How to add persistent IPv6 address in Vista/Windows7?

Question

I want to add a persistent IPv6 address using just API calls or with Registry edits. I have currently implemented a code which uses CreateUnicastIpAddressEntry API to add the IPv6 address successfully, but the IP address is destroyed when the adapter is reset or machine rebooted (as mentioned in MSDN docs).

With IPv4, it was easy to do. Just use AddIPAddress API combined with registry entries to get the desired result.

I have tried to find any entry in the Windows Registry which is being used to save the IPv6 address without any success. The MSDN docs suggests to use netsh.exe to do the task, but then I am quite sure netsh.exe is doing some API call or Registry entry to achieve this task (which is not documented by Microsoft anywhere).

How can this be achieved?

Answer 1

Well, after some reverse engineering of netsh.exe and detailed analysis I think there is sufficient info to create a persistent ipv6 address.

The ipv6 address (UNICAST) is stored in following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a01-9b1a-11d4-9123-0050047759bc}\10

For every ipv6 address to be added, create a REG_BINARY value such that the name of the value contains NET_LUID concatenated with the ipv6 address in full. Like for example, if the ipv6 address is 2001::1, the name of the value will be 000000090000060020010000000000000000000000000001, where the first 16 characters is the NET_LUID of the network adapter and the rest the ipv6 address in full.

This registry value data is made of a 48 byte long structure given below:

typedef struct _UNKNOWN {
  ULONG            ValidLifetime;
  ULONG            PreferredLifetime;
  NL_PREFIX_ORIGIN PrefixOrigin;
  NL_SUFFIX_ORIGIN SuffixOrigin;
  UINT8            OnLinkPrefixLength;
  BOOLEAN          SkipAsSource;
  UCHAR            Unknown[28];
} UNKNOWN;

The last 28 bytes of this structure is unknown and must be initialized to 0xFF.

Refer to MIB_UNICASTIPADDRESS_ROW structure info in msdn for more info on the UNKNOWN structure members.

While doing this, I also figured out that ipv6 ANYCAST addresses are stored similarly in registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a01-9b1a-11d4-9123-0050047759bc}\8`\