Using IPv6 to Realize Public Network Access to Remote Desktop

Microsoft's remote desktop is very easy to use, but because there is no public network ip, it can only be accessed in the local area network. But the application of IPv6 can solve this problem.
Three solutions for remote computers, quick jump links

1. Using IPv6 to Realize Public Network Access to Remote Desktop
2. How to use Tencent Cloud to achieve intranet penetration
3. How to use Parsec+Zerotier+moon to realize cloud computer cloud game , the ultimate solution! ! recommended must see

1 Introduction

​ Anyone who knows a little about computer networks knows that IPv4 addresses are about to be exhausted. Now it is difficult for families to apply for independent IPv4 public network addresses. The public network ip can access devices at home at any time, such as computers, NAS, etc. IPv6 was born to deal with the shortage of ip addresses. The IPv6 protocol is enough to assign a unique address to every grain of sand on the earth. Unfortunately, IPv4 addresses are more widely used in daily life, and users are more familiar with the use of IPv4 addresses. For example, the most well-known 192.168.0.1 or 127.0.0.1 (both intranet)

​Although it is difficult to apply for an IPv4 public network IP, each operator provides users with an IPv6 public network address, including mobile phone traffic. In the case of 4G and 5G, IPv6 has been enabled by default. As long as the router at home supports IPv6, then you can use the IPv6 address to access devices at home.

​ Below I will use the remote desktop that comes with Microsoft as a demonstration, how to use IPv6 to remotely access the computer at home outdoors.

(Although the remote desktop can use third-party excellent software, such as TeamViewer and Sunflower, they all need to send your operation to their server and then send it to you, so the delay is large and the bandwidth will be severely limited. Through Microsoft’s own remote desktop, the bandwidth depends on the bandwidth of your controlled device and the master device.)

2. Environment

Windows 11 Professional Edition (just my environment, Windows 10 is the same, but the way to open remote desktop is different)

RD client (here I am using traffic to remotely connect to the controlled computer through an Android phone, RD client is also very useful on iPad OS)

A router that supports IPv6

a light cat

a man of hands

3. Open remote desktop

1. Make sure your computer is a professional computer, right click on this computer - Properties - click Remote Desktop - open Remote Desktop

2. This computer-properties-advanced system settings-remote, check the settings, and the remote desktop will be successfully opened

   

3. ​ To test whether the remote desktop is connected successfully, here you can test through the intranet IPv4, win+r, enter cmd to open the console, enter ipconfig to view the IPv4 address, here is 192.168. and password to log in. Search for RD Client on mobile phones, which is Microsoft's own remote program, which can easily use the mouse and keyboard, and the Ipad with the keyboard and Bluetooth mouse connected to the remote desktop becomes a small computer. (Enter the IP address on the computer)

   

4. Log in to the light modem management background to operate

Note: Before performing this operation, it is strongly recommended to take a screenshot of the relevant setting interface, so as not to know how to recover in case of network disconnection. And here you must know your broadband account and broadband password, if you don't know, you can call the operator. Here, the optical modem acts as a transfer station, that is, it adopts the bridge mode, and the real dial-up Internet access is handed over to the router, so as to ensure that the devices under the router do have an independent IPv6 address.

1. ​ Check the management address of the optical modem. My broadband is from China Mobile. The management address is 192.168.1.1 (make sure to connect to the optical modem now!!! The network cable is plugged into the optical modem or connected to the optical modem’s own wifi). After entering, enter the account and password of the super administrator, and you can search according to the model of your optical modem. Account: CMCCAdmin Password: aDm8H%MdA, Heilongjiang Unicom super password: 8MCU@HLJ. View the name of the connection whose current business type is Internet access. This is the case for me. Just have a little impression of this name, and this configuration will be modified later. Your display is different from mine, because mine has been set up, but yours has not started to set up.

2. ​ Click Network – Broadband Settings – select the connection name whose business type is Internet access, set the connection mode to bridge mode, set the IP mode to IPv4&IPv6, and finally click Save/Enable. If the optical modem includes a firewall, turn off the IPv6 firewall to prevent inbound access. As shown below:

   

At this point, the settings of the optical modem have been set up, and the router settings will start below.

5. Configure the router

Note: The router needs to support IPv6, and the IPv6 firewall can be turned off. Some Xiaomi routers cannot turn off the IPv6 firewall in the background. You need to connect to the router through ssh to turn it off. Here I use a Huawei router for demonstration.

1. ​ Enter the background management interface of the router (it is written on the back of the router), select PPPoE as the Internet access method, dial-up the router to access the Internet, enter your own broadband account and broadband password, click Save, and wait for the dial-up to succeed. The operation is similar, but the management interface in the background of the router is not the same.

   

2. Turn on IPv6, different routers may have different places to turn it on, Xiaomi's router mode selects Native

   

3. Turn off the IPv6 firewall. This step prevents the router from intercepting its own remote access. My router does not have a separate IPv6 firewall setting, so I just turned off the firewall.

   

Now that some settings are OK, you need to check whether the settings are successful! ! !

6. Detect whether it is in IPv6 priority access

1. ​ Enter the website https://ipw.cn/ for ip query, and it will display your own IPv4 and IPv6 addresses, and at the same time, it will display whether IPv4 or IPv6 access is preferred. The IPv6 address here is the address you need to fill in for remote access. If the setting here fails, you can check which step you did not set up successfully.

   

7. Connect to remote desktop

congratulations. Here you can remotely connect to the controlled computer through mobile traffic or any other device with IPv6 enabled.

​

Q&A session

If you have any questions, please leave a message

1. How to get the light cat super administrator account?

   ​ Baidu your optical cat model, there is a model number behind your optical cat. Your management account and password after the cat is not the account password of the super administrator, and some things cannot be modified.

2. What is the broadband account password?

   ​ Call your carrier and he'll let you know.

3. According to the above operation, IPv6 has been turned on, why can’t remote access?

   ​ Check whether your IPv6 address is an intranet address. The beginning of fe is an IPv6 intranet address. Check whether your router has an IPv6 firewall enabled. The router of Xiaomi Redmi has an IPv6 firewall enabled by default, and most devices cannot be turned off directly. It is recommended to change the router or refresh the system, or use ssh to connect to the router to modify the firewall in the background (this method involves linux knowledge, and I personally think it is better to refresh the system on the router)

4. Why can't I connect after a few days?

   Although the operator provides public network IPv6, it provides dynamic public network IPv6. This address will change in a few days. You can query IPv6 again to get your IPv6 address, or you can enter ipconfig through cmd to check your own IPv6 address.

   ​ Although the IPv6 address is a public network IP, the general operator does not give you a fixed IPv6 address. You can win+r, enter cmd, and see the expiration time of your own IPv6 address in ipconfig/all in the console. Although it is not fixed, it is enough. You only need to check your own IPv6 address when you use it. Or you can buy a domain name, use DDNS, and run an automated program to upload your own IPv6 address at intervals, and resolve to your corresponding IPv6 address at any time, and you can access it only through the domain name. Although this is convenient, it also means that after your domain name is known, it is equivalent to exposing your computer's public network IP all the time, which is not safe. Therefore, it is recommended to check the IPv6 address when using it.

5. ipconfig checks out a lot of adapters, how do I know which one I use?

   ​ Select the Ethernet adapter for broadband connection, and select the corresponding wifi adapter for wifi understanding.

6. The operator of the optical modem super password can be changed remotely. If the password is wrong, it is recommended to call the operator