Warum O2
Warenkorb
Service
Gelöst

Does O2 rotate assigned IPV6 subnets?

  • 21 November 2023
  • 3 Antworten
  • 52 Aufrufe

At the moment I have an issue with Telekom: from time to time, it is changing the ipv6 subnet assignet to me. This makes impossible to identify my devices by their ipv6 addresses.

Does O2 also change a once assigned ipv6 subnet or does the assigned subnet stays for extended periods of time?

22.11.2023 09:28 o2_Katja: verschoben von DSL, Kabel, Glasfaser

icon

Lösung von pufferueberlauf0 22 November 2023, 08:42

Zur Antwort springen

3 Antworten

At the moment I have an issue with Telekom: from time to time, it is changing the ipv6 subnet assignet to me. This makes impossible to identify my devices by their ipv6 addresses.

 

Telekom enforces a PPPoE reconnect every 180 days, O2 however enforces a PPPoE reconnect every 24 hours (after the last connect). In both cases both IPv4 and IPv6 addresses/prefixes will change. The way around that is to use some sort of dynamic DNS service. And if you want to offer IPv6 services from your home network you need to configure your firewall accordingly. OpenWrt allows to mask out the non-inrerface-identifier portion of IPv6 addresses, so firewall rules can survive a prefix change.

 

Does O2 also change a once assigned ipv6 subnet or does the assigned subnet stays for extended periods of time?

It changes every 24 hours… I base this on my recorded data (I run a few traceroutes every night and store the IPv6 prefix as part of my book keeping). If you need persistent addresses, maybe consider getting a business tarif, where IIRC persistent addresses are an option. Or consider dynamic DNS as a work-around.

@pufferueberlauf0 Thanks a lot for the detailed answer!

Yes, I’m already using a dynamic DNS service, there are no issues with that. I’m also using oauth2 authentication for connections coming from the internet. For LAN connections I don’t want to have any authentication. This works for ipv4, but with ipv6 I can’t reliably identify whether it’s from my LAN or it’s another subnet. I have a couple of ideas (using a kind of VPN or dynamically update oauth2 rules), but they’ll requre some effort to implement.

Intersting! Alas, I have zero experience with oauth2, so I have nothing to contribute here. Good luck!

Deine Antwort