Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




43 posts

Geek


#228591 13-Jan-2018 13:45
Send private message

My home network has a couple of Windows 2012R2 servers and several devices all on an IPV4 network connected to the Internet via an HG659. NAT enables outgoing connections to work. There are a couple of pinholes to allow incoming connections to a website and SMTP.

 

I thought I should move into the IPV6 era. Vodafone now support IPv6, but the problem is that the supplied 'prefix' is not static. The servers need to have static IPV6 addresses, as they do for IPV4, but Vodafone can change your IPV6 prefix which stuffs things up as it is part of the server address. Their note says 'You'll receive a /56 prefix. Currently, we don't offer static IPv6 addresses, although the prefix you receive should persist across router reboots." Maybe so, but I set the whole thing up and it was working, but now Vodafone have changed the prefix. Why? Because they can!

 

I thought that the whole point of IPV6 was that it wouldn't run out of addresses, so why don't Vodafone give us a static prefix at least for the duration of a contract with them? It seems you can't even buy one at the moment. You could buy an IPV4 one, though it was bundled with other stuff and was too expensive, so I used a DDNS for that.

 

There are dire warnings about using the FDxx ULAs out there for IPV6.

 

So, how do I set up an IPV6 network with static addresses for the servers, and allow selective incoming access without having to reconfigure my whole network every time Vodafone decides to change my address? This is a non-trivial task, involving changing server addresses, and altering DHCP to dole out addresses in the new space. (If I don't use my DHCP, the addresses don't get automatically updated in DNS).

 

This may seem nit-picky for a home environment, but it's also the model for our school environment which will need to be done in due course.

 

I could I suppose ditch IPV6 and retire before it becomes compulsory, but I try not to be defeatist!

 

Any ideas or suggestions?


Create new topic


43 posts

Geek


  #2065337 30-Jul-2018 23:57
Send private message

Well, the previous post is (temporarily?) irrelevant.

 

Since moving to fibre via Enable in Christchurch, there is no IPV6 static or otherwise.

 

I have asked VF when the rollout of IPV6 over fibre is to happen, but I haven't had any answer. The ninja wanted to know why I wanted IPv6, and said that there were 'other ways of securing the network', which is an interesting take on the actual purpose of IPV6.

 

Does anybody out there know what the rollout plan (if any) is?

 

Ken




43 posts

Geek


  #2084804 6-Sep-2018 10:46
Send private message

I contacted a helpful Vodafone person who got an answer from Technical Support about IPV6, which is more than I ever managed. I am not impressed with their reply:

 

"As a provider, we do not assign IPv6. However, on the Chorus network, sometimes you will receive an IPv6 address or the status as connection, but since your connection has been moved over to the Enable Fibre Network, this will not be possible.

 

"This will not affect the performance of your current connection. The reason for the introduction of IPv6 connections are because it will give us the ability to get more IP addresses. This is not widely used and still not used in NZ as if yet."

 

 

 

 


 
 
 
 


628 posts

Ultimate Geek
Inactive user


  #2084809 6-Sep-2018 10:52
Send private message

ArnoldGoat:

 

Any ideas or suggestions?

 

 

The only ISP that I am aware of that give out static IPv6 prefixes on UFB is 2 degrees. They also allow you to have .ip6.arpa addresses, so your machines can have reverse DNS entries (which would be required if you using SMTP and want to send e-mail to Google accounts)


/dev/null
9315 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  #2084944 6-Sep-2018 11:39
Send private message
180 posts

Master Geek

Subscriber

  #2084987 6-Sep-2018 12:32
Send private message

Yeah Voyager do static v6 /56. I have mine working atm


859 posts

Ultimate Geek


  #2085005 6-Sep-2018 13:05
Send private message

Ive got things working pretty much as you describe for my home set up.  I think the one requirement I havent enforced is static IPv6 addresses for my "servers".

 

My set up is as follows:

 

  • 2degrees VDSL
  • Dynamic IPv6 range from 2degrees
  • Fritzbox 7390
  • I have a pihole server in my network doing DHCP and DNS (it uses dnsmasq behind the scenes)
  • All machines receive "dynamic" IPv4 and IPv6 addresses from DHCP. Dynamic in quotes as I do have a few reserved IPv4 addresses (and the Pihole uses a static IPv4 address)

To enable the Pihole to manage IPv6 addresses internally I had to set the following:

 

On the fritzbox:

 

  • Disable DHCP assignment
  • Under: Home Network --> Home Network Overview --> Network Settings --> IPv6 Addresses

     

    • Always assign a ULA
    • Enable: Allow IPv6 prefixes announced by other IPv6 routers in the home network
    • Enable: This FRITZ!Box provides the standard Internet connection
    • Disable: Also announce DNSv6 server via router advertisement (RFC 5006)
    • Enable DHCPv6 server in the FRITZ!Box for the home network:

       

      • Assign DNS server and IPv6 prefix (IA_PD)

From memory it was that last setting that was quite important.

 

On the Pi Hole settings:

 

  • DHCP

     

    • Set up which ever IPv4 range you use (e.g. 192.168.1.x)
    • Enable IPv6 support (SLAAC + RA)
  • DNS

     

    • Disable: Never forward non-FQDNs (I could probably enable this)
    • Disable: Never forward reverse lookups for private IP ranges
    • Disable: Use DNSSEC

Those DNS settings on the Pihole are more dependent on your upstream DNS servers.

 

Even if my internet drops out (and its doing it somewhat frequently at the moment...need to log a fault ;-) ) the new range is picked up and all "clients" get a new address.  Since the Pihole is allocating them and is my DNS server it knows about them all.  The 2 reasons I use PiHole is becuase I wanted a custom home domain name (one I own) and also for the ad blocking etc it does.

 

Pinging a machine by name defaults to IPv6 first too.  Here's an example of one of my servers:

 

Ping IPv6

 

I imagine you're using Windows DHCP and DNS based on your description.  Hopefully you'll be able to translate the above into their settings for you.

 

My clients also get (effectively) static fd00 addresses. So if I needed to I could use those addresses internally.  I dont as the above works for me.

 

Oh and I too am using a dynamic DNS service to have my IPv4 and IPv6 addresses looked up externally.  I'm forwarding some ports in too (set up on the Fritzbox).  I do have an issue with the IPv6 ones but I think thats either a fritzbox limitation or something I have misconfigured.  Not a big deal for me yet.


80 posts

Master Geek

Trusted
Voyager
Lifetime subscriber

  #2085164 6-Sep-2018 18:16
Send private message

michaelmurfy:

 

I believe Voyager can do the same - @VygrNetworkMonkey can confirm this one.

 

 

Correct :)

 

We support SLAAC/RA, RDNSS, DHCPv6, and static configurations. 

 

You'll be provided a /64 linknet, and a /56 delegated to use as you desire.

 

 





Voyager Internet - Network Monkey

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

OPPO Find X2 Lite brings flagship features to mid-range 5G smartphone
Posted 29-May-2020 12:52


Sony introduces the digital camera ZV-1 for content creators
Posted 27-May-2020 12:47


Samsung Announces 2020 QLED TV Range
Posted 20-May-2020 16:29


D-Link A/NZ launches AI-Powered body temperature measuring system
Posted 20-May-2020 16:22


NortonLifeLock Online Banking Protection now available for New Zealand banks
Posted 20-May-2020 16:14


SD Express delivers new gigabyte speeds for SD memory cards
Posted 20-May-2020 15:00


D-Link A/NZ launches Nuclias cloud managed network solution hosted in Australia
Posted 11-May-2020 17:53


Logitech introduces new video streaming solution for home studios
Posted 11-May-2020 17:48


Next generation Volvo cars to be powered by Luminar LiDAR technology
Posted 7-May-2020 13:56


D-Link A/NZ launches Wi-Fi Certified EasyMesh system
Posted 7-May-2020 13:51


Spark teams up with Microsoft to bring Xbox All Access to New Zealand
Posted 7-May-2020 13:01


Microsoft plans to establish its first datacenter region in New Zealand
Posted 6-May-2020 11:35


Genesis School-gen has joined forces with Mind Lab Kids
Posted 1-May-2020 12:53


Malwarebytes expands into privacy with fast, frictionless VPN
Posted 30-Apr-2020 16:06


Kordia to donate TV airtime on Channel 200 to community groups
Posted 30-Apr-2020 16:00



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.