Friday, September 9, 2011

ISATAP, 6to4, & Teredo

Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) (IPv4toIPv6INTRANET):  The goal of ISATAP is to allow IPv4 hosts to communicate to IPv6 hosts on an intranet.  It essentially handles IPv4-only to IPv6-only intranet communication executions.
In Windows Server 2008 R2, this is referenced as "tunnel adapter isatap."

6to4 (IPv6toIPv4WANtoIPv6): The goal of 6to4 is to allow communications of IPv6 end devices to communicate over an IPv4 WAN infrastructure.  6to4 essentially handles IPv6 to IPv4 (WAN) to IPv6 (6/4/6) communication executions.
Clients using 6to4 will have their routers IPv4 address embedded in their IPv6 address.

If you intend on communicating to native IPv6 networks (basically, a non-6to4 network) while using 6to4 on your end, it will require you to utilize a 6to4 relay as a bridge between the IPv4 network and the IPv6 endpoint:
1) 6to4 router: The router prepares IPv6 packets to be sent over the IPv4 WAN infrastructure.
2) 6to4 relay:  The relay prepares & forwards the IPv4 packet to traverse the native IPv6 network.

Teredo (IPv4NATtoIPv6):  The goal of Teredo is for IPv4 NAT configured hosts to reach IPv6 only hosts or other NAT configured hosts over the internet.  

Teredo needs three infrastructure components to operate correctly:
1) Teredo Client: The computer that is configured w/NAT w/an IPv4 address.  
2) Teredo Server:  A public server connected to the IPv4 and IPv6 internet (Microsoft deployed).
3) Teredo Relay:  IPv6/IPv4 router that can forward packets to Teredo enabled clients & IPv6-only hosts.
   A) Teredo host-specific relay:  This is a host w/IPv4 and IPv6 enabled that can act as a Teredo relay.  

The Teredo client creates a Teredo tunneling interface and w/the help of the Teredo server, creates a routable IPv6 address.  The Teredo server facilitates the initial communications between a Teredo client and an IPv6 host or another Teredo enabled client.

Teredo host-specific relay is automatically enabled by default if a global address is already configured.  If it does not, then it is configured as a Teredo client.

No comments:

Post a Comment