . . . . . . . : 316986685
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-54-A3-31-54-04-A6-3A-72-60
DNS Servers . . . . . . . . . . . : 2001:8003:821f:9400::1
8.8.8.8
208.67.220.220
NetBIOS over Tcpip. . . . . . . . : Enabled
Connection-specific DNS Suffix Search List :
gateway
Tunnel adapter isatap.home.local:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : home.local
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6abd:4ca:6ed:9a4e:ac26(Preferred)
Link-local IPv6 Address . . . . . : fe80::4ca:6ed:9a4e:ac26%7(Preferred)
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 352321536
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-54-A3-31-54-04-A6-3A-72-60
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Users\Tony>
supposed to be all /64 except for loopbacks but there is some debate about allowing /127s for p2p. I'm not sure if the latter has been ratified in an RFC or not. But its all a convention, I don't think technically there is anything stopping you from configuring a /49 or whatever, but any subnetting that's not contained within 16 (4 bits) is incomprehensible to the average human brain.
/64 = everything
/56 = supernet allocated to standard users
/48 = enterprise supernet allocation
/32 = small ISP allocation
be interested to see what depreciated means, at first glance they look like standard 2001:: routable addys.
<snark on> Yes, we'll have an infinite supply of addresses, but we've chosen such a difficult addressing scheme that the human brain can't process it unless we chop it in half arbitrarily, and also we can't manage to subnet except in blocks of 4 bits. <snark off>
https://en.wikipedia.org/wiki/IPv6_address#Temporary_addresses (https://en.wikipedia.org/wiki/IPv6_address#Temporary_addresses)
Temporary addresses are the work of the freakin devil. Yes we can track your SLAAC MAC derived addy, deal with it. Oh why the f--k did they not just retain DHCP, and why the f--k did they design SLAAC but NOT INCLUDE DNS INFO ORIGINALLY (and... now add it back retrospectively?!?!?!? but now luck of the draw re: whether your host's ipv6 stack has been updated to use this feature and any sane larger org would use DHCPv6 anyway for manageability...... oh and the m flag is just a suggestion, not mandatory, ARE YOU KIDDING ME ). Seriously, so many WTF design decisions.
Question:
The ISP my previous employer uses in London, England - they wanted us to have IPv6 so we said great! But they had some admin / config issues so I ended up leaving before it was provisioned. I'm pretty sure there was no costs involved as we were paying for the internet line.
Trying to think back, are IPv6 addresses free? Or supposed to be free?
My ISP here said there's no movement on IPv6 addressing cost.. I'm about to reply asking to break down the $32 a month cost then, since IPv6 addresses are free from the respective authority (I guess APNIC here in Australia). But I'm not sure if I'm correct.
Any ideas?
Provider independent is justlike ipv4, you register a block with APNIC. If you take the provider free one you're using a block out of their allocation and will have to change ALL YOUR ADDRESSING if you change ISP. Not an issue for standard home user or anything completely dynamic but for any substantial business it's worth having PI ipv6 /48
Another side effect of eliminating NAT that the boffins didn't quite think through....
I think they're working on something to fix this but unsure of progress. There's been a lot of arguments over this for sure.
If this has changed recently I'd love to be corrected
I completely didn't think about the PI space, in England you normally only get that if you're running BGP to dual ISPs.
What I was talking about was the ISP in England saying "here you are, have a /64!" and there being no extra costs involved. Given your scenario, this was the same as any ISP saying, here's your /29.
But yes, regarding NAT, my ipv6 at home is not natted at all. So in 20 yrs time when IPv4 is depreciated, how does new companies set up their internal network on v6 when the addressing is dictated from the ISP? Or do we go to APNIC and ask "where's my companies v6 space? Bish"
And then what if I Set up ipv6 at home, with devices having static v6 addresses because they're doing something important - like a TV / Streaming device. I switch ISP's and my home network breaks?
:XD:
This exact point has been raised numerous times in many ipv6 discussions, and the powers that be decided that NAT was evil and had to go, everything else be damned, so here we are.
Its related to the whole 'but how is any SMB without PI space going to multihome in ipv6 only' and the answer is 'everyone who needs it should get PI space and peer BGP'.
I suppose thinking holistically you'd want everything to be as DNS based as possible, but that begs the question of how you make your DNS servers dynamic (not too familiar with mDNS etc.)
Dynamic DNS records means hours of unavailability for an enterprise if their address changes and that has to replicate through the world. It's good if you have a tiny webserver and some patient buddies, but totally unacceptable for a major organization.
Thing is, if the Fortune 100 companies don't want IPv6 in its current version, it will be changed to where they'll be happy using it. If the cost of going to v6 is greater than paying a premium to keep a v4 address alive, the premium gets paid and the v4 stays on.
Quote from: wintermute000 on January 22, 2016, 01:57:50 AM
Provider independent is justlike ipv4, you register a block with APNIC. If you take the provider free one you're using a block out of their allocation and will have to change ALL YOUR ADDRESSING if you change ISP. Not an issue for standard home user or anything completely dynamic but for any substantial business it's worth having PI ipv6 /48
Another side effect of eliminating NAT that the boffins didn't quite think through....
I think they're working on something to fix this but unsure of progress. There's been a lot of arguments over this for sure.
If this has changed recently I'd love to be corrected
#1 if course is get your own PI. If you're big enough that renumbering is a major task, it's probably worth it.
There's also the option of ULA and 1:1 NATv6.
Also as mentioned, DNS will be more important.
It just seems a bit of a mess?
Before I left on Friday I was looking up IPv6 design guides on IP address allocations, found some good stuff but 5pm came.
I could use the private address space now, fc00:: to fd00:: - fd00:FFF...., these are the equivalent of 192.168.x.x, but I really need to find out what the pro's and con's are for doing such a thing.
May be one "pro" would be that your internal network device etc management IP's could be on the non internet routable IPv6s. You could say you would never want to access the management IP of a switch, from the internet (example).. But then I guess you would end up with management VLANs on private address space, and VLANs for desktops which would use IP addresses to get out to the internet.
Does anyone have any case studies or white papers for documented designs relating to IPv6?
The funniest thing was realising what wintermute said, yesterday; about changing ISPs and your home or even office network breaks. haha - this made my weekend. :)
Quote from: Reggle on January 21, 2016, 05:53:53 AM
Oh, and no benefits for the moment for IPv6 really. In fact, as much as I like new stuff and IPv6, I still feel a network behaver better on IPv4 only. But that can't last of course.
I was seeing this too. I was seeing v4 preferred over v6 as well for an unknown reason at one time (bug in Windows somewhere..)..
I've recently swapped out my own Cisco 877 for the ISP router, so I can get 802.11n and allow any and all traffic inbound to hit my games console. I don't know how long ive been IPv6 enabled, but no issues so far. Things are pretty fast. I'm also using windows 10.
But, I have been confused as to why videos on facebook buffer on my mobile phone. I just assumed someones wifi was interfering again (2.4ghz is crowded in our block of apartments, and people don't know how to set them up (max strength, most using the same channel)).
Maybe, theres a bit of slowness somewhere or my phone doesn't fully like v6 yet. I just did a whats my ip from the phone and it has a v6 address.
Quote from: Dieselboy on January 23, 2016, 05:19:30 AMThe funniest thing was realising what wintermute said, yesterday; about changing ISPs and your home or even office network breaks. haha - this made my weekend. :)
For home I don't see this as a big problem. There are stuff to make this easier, like the general prefix; http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_basic/configuration/15-mt/ip6b-15-mt-book/ip6-generic-prefix.html
For offices though, this might be more of a hassle.
This is a good start for enterprise, a bit dated
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/CampIPv6.html
An IPv6 subnet is de facto always a /64. You're free to do oherwise but it will break SLAAC/EUI-64 so it's not wise. I'm assuming Windows either assumes /64 or only understands /64 as the reason to why it's not showing.
No idea why an address is preferred or deprecated. In fact, Ivan has blog posts about address allocation (http://blog.ipspace.net/2016/01/ipv6-address-allocation-is-operating.html) and source address selection (http://blog.ipspace.net/2014/01/source-ipv6-address-selection-saves-day.html) and both are rants about the unclarity of it.
I can explain the temporary part though: Windows uses IPv6 address randomization by default and will regularly choose another IPv6 address in the subnet. This is actually a good thing, otherwise the MAC address will be visible in the IPv6 address and it will stay visible when changing to another subnet, allowing for easy tracing.
Quote from: Reggle on January 24, 2016, 12:57:36 PM
An IPv6 subnet is de facto always a /64. You're free to do oherwise but it will break SLAAC/EUI-64 so it's not wise. I'm assuming Windows either assumes /64 or only understands /64 as the reason to why it's not showing.
Oh yea, Doh! I didn't think of that.
So I've got my IPv6 working now thanks to this article. In the comments someone explains how they setup their Cisco router and how they set it up to receive a /56. Very close to what I had originally.
https://major.io/2014/09/11/howto-time-warner-cable-ipv6/
interface GigabitEthernet0/0
description Uplink to: Time Warner Cable
ipv6 address dhcp
ipv6 address autoconfig default
ipv6 enable
ipv6 dhcp client pd hint ::/56
ipv6 dhcp client pd TWC-Prefix
My biggest issue was that I had a static route from the HE.net tunnel that I had moved from my tunnel interface to my outside (TWC) interface. With that in place IPv6 couldn't reach the gateway due to them using a /128 to setup the connection. So once I removed that the default was placed in my table from TWC and all works. I can reach the Googles on IPv6. :banana:
Nice! And thanks for the link too! :)
Can you all with working IPv6 check if still the bug with Android? (https://code.google.com/p/android/issues/detail?id=79576)
Last time I enabled IPv6 to our customers, we recieved lot of support tickets and I had to disable it.
The bug was more noticed when trying to load images. I mean, you have IPv6 in you Android phone and run, for example, the Facebook App. You will never load the pics, just text.
Quote from: TheGreatDoc on February 01, 2016, 01:23:47 AM
Can you all with working IPv6 check if still the bug with Android? (https://code.google.com/p/android/issues/detail?id=79576)
Last time I enabled IPv6 to our customers, we recieved lot of support tickets and I had to disable it.
The bug was more noticed when trying to load images. I mean, you have IPv6 in you Android phone and run, for example, the Facebook App. You will never load the pics, just text.
Didn't read all comments, but I have had IPv6 at home for years, no specific problem with any Android phone or tablet.
I am using IPv6 at home and facebook works fine, except sometimes videos on facebook buffer. I have a Samsung Galaxy S5. I cannot recall if there have been issues with facebook, sometimes if things are slow I just accept the fact that it could be any number of things and do I really want to start investigating something outside of work hours that will probably be fixed by itself a short time later.
I did have an issue on the weekend where the phone would say it had zero network connectivity. Reboot the phone and all my notifications came through at once. I've not seen this before this weekend. If I switched from my wifi (where I have IPv6) to my 4G network, I then had working internet again. Even though my laptop which was on the wifi too was working with no issues as well as my PS4 system which was being used all day.