User Tools

Site Tools


systems:ipv6

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
systems:ipv6 [2018/01/10 07:16] – [ipv6 testing windows command line] superwizardsystems:ipv6 [2020/07/25 18:44] superwizard
Line 1: Line 1:
 +====== IPV6 Ranges ======
 +
 +<WRAP center round box 60%>
 +From: https://www.ultratools.com/tools/ipv6CIDRToRangeResult?ipAddress=2000%3A%3A%2F3&as_sfid=AAAAAAXLyHZyypM0BkgPd5Oqx1YG0MDrQ8-vzpGpHcpnsRp3jHOqNtbTMx2NmZEjJmThrI7NJlMUP0YsSLkYkdQslC1dUwLLZfgVqrMV1W_y7MdhmgjvOi5q2_ceDAYFZb_4MdM%3D&as_fid=daab81932ddb8c143727fab89d413fffe6058720
 +
 +</WRAP>
 +
 +Facts about numbers
 +
 +Also: https://www.numberfacts.com/
 +
 +
 +<code>
 +2000::/3
 +To 3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 +2**125 = 42535295865117307932921825928971026432 Hosts
 +</code>
 +
 +====== ipv6 survey of implementation ======
 +
 +
 +From: https://www.mrp.net/ipv6_survey/
 +
 +<code>
 +During the Joint Techs meeting at Fermilab Ron Broersma of Defense Research and Engineering Network 
 +(DREN) included a scorecard in his presentation that tried to quantify how well major organisations 
 +were embracing IPv6. I thought that this was such a fine idea that I’ve decided to replicate it here. 
 +</code>
 +
 +Also Testing: http://www.ipv6now.com.au/tools.php
 +
 +<code>
 +IPv6 Testing Tools
 +IPv6, like any new technology, takes time to implement and operate. Here are some tools to make 
 +checking, tracing and verifying IPv6 easier for you.
 +</code>
 +
 +
 +
 +====== DUID Conflict between two Computers How to reset DUID ======
 +
 +From: https://knowledge.zomers.eu/misc/Pages/How-to-reset-the-IPv6-DUID-in-Windows.aspx
 +
 +duplicate ip
 +
 +<code>
 +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters
 +Dhcpv6DUID=hex:00,01,00,01,20,57,99,99,99,99,99,98,97,96
 +
 +reg delete HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters /v Dhcpv6DUID
 +
 +</code>
 +
 +====== Disabling RFC 4941 IPv6 Privacy Extensions in Windows ======
 +
 +From: https://andatche.com/articles/2012/02/disabling-rfc4941-ipv6-privacy-extensions-in-windows/
 +
 +<code>
 +RFC 4941 defines a series of Privacy Extensions for Stateless Address Autoconfiguration 
 +in IPv6
 +
 +By default, Windows Vista, Windows 7 and Windows Server 2008 generate random interface IDs 
 +for non-temporary autoconfigured IPv6 addresses, including public and link-local addresses, 
 +rather than using EUI-64 derived interface IDs.1 While these are permanent, so don’t change, 
 +this leads to potential confusion when a host’s expected EUI-64 derived address is unreachable!
 +
 +Thankfully it’s trivial to disable this behaviour, fire up cmd.exe and issue the following.
 +
 +netsh interface ipv6 set global randomizeidentifiers=disabled store=active
 +netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent
 +
 +In addition to this, the RFC states that the use of temporary addresses should be disabled 
 +by default.
 +
 +The use of temporary addresses may cause unexpected difficulties with some applications. 
 +[snip] Consequently, the use of temporary addresses SHOULD be disabled by default in order 
 +to minimize potential disruptions. Individual applications, which have specific knowledge 
 +about the normal duration of connections, MAY override this as appropriate.
 +Windows Vista and Windows 7 ignore the advice of the RFC and also configure temporary global 
 +or unique local addresses as per RFC 4941 (EDIT: OS X also does this since 10.7, so do many 
 +Linux distros). This behaviour is disabled by default on Windows Server 2008.
 +
 +To disable privacy extensions entirely, fire up cmd.exe and issue the following.
 +
 +netsh interface ipv6 set privacy state=disabled store=active
 +netsh interface ipv6 set privacy state=disabled store=persistent
 +
 +The changes will take immediate effect without needing to reboot, they’ll also persist 
 +after a reboot.
 +
 +</code>
 +
 +====== Multicast Address Space Registry ======
 +
 +From: https://www.iana.org/assignments/ipv6-multicast-addresses/ipv6-multicast-addresses.xhtml
 +
 +<code>
 +IPv6 multicast addresses are distinguished from unicast addresses by the
 +value of the high-order octet of the addresses: a value of 0xFF (binary
 +11111111) identifies an address as a multicast address; any other value
 +identifies an address as a unicast address.
 +
 +</code>
 +
 +====== Best Current Operational Practice for Operators: IPv6 prefix assignment for end-users ======
 +
 +From: https://www.ripe.net/publications/docs/ripe-690
 +
 +<code>
 +Best Current Operational Practice for Operators: IPv6 prefix assignment for end-users - 
 +persistent vs non-persistent, and what size to choose
 +
 +Non-persistent prefixes are considered harmful in IPv6 as you can't avoid issues that may be caused by 
 +simple end-user power outages, so assigning persistent prefixes is a safer and simpler approach. 
 +Furthermore, this avoids the need for expensive logging, increases your chances to offer new business 
 +to customers, and decreases your customer churn.
 +</code>
 +
 ======  ULA and GUA on the same network ====== ======  ULA and GUA on the same network ======
  
Line 225: Line 343:
  
 <code> <code>
 +nmap -6 --script=broadcast-dhcp6-discover
 netsh int ipv6 show prefixpolicies netsh int ipv6 show prefixpolicies
 netsh interface ipv6 show address netsh interface ipv6 show address
 +netsh interface ipv6 show interface
 netsh interface ipv6 show neighbors netsh interface ipv6 show neighbors
 netsh interface ipv6 delete neighbors netsh interface ipv6 delete neighbors
Line 232: Line 352:
 netsh interface ipv6 delete destinationcache netsh interface ipv6 delete destinationcache
 netsh interface ipv6 show route netsh interface ipv6 show route
 +netsh interface ipv6 show joins
 route print route print
 tracert tracert
 Pathping Pathping
 Ping Ping
-ipconfig+ipconfig /displaydns
 netsh interface ipv6 show ipstats netsh interface ipv6 show ipstats
 netsh interface ipv6 show global netsh interface ipv6 show global
Line 262: Line 383:
 nslookup isp.test-ipv6.com nslookup isp.test-ipv6.com
 nslookup  Domain.com 2001:4860:4860::8888 nslookup  Domain.com 2001:4860:4860::8888
 +nslookup  -q=aaaa Domain.com 2001:4860:4860::8888
 +
 +
 +   nmap -6 --script=targets-ipv6-multicast-echo.nse --script-args 'newtargets' -sL -d1 -oA c:\\temp\\nmap.txt
  
 </code> </code>
Line 359: Line 484:
  
  
 +====== IPv6 Addressing (TechRef) ======
 +
 +From: https://technet.microsoft.com/en-us/library/dd392266(v=ws.10).aspx
 +
 +
 +{{ https://i-technet.sec.s-msft.com/dynimg/IC197198.gif?direct&600 |}}
 +
 +<code>
 +good overview 
 +</code>
 ====== IPv6 Addressing Structure ====== ====== IPv6 Addressing Structure ======
  
systems/ipv6.txt · Last modified: 2020/07/25 19:01 by superwizard