IOS 12.2(33)SXI2a ipv6 nd prefix command

Hi!
I've encountered a problem trying to configure something like this in a Sup720 with IOS 12.2(33)SXI2a:
router(config-if)#ipv6 address 2001:DB8:CAFE:CAFE::1/56
router(config-if)#ipv6 nd prefix 2001:DB8:CAFE:CAFE::/64
so the idea is to have a routed /56 for an interface, but a /64 for autoconfiguration of host interfaces. I've tried this first in a 12.2(31)SGA1, and it worked, but int the sup720 it renders an error:
%VlanXX: Error: 2001:DB8:CAFE:CAFE::/64 is overlapping with 2001:DB8:CAFE:CAFE::1/56. This error didn't appear in the 12.2(31)SGA1, and, in fact, we could route with any of the addresses in the range /56 configured in a server's interface, but at the same time, get one from autoconfig with a /64.
So, am I doing anything wrong, or is this the normal behaviour of the nd prefix command? If so, what's then its purpouse?
Thanks in advance,

Well, maybe I didn't explain it very well. In fact, it's the opposite that you comment: what we want is the servers to get an auto /64 address from the same /64. Then each customer can assign statically any address they want to their server from a different /64 for each customer. All these /64 belonging to the same /56 that we configure in the vlan interface, dynamically routed through OSPF. This way, we have not to configure any static address.
I admit that for this to be secured we need something like RA Guard and IPv6 PACL in the access switches, which the Cat2960 we use for the servers doesn't have available yet. We trust someday they will get the funtionality.
This is an example of the configs:
interface Vlan59
ipv6 address 2A02:BE8:2:1000::2/56
ipv6 enable
ipv6 traffic-filter PRUEBAS-IPV6 out
ipv6 nd prefix 2A02:BE8:2:1000::/64
ipv6 ospf 1 area 0
In the server:
eth0      Link encap:Ethernet HWaddr 00:1e:c9:bb:ca:36
          inet6 addr: 2a02:be8:2:1001::65/64 Scope:Global ----> manual
          inet6 addr: 2a02:be8:2:1001::66/64 Scope:Global ----> manual
          inet6 addr: 2a02:be8:2:1001::67/64 Scope:Global ----> manual
          inet6 addr: 2a02:be8:2:1001::1254/64 Scope:Global ----> manual
          inet6 addr: 2a02:be8:2:1000:21e:c9ff:febb:ca36/64 Scope:Global ----> SLAAC
          inet6 addr: fe80::21e:c9ff:febb:ca36/64 Scope:Link
Best regards,

Similar Messages

HT5656 This is all great but for me the "IPv6 Delegated Prefix" field never sticks. After the reboot to apply the settings, it is empty again. I have tried the 6.2 Airport Utility on OS X 10.8.2 and the iOS Airport Utility. Any ideas?

Hi All,
   I had a working IPv6 tunnel with my Airport Express to tunnelbroker.net using the 7.6.1 firmware. After updating to 7.6.3, I have tried many things to get it to work and the only one that works is downgrading from 7.6.3 back to 7.6.1. After seeing this new technical note, it appears that the root of my issue is that I can not get the "IPv6 Delegated Prefix" field to stick - it is always empty after the reboot to apply the settings.
   Any ideas?
     Thanks,
       CraigN

I'm in the same boat with a 3rd Gen AEBS. Only thing I haven't tried is a complete reset and reconfiguration from nothing, which I may wind up doing this afternoon just to rule it out. The best irony of all of this is that tunnelbroker.net is under my responsibility, and I can't validate the new settings paradigm. At least getting back to 7.6.1 is easy enough and everything works fine there.
IPv6 Delegated prefix doesn't get saved when using the format from their example, then a 6to4 address shows up as the local address on the main Internet page, and no RAs are received once the AEBS comes back from a reload. Something's a little off on this release.

How to get IPv6 site prefix via Windows API?

Hello,
we need urgent help. We have to automatically configure a postgres sql server. For this reason we need to determine the IPv6 site prefix. Using windows command line this is pretty easy:
netsh interface ipv6 show siteprefix
We are only interested in the site prefixes themselves, e.g. no lease time is needed. We want to get this information via Windows API.
For this purpose we use GetAdaptersAddresses function. Within the result of
FirstPrefix the needed information is included. But it's much to much information and it's not clear for us how to filter the result. We need always
exact the same result like the command above produces.
Any help or hint would be very very appreciated.
Greg

Hi Valery,
I mean a Portal Resource..
Inside portal, when a go to properties of a specific document, in tab "Access Link" it shows a "Short Id".
I'd like to know via API how to get this Id, or any other Code that it's unique for every resource or document in portal.
Thank you!

IPv6 prefix delegation with AVPair ipv6:delegated-prefix

Dear all
I have a LNS running c7200-adventerprisek9-mz.124-24.T4.bin.
I am trying to delegate IPv6 prefixes to vpdn users as described in
http://www.cisco.com/en/US/customer/prod/collateral/iosswrel/ps6537/ps6553/whitepaper_c11-602131.html#wp9000270
From this whitepaper: "When the delegating provider edge router supports RFC 4818, only one user profile is stored for the RADIUS server. In addition the RADIUS server may be configured with a DNS server per user, which overwrites the providers edge router's default DNS server address configured in the DHCP pool"
Our Freeradius has the following user entry according to the mentioned whitepaper:
user@foobar Auth-Type = Local, Password == "foo"
   Service-Type = Framed-User,
   Framed-Protocol = "PPP",
   Framed-IP-Address = "10.0.0.1",
   Framed-IP-Netmask = "255.255.255.255",
   Framed-MTU = "1492",
   Framed-Compression = "Van-Jacobson-TCP-IP",
   Cisco-AVPair = "ipv6:prefix#1=201:DB8:F1:0::/64",
   Cisco-AVPair += "ipv6:delegated-prefix=201:DB8:AAAA::/48",
   Cisco-AVPair += "lcp:interface-config=mtu 1460"
If I try to connect this user I get the PPP-Link established with prefix 201:DB8:F1:0::/64 as expected. But instead of providing the delegated prefix from the AVPair the router queries the radius server again for the user user@foobar-dhcpv6pd which I have not configured since I assume that this router "supports RFC 4818", right?
So why does it as for user@foobar-dhcpv6pd ?
Thanks for any hint,
Grischa

Hi,
RFC4818 is supported starting with 15.1(1)T or later. 151-2.T2a seems to have an issue though.
HTH
Laurent.

HT5656 IPv6 Delegated Prefix doesn't stay set

Just as others have encountered after the upgrade to 7.6.3, the required field IPV6 Delegated prefix keeps getting unset. When I click on the error pessage about a broken IPv6 tunnel and click Edit, it highlights the remote IPv4 address, which is set according to the settings specified by tunnelbroker.net. Changing only the IPv6 delegated prefix field and clicking save then update doesn't prompt a reboot. I have to change some of the other fields for the reboot to take effect. My AirPort Extreme is circa 2007 and worked with the 7.6.1 firmware.

I have this problem as well. I have tried both /48 and /64 prefixes, but nothing will stay set. I have tried setting it to automatic, reboot, change to manual, enter in all new settings. Nothing seems to work.
Apple needs to address this issue with a fix. 7.6.3 is either still broken, or the Airport Utility app is broken. It's one of the two.

IPv6 Global Prefix RA question from R1 to R2

Hello,
I've a questiona about IPv6 Global Prefix RA.
I have 2 routers (r1 and r2) connected via fastethernet0/0 interface.
On the first router i have gone trough the ipv6 set up:
1. I have create a ipv6 address: #ipv6 address 2001:aaa:bbbb:cccc::/64 eui-64
2. told the router that it can route ipv6: #ipv6 unicast-routing
Below is a #show ipv6 interface on R1:
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::CA00:10FF:FE84:0
Global unicast address(es):
    2001:AAA:BBBB:CCCC:CA00:10FF:FE84:0, subnet is 2001:AAA:BBBB:CCCC::/64
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF84:0
On the second router I have gone trough the ipv6 steps:
1. I have enable ipv6: #ipv6 enable.
I do see that the link-local address has been created: FE80::CA02:10FF:FE84:0
Below is a # show ipv6 interface on R2:
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::CA02:10FF:FE84:0
No global unicast address is configured
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF84:0
My question is as follows: why doesn't get Router2 the global prefix information in the ipv6 address from Router 1
I do see a RA send from R1 to R2.
R1#
*Mar 1 00:40:37.455: ICMPv6-ND: Sending RA to FF02::1 on FastEthernet0/0
*Mar 1 00:40:37.455: ICMPv6-ND:     MTU = 1500
*Mar 1 00:40:37.455: ICMPv6-ND:     prefix = 2001:AAA:BBBB:CCCC::/64 onlink autoconfig
*Mar 1 00:40:37.455: ICMPv6-ND:             2592000/604800 (valid/preferred)
*Mar 1 00:40:37.455: IPV6: source FE80::CA00:10FF:FE84:0 (local)
*Mar 1 00:40:37.455:       dest FF02::1 (FastEthernet0/0)
*Mar 1 00:40:37.455:       traffic class 224, flow 0x0, len 104+1396, prot 58, hops 255, originating
*Mar 1 00:40:37.455: IPv6: Sending on FastEthernet0/0
R2(config)#
*Mar 1 00:39:42.275: ICMPv6-ND: Received RA from FE80::CA00:10FF:FE84:0 on FastEthernet0/0
What I also see is that R1 is getting RA from R2:
R1#
*Mar 1 00:47:56.199: ICMPv6-ND: Received RA from FE80::CA02:10FF:FE84:0 on FastEthernet0/0
Thank I great advance,
Lino

Hi Lino,
My question is as follows: why doesn't get Router2 the global prefix information in the ipv6 address from Router 1
You need to configure "ipv6 address autoconfig". When you have it enabled, IPv6 router on receiving RA will get the prefixes with A flag set and will append 64 bit Interface ID.
What I also see is that R1 is getting RA from R2:
Per my understanding, RA is not only for stateless autoconfiguration. SLAAC is one benefit from RA while there are otehr benefits like MAC learning, default router advertisement etc..
Thanks,
Nagendra

AS5350XM - Compatible IOS version for 'ip host ... srv' command.

Hi Friends,
I'm having AS5350XM model of Voice Gateways in CVP8.0 environment working with ICM8.0 and CUCM8.0.
I'd like to define static hostname-to-address mappings in VG for my CVP CallServers along with command argument 'SRV' to use all 4 CVP servers for loadbalancing and failover functionality thereby assigning priority to each call server.
I tried by using a couple of IOS version starting from 12.4(24)T4 till 15.1(3)T, but can't find a particular version which supports the argument 'srv'.
I'd appreciate if someone could suggest me an appropriate IOS version supporting 'srv' argument with 'ip host' command on AS5350XM Gateways.
Pls feel free to revert for any clarifications. Thank you.
Regards,
Soman Nair.

You should be able to do it.
In your dial peer you should be able to say
session target dns:callserver.sgp.foobar.com
and in your IP host table
ip host CA1.sgp.foobar.com 10.10.1.2
ip host CA2.sgp.foobar.com 10.10.1.3
ip host CA3.sgp.foobar.com 10.10.1.4
ip host CA4.sgp.foobar.com 10.10.1.5
ip host _sip._udp.callserver.sgp.foobar.com srv 1 25 5060 CA1.sgp.foobar.com
ip host _sip._udp.callserver.sgp.foobar.com srv 1 25 5060 CA2.sgp.foobar.com
ip host _sip._udp.callserver.sgp.foobar.com srv 1 25 5060 CA3.sgp.foobar.com
ip host _sip._udp.callserver.sgp.foobar.com srv 1 25 5060 CA4.sgp.foobar.com
Regards,
Geoff

If I use blast option in zone prefix command

Hi,
I would like to introduce in our network the remote zone gatekeeper redundancy.
I saw there' s a "blast" option in zone prefix command.
Could I use that without problems?
Thanks.
Regards, Paolo

By default, LRQs are sent sequentially to the remote gatekeepers. With sequential, the LRQs are sent one at a time with a delay between each. With blast, the LRQs are sent back-to-back in a rapid sequence without any delay between them. If you would like the LRQs to be sent simultaneously (blast) to each gatekeeper, you need only specify the blast keyword on one zone prefix command per E.164 prefix

My iPhone 5 with the iOS 7 needs to be found by merc command every time again, is there a fix?

my iPhone 5 with the iOS 7 needs to be found by merc command every time again, is there a fix?

I need my phone not only because it it my alarm clock in the morning, but because i use it excessively at work. PLEASE HELP !

IPv6 Delegated Prefixes no longer working?

ATTENTION PeterGrace
Your post was removed to a secure area out of public view because it violates forum posting guidelines.
Forum Guidelines state >>> clickable link http://forums.comcast.com/t5/Forum-Guidelines/Posting-Guidelines/td-p/866289 which everyone should read BEFORE making a first post
Please don't;
Post personal information in the forums
Please do your best to keep your identity and personal information safe. This includes:
Your full name
Your telephone number
Your Physical/Mailing Address
Email addresses
Credit Card numbers
Account numbers
Personal public IP addresses
Modem MAC address and / or serial number <<<<<<<<<<<<<<<<<<<<<
Active phishing links
Other personally identifiable information
Here is your post with the information removed;
Hi there!
Has Comcast stopped assigning delegated prefixes for users who request them? I had my router setup to request a /60 via IA-PD but just today it appears to have stopped. I'm still getting an ipv6 address on the dhcpv6 solicit, but no more delegated prefixes. Thinking that the problem might be solved with a firewall software update, I upgraded to the latest release version but the same problem persists. Here's my IAID/DUID to aid in tracking down the issue.
IAID: XXXXXXXXX
DUID: XXXXXXXXXXXXXXXXXXXXXXXXXXX
EDIT: Cablemodem HFC MAC: XXXXXXXXXXXXXXXX (found on surfboard diagnostic page)
Let me know what other info I might provide to aid in diagnostics.
Thanks in advance!

Check my PM, I see PD being assigned to your device.
-Chirag

Cisco IOS Zone Based Firewall and IPv6

Hello,
I am trying to setup IPv6 tunnel to tunnel-broker Hurrican Electrics. IPv6 connection is working OK only if I disable zone security on WAN interface (Fe0 - IPv4 interface).
Which protocols must be alloved to and from router?
IOS version: 15.1.2T1 (Adv.ip services)
Setup:
HE (tunnel-broker) --- Internet (IPv4) ---- Cisco 1812 (Fe0 (IPv4) and interface tunnel 1 (IPv6))
Config on router:
IPv4 (self to internet and internet to self)
policy-map type inspect Outside2Router-pmap
class type inspect SSHaccess-cmap
inspect
class type inspect ICMP-cmap
inspect
class type inspect IPSEC-cmap
pass
class type inspect Protocol41-cmap
pass log
class class-default
drop
interface Tunnel1
description Hurricane Electric IPv6 Tunnel Broker
no ip address
zone-member security IPv6tunnel
ipv6 address 2001:47:25:105B::2/64
ipv6 enable
ipv6 mtu 1300
tunnel source FastEthernet0
tunnel mode ipv6ip
tunnel destination xxx.66.80.98
interface FastEthernet0
description WAN interface
ip address xxx.xxx.252.84 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
zone-member security WAN
duplex auto
speed auto
zone-pair security IPv6Tunnel_2_WAN source IPv6tunnel destination WAN
service-policy type inspect IPv6-out-pmap
zone-pair security WAN_2_IPv6tunnel source WAN destination IPv6tunnel
service-policy type inspect IPv6-out-pmap
policy-map type inspect IPv6-out-pmap
class type inspect IPv6-internet-class
inspect
class class-default
drop
class-map type inspect match-all IPv6-internet-class
match protocol tcp
match protocol udp
match protocol icmp
match protocol ftp
ipv6 route ::/0 Tunnel1
ipv6 unicast-routing
ipv6 cef
parameter-map type inspect v6-param-map
ipv6 routing-header-enforcement loose
sessions maximum 10000

OK, removed the cmap the packet was getting dropped on, so the current self to wan zone-pair policy map looks like this:
policy-map type inspect pm-selftowan
class type inspect cm-selftowan-he-out
inspect
class type inspect cm-dhcpwan
pass
class class-default
drop
class-map type inspect match-all cm-selftowan-he-out
match access-group name HETunnelOutbound
ip access-list extended HETunnelOutbound
permit 41 any any
permit ip any host 64.62.200.2
permit ip any host 66.220.2.74
permit ip any host 216.66.80.26
Now we see the same error, just on the 'new' first cmap in the pmap:
*Oct 5 02:39:31.316 GMT: %FW-6-DROP_PKT: Dropping Unknown-l4 session :0 216.66.80.26:0 on zone-pair selftowan class cm-selftowan-he-out due to Invalid Segment with ip ident 0
Yet as you can see above, we are allowing proto 41 any any.
I didn't expect any other result really since the previous cmap had 'permit ip any any' but still
any ideas?
Thanks,
//TrX
EDIT: Out of curiosity after reading this post: https://supportforums.cisco.com/thread/2043222?decorator=print&displayFullThread=true
I decided to change the outbound cm-selftowan-he-out action to 'pass'.
I suddently noticed the following log:
*Oct 5 02:39:31.316 GMT: %FW-6-DROP_PKT: Dropping Unknown-l4 session 216.66.80.26:0 :0 on zone-pair wantoself class cm-wantoself-he-in due to Invalid Segment with ip ident 0
Notice this is now inbound having trouble where as before was outbound.
I changed the inbound pmap policy for cmap cm-wantoself-he-in to pass also and IPv6 PACKETS ARE GETTING ICMP6 REPLIES FROM GOOGLE!
Looking at the original outbound PMAP:
policy-map type inspect pm-selftowan
class type inspect cm-selftowan
inspect
class type inspect cm-selftowan-he-out
inspect
class type inspect cm-dhcpwan
pass
class class-default
drop
cm-selftowan has always been infront of cm-selftowan-he-out, and because that is ip any any, it has been 'grabbing' the IP proto 41 packets and doing ip inspect on them (which fails as it seems ip inspect only handles a handful of proto's).
This is why setting cm-selftowan-he-out and cm-wantoself-he-in both to 'pass' instead of 'inspect' in the past has not been doing anything, because the outbound packets were never getting to the cm-selftowan-he-out cmap.
Would never have got to this without ip inspect log. Why didn't I think of just trying ip inspect logging two days ago!
Anyway, thank you, I have now restored my faith in my own knowledge of ZBF!
Hope this helps the OP too
//TrX

Info on requesting IPv6 "Network Prefix"

Hi, When I got this TNet AC-1900 (TEW-818DRU) router a year ago IPv6 wasn't on my mind at the time. Of course now every Trendnet -ac based router supports DHCPv6-PD except for my model. I specfically need to get a LAN Network Prefix and DNS Server for it. When I do call Customer Support, should I just ask for that and they will understand? Or should I explain that I need a IPv6 delagted address for my home network via my router and that DHCPv6-PD isn't an option for my needs? I imagine I can just use the DNS IPv6 server that I can find via Google for Comcast (2001:558:feed::1). Thanks!- Rob

Leave the physical files on the main network storage, do import from there into the LR catalog.
Put the LR catalog on the SSD drive (if you already have a catalog, you can simply move this (is a folder structure with files) to the SSD).
Put the Camara raw cache on the SSD (this can be set using the general preferences panel).
In essence once imported into the catalog, the physical image file is left alone, you work on rendered previews (in the previews directory structure) and when you start developing theimage a rendered high-res image for development is created (in the cache directory) and used from then on.
So by putting the catalog and the cache on the SSD you get maximum perofrmance once imported and rendered.
Wrt SSD's check the site of lloyd chambers (www.macperformanceguide.com), altough focused on mac's, his experience with SSD's can be helpful.
Jan R. Smit
www.fromklicktokick.com

RV220W and IPv6 PD (Prefix Delegation)

Hi All,
I have an RV220W with firmware version 1.0.2.4. My ISP makes available IPv6 over PPPoE in a Dual Stack configuration. One of the requirements is that my home router should support prefix delegation. I don't appear to be able to find any information pertaining to PD in relation to the RV220W - can anyone tell me definitively, is it supported, and if not, is it planned in a future release?
If it is supported, any advice on successfully enabling would be most appreciated.
Many thanks.
Jordan

I noticed that the recently released firmware version 1.2.0.9 for the RV110W router mentions in the release notes that DHCPv6 Prefix Delegation is now supported!
Does that mean that this feature will also be implemented in some firmware release for the RV220W router?

IOS DNS local-cache for IPv6 ?

Hi there,
I have a humble question on whether it's possible for IOS DNS server to sniff and store mDNS (or other way) speaking hosts in order to track SLAAC-ed endpoint IPv6 addresses and their hostnames for comfortable connectivity using FQDNs among IPv6 hosts on different L3 subnets? Based on what I've reserched on CCO the chance is almost none..
I'm preparing CPE design for IPv6 rollout and this would be fine feature to offer with small sized deployments without having to run some central DNS server taking care of this (will be considered, optionally).
Thanks for your response.
Regards
Peter Gasparovic

Hi,
I'm sorry but we need to keep Cisco CPE line at this moment :-)
Well, I spent these 3 days in tough condition trying to make IOS DNS server what it's not :-)) A DDNS-capable one. I simply can't understand why such "easy" and rather useful thing compared to milions in IOS code is not supported. From my experiments in IPv4 yet, I can't get DNS server to respond to SOA query as would be needed per RFC 2136 and highlighted by this WinXP doc, which I have referred to :
http://technet.microsoft.com/en-us/library/cc784052%28v=ws.10%29.aspx
Another quick link almost touching it...
http://blog.ipspace.net/2006/09/use-your-cisco-router-as-primary-dns.html
So, I leave this for whoever might find this issue in coming weeks or months - to help save his time. With very little hope, that someone from related BU could think of it and put it on roadmap. Perhaps.. one day
Bye.

IPv6 BGP prefix-list filtering

Dears,
I have established iBGP seesion between 2 routers (R1 ---- R2) and I want to advertise loopback interface /128 using ipv prifex filtering, but didnt advertise to neighbor loopback . it is working fine with network or redistribute command but I want to know why it is not working with
prefix-list filtering?
Configuration:
router bgp 100
neighbor 2001:100:1:1::2 remote-as 100
address-family ipv6
neighbor 2001:100:1:1::2 activate
neighbor 2001:100:1:1::2 prefix-list IPV6 out
no synchronization
exit-address-family
int lo 100
ipv address 2001:500:1:1::1/128
ipv6 prefix-list IPV6 seq 10 permit 2001:500:1:1::1/128
router bgp 100
neighbor 2001:100:1:1::1 remote-as 100
address-family ipv6
neighbor 2001:100:1:1::1 activate
neighbor 2001:100:1:1::1 prefix-list TEST out
no synchronization
exit-address-family
int lo 100
ipv address 2001:600:1:1::1/128
ipv6 prefix-list TEST seq 10 permit 2001:600:1:1::1/128
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
2001:100:1:1::1 4 100 49236 49191 5 0 0 04:03:21 0

Even though you're using a prefix list, the prefix list is used for filtering and not advertising the network. You still have to advertise the network using "network 2001:600:1:1::1/128" and you should see it.
HTH,
John
*** Please rate all useful posts ***

IOS 12.2(33)SXI2a ipv6 nd prefix command

Similar Messages

Maybe you are looking for