Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Specifically, at my usual location, I have an IPv6 network which connects to the Internet via a static tunnel set up to Hurricane Electric's tunnel broker ( ). This works essentially perfectly, allowing inbound and outbound connectivity.

Now, however, I need to connect back to host(s) on that network over IPv6 from mobile tablet(s); meaning the conditions are such that there is no guarantee or even likelihood of native IPv6 support where it happens to be at any given time, and the IPv4 address of the tablet will change on a fairly regular basis.

The native Teredo support, as configured by default, functions well enough to let me ping my target hosts, but appears to have neither the reliability nor the throughput to support anything else; I have been unable to make any actual connections (trying a number of TCP-based protocols) using it.

I had considered setting up an independent tunnel for the tablet(s), and using scripts to update the client endpoint IP address when it changes, but since both (a) many of the locations will be behind NAT devices over which I have no control, and (b) the option over which I do have control is an AT&T Unite hotspot which does not offer protocol 41 forwarding or respond to ICMP on its public address, this approach does not seem viable.

I am additionally constrained as the mobile tablet(s) in question are Surface RTs, and as such are incapable of running, for example, AICCU client software.

What is my best option to pursue to obtain IPv6 connectivity in this scenario?

share|improve this question
Why wouldn't AICCU work? You'd just need to find a copy of Visual Studio and cross compile it. – Michael Hampton Jun 23 '13 at 23:13
To the best of my knowledge, while you can cross-compile desktop apps to ARM with a little bit of tweaking, actually getting them to run on an RT device requires that they be signed with Microsoft's corporate certificate. (And while I might be willing to have a go at porting it to Metro, Metro apps don't have the access it would need to the network APIs.) – Cerebrate Jun 23 '13 at 23:21
It doesn't need to be signed with Microsoft's key, as long as you have activated a sideloading product activation key and the tablet is joined to your domain it can be signed with your own company's certificate. – Michael Hampton Jun 26 '13 at 3:31
Could you set up or purchase some kind of VPN for the tablets? – Katherine Villyard Jun 27 '13 at 2:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.