TheCableGuySeptember2002

ManualConfigurationforIPv6

ByTheCableGuy
Foralistandadditionalinformationonall
TheCableGuy
columns,
clickhere
.

TopicsonthisPage

ManualIPv6addresses
IPv6Router

6to4Router

ISATAPRouter

6over4Router

ForMoreInformation

Inmostcases,anIPv6hostrunningWindowsXPoramemberoftheWindowsServer2003familydoesnot
havetobemanuallyconfigured.However,therearesomecasesinwhichthecomputermustbemanually
configuredwithIPv6addresses.Additionally,therearetimeswhenacomputerhasaspecialroleonthe
network.
ThefollowingsectionsdescribehowtomanuallyconfigureIPv6for:

ManualIPv6addresses.

AnIPv6router.

A6to4router.

AnIntraSiteAutomaticTunnelAddressingProtocol(ISATAP)router.

A6over4router.

ManualIPv6addresses

TheIPv6protocolforWindowsXPandtheWindowsServer2003familysupportsstatelessaddress
autoconfiguration,withwhichaddresses,routes,andotherconfigurationparametersareautomatically
configuredonthebasisofthereceiptofRouterAdvertisementmessages.However,ifyouwanttoconfigure
eitherIPv6addresses(withoutusingrouteradvertisements)oranycastaddresses,suchasanycast

addressesforDNSservers,youcanmanuallyconfigureIPv6addresseswiththe
netshinterfaceipv6add
address
command.Thesyntaxofthiscommandis:

netshinterfaceipv6addaddress

InterfaceNameOrIndex

IPv6Address

[[
type=
]
unicast
|
anycast
][[
validlifetime=
]
Minutes
|
infinite
]

[[
preferredlifetime=
]
Minutes
|
infinite
][[
store=
]
active
|
persistent
]
Bydefault,theaddresstypeisunicast,thevalidandpreferredlifetimesareinfinite,andtheaddressis
persistent.Toobtaintheinterfacenameoritsindex,usethedisplayofthe
netshinterfaceipv6show
interface
command.
Forexample,toconfigurethesitelocaladdressFEC0::1A49:2AA:FF:FE34:CA8Fontheinterfacenamed
LocalAreaConnection,thecommandis:

netshinterfaceipv6addaddress"LocalAreaConnection"
fec0::1a49:2aa:ff:fe34:ca8f
Tochangeanexistingaddress,usethe
netshinterfaceipv6setaddress
command.Toremovean
address,usethe
netshinterfaceipv6deleteaddress
command.

IPv6Router

AnIPv6routernotonlyforwardsIPv6packetsbetweeninterfaces,butalsoadvertisesbothitspresence
andstatelessaddressautoconfigurationinformationforhostslocatedondirectlyattachedsubnets.Thisis
donebysendingRouterAdvertisementmessages.AcomputerrunningWindowsXPoramemberofthe
WindowsServer2003familycanbeconfiguredasastaticrouterandasanadvertisingrouter.Astatic
routerdoesnotuseroutingprotocolstomaintaintheroutesintheIPv6routetable.
TocreateastaticIPv6router,youmustenableforwardingandadvertisingontherequiredinterfaces.An
IPv6routerdoesnothavetohavetwoLANinterfacesinstalled.Forexample,foranISATAProuter,youcan
haveasingleLANinterfaceandenableforwardingontheLANinterfaceandbothforwardingand
advertisingontheAutomaticTunnelingPseudoInterface.MoreinformationaboutISATAP,seethe"ISATAP
Router"sectionofthisarticle.
Toenableforwardingandadvertisingonaninterface,usethefollowingcommand:

netshinterfaceipv6setinterface

InterfaceNameOrIndex
[
forwarding=
]
enabled
|
disabled
][[
advertise=
]
enabled
|
disabled
]
[[
mtu=
]
MTUSize
][[
store=
]
active
|
persistent
]
Bydefault,forwardingandadvertisingaredisabled,theMTUsizeisthelinkMTUreportedbytheinterface,
andtheinterfacesettingsarepersistent.
Forexample,acomputerrunningamemberoftheWindowsServer2003familyisbeingconfiguredasa
router.IthasthreeinterfacesnamedLocalAreaConnection,LocalAreaConnection2,andLocalArea
Connection3.ToenableforwardingandadvertisingoverLocalAreaConnectionandLocalAreaConnection
2,andforwardingoverLocalAreaConnection3,thecommandsare:

netshinterfaceipv6setinterface"LocalAreaConnection"
forwarding=enabledadvertise=enabled
netshinterfaceipv6setinterface"LocalAreaConnection2"
forwarding=enabledadvertise=enabled
netshinterfaceipv6setinterface"LocalAreaConnection3"
forwarding=enabled
TheLocalAreaConnection3interfaceisattachedtoasubnetthatalreadycontainsanadvertisingrouter.
Afterthesecommandsarerun,theroutersendsRouterAdvertisementmessagesthroughtheLocalArea
ConnectionandLocalAreaConnection2interfaces.However,theydonotcontainanyPrefixInformationor
RouteInformationoptionsthroughwhichhostsontheattachedsubnetscanautoconfigureaddressesand
routes.Theroutermustnowbeconfiguredwithroutestopublish.
Toaddaroute,usethefollowingcommand:

netshinterfaceipv6addroute

IPv6Address
/
PrefixLength
InterfaceNameOrIndex
[[
nexthop=
]
IPv6Address
][[
publish=
]
no
|
age
|
yes
]
[[
validlifetime=
]
Minutes
|
infinite
]
[[
preferredlifetime=
]
Minutes
|
infinite
][[
store=
]
active
|
persistent
]
Bydefault,thereisnonexthopaddress(theprefixisonlink),therouteisnotpublished,thevalidand
preferredlifetimesareinfinite,andtherouteispersistent.
Forexample,toaddtherouteandpublishtheonlinksitelocalprefixFEC0:0:0:1::/64onLocalArea
Connection,andthenaddtherouteandpublishtheonlinksitelocalprefixFEC0:0:0:2::/64onLocalArea
Connection2,thecommandsare:

netshinterfaceipv6addroutefec0:0:0:1::/64"LocalAreaConnection"
publish=yes
netshinterfaceipv6addroutefec0:0:0:2::/64"LocalAreaConnection2"
publish=yes
Forthisconfiguration,therouterdoesnotadvertiseitselfasadefaultrouter.HostsontheFEC0:0:0:1::/64
andFEC0:0:0:2::/64subnetsautomaticallyconfigureanappropriateaddressandaddrequiredroutesto
theirroutetables,buttheydonotautomaticallyconfigureadefaultroute(::/0).Acomputerrunningthe
IPv6protocolfortheWindowsServer2003familyorWindowsXPdoesnotadvertiseitselfasadefault
routerunlessthereisadefaultroutethatisconfiguredtobepublished.
ToconfiguretheroutertobeadefaultrouterforhostsontheFEC0:0:0:1::/64andFEC0:0:0:2::/64
subnets,youmustaddadefaultroutetotherouterandpublishit.Forexample,ifthesubnetofLocalArea
Connection3containsarouterwiththelinklocaladdressofFE80::2AA:FF:FE98:2AB1,thefollowing
commandaddsadefaultroutetothestaticrouterandthenpublishesit:

netshinterfaceipv6addroute::/0"LocalAreaConnection3"

nexthop=fe80::2aa:ff:fe98:2ab1publish=yes
6to4Router

6to4isanaddressassignmentandautomatictunnelingtechnologythatisusedtoprovideunicastIPv6
connectivitybetweenIPv6sitesandhostsacrosstheIPv4Internet.Formoreinformationabout6to4,see
UsingIPv6Today
(theJuly2001TheCableGuyarticle)andRFC3056.
AcomputerrunningWindowsXPoramemberoftheWindowsServer2003familycanbeusedasa6to4
router,whichisautomaticallyconfiguredwhenyouenableInternetConnectionSharing(ICS)onthe
interfacethatisattachedtotheInternet.However,ifyoudonotwanttoenableICSbutwantthecomputer
toactasa6to4router,youmustmanuallyconfigure6to4routerfunctionality.
TomanuallyconfigureacomputerrunningamemberoftheWindowsServer2003familyorWindowsXPas
a6to4router,youmustdothefollowing:

Ensurethatthe6to4routercomputerhasapublicaddressassignedtoitsInternetinterfaceandhas
notreceivedaRouterAdvertisementmessagefromeitheranIPv6routeronanattachedsubnetoran
ISATAProuter.Ifthisisthecase,the6to4componentautomaticallycreatesaninterfacenamed6to4
PseudoInterface,addsa2002::/16routetotheroutingtablethatusesthe6to4PseudoInterface,
andaddsadefaultroutethatpointstoa6to4relayrouterontheIPv4Internet.

Enableforwardingandadvertisingontheinterfacesattachedtoyourintranet.Youcandothiswiththe
followingcommand:

netshinterfaceipv6setinterface
InterfaceNameOrIndex

forwarding=enabledadvertise=enabled

Enableforwardingonthe6to4PseudoInterface.Youcandothiswiththefollowingcommand:

netshinterfaceipv6setinterface"6to4PseudoInterface"

forwarding=enabled

Addroutesfor6to4prefixestotheinterfacesattachedtoyourintranetandconfigurethemtobe
published.Youcandothiswiththefollowingcommand:

netshinterfaceipv6addroute2002:
WWXX
:
YYZZ
:
SubnetID
::/64

InterfaceNameOrIndex
publish=yes

WWXX
:
YYZZ
isthecolonhexadecimalnotationfor
w.x.y.z
,thepublicIPv4addressthatisassignedtothe
interfacethatisattachedtotheInternet.
SubnetID
isusedtoidentifyanindividualsubnetwithinthe6to4
site.
Forexample,acomputerhasthreeLANinterfaceswiththefollowingconfiguration:

LocalAreaConnectionisattachedtotheInternetandisassignedthepublicIPv4address131.107.0.1.

LocalAreaConnection2isanintranetinterfacethatisusinginterfaceindex5.

LocalAreaConnection3isanintranetinterfacethatisusinginterfaceindex6.

Toconfigurethiscomputerasa6to4router(assumingthatithasnotreceivedarouteradvertisement),run
thefollowingcommands:

netshinterfaceipv6setinterface"LocalAreaConnection2"
forwarding=enabledadvertise=enabled
netshinterfaceipv6setinterface"LocalAreaConnection3"
forwarding=enabled
netshinterfaceipv6setinterface"6to4PseudoInterface"
forwarding=enabled
netshinterfaceipv6addroute2002:836b:1:5::/64"LocalAreaConnection
2"publish=yes
netshinterfaceipv6addroute2002:836b:1:6::/64"LocalAreaConnection
3"publish=yes
Forthisexample,theprefix2002:836B:1:5::/64isadvertisedoverLocalAreaConnection2andtheprefix
2002:836B:1:6::/64isadvertisedoverLocalAreaConnection3(836B:1isthehexadecimalcolonnotation
forthepublicIPv4address131.107.0.1).Byconvention,thesubnetIDissettotheinterfaceindexofthe
interfaceoverwhichtheprefixisadvertised.YoucanspecifyanysubnetIDyouwant(from0to0xFFFF).

ISATAPRouter

ISATAPisanaddressassignmentandautomatictunnelingtechnologythatisusedtoprovideunicastIPv6
connectivitybetweenIPv6hostsonanIPv4intranet.ISATAPisdescribedintheInternetdrafttitled
"IntraSiteAutomaticTunnelAddressingProtocol(ISATAP)"(draftietfngtransisatap0
x
.txt).Bydefault,
theIPv6protocolforWindowsXPandtheWindowsServer2003familyconfigureslinklocalISATAP
addressesontheAutomaticTunnelingPseudoInterfaceforeveryIPv4addressassignedtothecomputer.
ToconfiguresitelocalorglobalISATAPaddressesortocommunicatebeyondthelogicalsubnetdefinedby
theIPv4intranet,youneedanISATAProuter.AnISATAProuterperformsthefollowingfunctions:

ForwardsIPv6packetsbetweenISATAPhostsontheIPv4intranetandIPv6hostsbeyondit.

AdvertisesitspresenceandaddressprefixestoconfiguresitelocalorglobalISATAPaddresses.

AnISATAProutercanperformeitherfunction,buttypicallyisconfiguredtoperformboth.Mostoften,an
ISATAProuteractsastheforwarderbetweenISATAPhostsonanIPv4intranetandIPv6hostsonan
IPv6enabledportionofanintranet.
Forexample,anISATAProutercouldbeconnectedtotwophysicallyseparatenetworksanIPv4intranet
andanIPv6intranet.Forthiscase,theISATAProuterhasatleasttwoLANinterfacesatleastoneis
attachedtotheIPv4intranetandasleastoneisattachedtotheIPv6enabledintranet.Toenablethis
computerasanISATAProuter,youmustdothefollowing:

EnableforwardingontheLANinterfacesattachedtotheIPv6enabledintranet.Youcandothiswith
thefollowingcommand:

netshinterfaceipv6setinterface
InterfaceNameOrIndex

forwarding=enabled

EnableforwardingandadvertisingontheAutomaticTunnelingPseudoInterface.Youcandothiswith
thefollowingcommand:

netshinterfaceipv6setinterface"AutomaticTunnelingPseudo

Interface"forwarding=enabledadvertise=enabled

AddroutesforthesubnetIDsofthelogicalsubnetoftheIPv4intranettotheAutomaticTunneling
PseudoInterfaceandconfigurethemtobepublished.Youcandothiswiththefollowingcommand:

netshinterfaceipv6addroute

IPv6Address
/
PrefixLength

"Automatic

TunnelingPseudoInterface"

publish=yes

AddadefaultrouteusingaLANinterfaceattachedtotheIPv6intranetandconfigureittobe
published.Youcandothiswiththefollowingcommand:

netshinterfaceipv6addroute::/0
InterfaceNameOrIndex

nexthop=
IPv6Address
publish=yes

Forexample,acomputerhasaLANinterfaceattachedtoanIPv4intranetnamedLocalAreaConnection
andaLANinterfaceattachedtoanIPv6enabledintranetnamedLocalAreaConnection2.ThesubnetIDs
assignedtothelogicalsubnetoftheIPv4intranetare3FFE:FFFF:0:10::/64andFEC0:0:0:10::/64.The
computerusesadefaultrouterontheIPv6subnettowhichtheinterfacenamedLocalAreaConnection2is
attachedwiththenexthopaddressofFE80::2AA:FF:FE98:2AB1.ToconfigurethiscomputerasanISATAP
router,runthefollowingcommands:

netshinterfaceipv6setinterface

"LocalAreaConnection2"
forwarding=enabled
netshinterfaceipv6setinterface"AutomaticTunneling
PseudoInterface"
forwarding=enabledadvertise=enabled
netshinterfaceipv6addroute3ffe:ffff:0:10::/64"AutomaticTunneling
PseudoInterface"publish=yes
netshinterfaceipv6addroutefec0:0:0:10::/64"AutomaticTunneling
PseudoInterface"publish=yes
netshinterfaceipv6addroute::/0"LocalAreaConnection2"

nexthop=fe80::2aa:ff:fe98:2ab1publish=yes
ISATAPhostsrunningWindowsXPwithServicePack1oramemberoftheWindowsServer2003familyon
theIPv4intranetdiscovertheISATAProuterbyattemptingtoresolvethename"ISATAP".Toensurethe
successfulresolutionofthisname,youcaneithernametheroutercomputer"ISATAP"oraddthe
appropriatehostaddress(A)orcanonicalname(CNAME)recordstoyourDNSinfrastructure.Theresource
recordsusedmustresolvethename"ISATAP"totheIPv4addressoftheISATAProuter'sintranetinterface.
IftheISATAProuterisnotnamed"ISATAP"orthename"ISATAP"isnotresolvedtotheIPv4addressof
theroutersIPv4intranetinterface,youneedtorunthefollowingcommandontheISATAProuterandallof
theISATAPhosts:

netshinterfaceipv6isatapsetstaterouter=
AddressOrName
AddressOrName
iseithertheIPv4addressoftheroutersintranetinterfaceorthenameoftherouterthat
resolvestoit.
Note
ISATAPhostsrunningWindowsXPontheIPv4intranetdiscovertheISATAProuter
byattemptingtoresolvethename"_ISATAP",ratherthan"ISATAP".

6over4Router

6over4,alsoknownasIPv4multicasttunneling,isanautomatictunnelingtechnologythatisusedto
provideunicastandmulticastIPv6connectivitybetweenIPv6nodesacrossamulticastenabledIPv4
intranetwithinasite.6over4isdescribedinRFC2529.Bydefault,6over4fortheIPv6protocolavailablein
WindowsXPandtheWindowsServer2003familyisdisabled.Toenable6over4andcreatea6over4
interface,youcanrunthefollowingcommand:

netshinterfaceipv6add6over4tunnel
6over4InterfaceName

IPv4Address
[[
store=
]
active
|
persistent
]
6over4InterfaceName
isthenameofthe6over4interfaceand
IPv4Address
istheIPv4publicorprivate
addressthatisusedforthe6over4basedinterfaceID.Bydefault,the6over4interfaceispersistent.
Forexample,tocreatea6over4interfacenamed6over4TunnelInterfacethatusesaninterfaceIDbased
ontheassignedIPv4address10.60.90.21,youcanrunthefollowingcommand:

netshinterfaceipv6add6over4tunnel"6over4TunnelInterface"
10.60.90.21
Afteritisenabled,6over4issimilartoISATAP,exceptthatitalsosupportsmulticastIPv6traffic.However,
6over4requiresamulticastenabledIPv4intranet.
Toconfiguresitelocalorglobal6over4addressesortocommunicatebeyondthelogicalsubnetdefinedby
theIPv4intranet,a6over4routerisrequired.A6over4routerperformsthefollowingfunctions:

ForwardsIPv6packetsbetween6over4hostsontheIPv4intranetandIPv6hostsbeyondit.

Advertisesitspresenceandaddressprefixestoconfiguresitelocalorglobal6over4addresses.

Mostoften,a6over4routeractsastheforwarderbetween6over4hostsonanIPv4intranetandIPv6hosts
onanIPv6enabledportionofanintranet.

Forexample,a6over4routercouldbeconnectedtotwophysicallyseparatenetworks:amulticastenabled
IPv4intranetandanIPv6intranet.Forthiscase,the6over4routerhasatleasttwoLANinterfacesat
leastoneisattachedtotheIPv4intranetandatleastoneisattachedtotheIPv6enabledintranet.To
enablethiscomputerasa6over4router,youmustdothefollowing:

EnableforwardingontheLANinterfacesattachedtotheIPv6enabledintranet.Youcandothiswith
thefollowingcommand:

netshinterfaceipv6setinterface
InterfaceNameOrIndex

forwarding=enabled

Enableforwardingandadvertisingonthe6over4interface.Youcandothiswiththefollowing
command:

netshinterfaceipv6setinterface
6over4InterfaceName

forwarding=enabledadvertise=enabled

AddroutesforthesubnetIDsofthelogicalsubnetoftheIPv4intranettothe6over4interfaceand
configurethemtobepublished.Youcandothiswiththefollowingcommand:

netshinterfaceipv6addroute

IPv6Address
/
PrefixLength

6over4InterfaceName

publish=yes

AddadefaultrouteusingaLANinterfaceattachedtotheIPv6intranetandconfigureittobe
published.Youcandothiswiththefollowingcommand:

netshinterfaceipv6addroute::/0
InterfaceNameOrIndex

nexthop=
IPv6Address
publish=yes

Forexample,acomputerhasaLANinterfaceattachedtoanIPv4intranetnamedLocalAreaConnection
andaLANinterfaceattachedtoanIPv6enabledintranetnamedLocalAreaConnection2.A6over4
interfacenamed6over4TunnelInterfaceiscreated.ThesubnetIDsassignedtothelogicalsubnetofthe
IPv4intranetare3FFE:FFFF:0:2A1C::/64andFEC0:0:0:2A1C::/64.Thecomputerusesadefaultrouteron
theIPv6subnettowhichLocalAreaConnection2isattachedwiththenexthopaddressof
FE80::2AA:FF:FEA7:412E.Toconfigurethiscomputerasa6over4router,runthefollowingnetsh
commands:

netshinterfaceipv6setinterface

"LocalAreaConnection2"
forwarding=enabled
netshinterfaceipv6setinterface"6over4TunnelInterface"
forwarding=enabledadvertise=enabled
netshinterfaceipv6addroute3ffe:ffff:0:2a1c::/64"6over4Tunnel
Interface"publish=yes
netshinterfaceipv6addroutefec0:0:0:2a1c::/64"6over4Tunnel

Interface"publish=yes
netshinterfaceipv6addroute::/0"LocalAreaConnection2"
nexthop=fe80::2aa:ff:fea7:412epublish=yes