Configure the IPv6 Connectivity Server

  • Article

Updated: July 22, 2010

Applies To: Windows Server 2008 R2

This procedure configures the Internet Protocol version 6 (IPv6) connectivity server to act as a 6to4 relay, Teredo server, and Internet Protocol over Secure Hypertext Transfer Protocol (IP-HTTPS) server.

Before performing this procedure, you should determine the following:

  • The public Internet Protocol version 4 (IPv4) address or publically resolvable fully qualified domain name (FQDN) to use in the uniform resource locator (URL) for the IP-HTTPS server.

  • The 64-bit prefix for the logical IP-HTTPS subnet between the IPsec connectivity server and IP-HTTPS-based DirectAccess clients. The DirectAccess Setup Wizard uses the following:

    • 6to4-basedPrefix:2::/64 if you are using a 6to4-based prefix based on the first public IPv4 address assigned to Internet interface of the IPsec connectivity server.

    • NativePrefix:SubnetID::/64 if you are using a 48-bit native IPv6 prefix.

To complete these procedures, you must be a member of the local Administrators group, or otherwise be delegated permissions to modify IPv6 settings. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To configure the IPv6 connectivity server

  1. On the IPv6 connectivity server, start a command prompt as an administrator.

  2. In the Command Prompt window, type the netsh interface ipv6 show interfaces command.

    This command lists the interfaces and their interface indexes.

  3. In the Command Prompt window, run the following commands:

    netsh interface ipv6 set interface InternetInterfaceIndex forwarding=enabled

    **netsh interface teredo set state type=server servername=**FirstPublicIPv4Address

    netsh interface ipv6 set interface TeredoInterfaceIndex forwarding=enabled

    netsh interface 6to4 set state enabled

    netsh interface ipv6 set interface 6to4InterfaceIndex forwarding=enabled

    netsh interface ipv6 set interface IPHTTPSInterface forwarding=enabled advertise=enabled

  4. Install a Secure Sockets Layer (SSL) certificate using manual enrollment. For more information, see Install an IP-HTTPS Certificate.

  5. Use the netsh http add sslcert command to configure the SSL binding.

  6. In the Command Prompt window, run the following commands:

    netsh interface httpstunnel add interface type=server url=https://PublicIPv4AddressOrFQDN:443/iphttps state=enabled authmode=certificates

    netsh interface ipv6 add route IP-HTTPSPrefix**::/64 IPHTTPSInterface publish=yes**

If you arrived at this page by clicking a link in a checklist, use your browser’s Back button to return to the checklist.