Ipv6 link local address decode4/30/2024 ![]() My servers and the machines where I do my troubleshooting are running Windows. How can I determine which device on my network has this IPv6 address? ![]() None of the OUI lookup tools recognize it and it doesn't appear in my IPv4 DHCP leases. I tried that and get the MAC 13:3d:d9:85:94:3b. I attempted a crash course in IPv6 and learned that the fe80 prefix means the address is link-local and I can supposedly derive the MAC address from the address. ![]() But this network doesn't have a IPv6 DHCP server and arp doesn't seem to speak IPv6. Failing that, I'd ping it, then run arp -a to get its MAC address, which at least gives me the manufacturer. With an IPv4 device I can look at my DHCP leases to get the device name. I ran tracert and determined it's on the local link and currently online: Tracing route to fe80::113d:d91e:e685:943b over a maximum of 30 hopsġ 9 ms <1 ms 1 ms fe80::113d:d91e:e685:943b I'm a noob when it comes to IPv6 and I've got a machine on my 60+ node network that is part of a malware-spewing botnet. Finally after four days a matching DNS lookup request was made, but to my dismay the request came from the address fe80::113d:d91e:e685:943b. I need to find that device and deal with it, so I enabled logging on my DNS server. For information about other versions, refer to the following article: K9067: Configuring IPv6 link-local self IP addresses (9.x) You should consider using these procedures under the following condition: You want to configure IPv6 link-local self IP addresses on the BIG-IP system. Private addresses are allocated administratively (that is, by a local network administrator, either statically, or automatically allocated at a single point by a suitably configured DHCP server). IPv6 link-local addresses are defined by RFC 4291 (IPv6 Addressing Architecture) and are covered by the prefix fe80::/10. Topic This article applies to BIG-IP 10.x through 15.x. My ISP notified me that a device on my network performed a DNS lookup for one of the C&C servers taken offline in the recent law enforcement action against the Avalanche botnet. Link-local addresses are allocated automatically when a computer has not been configured with a static IP-address and cannot find a DHCP server. I've avoided IPv6 until now, but my blissful ignorance must end. In IPv6, link-local addresses are always assigned, along with addresses of other scopes, and are required for the internal functioning of various protocol components.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |