IPv6 in Windows environment for beginners

Currently I am working on implementing dual-stack (so all servers and computers will run on IPv4 and IPv6 at the same time) in Windows envrironment with Active directory domain controlllers, other member servers (file server, DFS, SharePoint services…), Exchange server 2013, Lync/Skpye for business…

Purpose of this post is to walk you through the obstacles and difficulties while implementing both protocols to work together…

So basicaly we need to know the folowing:

We have one (or more) public IPv4 addresses which we NAT in our private networks where we have our servers…
Our providers gives us some IPv6 prefix for “wan” interface of our router and over that there is a routed prefix which we will use internaly (you need to know there are public – or globaly routed IPv6 addresses inside your network – SO TAKE CARE of your Firewall roules (We will cover that later)).

Simple steps to implement dual stack is to:

a. Get IPv6 from your provider
b. Have a router that understands IPv6 🙂
c. Configure router advertisment on internal network with M (managed (this will force users to use DHCPv6 instead of autoconfiguring IPv6 (SLAAC)) and O (other configuration (this will point clients to DHCPv6 server to get DNS servers (your domain controllers IPv6 addresses)) flag
d. Configure DHCP server on your Windows server with DHCPv6 parameters (prefix, exclusions, DNS servers (called: 00023 DNS Recursive Name Server IPv6 Address)
e. disable DHCP client on servers that use static IPv4/IPv6 addresses (if you do not do that your servers will autoconfigure additional IPv6 addresses as told by RA…) You can use Powershell: Set-NetIPInterface –InterfaceIndex <number> -Dhcp Disabled

4 Responses to “IPv6 in Windows environment for beginners”

  1. Miha Pecnik says:

    Good going! Would love to hear more about these efforts. Perhaps at a conference or a even better SloWUG.

  2. Xavier says:

    Is it possible to use dual stack without IPv6 public address?
    That is: using dual stack in the LAN (with IPv6 ULA) and IPv4 in internet
    Can it work? Or are we going to have ipv6 timeouts for internet connections?

  3. Simon Abolnar says:

    I usually disable autoconfiguration of IPv6 addresses with command:
    netsh interface ipv6 set interface “Ethernet” routerdiscovery=disabled
    where “Ethernet” is name of actual Network Adapter.

    I think that it is the easiest way!

  4. manojlovicl says:

    But Simon… Using netsh is so NT4.0! 🙂 We should move to Powershell cmdlets… 🙂

Leave a Reply

You must be logged in to post a comment.