How to enable external access with a black SFR NB6 box?
brupala Posted messages 111945 Registration date Status Membre Last intervention -
Hello, I have an SFR NB6 VAC box and I would like to access my web server from outside.
How can I open a port on this box?
I previously had a Livebox v4 and I was able to open a port without any problem. On the SFR NB6 VAC, I can't seem to find where it is.
5 réponses
Hello
I'm sending you back to the user manual
https://assistance.sfr.fr/internet-tel-fixe/box-nb6/accueil.html
Hello,
SFR and their famous CGNAT,
look at what you have displayed on the connection page of your box if you have ipv4 cgnat, it's (very) badly off:
Well, then you have IPV6 left which does not require port forwarding, but still needs permission in the ipv6 firewall of the box.
And there you go, well ....
But misery, how annoying the line spacing is !!
> SFR and their famous CGNAT,
I just checked, I have "IPv4 CGNAT" written at the top right.
Thank you very much for the link, I understand now, my home network is actually within a private network (SFR's CGNAT) that has access to the internet. So I can't do IPv4 port forwarding and dynDNS like I did on my Livebox ????.
> Well, you still have IPv6 which doesn't require port forwarding, but you do need to allow it in the IPv6 firewall of the box anyway.
How can I access my server from the outside via IPv6? I tried to set the port to my server's IPv6 address but I'm unable to access it and I don't see anything open on https://yuip.org/fr/port-check
First of all, you should set a fixed IPv6 address on your server; it would be better to be in the same network (/64) as the router, because otherwise, Windows will change that address every day (privacy).
You can have multiple IPv6 addresses, one auto-generated and one or more fixed on the same machine.
Next, allow in the IPv6 firewall all connections to that address or just the port you need to that address.
I have set a fixed IPv6 address on my server via the DHCP of my IPv6 network.
I redirected port 80 to my server in my IPv6 firewall: https://imgur.com/a/EnlROFO
because I can access my server from any device using a web browser.
I took the liberty of putting your image, it's more convenient for understanding.
By the way, I see that SFR supports UPnP for IPv6 and even a DMZ, their firewall is really advanced...
Otherwise, well done, is there a DHCPv6 on the box?
It really helps for a server if it can have a permanent lease.
You did well to put the image directly.
> By the way, I see that SFR is implementing UPnP for IPv6 and even a DMZ; their firewall is really advanced....
> Otherwise, congratulations, does the box have DHCPv6?
Yes, there is even DHCP IPv6, here is the screen:
I added my server to the DHCP; however, while I understand the usefulness of DHCP in IPv4, I don't see the point in IPv6. IPv6 addresses are permanent, right?
I added my server to the DHCP, but while I understand the benefits of DHCP in IPv4, I don't understand the need for it in IPv6. The IPv6 addresses are permanent, right? Actually, no,
that's what I was telling you earlier: the network prefix provided by SFR is fixed, yes, but the interface part of the address is not, at least not by default.
In fact, Windows and other OSs, Linux, macOS, will use SLAAC (Stateless Address AutoConfiguration) with the use of the "privacy" extension, RFC4941, where in this automatic addressing the network part (the first 64 bits) remains fixed and provided by the box, but the last 64 bits, which are the "interface" part of the address, are generated randomly each day to avoid being tracked, especially since by default SLAAC uses the MAC address to generate the EUI64 interface address, so even if you change connections, this part does not change :-(
How does it look for configuring the address in the DHCP of the SFR box?
Is it you who freely chooses the interface part or does the box impose one on you, or both: does it propose a default one and you can change it?
I found this in the documentation:
But it's not very clear in reality, can you only choose the last 4 digits?
According to what I have read, the IPv6 address is derived from the MAC address: the MAC address, which is 48 bits long, has FF:FE added in the middle to reach the 64-bit length of the second part of the IPv6 address.
https://networklessons.com/ipv6/ipv6-eui-64-explained#:~:text=An%20IPv6%20device%20will%20use,interface%20ID%20is%2064%20bit.
Since the MAC address of a device is fixed, I understand that the IPv6 address of this device is also fixed, is that correct?
DHCP in IPv6 would then simply be a way to enforce a different address from the one derived from the MAC address?
Here is what the DHCP IPv6 interface of the box looks like:
first of all, it’s not FFFR, but FFFE and also invert the U/L bit on the first octet, but privacy is precisely intended to prevent it from being tied to the MAC address, although this address still exists nonetheless.
And more if interested, be careful, this is a bit advanced :-)
-
My laptop shuts down by itself at 50% battery!
at 06:42 -
Epson printer prints unexpectedly
on 26 May -
Texture issues in enshrouded
on 25 May -
Announcement: online source code archive
on 25 May -
Notice shows wr30 m
on 24 May -
Search for a song in the series foudre
on 24 May -
Help for programming came remote control
on 24 May -
Windows 10 reset issues
on 24 May -
Where is the house wii sport resort wii
on 24 May -
Sms sfr "call me back" exists or not
on 24 May
Hello,
I don't think there's that in SFR support, but nothing very original.
In the Box administration at 192.168.1.1, IPv4 Network, NAT, you redirect TCP to the port used by the Web server and the local IP of the destination workstation.
Of course, we must be able to redirect it via DynDNS, NoIp or equivalent, as the public IP of the Box is most often variable.
That's precisely not in the manual, that's why I'm asking.
The manual even mentions things that no longer exist (like IPv4 NAT)