Setup ipv6 free tunnel broker

Hurricane Electric is currently running a production IPv6 network and offering business class commercial IPv6 services. Native IPv6 connectivity is available for both direct connection customers and colocation customers. Hurricane Electric also provides a free tunnel broker which allows users to experiment with IPv6 by tunneling over the existing IPv4 Internet.

Hurricane Electric's tunnel broker is available for use by anybody. The Hurricane Electric IPv6 network was migrated in our core, and Hurricane Electric now offers IPv4 and IPv6 at all locations, over our international backbone consisting of multiple 10 gigabit circuits.

Hurricane Electric is aggressively pursuing peering with all existing IPv6 networks. Our routing table has more prefixes routes and more paths to each prefix ways to get to a destination address block than most other IPv6 providers. Business class commercial native IPv6 service is available today from Hurricane Electric.

For the purpose of this article, the type of tunnel created at Hurricane Electric is a Regular Tunnel. This KB article does not describe the account nor the tunnel creation process.

This information can be found at www. On successful completion of the tunnel creation process at Hurricane Electric, the following details can be found in the Tunnel Details page of the site:.

Here is a screenshot of the Tunnel Details page with the above information filled-in:. SonicWall Firewall Configurations :. This release includes significant user interface changes and many new features that are different from the SonicOS 6.

The below resolution is for customers using SonicOS 7. X firmware. Replace them with the IP addresses of your network. The tunnel broker addresses must be replaced with the addresses you obtain for your account.

Use the DisabledComponents registry key to do this. Just follow this registry path:. Then reboot your machine. This setting will disable all IPv6 tunneling mechanisms on your machine. This is best practice for all Windows machines unless it is a DirectAccess Server.

So why is Teredo so bad? One word: control. First, the tunneling mechanism uses UDP port for client-to-server communication.

Once the server assignes the address to the client it then directs the client to a Teredo relay based on Anycast. This means the client could theoretically be pointed to a Teredo relay anywhere in the world. At this point the Teredo-enabled client can get to the IPv6 Internet through the Teredo relay anywhere in the world. That is the bad part. So I recommend never using it, ever. Regardless if your Windows machine is on a domain or not this function is always enabled.

However, it will not configure itself unless it has a public IPv4 address. However, if it does have a public IPv4 address, then the Windows machine does not need a server to configure its address.

It uses a 6to4 addressing algorithm as explained in RFC Once it auto configures this address the windows machine will go out to ipv6. This machine will then be able to go to the IPv6 Internet.