IPv4 DMVPN over IPv6 WAN - Configuration

Hello everyone,
I'm struggeling to get a DMVPN to work over an IPv6 WAN Network.
I have testet IPv6 connectivity from the Spoke (2001:2:2:2::1/64) to the Hub (2001:1:1:1::1/64) which is successful, there is also an IPv6 default route to my "ISP", I also have an crypto isakmp key for IPv6 addresses and my Tunnel Configuration looks like this:
Did anyone configure a scenario like this and could point me in the right direction ? :-)
Thanks in advance
Greetings,
Thomas
### HUB Configuration ###
interface Tunnel1
description ** DMVPN Intranet **
bandwidth 1000
ip vrf forwarding VPN
ip address 10.0.10.1 255.255.255.0
no ip redirects
ip mtu 1416
no ip next-hop-self eigrp 65351
no ip split-horizon eigrp 65351
ip pim sparse-mode
ip nhrp map multicast dynamic
ip nhrp network-id 1
ip nhrp holdtime 360
ip nhrp shortcut
ip nhrp redirect
ip tcp adjust-mss 1360
load-interval 30
ipv6 nhrp map multicast dynamic
ipv6 nhrp network-id 1
ipv6 nhrp holdtime 360
ipv6 nhrp shortcut
ipv6 nhrp redirect
keepalive 10 3
tunnel source GigabitEthernet0
tunnel mode gre multipoint
tunnel key 1
tunnel protection ipsec profile My-Profile shared
### Spoke Configuration ###
interface Tunnel1
description ** DMVPN Intranet **
ip vrf forwarding VPN
ip address 10.0.10.2 255.255.255.0
ip mtu 1416
ip pim sparse-mode
ip nhrp map 10.0.10.1 2001:1:1:1::1
ip nhrp map multicast 2001:1:1:1::1
ip nhrp network-id 1
ip nhrp holdtime 360
ip nhrp nhs 10.0.10.1
ip nhrp shortcut
ip tcp adjust-mss 1360
delay 1000
tunnel source GigabitEthernet0
tunnel mode gre multipoint
tunnel key 1
tunnel protection ipsec profile My-Profile shared

Hi,
I got a solution for this.
My configuration is as follows, I missed the keyword "tunnel mode gre multipoint ipv6"
### Hub ###
interface Tunnel1
description ** DMVPN Intranet **
bandwidth 1000
ip vrf forwarding VPN
ip address 10.0.10.1 255.255.255.0
ip mtu 1416
no ip next-hop-self eigrp 65351
no ip split-horizon eigrp 65351
ip pim sparse-mode
ip nhrp map multicast dynamic
ip nhrp network-id 1
ip nhrp holdtime 360
ip nhrp shortcut
ip nhrp redirect
ip tcp adjust-mss 1360
load-interval 30
keepalive 10 3
tunnel source GigabitEthernet0
tunnel mode gre multipoint ipv6
tunnel key 1
tunnel protection ipsec profile My-Profile shared
### Spoke ###
interface Tunnel1
description ** DMVPN Intranet **
ip vrf forwarding VPN
ip address 10.0.10.2 255.255.255.0
ip mtu 1416
ip pim sparse-mode
ip nhrp map 10.0.10.1 2001:1:1:1::1
ip nhrp map multicast 2001:1:1:1::1
ip nhrp network-id 1
ip nhrp holdtime 360
ip nhrp nhs 10.0.10.1
ip nhrp shortcut
ip tcp adjust-mss 1360
delay 1000
tunnel source GigabitEthernet0
tunnel mode gre multipoint ipv6
tunnel key 1
tunnel protection ipsec profile My-Profile shared
end
Greetings
Thomas

Similar Messages

IPv4 LAN over IPv6 WAN

With IPv6 I am most concerned today with receiving an IPv6 address from my ISP for my Spoke networks. I don't have plans to convert my Spoke LANs or Internal application servers to IPV6 anytime soon. Reviewing all the books and technical documentation out there, I don't see discussion about how to get my IPv4 traffic tunneled through the Internet via an IPv6 carrier, a 4to6 tunnel. Currently I'm running DMVPN which appears to support IPv6 tunnels, Native and 6to4. Can anyone provide direction or expertise on how to get IPv4 traffic between Enterprise locations with ISPs move to IPv6 addressing?
Thanks..

Ryan,
If this is a question of connecting LAN in different branches.
The decently scalable option is GRE (with DMVPN being the neatest).
On top ASA supports IPv4 in IPv6 IPsec (to other ASAs at this point).
You might have a bit more challanges if you want to provide access to non-intrernal resources, Internet, partner sites without IPv4 on WANs.
M.

Unexpected case IPv4 tunnel over IPv6 ?

hi,
I wonder if there is one use case one can think of that is not possible with Cisco IOS:
Establish a IPsec tunnel over an IPv6 network tranporting both IPv4 and Ipv6 traffic. Even IPsec tunnel over an IPv6 network transporting IPv4 only does not work.
I tried several things in my lab but couldn't get it running.
I tried to search the net for my use case but I only find the other way round.
Question: is it possible to achieve connectivity of the following IPv4 addresses over an IIPsec tunnel over Ipv6 network?
Ultimately, the same tunnel should be capable transporting both. A dedicated Tunnel for IPv4 and IPv6 tunnel on the same routers would also be OK.
     Svr A                ( )                Svr B
    +----+             , `,( .)              +----+
    |    |   +----+   ( .( ...)    +----+   |    |
    |    |---| R1 |---`    .....)---| R2 |---|    |
    |    |   +----+    ( ......)    +----+   |    |
    +----+                                   +----+
10.0.23.1/24          IPv6 only          10.0.42.1/24
                        network

Same/similar question but the case is instead of Site to Site VPN, it would be using the Cisco VPN Client. The host on the left side is connected to an IPv6-only network. They need to communicate with IPv4 devices across the Internet (behind a Cisco ASA).
Is this possible?
Cisco VPN Client         ( )                Cisco ASA    +----+             , `,( .)              +----+    |    |   +----+   ( .( ...)    +----+   |    |    |    |---| R1 |---`    .....)---| R2 |---|    |----IPv4 network    |    |   +----+    ( ......)    +----+   |    |    +----+                                   +----+IPv6-only HOST        IPv6 Network         has IPv6 Interface on public side
alexander.koeppe wrote:hi,I wonder if there is one use case one can think of that is not possible with Cisco IOS:Establish a IPsec tunnel over an IPv6 network tranporting both IPv4 and Ipv6 traffic. Even IPsec tunnel over an IPv6 network transporting IPv4 only does not work.I tried several things in my lab but couldn't get it running.I tried to search the net for my use case but I only find the other way round.Question: is it possible to achieve connectivity of the following IPv4 addresses over an IIPsec tunnel over Ipv6 network?Ultimately, the same tunnel should be capable transporting both. A dedicated Tunnel for IPv4 and IPv6 tunnel on the same routers would also be OK.                           ,_     Svr A                ( )                Svr B     +----+             , `,( .)              +----+    |    |   +----+   ( .( ...)    +----+   |    |     |    |---| R1 |---`    .....)---| R2 |---|    |     |    |   +----+    ( ......)    +----+   |    |     +----+                                   +----+ 10.0.23.1/24          IPv6 only          10.0.42.1/24                        network

Prefer IPv4 over IPv6

Hi. I want use ipv4 before ipv6. For 2008 R2 i used fix "Microsoft Fix it 50410"
But this not support server 2012.
How i can correct change prefer on 2012?
Thank you!

Please, tell me, WHY man, who create IPv6 began use this fe80::6c02:573b:178c:dd8f naming.
Blame that on the Internet Engineering Task Force (IETF) standards committee that came up with this naming convention back in 1998 (http://tools.ietf.org/html/rfc2460). <grin>
Not sure what you mean by "reliable source with describe 'native IPv6 for 8\12'". Microsoft has lots of documentation on IPv6 - I think the majority of it came out with Windows Server 2008 because that was the first release with the dual-stack as a
default. IpV6 was available for Windows Server 2003, but it was an add-on. Go to Barnesandnoble.com or amazon.com to find a good reference book on IPv6 if you want to learn more - they are not small books. It is the way the industry is moving
because it offers many advantages over IPv4 (which, by the way, has officially run out of addresses which can be handed out). Microsoft is simply helping customers move into future by providing a dual-stack that can automatically switch back and forth
between IPv4 applications and IPv6 applications without the end-user even knowing it goes on. Some things, like Direct Access, would be almost impossible to implement on IPv4, but becomes (relatively) easy when using IPv6.
tim

Convert IPv4 address to IPv6 subnet on AD Sites

Hi,
We currently run IPv4 on our network. However, it looks like it's recommended to enable IPv6 on DFS servers according to this:
http://blogs.technet.com/askds/archive/2009/10/28/dfs-referrals-and-ipv6-outta-site.aspx
I'm having trouble creating an IPv6 subnet in AD Site and Services for my DFS servers since I'm note very familiar with IPv6. I think the IPv6 I see on the servers is the "converted" to IPv6 (see warning message below)??
DC and DFS servers are Win 2008 R2 Datacenter. It looks like the IPv6 address of the DFS servers are not "matching" the subnets I have created and therefore DFS is not associated with the correct sites causing clients to go over the WAN
to other DFS servers.
For example:
The IPv4 for my DFS servers are:
156.124.92.202/23
156.124.78.202/23
I created these IPv4 subnets:
156.124.92.0./23 --> SA-Site
156.124.78.0/23 --> AU-Site
IPv6 DHCP service is not enabled. No Static IPv6 set for the network connection. The "converted" IP seems to be
2002:9c7c:5cca::9c7c:5cca
2002:9c7c:4eca::9c7c:4eca
I created these IPv6 subnets
2002::9c7c:5c00/119
2002::9c7c:4e00/119
This is what I see on the DFS servers:
Validating the site associations on every domain controller of the following: SA-DFS-01
Warning: The server has IP addresses with conflicting site associations
Host name: SA-DFS-01
Site: SA-Site
Domain Controller: SA-AD-01
Host IP address
fe80::2c27:42f8:1294:ef4c%10
2002:9c7c:5cca::9c7c:5cca
Subnet-Site Mapping in AD
No mapping exists
No mapping exists
Host name: SA-DFS-01
Site: SA-Site
Domain Controller: AU-AD-01
Host IP address
fe80::2c27:42f8:1294:ef4c%10
2002:9c7c:5cca::9c7c:5cca
Subnet-Site Mapping in AD
No mapping exists
No mapping exists
Validating the site associations on every domain controller of the following: AU-DFS-01
Warning: The server has IP addresses with conflicting site associations
Host name: AU-DFS-01
Site: AU-Site
Domain Controller: SA-AD-01
Host IP address
2002:9c7c:4eca::9c7c:4eca
Subnet-Site Mapping in AD
No mapping exists
Warning: The server has IP addresses with conflicting site associations
Host name: AU-DFS-01
Site: AU-Site
Domain Controller: AU-AD-01
Host IP address
2002:9c7c:4eca::9c7c:4eca
Subnet-Site Mapping in AD
No mapping exists

Hi,
We currently run IPv4 on our network. However, it looks like it's recommended to enable IPv6 on DFS servers according to this:
http://blogs.technet.com/askds/archive/2009/10/28/dfs-referrals-and-ipv6-outta-site.aspx
I'm having trouble creating an IPv6 subnet in AD Site and Services for my DFS servers since I'm note very familiar with IPv6. I think the IPv6 I see on the servers is the "converted" to IPv6 (see warning message below)??
DC and DFS servers are Win 2008 R2 Datacenter. It looks like the IPv6 address of the DFS servers are not "matching" the subnets I have created and therefore DFS is not associated with the correct sites causing clients to go over the WAN
to other DFS servers.
For example:
The IPv4 for my DFS servers are:
156.124.92.202/23
156.124.78.202/23
I created these IPv4 subnets:
156.124.92.0./23 --> SA-Site
156.124.78.0/23 --> AU-Site
IPv6 DHCP service is not enabled. No Static IPv6 set for the network connection. The "converted" IP seems to be
2002:9c7c:5cca::9c7c:5cca
2002:9c7c:4eca::9c7c:4eca
I created these IPv6 subnets
2002::9c7c:5c00/119
2002::9c7c:4e00/119
This is what I see on the DFS servers:
Validating the site associations on every domain controller of the following: SA-DFS-01
Warning: The server has IP addresses with conflicting site associations
Host name: SA-DFS-01
Site: SA-Site
Domain Controller: SA-AD-01
Host IP address
fe80::2c27:42f8:1294:ef4c%10
2002:9c7c:5cca::9c7c:5cca
Subnet-Site Mapping in AD
No mapping exists
No mapping exists
Host name: SA-DFS-01
Site: SA-Site
Domain Controller: AU-AD-01
Host IP address
fe80::2c27:42f8:1294:ef4c%10
2002:9c7c:5cca::9c7c:5cca
Subnet-Site Mapping in AD
No mapping exists
No mapping exists
Validating the site associations on every domain controller of the following: AU-DFS-01
Warning: The server has IP addresses with conflicting site associations
Host name: AU-DFS-01
Site: AU-Site
Domain Controller: SA-AD-01
Host IP address
2002:9c7c:4eca::9c7c:4eca
Subnet-Site Mapping in AD
No mapping exists
Warning: The server has IP addresses with conflicting site associations
Host name: AU-DFS-01
Site: AU-Site
Domain Controller: AU-AD-01
Host IP address
2002:9c7c:4eca::9c7c:4eca
Subnet-Site Mapping in AD
No mapping exists
Hi,
The format seems to be incorrect. Please change them as following and check the result:
2002:9c7c:5cca::/48
2002:9c7c:4eca::/48
For more information about 6to4 address, please see:
http://technet.microsoft.com/en-us/library/cc756770(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc757359(WS.10).aspx
Hope it helps.
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.

JDBC connection over IPv6

Hi
I have an MS SQL Server 2005 Database Server and a Client computer on two different subnets.
There is also a DNS Server, which contains both an IPv4 (A) and IPv6 (AAAA) DNS record for the Database Server.
I've disabled IPv4 routing between the two subnets so that the Database Server is only accessible by IPv6 from the Client computer.
I am then unable to connect to the Database Server from the Client using JDBC.
I have tried increasing the loginTimeout in the JDBC connection string, but this doesn't appear to make any difference.
I get a java.net.ConnectException in about 20 seconds.
If I remove the IPv4 (A) record of the Database Server from the DNS Server, the JDBC connection then succeeds.
Does JDBC iterate over all the possible addresses of the Database Server?
Is the loginTimeout the correct parameter to try to increase, to allow it to iterate over the possible addresses?
There is a similar problem with MS SQL Client - see http://msdn.microsoft.com/en-us/library/ms378428(SQL.90).aspx
But increasing the connection timeout allows a successful connection.
Thanks
Alain

jschell wrote:
ahkal01 wrote:
Alain: A machine may have multiple IPv6 addresses, as well as an IPv4 address.
You may not be able to get to the machine via all the addresses, depending on the network route.
If a driver gives up on the first DNS lookup (which probably will be the IPv4 address), it'll never try the IPv6 addresses. However that is NOT what you are testing.
As described in your first post there is a route. Routing works if the final location is found. After that a refused connection is a refused connection.
Alain: In my test, IPv4 routing is disabled between the two subnets. So there is no IPv4 routing between the two machines, only IPv6.
>
But even so, to me it is still two different IP addresses. Just as if you try to create your own replication by having two database servers on different IPv4 addresses. If the client is supposed to be using one address then the DNS should be set up that way.
Or use the address. Because the point is not the IP address, the point is the DNS look up.
Alain: With IPv6, it is common for computers to be assigned more than one address for routing under different hierarchies.
If you're saying that the DNS lookup should be set up to return only one IP address to client computers trying to connect to the DB Server, DNS will need to be set up differently depending on where the client computer is.
>
Again looking at it from the point of someone developing a driver the only option I would allow is that one might be able to specify a configuration value that says to try a IPv6 address first. That would be in the driver, not JDBC. So you can look to your driver for that.
There is a similar problem with MS SQL Client - see http://msdn.microsoft.com/en-us/library/ms378428(SQL.90).aspx
But increasing the connection timeout allows a successful connection.
I do not see anywhere in that link that it claims that the setup you are using would work Alain: apologies. It was the wrong url link.
I meant, http://blogs.msdn.com/sql_protocols/archive/2005/10/12/480192.aspx.The scenario there is SQL Server is configured to listen only on IPv6 addresses and disable all IPv4 addresses so that only IPv6 connection can be accepted. The workaround is to specify the IPv6 address of the target machine explicitly to force SNI to use IPv6 connection directly or to use longer timeout value. I don't see that in that blog.
It says that if you have addresses that some different behavior might result. It specifically refers to using an IPv4 address (not DNS) and failing on that and then attempting to use a IPv6 address (again not a DNS) and even in that case it might fail.
Alain: The blog is talking about a hostname resolving into multiple addresses. I quote from the blog, with bold for emphasis,
"In most cases, the connection string does not need to be modified if the <servername> is specified using server hostname or FQDN (Full Qualified Domain Name). If the server machine has dual-stack, *its hostname or FQDN will be resolved into multiple IP addresses*, including at lease one IPv4 address and multiple IPv6 addresses. *And SNI will attempt to establish connections using these IP addresses in order and use the first connection that succeeds*. IPv4 addresses are attempted first if both IPv4 and IPv6 addresses are present. This logic is transparent to the users of ODBC, OLEDB or ADO.NET.
And it doesn't say anything about that some clients already do this but merely that they can.
Alain: SNI does, from the quote above. A test also shows that it does try all the addresses that DNS returns, with the caveat that the connection timeout has to be increased.
Unfortunately it looks like the MS JDBC driver doesn't do likewise.
Myself I don't really consider that a valid option for most use cases for drivers. If I have a data center then I am not normally going to be using both types of addresses. And if I am both will work. And if there are variation in subnets then I would expect that if DNS is in use then it would be set up to correctly represent that.Thanks for your input on this thread. Much appreciated.

Multicast paging over DMVPN over MPLS

We're using IPcelerate as our paging solution and have the need to extend the application across our MPLS/VPLS network. I'm looking for a configuration or, at the very least, some guidance to get this working across a DMVPN over said MPLS/VPLS.
Regards,
-Mike M.

Hi Michael
I have been in a similar situation before of having Paging to traverse over the WAN IP MPLS network with SingleWire Paging system. If we are talking about Audio paging, it is built on the IP multicast networking and thus to extend this service to remote offices connected through IP MPLS network, the Service provider should enable IP multicast over its VRFs for you. In my case it was not feasible by the Service provider(s). SingleWire introduced a solution of a Paging Gateway that is integrated with the paging server and it is located at the remote office. The Paging server sends the target audio mulitcast as a unicast session to the paging gateway in the remote office and then the paging gateway sends on the LAN as a multicast .
I am not sure if IPcelerate has a similar solution, but it is worth asking and validating.
Hope that helps
MonieM

REMOTE RECORDINGS OVER THE WAN IN CCX 7

We have a customer
with CCX 7 local agents and recording services ( BUT NO QUALITY MONITORING)
Normally records all local agents calls ( colocated with CCX.
Now customer has remote agents via WAN and needs to record their conversations.
According specifications and PDI case the sutiationis:
"This deployment model can support silent monitoring and recording for agents at any WAN-connected site by using desktop monitoring. (Refer the Cisco Unified CCX Software and Hardware Compatibility Guide for a list of phones that support desktop monitoring). It can also support SPAN port monitoring for agents on the VLAN segment local to Cisco Unified CCX server. This deployment model does not incorporate additional remote Monitoring components, so silent monitoring and recording is not possible for agents who are using the Cisco IP Phone Agent at remote sites. Similarly, silent monitoring and recording is not possible for agents at remote sites who are using phones that do not support desktop monitoring."
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_7_0/design/guide/uccx70srnd.pdf
page 4-6
The list of phones not supported for desktop monitoring is listed in the compatibility guide.
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_compatibility/matrix/crscomtx.pdf
In other words CCX can support "silent monitoring and recording for agents at any WAN-connected site by using desktop monitoring"
But assume you use an IP Phone that supports desktop monitoring
AS RECORDING OPTION WITHOUT QUALITY MONITORING NEEDS MAC ADRESS OF AGENT how can CCX record agent calls taking into accoutn that MAC address is lost when traversing the WAN ...
So the question for this dsicussion is :
IS QUALITY MONITORING THE ONLY WAY TO RECORD REMOTE AGENTS OVER THE WAN OR ARE TEHRE OTHER OPTIONS WITHOUT IT??
Pease reply to [email protected]

It is possible without QM. When using desktop monitoring, the phone is configured to Span to PC port. The agent must be running CAD and the PC running it must be attached to the PC port on the phone. CAD sees the spanned packets from the phone and then forwards them to the recording service on the CCX server. The big gotcha is that the NIC in the PC must not discard 802.1q-tagged packets. If the NIC discards them instead of forwarding them into the NDIS stack, CAD will never see them. Sometimes this takes a Google search and a registry setting change to fix if it doesn't work at first.

Problem about the jmf when working over IPV6

I write a program about monitoring a RTP stream ,get the feedbacks about the stream by receving the RTCP reports and analysize the paramaters .Now the throny issues encountered is the code working perfect over the IPV4 network .but there are many exceptions when working over IPV6 the exceptions is as follows:
Exception in thread "RTCP Reporter" java.lang.NullPointerException
at com.sun.media.rtp.RTCPTransmitter.makereports(RTCPTransmitter.java:200)
at com.sun.media.rtp.RTCPTransmitter.report(RTCPTransmitter.java:106)
at com.sun.media.rtp.RTCPReporter.run(RTCPReporter.java:193)
at java.lang.Thread.run(Thread.java:619)
the session can be set up and can receive the stream .so I think it is ok of setting up the session with the IPV6 multicast address.strangely , the same particate in the session sends more than one feedbacks with different SSRC which is ought to be single.I cannot figure out.
I wonder whether there is any special setting when JMF working on the IPV6 network.I did not find materials about the JMF working on IPV6 network in Microsoft xp pc.
can any guys give me any tips?
Edited by: judyw115 on Sep 4, 2010 6:08 AM

judyw115 wrote:
Is there anyone giving me any advices?You realize this is a free forum and not paid tech support, right?
Drop the attitude and learn to be patient.

Using DynDNS and Sharing disks over Ethernet WAN port

I am having issues accessing the AirDisk from outside my LAN. So here are the steps that I have taken:
In the AirPort Utility, I enable "Share disks over Ethernet WAN port".
Created a DynDNS account at http://www.dyndns.com so my hostname points to my IP address.
After reading a bunch of threads, mainly this one below, there are a few conflicting issues.
http://discussions.apple.com/thread.jspa?messageID=4105319
Someone mentioned you have to Setup Port Mapping to open up Personal File Sharing. But another said you don't have to set up Port Mapping. Well if you do, you're gonna run into a problem. This Apple article states you have to use a different port: http://docs.info.apple.com/article.html?artnum=305183
Someone said Remote Access only works via AFP not via SMB. Is this true?
Also do I have to enter my DynDNS hostname into the wide area bonour tab in the advanced tab?
What am I doing wrong?
Macbook Mac OS X (10.4.8) Airport Extreme N

Are you aware of any DynDNS-like service that support Wide Area Bonjour?
None at the moment. One might hope that Apple's .Mac service would make use of it, but I don't think Apple has announced anything about that possibility.
Or as a practical matter is this a technology that only appears at the moment in private installations of OS X Server?
I've found the version of dnsextd that ships in Mac OS X 10.4 (not just the server version) to be a bit flaky. One hopes it will work a lot better in Mac OS X 10.5.
But since the AEBS doesn't support DynDNS update, as other routers do, it ends up requiring a server after all.
Wouldn't it be nice if DynDNS and similar services allowed you to configure DNS resource records manually? That way, it wouldn't matter what your home gateway/fileserver was capable of doing— you could just edit your DNS zone accordingly.

Cannot export nfs-share over ipv6 in OS X 10.8

I've successfully exported my nfs share over ipv4 and can access this with a nfs-client from a linux machine. However, I'm not able to export the same share over ipv6.
In my /etc/exports I have:
/Volumes/Harddisk
-network 10.0.0.0
-mask 255.255.255.0
/Volumes/Harddisk
-network fd60:760d:98ec:8588::/64
However, from the linux client I can only mount the ipv4 share, but not the ipv6 share.
Is it possible to export nfs-shares over ipv6 in OS X 10.8?

I would suggest testing a connection from a second Mac also running 10.8 via IPv6. At least then you know both will be using compatible versions. If that does not work then it would seem to be an IPv6 issue on the Mac server.

Do we support RADIUS over IPv6 in ACS 5.5?

Hi,
Could you please let me know if we support RADIUS over IPv6?

It is hard to see the information in your screen shot but ACS 5.4 and later support IPv6 for network devices:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/user/guide/acsuserguide/net_resources.html
Also, if you type an invalid IP address in ACS you would get the following error:
A valid IPv4 address consists of four numbers (0-255) separated by periods, e.g. 123.0.255.3
A valid IPv6 address is n:n:n:n:n:n:n:n where the 'n's are either digits (0-9) or letters (A-F)
I hope this is what you were looking for!
Thank you for rating helpful posts!

Any reported problems using jdbc over a WAN?

If im trying to connect to a Database that's on a WAN will I experience any issues in using jdbc to connect and execute queries to that database?
I know problems would come up if my wan network is slow, but has jdbc been able to handle long distance database queries? timeout values?

but why?
is it because of security? If a company had a database with your personal info hanging out on the Web for anyone to query without any validation or security, how would you feel about it?
design pattern issues? It's just good layered design.
just doesnt make sense?Not in my opinion.
have u experienced/heard of any problems of
connecting to a database over a WAN and executing
queries?You don't say anything about who the client is. If the database is behind a firewall, outside clients shouldn't be able to access the port where the listener is running. Only port 80 should be open on that firewall.
So you either write a servlet that listens on port 80 for HTTP requests from a browser-based client OR you ask your firewall admin to punch a hole in the firewall and open up the port on which your database is listening for queries and use a Swing client.
If s/he agrees to do it, quit immediately. It means your company doesn't know anything about security.
%

DNS: Client can't connect because .local domain isn't in DNS. How can I connect over the WAN to server.domain.local?

So my 2012 server is set up on the LAN with a .local domain name.
Remote Desktop Services are set up and remoteapp stuff works fine on the LAN.
I've set up port forwarding so I can connect to the server over the WAN too, but remoteapp stuff is a bit different. I can connect to the server by specifying the correct IP address. Giving a Web browser the address
https://serverIPAddress/RDWeb
lets me get the login screen and see the range of apps for me to run. I select one, the connectoid is downloaded correctly (in Chrome) and I click on the downloaded connectoid.
Unfortunately, rather than pursuing the sensible IP-address approach that I started with, the connectoid has been given the server's name on the LAN: server.domain.local. Clearly, the client machine tries to look this up but DNS hasn't heard of
it because it's a .local address.
I cannot be the only one to have come across this apparent oversight on Microsoft's part. Any ideas as to how this can sensibly be overcome? Obviously, I could put the IP address translation into every client's hosts file (and I've done this and shown it
works) but I've got too many clients to mess about like this. Anybody know 'the Microsoft way' to fix this?
Thank you for checking this out -- I am confident the details of the problem are completely specified in this query but, if I'm wrong, please ask.
Many thanks again,
Biffo

Hi,
I would like to suggest you to follow the checklist.
Checklist: Make RemoteApp Programs Available from the Internet
http://technet.microsoft.com/en-us/library/cc772415.aspx
Thanks.
Jeremy Wu
TechNet Community Support

Share disks over ethernet WAN port

If I turn on "Share disks over Ethernet WAN port", how do I access it from outside my LAN?

On a mac well in the finder press apple key+K type in your home external ip(255.255.255.255)
On a pc windows key +r, type cmd, enter, net use k: \\"external ip(255.255.255.255)"/"the name of share"

IPv4 DMVPN over IPv6 WAN - Configuration

Similar Messages

Maybe you are looking for