Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 2 down vote favorite

When using SSH from my Windows 7 desktop to Linux servers, via IPv6, I'm having the following two problems, because of IPv6 Privacy Extensions:

  1. I'm used to keep ssh sessions open for days or weeks. Now, when using IPv6, they are disconnected after several hours of inactivity. I suppose this happens when my "private" IPv6 address changes.

  2. Each time I log in, the "Last login" greeting shows a different IP address (naturally), since a new fresh "private" IPv6 address is used.

I don't want to disable IPv6 privacy extensions outright on my Windows 7 desktop, as it has its uses and enhances the privacy somewhat. I wonder, however, if I can make Windows use non-private IPv6 address as a source of some connections, or if I can prevent a private IPv6 address change if there are open TCP sessions using that address.

My SSH client is SecureCRT 6.1, and there are no options/settings there that are related to this issue.

share|improve this question
1  
Why aren't you using such an old version of SecureCRT? Has your licence lapsed? I remember there being IPv6 support improvements several months ago, but I cannot remember if they were related. – paradroid Dec 18 '11 at 18:29
I've read their "history" and didn't find anything related to this specific issue. And yes, my license does not allow free updates any longer. – haimg Dec 18 '11 at 18:31
Adding a static route should work; netsh in ipv6 add ro <serveraddress>/128 "Local Area Network" <localaddress> – grawity Dec 18 '11 at 19:05

1 Answer

up vote 1 down vote

The privacy addresses are not 'recycled' until they are no longer used, so they shouldn't cause this problem. Are you sure it is not caused by a firewall session timing out? In that case enabling heartbeat / keepalive will prevent your session from dying.

share|improve this answer
I'm sure this is not firewall-related as servers both inside and outside the firewall are affected. I've enabled "anti-idle" in SecureCRT and will see if it helps... – haimg Dec 18 '11 at 21:46
2  
IPv6 address have a "validity", which might be differrent of the preferred time. Once an address reach the end of the "preferred" state, a new one is generated and is made the default outgoing address. The old address is kept until the end of the "validity". But is dropped once this period is reached (and connections using this adress are then closed) – slubman Dec 19 '11 at 15:37

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.