Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


35 posts

Geek


Topic # 228591 13-Jan-2018 13:45
Send private message quote this post

My home network has a couple of Windows 2012R2 servers and several devices all on an IPV4 network connected to the Internet via an HG659. NAT enables outgoing connections to work. There are a couple of pinholes to allow incoming connections to a website and SMTP.

 

I thought I should move into the IPV6 era. Vodafone now support IPv6, but the problem is that the supplied 'prefix' is not static. The servers need to have static IPV6 addresses, as they do for IPV4, but Vodafone can change your IPV6 prefix which stuffs things up as it is part of the server address. Their note says 'You'll receive a /56 prefix. Currently, we don't offer static IPv6 addresses, although the prefix you receive should persist across router reboots." Maybe so, but I set the whole thing up and it was working, but now Vodafone have changed the prefix. Why? Because they can!

 

I thought that the whole point of IPV6 was that it wouldn't run out of addresses, so why don't Vodafone give us a static prefix at least for the duration of a contract with them? It seems you can't even buy one at the moment. You could buy an IPV4 one, though it was bundled with other stuff and was too expensive, so I used a DDNS for that.

 

There are dire warnings about using the FDxx ULAs out there for IPV6.

 

So, how do I set up an IPV6 network with static addresses for the servers, and allow selective incoming access without having to reconfigure my whole network every time Vodafone decides to change my address? This is a non-trivial task, involving changing server addresses, and altering DHCP to dole out addresses in the new space. (If I don't use my DHCP, the addresses don't get automatically updated in DNS).

 

This may seem nit-picky for a home environment, but it's also the model for our school environment which will need to be done in due course.

 

I could I suppose ditch IPV6 and retire before it becomes compulsory, but I try not to be defeatist!

 

Any ideas or suggestions?


Create new topic


35 posts

Geek


  Reply # 2065337 30-Jul-2018 23:57
Send private message quote this post

Well, the previous post is (temporarily?) irrelevant.

 

Since moving to fibre via Enable in Christchurch, there is no IPV6 static or otherwise.

 

I have asked VF when the rollout of IPV6 over fibre is to happen, but I haven't had any answer. The ninja wanted to know why I wanted IPv6, and said that there were 'other ways of securing the network', which is an interesting take on the actual purpose of IPV6.

 

Does anybody out there know what the rollout plan (if any) is?

 

Ken




35 posts

Geek


  Reply # 2084804 6-Sep-2018 10:46
Send private message quote this post

I contacted a helpful Vodafone person who got an answer from Technical Support about IPV6, which is more than I ever managed. I am not impressed with their reply:

 

"As a provider, we do not assign IPv6. However, on the Chorus network, sometimes you will receive an IPv6 address or the status as connection, but since your connection has been moved over to the Enable Fibre Network, this will not be possible.

 

"This will not affect the performance of your current connection. The reason for the introduction of IPv6 connections are because it will give us the ability to get more IP addresses. This is not widely used and still not used in NZ as if yet."

 

 

 

 


422 posts

Ultimate Geek
+1 received by user: 106


  Reply # 2084809 6-Sep-2018 10:52
Send private message quote this post

ArnoldGoat:

 

Any ideas or suggestions?

 

 

The only ISP that I am aware of that give out static IPv6 prefixes on UFB is 2 degrees. They also allow you to have .ip6.arpa addresses, so your machines can have reverse DNS entries (which would be required if you using SMTP and want to send e-mail to Google accounts)


Meow
7911 posts

Uber Geek
+1 received by user: 3930

Moderator
Trusted
Lifetime subscriber

  Reply # 2084944 6-Sep-2018 11:39
Send private message quote this post
158 posts

Master Geek
+1 received by user: 10

Subscriber

  Reply # 2084987 6-Sep-2018 12:32
Send private message quote this post

Yeah Voyager do static v6 /56. I have mine working atm


455 posts

Ultimate Geek
+1 received by user: 83


  Reply # 2085005 6-Sep-2018 13:05
One person supports this post
Send private message quote this post

Ive got things working pretty much as you describe for my home set up.  I think the one requirement I havent enforced is static IPv6 addresses for my "servers".

 

My set up is as follows:

 

  • 2degrees VDSL
  • Dynamic IPv6 range from 2degrees
  • Fritzbox 7390
  • I have a pihole server in my network doing DHCP and DNS (it uses dnsmasq behind the scenes)
  • All machines receive "dynamic" IPv4 and IPv6 addresses from DHCP. Dynamic in quotes as I do have a few reserved IPv4 addresses (and the Pihole uses a static IPv4 address)

To enable the Pihole to manage IPv6 addresses internally I had to set the following:

 

On the fritzbox:

 

  • Disable DHCP assignment
  • Under: Home Network --> Home Network Overview --> Network Settings --> IPv6 Addresses

     

    • Always assign a ULA
    • Enable: Allow IPv6 prefixes announced by other IPv6 routers in the home network
    • Enable: This FRITZ!Box provides the standard Internet connection
    • Disable: Also announce DNSv6 server via router advertisement (RFC 5006)
    • Enable DHCPv6 server in the FRITZ!Box for the home network:

       

      • Assign DNS server and IPv6 prefix (IA_PD)

From memory it was that last setting that was quite important.

 

On the Pi Hole settings:

 

  • DHCP

     

    • Set up which ever IPv4 range you use (e.g. 192.168.1.x)
    • Enable IPv6 support (SLAAC + RA)
  • DNS

     

    • Disable: Never forward non-FQDNs (I could probably enable this)
    • Disable: Never forward reverse lookups for private IP ranges
    • Disable: Use DNSSEC

Those DNS settings on the Pihole are more dependent on your upstream DNS servers.

 

Even if my internet drops out (and its doing it somewhat frequently at the moment...need to log a fault ;-) ) the new range is picked up and all "clients" get a new address.  Since the Pihole is allocating them and is my DNS server it knows about them all.  The 2 reasons I use PiHole is becuase I wanted a custom home domain name (one I own) and also for the ad blocking etc it does.

 

Pinging a machine by name defaults to IPv6 first too.  Here's an example of one of my servers:

 

Ping IPv6

 

I imagine you're using Windows DHCP and DNS based on your description.  Hopefully you'll be able to translate the above into their settings for you.

 

My clients also get (effectively) static fd00 addresses. So if I needed to I could use those addresses internally.  I dont as the above works for me.

 

Oh and I too am using a dynamic DNS service to have my IPv4 and IPv6 addresses looked up externally.  I'm forwarding some ports in too (set up on the Fritzbox).  I do have an issue with the IPv6 ones but I think thats either a fritzbox limitation or something I have misconfigured.  Not a big deal for me yet.


47 posts

Geek
+1 received by user: 29

Trusted
Voyager
Lifetime subscriber

  Reply # 2085164 6-Sep-2018 18:16
Send private message quote this post

michaelmurfy:

 

I believe Voyager can do the same - @VygrNetworkMonkey can confirm this one.

 

 

Correct :)

 

We support SLAAC/RA, RDNSS, DHCPv6, and static configurations. 

 

You'll be provided a /64 linknet, and a /56 delegated to use as you desire.

 

 





Voyager Internet - Network Monkey

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.