Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: Living With Airport Extreme and XBox 360  (Read 7620 times)

colonelf74

  • Newbie
  • *
  • Posts: 24
Living With Airport Extreme and XBox 360
« on: June 26, 2012, 04:09:13 PM »

I'm sort of sure I know the answer to this one but wanted to ask just in case anyone else is living with this issue.

The Airport Extreme is a wonderful little product, but from what I can tell it doesn't do ANY IPv6 firewalling or NAT.  As a result, and in contradiction with Hurricane Electric's example config I've left the option to block incoming IPv6 connections off.

Why?  Well, typically the XBox 360 uses incoming connections to do things like advanced partying, and from what I can tell, voice transmission.

So I'm basically giving up the old world of private IP address space, and the security that goes along with it, to have my XBox 360 perform as best it can with IPv6.

Anyone have any suggestions or comments?

Thanks,

Adam
Logged

broquea

  • Sr. Network Engineer, HE.NET AS6939
  • Administrator
  • Hero Member
  • *****
  • Posts: 1735
Re: Living With Airport Extreme and XBox 360
« Reply #1 on: June 26, 2012, 04:28:19 PM »

comment: NAT != security
suggestion: Install something in front of or behind the Airport that can provide an IPv6 firewall. I mean openwrt, ddwrt, m0n0wall, etc can accomplish this.
Logged

colonelf74

  • Newbie
  • *
  • Posts: 24
Re: Living With Airport Extreme and XBox 360
« Reply #2 on: June 26, 2012, 04:44:22 PM »

Thanks for the advice.  Unfortunately, I don't have a spare PC and am looking to just work with what I have.
Logged

kcochran

  • Sr. Network Engineer, Hurricane Electric
  • Administrator
  • Sr. Member
  • *****
  • Posts: 419
Re: Living With Airport Extreme and XBox 360
« Reply #3 on: June 26, 2012, 08:00:04 PM »

If you're using Airport Utility 6.1, under the Network section, you can add things under Port Settings.  This is for both IPv4 port forwards, as well as IPv6 firewall rules.
Logged

colonelf74

  • Newbie
  • *
  • Posts: 24
Re: Living With Airport Extreme and XBox 360
« Reply #4 on: June 26, 2012, 08:38:04 PM »

All I can say to that is maybe some day?  Or perhaps it's disallowed because I'm running WiFi.

Unfortunately, for my primary Airport Extreme the drop-down "Firewall Entry Type" is hard-coded
to "IPv4 Port Mapping".  My old Port Settings for the XBox 360 were dutifully noted as under the "Type" column.

If you want I can post a screenshot or something.  It's pretty bizarre.  :)
Logged

kcochran

  • Sr. Network Engineer, Hurricane Electric
  • Administrator
  • Sr. Member
  • *****
  • Posts: 419
Re: Living With Airport Extreme and XBox 360
« Reply #5 on: June 26, 2012, 08:54:41 PM »

Hmm, mine's running Wi-fi and operating as the front-end router (behind a 2Wire that's been told to basically act as a translation bridge between U-verse).
Logged

colonelf74

  • Newbie
  • *
  • Posts: 24
Re: Living With Airport Extreme and XBox 360
« Reply #6 on: June 26, 2012, 11:21:59 PM »

Update:  I'm stupid.  I now see how I can enable IPv6 firewalling on my Airport Extreme.  (First, you -have- to enable "Block incoming IPv6 connections" and then it's happy.)

Once I do that, though, I'm again at a loss.  How can I tell what IPv6 address has been picked up by my Xbox 360?

Does anyone know what type of tool I can use in place of good old "arp"?  Maybe sniff enough broadcast traffic from a Mac on a different physical network to guess?

As a hack/workaround could I just enter the entire IPv6 LAN Address and just use that to allow ports through?  I suppose any security is better than none.  Blah.
Logged

broquea

  • Sr. Network Engineer, HE.NET AS6939
  • Administrator
  • Hero Member
  • *****
  • Posts: 1735
Re: Living With Airport Extreme and XBox 360
« Reply #7 on: June 26, 2012, 11:56:44 PM »

Xbox360 supports IPv6? I just powered mine on and don't see it setting an IPv6 address at all (admittedly, my LAN is using SLAAC, not DHCPv6). You'd want to look at NDP as the "replacement" for ARP in IPv6.
« Last Edit: June 27, 2012, 12:03:43 AM by broquea »
Logged

colonelf74

  • Newbie
  • *
  • Posts: 24
Re: Living With Airport Extreme and XBox 360
« Reply #8 on: June 27, 2012, 12:03:06 AM »

A huge thank you for telling me about "ndp".
Logged

colonelf74

  • Newbie
  • *
  • Posts: 24
Re: Living With Airport Extreme and XBox 360
« Reply #9 on: June 29, 2012, 01:51:47 PM »

Well, at least I've managed to figure out how to make my XBox 360 most happy.

Now I'm moving on to a firewall question.  :-)
Logged