Skip to main content
Question

Best method to disabling ipv6?

  • July 29, 2014
  • 6 replies
  • 157 views

Forum|alt.badge.img+10

Couldn't seem to find it in managed prefs or config profiles.

Thanks!

6 replies

Forum|alt.badge.img+9
  • Contributor
  • July 29, 2014

Use a script in a policy to turn it off. Set the policy to network state changed and run a script that finds what service they are using and disable it.

networksetup -setv6off <network service>


Forum|alt.badge.img+1
  • New Contributor
  • January 21, 2015

Hi, there - I need to disable IPv6 using casper and I'm a windows admin! no clue how to achieve this. I'm oretty good with powershell scripting so I thougt I would "get" it but I'm afraid I need guidance. Could you assist me in step-by-step how to disable IPv6 in Casper for all computers?


daz_wallace
Forum|alt.badge.img+13
  • Contributor
  • January 21, 2015

Hey Winops,

The simplest and easiest way would be:
1) Create a new policy in Casper.
2) In the new policy, add a "Files and Processes" item. 3) In the last box ("Execute Command") add the following line:

networksetup -setv6off [network service]

4) Replace the "[network service] with the GUI name of the interface you wish to turn IPV6 off for.
Possible Valid Examples:
"Ethernet"
"Built-in Ethernet"
"Wi-Fi"
"Thunderbolt Ethernet"
5) Set the triggers as you wish. I'd possible suggest "Startup" and / or "Logout". That way you should avoid the risk of network connections reinitialising and annoying users.
6) Scope your new policy to a very small number of devices, gradely adding more once you confirm it doesn't break anything.

Oh, did I also mention, always test heavily before hitting scoping to your entire estate.

Hope that helps!

Darren


Forum|alt.badge.img+1
  • New Contributor
  • January 21, 2015

The link below should help you with this (comment out the proxy settings for each device). I have tested this with a small group of systems (MBPs,MBAs,Mac Mini) and it worked fine for me. Like daz_dar said

Oh, did I also mention, always test heavily before hitting scoping to your entire estate

https://jamfnation.jamfsoftware.com/discussion.html?id=11649#responseChild67008


Forum|alt.badge.img+7
  • Contributor
  • December 11, 2017

!/bin/sh

networksetup -listallnetworkservices | sed "1 d" | while read output ;do networksetup -setv6off "$output";done


donmontalvo
Forum|alt.badge.img+36
  • Hall of Fame
  • December 12, 2017

@jrepasky might want to add grep -v * to skip any inactive services.

For example if iPhone USB is inactive, the command won't throw an error.