[8.170][QUESTION][ANSWERED] IPv6 Configuration - Tunnel Broker

First off let me say I'm VERY much an IPv6 n00b.  I have done practically nothing with IPv6.

I followed a tutorial by Billybob over here to get my IPv6 network up and running.  I had to tweak it a bit for 8.2.

The tunnel broker seems to work fine as I can browse IPv6 sites, however my "public" IP address shows as the tunnel broker address per this link.

I checked the masquerading setting and such per Paul (InTheAir) but everything seems right.  Is it correct that the public address I'm seeing is the address of the tunnel broker?  I would like to ultimately configure my web server to work with IPv6 but if the IPv6 block I was given is NATed or something else is up then I need to remedy that first.  Could be I just have my Astaro config nutted up.

Again, I'm very new to IPv6 so I might have missed something huge so please take pitty on this n00b.  [:S]  Thanks so much!!!

Parents

0 Scott_Klassen over 13 years ago

Ian: Nope. Full transparent will work without. I'm using it with Agent based authentication.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 13 years ago in reply to Scott_Klassen

Hi Scott,
I think there is a bug in the web page.
In the default profile you cannot implement full transparent proxy without either agent or browser, but in a profile you can turn on full transparent, save the profile and nothing happens eg you can still surf, open new sessions without being asked to authenticate (V8.171b).

Ian[:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 danodemano over 13 years ago in reply to RFCat_vk_01

lol, alright, y'all are confusing me now. [:P] If I'm using the tunnel broker (freenet6 in this case) will it always show the broker IP address and never my client machines?

I haven'e had a chance to play with the full transparent yet as some storms were rolling through last night and I didn't really want to be messing with settings if the power was going to go out (even though I have a really nice UPS on everything).
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 13 years ago in reply to danodemano

Okay.

My setup is using sixxs on one ASG and freenet6 on another, both are using the http proxy in some form of standard mode without https scanning.
When I hit the sixxs site I can see the IPv6 of my PC. With https scanning enabled I only see the tunnel broker IPv6 address.

For none HTTP protocols your PC's IPv6 address will showup on the outside of the ASG.

Ian
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 danodemano over 13 years ago in reply to RFCat_vk_01

Okay.

My setup is using sixxs on one ASG and freenet6 on another, both are using the http proxy in some form of standard mode without https scanning.
When I hit the sixxs site I can see the IPv6 of my PC. With https scanning enabled I only see the tunnel broker IPv6 address.

For none HTTP protocols your PC's IPv6 address will showup on the outside of the ASG.

Ian

That's similar to what I am doing, HTTP proxy mainly just for virus scanning and such. I tried the link that Paul sent me, whatismyv6.com, and it shows the tunnel broker IP address and not the IP of the PC I was on. I assume I have something miss-configured I just don't know what... [:S]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 13 years ago in reply to danodemano

Hi,
no, nothing is mis-configured, you just aren't thinking the whole process through.

Your http proxy will do what with that website? It will be handled by the proxy because it is a normal website.

Try going to https://www.sixxs.net/ and see what is displayed?

Another test is turn the http proxy off and run the test again with with your browser.

Ian[[[:)]]][[[:)]]][[[:)]]]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 RFCat_vk_01 over 13 years ago in reply to danodemano

Hi,
no, nothing is mis-configured, you just aren't thinking the whole process through.

Your http proxy will do what with that website? It will be handled by the proxy because it is a normal website.

Try going to https://www.sixxs.net/ and see what is displayed?

Another test is turn the http proxy off and run the test again with with your browser.

Ian[[[:)]]][[[:)]]][[[:)]]]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 danodemano over 13 years ago in reply to RFCat_vk_01

Hi,
no, nothing is mis-configured, you just aren't thinking the whole process through.

Your http proxy will do what with that website? It will be handled by the proxy because it is a normal website.

Try going to https://www.sixxs.net/ and see what is displayed?

Another test is turn the http proxy off and run the test again with with your browser.

Ian[[[:)]]][[[:)]]][[[:)]]]

I must not because I'm still not getting it. [:S] If Astaro is the proxy, then wouldn't I see the Astaro IPv6 address with the HTTP proxy turned on? I still don't get why I'm seeing the tunnel broker address instead. I tried to go there, it just timed out after about 30 seconds.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel