Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  


Welcome to Hurricane Electric's forums!

Author Topic: Tunnel behind Carrier grade nat  (Read 1781 times)


  • Newbie
  • *
  • Posts: 16
Tunnel behind Carrier grade nat
« on: March 23, 2017, 01:07:52 PM »

I have a dynamic ip on carrier nat; my ip is not pingable.
I have a tunnel through sixxs, but they are closing down.
Can HE work like that?


  • Hero Member
  • *****
  • Posts: 2729
Re: Tunnel behind Carrier grade nat
« Reply #1 on: March 23, 2017, 01:17:56 PM »

The short answer is no


  • Newbie
  • *
  • Posts: 20
Re: Tunnel behind Carrier grade nat
« Reply #2 on: March 27, 2017, 11:47:30 AM »


The long answer is, if your carrier NAT is a one to one, and they forward all traffic to it to your private IP, then yes, it will work.

The issues are as follows:
  • Your IP needs to be pingable, even if through NAT
  • There is a option to get ddclient to work with dynamic tunnels with changing IPs
  • The NAT needs to be complete forward as proto 41 is not a port and will not work with just port forwarding.

Interesting enough, as of June, that will be the second of three major tunnelbrokers that have gone down.  If you know how to get the public IP to foward all traffic, then you can easily work out the issues.  Otherwise, it might be just easier to look at Carl's answer above and ask your ISP for IPv6.