cancel
Showing results for 
Search instead for 
Did you mean: 

HT2000W IPv6 inbound services

Sophomore

Re: HT2000W IPv6 inbound services

@pswired Agreed... My assigned IPv6 is now changing much less frequently.... 

 

 

 

 

Moderator
Moderator

Re: HT2000W IPv6 inbound services

Good morning,

 

Thank you all for posting. I've asked engineering for an update, I'll post back once I have anything to share.

 

Please create a new thread in the community if you have a question or need help. Unsolicited Private Messages may not get replies.
New Poster

Re: HT2000W IPv6 inbound services

@Liz

Checking in on any update from the "Engineers" regarding this issue?

 

We have added a 4th "system" on our LAN that needs to be remotely accessed by IP: lighting control by Lutron RadioRa. That is in addition to our pool-system controller by Pentair (ScreenLogic app), security camera NVR from Clare Vision, and security system from Bay Alarm. All of these systems want an IPv4 external address, or some DDNS equivalent, to remotely access their on-site hardware.

 

Should I be looking for another ISP, or is HughesNet management aware of this shortcoming - and considering a solution?

Thanks you!

Sophomore

Re: HT2000W IPv6 inbound services

 

@Healdsburg If you have moderate experience with linux, you can use a raspberry pi to ddns with dynv6, then tunnel into the raspberry via the ddns ipv6 address and you will have access to your local ipv4's via the raspberry. 

 

I know no other way around the issue currently... Even if your devices supported ipv6, the way hughes dynamically assigns ipv6 addresses and changes them frequently, would make them unaddressable anyway.

Assistant Professor

Re: HT2000W IPv6 inbound services

Only way I can think of for reliable and constant IPv6 addressing, or any IP addressing, to work on HughesNet constantly changing dynamic client addressing is if they invested in servers at each gateway that locked in MAC/IPv6 addressing by SAN and then interpreted it no matter the dynamic address on the system. Then give the customer some control to add/delete/publish addresses over the Internet.

 

In other words, a whole other server bank just to handle IPv6 addressing by client SAN.

 

Not so sure they'll invest in the software and equipment to do so. And would add one more layer of slowdown although should be quite small.

Junior

Re: HT2000W IPv6 inbound services

That’s not the way this works.
Sophomore

Re: HT2000W IPv6 inbound services

@pswired is correct, thats NOT how this works... 

 

I've had several PM's asking basically the same questions so i'm going to respond in public here instead.  

 

First if your device (DVR etc) being able to support ipv6 is only 1/2 the problem.  The app you use on your remote iPhone/iPad etc also must be capable of supporting ipv6.

 

Second, you cant use dyn or similar for ddns, you must use an ipv6 ONLY ddns such as dynv6.com.  If you use dyn, it will return the IPv6 and IPv4 records (of the gateway) when doing reverse lookups of the hostnames.  Your offsite app will probably default to using this "false" ipv4 record.

 

Third, if both sides dont fully support ipv6 (Viewer app and DVR) then the only way to make it accessible over hughes remotely will be to create a VPN.  You will need to create a ipv6 VPN from your home to your device and then create routes to tunnel the necessary ipv4 addresses through the ipv6 vpn.  I know this works on a SonicWall, but I have no idea how to set this up on openWRT/pfSense/YourRouter.  Note that this will be SLOW (especially for video) due to the extra overhead of the VPN and high latency of the connection... However it works fine for my Crestron control system.  In leui of usig your router to create the VPN (if you have a basic consumer device that doesnt support VPN or allow ipv4-->ipv6 tunneling) you can use a raspberry pi instead.  There are lots of examples of using openVPN  on a raspberry on the internet.  Either option will require "Moderate" computer skills to implement.

 

Fourth, hughes implementation of ipv6 is "strange".  They "Shouldn't" be changing the ipv6 prefixes our modems are assigned, this defeats the purpose of implementing ipv6.  What it appears they have currently setup is more in line with a carrier grade nat (CGN) which is common for ipv4, but unecessary for ipv6 implementations.

 

Finally, if you need access to your remote systems and you don't want to implement anything liek the above, you will need to purchase IOT items that use some sort of "Cloud" access control (a la unifi cloudkey type functionality).

 

I hope this helps clarify any of the confusion.

New Poster

Re: HT2000W IPv6 inbound services

@tracerrx- I'm a new hughesnet customer, and like many others, i was told that i would be able to conduct inbound services. i've spent the morning reviewing and catching up  on this and related threads, which indicate that it's just not going to be simple to make that happen. However, do i understand correctly that using dynv6.com and a router with OpenVPN, which supports IP6 protocols, behind the HT2000W, will allow for remote access to a Creston system (and other downstream IP6 addressable components)?

 

I have a business sytems linksys LRT214 VPN router with openVPN. I've had it working fine for some time off a conventional fiber line with DynDNS, but have moved to an area where Satellite is the only option, and Hughesnet was recommended.

Sophomore

Re: HT2000W IPv6 inbound services

@kirkpasm

I don't have anything running openVPN to test with... But as long as you have a way to get the devices ipv6 to dynv6 it should work... 

 

Then from you iphone/android etc, once connected to the VPN you use the local crestron ip...just like when your in the house.

 

New Poster

Re: HT2000W IPv6 inbound services

@tracerrx Thanks. I’ll be trying that today and will post back results.