Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 643
  • Last Modified:

ipv6

Hi Experts,
I have some Vista clients and Windows7 clients in my network. And I use some Win2003 servers and win2008 servers.

How to unistall the whole ipv6 stack ?
0
Eprs_Admin
Asked:
Eprs_Admin
  • 5
  • 5
  • 3
  • +1
1 Solution
 
Krzysztof PytkoActive Directory EngineerCommented:
You cannot uninstall IPv6. You can only disable it. Follow this article for that and disable IPv6 in registry
http://support.microsoft.com/kb/929852

Regards,
Krzysztof
0
 
Amitabh SinghAWS Certified Solution Architect | L3 IT Specialist for CloudCommented:
IPV6RUN> Type C:\windows\system32\ncpa.cpl go to all your network connection properties one by one and uncheck Internet protocol V6
0
 
Amitabh SinghAWS Certified Solution Architect | L3 IT Specialist for CloudCommented:
opess sorry wrong Picture selected by mistake   correct one is .

 TCP/IP
RUN> Type C:\windows\system32\ncpa.cpl go to all your network connection properties one by one and uncheck Internet protocol V6
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
bevhostCommented:
This is not recommended?
Why would you want to do this?  
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
Hi Tech_Eng:

with your deselction of ipv6 protocol it is off but not uninstalled.
I want to get rid of the whole ipv6 stack.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
Hi bevhost:

I don't want to have ipv6 traffic in my network.
The problem is also the teredo traffic which is not filtered by the firewall.
0
 
Amitabh SinghAWS Certified Solution Architect | L3 IT Specialist for CloudCommented:
HI ok
try this
To uninstall IPv6:-

Start, point to All Programs, point to Accessories, and then click Command Prompt.
At the command prompt, type:netsh int ipv6 uninstall and press the Enter Key.
Restart the computer.

Refer : http://msdn.microsoft.com/en-us/library/windows/desktop/bb736546%28v=vs.85%29.aspx
0
 
bevhostCommented:
you should install a firewall that can block protocol 41.
This will not only block teredo. but also 6to4 , 6over4 etc.

I think uninstalling IPv6 is the wrong approach.

NAT has given people a false sense of security especially when it comes to firewalls.
A NAT gateway is not a firewall.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
ok when I block the protocol 41 or port 41, what do you mean ?
0
 
bevhostCommented:
Port Numbers are used with UDP (which is protocol 17) and TCP (protocol 6)

for a complete list of Internet Protocols see http://www.iana.org/assignments/protocol-numbers/protocol-numbers.txt
Some common ones are:


Decimal    Keyword           Protocol                            Reference
      1    ICMP            Internet Control Message              [RFC792]
      6    TCP             Transmission Control                  [RFC793]
      8    EGP             Exterior Gateway Protocol             [RFC888]
     17    UDP             User Datagram                         [RFC768]
     41    IPv6            IPv6 encapsulation                    [RFC2473]
     47    GRE             General Routing Encapsulation         
     50    ESP             Encap Security Payload                [RFC4303]
     51    AH              Authentication Header                 [RFC4302]

Open in new window

0
 
Eprs_AdminSystem ArchitectAuthor Commented:
ok we have a firewall from Cisco, the ASA5510.
Can you help me with the commands to block protocol 41 ?
0
 
bevhostCommented:
access-list deny 41 any any
access-list deny udp any any eq 3544
access-list deny udp any eq 3544 any
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
ok thank you.

These commands are what I have to enter to the firewall ?
Then my whole IPv6 traffic is blocked ?
And I have nothing to do on the clients itself ?

0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 5
  • 5
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now