Forum Discussion

MattWA's avatar
MattWA
Freshman
6 years ago

Getting Started with IPv6 on HughesNet

I've recently had HN installed at my home. It was disappointing to learn that gen5 technology doesn't allow the use of IPv4 based dynamic DNS services, but I guess good for them for embracing the future.

 

With past ISP's I've always been able to point a dynamic DNS service to my home router and set up access to my home devices from the road (like SSH, cameras, file sharing, etc.). 

 

The less-than-desirable solution I've implemented for now is to have a host on my home network connect as a client to an OpenVPN server that I have running on a virtual private server (Linode). That host pushes my home network through the VPN and I can get to everything through that.

 

My knowledge of IPv6 is basically nil, and I've tried multiple times to contact HN tech support to help with remote access to my hughes net modem. The support techs rarely know what I'm talking about and can't understand what I'm trying to do. 

 

Does anyone that has successfully set up access through their public-facing IPv6 WAN address have resources on how to set this up? The HT2000 modem does claim to show a WAN IPv4 address (which is meaningless) and a WAN IPv6 address, but the v6 address shown is a fd0d:: Unique Local Address, which in my limited understanding is just a private subnet address. 


What am I missing? Do I need to forget about a WAN IP for the modem and just worry about the individual host's v6 address? How will traffic reach the host if it's behind a fd0d:: private subnet?

 

Thanks for any pointers.

 

-Matt

  • Liz's avatar
    Liz
    5 years ago

    Hi Matt, 

     

    I'm glad you found the community, thank you for posting. I checked with our top network engineer on this and this was his input on the matter:

     

    The user is correct that he can’t use the fd0d:: ULA address to access from the outside.  However, Hughes does provide a 2001:5b0:: prefix that is globally routable and can be reached from the outside. 

    While the prefix can be found on the terminal (as LAN prefix; not WAN prefix), the actual IPv6 address that the user needs to use is the one assigned to whatever device the user is trying to access.  E.g., windows : ipconfig; linux: ifconifg, etc.

    This is different than IPv4 because there is no NAT in between the end device and the Internet with IPv6.

    Because this prefix and, thus, the IPv6 address of the device, can and does change, a dynamic DNS service is needed to use a name to map to current IPv6 address.

     

    Hope that sheds light on your concern!

     

     

  • Liz's avatar
    Liz
    Moderator
    5 years ago

    Hi Matt, 

     

    I'm glad you found the community, thank you for posting. I checked with our top network engineer on this and this was his input on the matter:

     

    The user is correct that he can’t use the fd0d:: ULA address to access from the outside.  However, Hughes does provide a 2001:5b0:: prefix that is globally routable and can be reached from the outside. 

    While the prefix can be found on the terminal (as LAN prefix; not WAN prefix), the actual IPv6 address that the user needs to use is the one assigned to whatever device the user is trying to access.  E.g., windows : ipconfig; linux: ifconifg, etc.

    This is different than IPv4 because there is no NAT in between the end device and the Internet with IPv6.

    Because this prefix and, thus, the IPv6 address of the device, can and does change, a dynamic DNS service is needed to use a name to map to current IPv6 address.

     

    Hope that sheds light on your concern!

     

     

    • MattWA's avatar
      MattWA
      Freshman
      5 years ago
      Fantastic! That's the answer I was looking for. Thanks for your help Liz!
      • Liz's avatar
        Liz
        Moderator
        5 years ago

        Awesome, glad that was useful for you!

    • maratsade's avatar
      maratsade
      Distinguished Professor IV
      6 years ago

      If MarkJFine is still around, he may be able to address this; but you may also want to wait for the mods to post a reply before engaging in further speculation. 

      • MarkJFine's avatar
        MarkJFine
        Professor
        6 years ago

        HughesNet does use public facing static IPv6 addresses. However, I believe the issue is that the IP is only forward facing, because of the satellite-based architecture and you're still behind a double-NAT. So places like web sites will be able to rDNS your public IP for ID purposes, but will still not be able to reach into your network. If I understand correctly, HughesNet reserves the kind of access you're looking for on special SME/business accounts.

         

        BTW: If I could stick my 2 cents in, I'd be more than a little wary of Linode. I regularly see some pretty sketchy and malicious behavior coming from them on the two server sites I administer: One domestically located, another on a 1&1 server in Germany. The nature of the behavior leads me to believe it's not coming from internet security companies, but hackers probing for vulnerabilities. For that reason I have Linode completely firewalled all over the place.