4 ms·
I want to get in on this. Even if I can only get a single IPv6 address on my gateway I can do NAT6 on my internal devices without an issue. The questions I nee
by X-Istence 15y ago
I want to get in on this. Even if I can only get a single IPv6 address on my gateway I can do NAT6 on my internal devices without an issue.
The questions I need to go find answer for are:
1. What do I need to do for Comcast to give me an IPv6 address?
2. What for my FreeBSD gateway do I need to modify to do DHCPv6 (stateful)?
3. What modifications do I need to make to my Firewall rules that currently assume NAT?
4. What is the easiest way for me to take the /64 and split it up so that even my test virtual machines now have direct accessible IP addresses (currently adding static routes using DHCP, which is a pain in the behind!)?
5. Start verifying that all internal devices that are requesting IPv6 and are using IPv6 are also fire-walling it correctly and all services are prepared for it. I can firewall at the border (gateway) at the moment, but eventually I don't want to police that traffic.
6. How will this interact with my IPv4 10/8 network I have set up?
7. What legacy devices are on my network that do not speak IPv6?
8. How does this change services that broadcast themselves widely and freely (looking at you mDNSResponder, Samba, UPnP media servers)?
These questions are just the ones I can think of at the moment. It is going to be interesting to see how this all works out, and I feel like I am going to have to learn networking all over again.
- adestefan 15y agoDon't waste your time with #1. It's limited to systems running either Windows Vista, Windows 7 or OS X Lion. It's a test for the premise modems. It makes sense for them to do this a first time roll out to test the systems and support personnel. However, it's an excellent time to make sure you can answer all your other questions.
- X-Istence 15y agoThey don't need to know what I am actually running. Each time I have had to call tech support they always ask me what router I am using, and I tell them it is a stock Linksys router. I can just as easily claim that I am running OS X Lion (which I am, just not directly on the cable modem)...
- adestefan 15y agoPlease don't do this. They're doing these tests in a specific order, in specific markets, with specific people for a reason.
- burgerbrain 15y agoAssuming he's a big boy and can handle his own networking issues, I don't see why him doing this should effect their testing.
- adestefan 15y agoBecause they want to test dual-stack. That means a real IPv6 address to each and every device. By only giving out a /128 you can't get a real address to all the devices behind the router.
- burgerbrain 15y agoSo long as he doesn't call up tech support and complain when something doesn't work, I don't see what the issue could be.
- bitwize 15y agoWhat exactly about "minimization of variables" do you not understand?
- burgerbrain 15y agoWhat makes you think I don't understand the concept? Edit: If I am off here, I want to know.
- nknight 15y agoComcast was doing "tests" for a long time in a variety of forms across the country. Those tests are over and have been for a while. This is gradual but very much live deployment, albeit with a limited enabled "feature set".
- ghshephard 15y ago"Even if I can only get a single IPv6 address on my gateway I can do NAT6 on my internal devices without an issue." Can you say a bit more about this? I haven't actually seen any implementations of NAT that will allow you to do NAT/PAT for multiple internal IPv6 hosts onto a single external IPv6 address. Does such a thing exist? If I were asked today, I would say "No." - but I clearly could be wrong.
- X-Istence 15y agoI am using OpenBSD's pf firewall and you can specify IPv6 addresses the same way you would IPv4 addresses for NAT, so I could translate many internal IPv6 addresses to a single outside IPv6 address without issues.
- wmf 15y agoI can do NAT66 on my internal devices without an issue. Except the issue of doing IPv6 completely wrong.
- X-Istence 15y agoSure ... but it is a simple stop for testing purposes. I already run a test network on IPv6 (only, no IPv4) that is using internal only IP addresses much like 10/8.