[arin-ppml] Draft Policy 2011-5: Shared Transition Space for IPv4 Address Extension - IAB comment

Thu Jun 30 02:15:25 EDT 2011

On Jun 29, 2011, at 4:44 PM, William Herrin wrote:

> On Wed, Jun 29, 2011 at 12:55 PM, Joel Jaeggli <joelja at bogus.com> wrote:
>> On Jun 29, 2011, at 8:14 AM, William Herrin wrote:
>>> On Wed, Jun 29, 2011 at 10:59 AM, Alain Durand <adurand at juniper.net> wrote:
>>>> On Jun 29, 2011, at 10:35 AM, William Herrin wrote:
>>>>> You'll have to elaborate on that, because while windows firewall makes
>>>>> assumptions about what it's allowed to do if it encounters an RFC1918
>>>>> address, it makes no assumptions I'm aware of about what it can do
>>>>> with an address that isn't. If anything, the ISP choosing to employ
>>>>> RFC1918 addresses would cause Windows to incorrectly configure a
>>>>> permissive firewall.
>>>> 
>>>> If [public address] then start 6to4
>>> 
>>> Never seen it. And they'd be seriously crazy to enable it by default
>>> -- it would cause incredible brokenness even when the assumptions were
>>> met.
>> 
>> Sorry it's on by default in windows vista and windows 7...
> 
> Sadly, I must report the story to be false. My Windows 7 laptop did
> not, in fact, install a 6to4 adapter or configure an IPv6 address when
> I reprogrammed my DHCP server to give out a global scope IPv4 address.
> And the Teredo Tunneling interface remained in state "Media
> disconnected." Indeed, only the normal fe80 link local IPv6 address
> configured itself on my machine.

This is a freshly imaged windows 7 home premium machine... you will see that with a public ip address on it's ethernet interface it has a  6to4 address and without one it does not. This is the documented and intended behavior of  the stack. you will note that the 6to4 tunnel interface ip is 2002:80df:990b::80df:990b which maps to 128.223.153.11

with public ip address

C:\Users\joelja>ipconfig

Windows IP Configuration

Ethernet adapter Realtek onboard:

  Connection-specific DNS Suffix  . :
  Link-local IPv6 Address . . . . . : fe80::8d98:3b82:299a:80b7%26
  IPv4 Address. . . . . . . . . . . : 128.223.153.11
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 128.223.153.1

Ethernet adapter Bluetooth Network Connection 3:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Ethernet adapter VMware Network Adapter VMnet1:

  Connection-specific DNS Suffix  . :
  Link-local IPv6 Address . . . . . : fe80::c4b9:aa98:5bc0:52a%18
  IPv4 Address. . . . . . . . . . . : 192.168.129.1
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . :

Ethernet adapter VMware Network Adapter VMnet8:

  Connection-specific DNS Suffix  . :
  Link-local IPv6 Address . . . . . : fe80::5530:2f18:ad9e:5910%19
  IPv4 Address. . . . . . . . . . . : 192.168.110.1
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . :

Tunnel adapter isatap.{7D1E1580-FF9E-4DB5-89DB-D3F24FC6657D}:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{960F19DD-CE5A-414F-864B-F39D6B9EB772}:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{3B4419D2-0911-4067-A157-F13E2C9DEBAE}:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Tunnel adapter Teredo Tunneling Pseudo-Interface:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Tunnel adapter 6TO4 Adapter:

  Connection-specific DNS Suffix  . :
  IPv6 Address. . . . . . . . . . . : 2002:80df:990b::80df:990b
  Default Gateway . . . . . . . . . :

Tunnel adapter isatap.lan:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

this is without it.

C:\Users\joelja>ipconfig

Windows IP Configuration