Welcome to Hurricane Electric's Tunnelbroker.net forums!
Started by guideclothing, March 03, 2015, 12:15:50 AM
QuoteIf I allocate an address that is part of my allocation from 2001:470:1f09:ad4::/64 to the machines on my network I believe they will all be publically addressable which I do not want.
QuoteI want to allocate IPv6 addresses fro my internal IPv6 DHCP server. what range should I use so that the computers will have IPv6 addresses but not be accessible from outside my network?
Quoteso if did as you suggest and assign public IP's to all computers and use the firewall to control access - if I move to an ISP that provides an IPv6 range I would need to re-assign new addresses to the machines on my internal network - which seems like a bad solution to me.
Quote from: guideclothing on March 03, 2015, 01:44:39 PMsorry - of course - but on my servers I have put static IPv6 IP's and these would need to be re-allocated.if there is no way around it then fine - but it just surprises methank-you for your prompt responses
Quote from: snarked on June 03, 2015, 01:06:49 PMA technical answer to the original question is: It's impossible. You can't have "access" with unaddressable computers because you will never get replies to your queries. There is no such thing as NAT for IPv6.As mentioned before, a properly set firewall is your solution. You allow response packets to queries but nothing else at your network boundary.