Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Joachim Tingvold
On 19 Dec 2015, at 22:37, Kurt Buff wrote: Has anyone run into this problem and solved it - not by turning off iIPv6 address assignment for the home LAN, but really solved it? If so, how did you do that? Hi, Disclaimer; my knowledge of DA's inner workings is almost non-existent. I had this

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Eric Vyncke (evyncke)
Interesting situation indeed :-) As we all known, Microsoft DirectAccess uses IPsec over IPv6 (and potentially over Teredo or SSL-VPN if the host does not have native IPv6). So, if your DirectAccess head-end is dual-stack, it now receives Ipsec packets over IPv6 rather than HTTLS or Teredo over

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Kurt Buff
Thanks! I'll go back to my notes tomorrow in the ticketing system, and see if I can give more detail. Failing that, I'm going to see if I can recruit someone to help recreate the problem - I don't have Comcast myself. Kurt On Sat, Dec 19, 2015 at 6:49 PM, Brzozowski, John Jason

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Brzozowski, John
I can help. Can you send details how to setup the scenario please? Not only do I have access, I also have a long list of co-workers that are are capable and willing. John +1-484-962-0060 On Dec 20, 2015, at 13:43, Kurt Buff > wrote: Thanks!

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Kurt Buff
Yes - "our" should read "out" - they were not anything we would hand out, and ISTR that they were listed on the NIC entries, separately from the DirectAccess addresses listed in the other ipconfig entries. Per my earlier statement, I'll either retrieve those settings from the ticket, or try to

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Kurt Buff
You may well be onto something - I believe this was a Win7 machine. I'll try to confirm tomorrow. On Sun, Dec 20, 2015 at 6:28 AM, Marc Luethi wrote: > Hi all > > I suggest to investigate source address selection on the client side, > while closely following name

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Brian E Carpenter
On 21/12/2015 03:28, Marc Luethi wrote: > Hi all > > I suggest to investigate source address selection on the client side, > while closely following name resolution (assuming this is similar to > Windows 2012R2's DA implementation, DNS64 is supposed to be at work, here) > and keeping an eye on

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Kurt Buff
Sounds good. I'll see what I can dig up tomorrow. Kurt On Sun, Dec 20, 2015 at 10:47 AM, Brzozowski, John < john_brzozow...@cable.comcast.com> wrote: > I can help. Can you send details how to setup the scenario please? Not > only do I have access, I also have a long list of co-workers that

Re: Curious situation - not urgent, but I'd like to know more

2015-12-20 Thread Brian E Carpenter
Just an update: I eyeballed the "PrefixPolicies-Vista78.cmd" script from https://sites.google.com/site/jrey42/Home/ipv6/prefixpolicies, concluded that it was safe, and ran it. It apparently works, but I don't have a ULA setup to test it with. jrey42 deserves kudos. Regards Brian On