Getting Data In

Microsoft Direct Access and Windows forwarder client, DNS, and IPv6 tunnels

jtrucks
Splunk Employee
Splunk Employee

Using the Windows forward client, is there a way to force the client to only use an IPv6 tunnel?

Situation: using Microsoft Direct Access (the new remote access solution)...
... the splunk forwarder client talks to deployment server...
... (via an IPv6 tunnel since to talk to the IPv4 only deployment server)...
... which then pushes an app that has the hostname of the forwarder, which only translates to IPv4...
...then the windows client forwarder bypasses the IPv6 tunnel and tries to talk to the IPv4 address of the destination forwarder server directly (which fails since it's not internet accessible).

Is there a way to configure the Windows client to use the IPv6 tunnel while Direct Access has the tunnel active?

--
Jesse Trucks
Minister of Magic
1 Solution

jtrucks
Splunk Employee
Splunk Employee

The answer is to enable IPv6 on the client. This is accomplished according to http://docs.splunk.com/Documentation/Splunk/5.0.2/Admin/ConfigureSplunkforIPv6 by editing:

$SPLUNK_HOME/etc/system/local/server.conf

to add:
[general]
listenOnIPv6=yes

Then restarting the client.

--
Jesse Trucks
Minister of Magic

View solution in original post

jtrucks
Splunk Employee
Splunk Employee

The answer is to enable IPv6 on the client. This is accomplished according to http://docs.splunk.com/Documentation/Splunk/5.0.2/Admin/ConfigureSplunkforIPv6 by editing:

$SPLUNK_HOME/etc/system/local/server.conf

to add:
[general]
listenOnIPv6=yes

Then restarting the client.

--
Jesse Trucks
Minister of Magic

halr9000
Motivator

Can you elaborate on "which only translates to IPv4"? Is that a part of a problem in DNS?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...