Tunnel adapters on ipconfig?

22

6

Hello I recently noticed unusual information in my IPCONFIG. Usually I only see Ethernet adapter Local Area Connection, but now I see Tunnel adapter isatap... and Tunnel adapter Teredo... I was wondering if this is something I should be worried about, if yes how do I remove them?

enter image description here

IMB

Posted 2012-04-26T06:27:48.527

Reputation: 4 845

Is the isaclient for MS ISA Proxy installed? – patricks – 2012-04-26T07:14:56.847

@PatrickSchneider I have no idea actually. How do I find out? Far as know I did not explicitly install any program named like that. – IMB – 2012-04-26T08:07:26.170

just take a look into the installed Software (appwiz.cpl) if there is an ms isa client or similiar. It seems that this tunnel adapter comes from the MS ISA Client which handles a transparent proxy for clients which use software that does not support advanced proyx settings. – patricks – 2012-04-26T08:12:33.920

@PatrickSchneider there doesn't appear to be any. here's a screenshot: http://i.imgur.com/AMnJY.png

– IMB – 2012-04-26T08:19:37.950

1

Arg i was wrong - sorry. ISATAP is used for IPv4 <-> IPV6 translation. See here http://en.wikipedia.org/wiki/ISATAP and here http://www.microsoft.com/downloads/details.aspx?FamilyID=afe56282-2903-40f3-a5ba-a87bf92c096d &displaylang=en

– patricks – 2012-04-26T08:39:09.377

@PatrickSchneider I see. So I probably got this through automatic Windows update? – IMB – 2012-04-26T08:47:40.270

2Maybe you enabled ipv6 or something else. I have no specific information about this. For me the Adapter appears if i have contact to an ipv6 address. – patricks – 2012-04-26T08:55:18.967

Yeah I remember messing around with ipv6 sometime ago, I just don't remember seeing this in my ipconfig even though I do it quite regularly. – IMB – 2012-04-26T09:08:39.853

Answers

20

Both Teredo and ISATAP are mechanisms for IPv6 connectivity on IPv4-only networks. Since Windows 7 comes with IPv6 enabled, I wouldn't be surprised if they were always on, just didn't appear in ipconfig for some strange reason. (On one of my test VMs, the ISATAP adapter shows up, but not Teredo. Also strange.)


ISATAP is practically useless on a personal network, so it can be disabled permanently:

netsh interface ipv6 isatap set state disabled

On the other hand, Teredo works practically anywhere with the help of Microsoft's Teredo server – your screenshot has a global IPv6 address, too. You can leave it on, since Windows will always prefer native IPv4 over Teredo-tunneled (and possibly slower) IPv6 connections; but if you really want to get rid of it, apply the following command:

netsh interface ipv6 set teredo disabled

user1686

Posted 2012-04-26T06:27:48.527

Reputation: 283 655

I think I'll leave it. Just want to make sure they're safe and not connected to some kind of malware. – IMB – 2012-04-27T05:58:08.157

0

IPv6 is fully backward compatible with IPv4 without conflict. So ISATAP should always be enabled. Windows >7 Home Group networks are limited to only 20 systems, so unless your switch requires IPv6 it could be disabled without consequence (but nor is there a bennifit).

Guest

Posted 2012-04-26T06:27:48.527

Reputation: 1