 SolarPupHardware GodPremium
join:2002-03-07
Greeley, CO | IPV6 and routing? So here's my situation.. and hoping someone here can help with this:
I have IPV6 setup right now through the Comcast anycast 192.88.99.1 6to4 address. My question is, the IP address I get when I hit an IPv6 test website, is that routeable? Can I add firewall entries for that address to point to my webservers? Or do I need to setup something with a tunnel broker to get a correct static block of IPv6 IP's? I have an account with freenet6, but last week it stopped working so I switched to the anycast address.
Any help would be great.. thank you! 
--
...I don't have a 50mb speedy connection, I fly through the net at low altitudes! |
|
|
|
JoelC707Premium
join:2002-07-09
Stone Mountain, GA
kudos:4 | From what I know and can gather about 6to4 (never really used it myself) I don't think it is possible. All 6to4 addresses are in the 2002::/16 prefix which gives it a measure of prediction. Further, your IPv4 WAN address will be a part of the IPv6 address (it will be translated from decimal to hex so it won't look like your WAN address). Because your WAN address is part of the IPv6 address, it should be possible to maintain the same IPv6 address assuming your IPv4 WAN address doesn't change.
To route back across the 6to4 relay to your IPv4 WAN would require support in the relay which I'm not sure is there. It will also require being able to add that IPv6 address as an acceptable address in your firewall (many will ignore connections to an address that isn't their WAN address). The other problem comes in from the fact once it leaves the 6to4 relay it will effectively be an IPv4 transmission not IPv6 and will be destined to your IPv4 WAN address not an IPv6 address.
It might work if you opened the port on the IPv4 side and just used the 6to4 relay as just that, a translator. It's definitely a non-standard use but it could be possible. I don't think anyone has ever tried it before. Honestly it would just be easier to get the tunnel back up and have a fully routed IPv6 address assigned to your firewall and server. I've never used freenet6 and only really heard of sixxs.net and he.net. I use HE.net personally and have not had any problems with them. |
|
AVonGaussPremium
join:2007-11-01
Boynton Beach, FL | reply to SolarPup
Very few IPv6 addresses are not routable, any address derived by a 6to4 implementation should be able to be accessed from any other IPv6 host. As JoeLC707, the address derived by the 6to4 implementation does use your IPv4 address so it is only as static as your IPv4 address.
I would definitely look at Hurricane Electric (tunnelbroker.net) or SixXS for a more robust tunnel if you are looking to provide services via IPv6. |
|
