Kerio Control: Setting Up IPv6 over a 6to4 Tunnel

To set up an IPv6 connection over the 6to4 protocol in Kerio Control, we need to:

1. Make sure we have a public static IPv4 address
2. Sign up with one of the tunnel brokers

• https://ipv6.ip4market.ru/
• https://tunnelbroker.net/
• any other

2. Change the interface configuration in Kerio Control
3. Restart Kerio Control

The tunnel broker will give us the following parameters:

1. <Remote IPv4 Endpoint> - the IPv4 address to connect to
2. <IPv6 Gateway> - the IPv6 address on the broker's side for the IPv6WAN interface (yours may be named differently)
3. <Local IPv6 Address>/<Prefix Length> - the IPv6 address on your side for the IPv6WAN interface

You will be asked to enter your static IPv4 address in the broker's settings.

With everything at hand, connect to Kerio Control over SSH and run:

cd /opt/kerio/winroute
./tinydbclient "update Interfaces_v2 set IPv6TunnelEndpoint='<Remote IPv4 Endpoint>' where Name='IPv6WAN'"
./tinydbclient "update Interfaces_v2 set IPv6Addresses='<Local IPv6 Address>/<Prefix Length>' where Name='IPv6WAN'"
./tinydbclient "update Interfaces_v2 set IPv6Gateway='<IPv6 Gateway>' where Name='IPv6WAN'"
./tinydbclient "update Interfaces_v2 set IPv6Mode='Tunnel' where Name='IPv6WAN'"

All that's left is to restart Kerio, and everything will start working.

PS: From now on, any changes to this interface can only be made over SSH; otherwise these parameters will be reset. They cannot be set from the Web UI. Maybe someday they can, but not at the time of writing.

Importantly, you can't even disable/enable such an interface, because the IPv6Mode parameter gets "lost". You can restore it with tinydbclient, though.