IPv6 address autoconfiguration vs static on SF302-08P

I've just installed a 302-08P in my office so that we can get our VoIP trunks into our office, so my officemate and I can actually test
the phones before we hand them out. (Can't do that easily with the 1 RJ-45 facilities gave us...)
I noticed that I can not enable IPv6 address autoconfiguration for the management interface, as well as set a static IPv6 address.
This seems wrong: I want the device to always AC an address: it makes bonjour and renumbering much easier. But,
I want to give the device a static IP for purposes like management, DNS, etc.  If this unit failed, I'd replace it but it's address would not change.
IPv6 hosts (which the management interface is) should be completely happy with having multiple addresses on an interface, not just
having addresses from multiple prefixes.  What gives?

houmles wrote:I found that I can't have two gateways on one interface, but until now there's no problem.
I suspect it's a problem with that; I've noticed this problem as well.
When trying to add multiple default gateways with iproute2 (ie, `ip r a default via xxx:xxx:xxx::xxxx`) it errors with the error you've mentioned. I'm not sure if this is a kernel bug, iproute2 bug, or not a bug at all.
Having multiple default IPv4 gateways works fine.
I believe netcfg doesn't check for an existing gateway and delete it first (or use `ip r r` instead or `ip r a`) before adding the one; but I haven't checked the code so I could be wrong.
EDIT:
OK, I couldn't resist looking at the code, and it indeed does a 'dumb' addition of the gateway:
112 if [[ -n "$GATEWAY" ]]; then
113 report_debug ethernet_iproute_up ip route add default via "$GATEWAY" dev "$INTERFACE"
114 if ! ip route add default via "$GATEWAY" dev "$INTERFACE"; then
115 report_iproute "Adding gateway $GATEWAY failed"
116 fi
117 fi
I'm looking at making a patch now. Patch and bug report: https://bugs.archlinux.org/task/29480
Last edited by fukawi2 (2012-04-16 01:00:09)

Similar Messages

  • How to disable ipv6 address autoconfiguration ???

    I am trying to disable ipv6 stateless address autoconfiguration to implement what this document describes:
    http://docs.sun.com/app/docs/doc/816-4554/6maoq01o3?a=view
    There are several problems though:
    1)The manual says that something must be put inside the hostname6.xxx file but then goes on to give the command as it should be given from the command line instead of the content of the file. The manual should provide some form of exapmle content for the file.
    2)I go to /etc/inet/ndpd.conf and put "ifdefault StatelessAddrConf false" inside, then I pkill -HUP in.ndpd and finally I issue ifconfig eri0 inet6 token fe80::c/10. However nothing happens. The interface address remains the one generated through autoconfiguration.
    Could someone that has knowledge of this subject provide any help?
    Thanks very much,
    Thanasis

    Hi,
    I have a same problem, and think we didn't understand the documentation.
    Here is the link of the ndpd.conf configuration page:
    http://docs.sun.com/app/docs/doc/816-4554/6maoq01qt?a=view#ipv6-ref-10
    I think this is the right sintax:
    if
    Sets per-interface parameters. Use the following syntax:
    if interface [variable-value]
    Table 11�3 /etc/inet/ndpd.conf Interface Configuration Variables
    StatelessAddrConf
    True
    Controls whether the node configures its IPv6 address through stateless address autoconfiguration. If False is declared in ndpd.conf, then the address must be manually configured. For more information, refer to How to Configure a User-Specified IPv6 Token.
    I think the variable is this: StatelessAddrConf
    if-variable-name StatelessAddrConf false
    I think: if StatelessAddrConf false
    But I found the 'false' parameter with uppercase and lowercase letter.
    (It is not working for me!)
    And I found another configuration file, what is include the rules of the address (/usr/sbin/ipaddrsel ).
    Here is the link:
    http://docs.sun.com/app/docs/doc/816-5166/6mbb1kq56?a=view
    Maybe, I found the solution.
    http://docs.sun.com/app/docs/doc/816-4554/6maoq01qt?a=view#ipv6-ref-10
    You can creat a logical interface, and you can set the IP address of this interface.
    Example 11�6 Adding a Logical IPv6 Interface With the -addif Option of the ifconfig Command
    The following form of the ifconfig command creates the hme0:3 logical interface:
    // this is teh example, and it is not perfect on Sol10
    # ifconfig hme0 inet6 addif up
    Created new logical interface hme0:3
    This form of ifconfig verifies the creation of the new interface:
    # ifconfig hme0:3 inet6
    hme0:3: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 2
              inet6 inet6 fe80::203:baff:fe11:b321/10
    Here is my solution:
    ifconfig e1000g0 inet6 addif 1234:0000:0000:0000:0200:50FF:FE09:B980/10
    ifconfig e1000g0:1 inet6 up
    # ifconfig -a6
    lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1
    inet6 ::1/128
    e1000g0: flags=2000840<RUNNING,MULTICAST,IPv6> mtu 1500 index 2
    inet6 fe80::20d:60ff:feee:aba8/10
    ether 0:d:60:ee:ab:a8
    e1000g0:1: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 2
    inet6 1234::200:50ff:fe09:b980/10
    I have special IP address, but I don't know that it is working or not.
    If you have any idea, please write!
    Br,
    Sanyi

  • Static ipv6 address from a /64

    Hi all
    I have a cisco 6500 that i configured a /64 on int1/39 that has a linux server connected to it and supressed RAs. On this server i assigned a static ip, 
    2001:x:77:4::2. i can ping to/from the server with no issues. However when doing a show ipv6 neighbors i still see the auto config ipv6 on fast1/39.
    interface FastEthernet1/39
    ip address x.x.x.33 255.255.255.240
    ip flow ingress
    speed 100
    duplex full
    ipv6 address 2001:x:77:4::1/64
    ipv6 nd ra suppress
    spanning-tree portfast edge
    My question why is that attached server getting an auto config ipv6 address when i have the supress command under interface. Also is it correct to assign a /64 to an int/vlan and statically assign ips instead or should i move to a /56. I'm not really sure if what im doing is common or if it create issues.
    TIA, Paul

    Deepak, while i assigned a static ip to the server doing a show ipv6 neighbor shows this static ip and it also shows the auto config ip. Again based on my config above shouldnt it jsut show the static ip. Why is SLAAC in play here if i have
    ipv6 nd ra suppress on the interface, will this setup cause issues.
    sh ipv6 neighbors
    IPv6 Address                              Age Link-layer Addr State Interface
    2001:x:77:4::2                            1 0019.b9e6.5647  STALE Fa1/39
    2001:x:77:4:219:B9FF:FEE6:x     49 0019.b9e6.5647  STALE Fa1/39
    FE80::219:B9FF:FEE6:5647                    1 0019.b9e6.5647  STALE Fa1/39
    note i can ping the static and auto config ip and the server lists both of them.

  • How to set static IPv6 address/gateway in Arch (NOT tunnel)

    Hey Everybody,
    Today I decided to install Arch Linux. There was only one thing that I did not understand, and that is how to set up a static IPv6 address. I have native IPv6 connectivity at home and in Debian I used to edit /etc/network/interfaces to set up a static IPv6 adress. Since Arch uses rc.conf, what is the syntax to configure a static IPv6 address?
    I used to add something like this in Debian in /etc/network/interfaces:
    > iface eth0 inet6 static
    > address *my static address*
    > netmask 64
    > gateway *my gateway address*
    Or can I still use /etc/network/interfaces in Arch?
    Thank you for help.

    It can be done quite easily using the netcfg infrastructure.
    /usr/lib/network/connections/ipv6static
    #!/bin/bash
    . /usr/lib/network/network
    ipv6static_up() {
    load_profile $1
    ip -6 a a ${ADDRESS} dev ${INTERFACE}
    if ! [ -z "${GATEWAY}" ]
    then
    ip -6 r a 2000::/3 via ${GATEWAY} dev ${INTERFACE}
    fi
    ipv6static_down() {
    load_profile $1
    ip -6 a d ${ADDRESS} dev ${INTERFACE}
    if ! [ -z "${GATEWAY}" ]
    then
    ip -6 r d 2000::/3 via ${GATEWAY} dev ${INTERFACE}
    fi
    ipv6static_$1 $2
    exit $?
    /etc/network.d/eth0static
    CONNECTION="ipv6static"
    DESCRIPTION="Static configuration for IPv6"
    ADDRESS="2001:dead:beef:cafe::1/64"
    INTERFACE="eth0"
    GATEWAY="2001:feed:dead:beef::1" # Comment this out if no route needed
    I haven't tested the gateway part, but I don't see why it wouldn't work. You'll need iproute2, and to read up on netcfg (see http://wiki.archlinux.org/index.php/Network_Profiles) if you have trouble.
    Last edited by gunkaaa (2009-09-02 05:19:36)

  • Can't get ipv6 address assigned correctly.

    I use NetworkManager and dhclient for auto-configuration but it has some weird problems.
    When I boot up my laptop, I only have chance to get access to ipv6 network, when I fail, I tried to delete the connection in Network Management Settings, and then added a new profile, disable and then enable the network again. Sometimes it works well, but sometimes it failed to auto-config.
    If I use the command:
    $ ip -6 rout
    then I'll get the following message:
    unreachable fe80::/64 dev lo proto kernel metric 256 error -101
    fe80::/64 dev wlan0 proto kernel metric 256
    default via fe80::2e0:2ff:fe54:59 dev wlan0 proto static metric 1
    every time the default gateway is configured well, sometimes the address the address is missed , and if I do the following:
    $ ping6 -I wlan0 -c 4 fe80::2e0:2ff:fe54:59
    It responses normally.
    PING fe80::2e0:2ff:fe54:59(fe80::2e0:2ff:fe54:59) from fe80::1034:56ff:fe78:9124 wlan0: 56 data bytes
    64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=1 ttl=64 time=5.32 ms
    64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=2 ttl=64 time=6.64 ms
    64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=3 ttl=64 time=10.6 ms
    64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=4 ttl=64 time=3.60 ms
    --- fe80::2e0:2ff:fe54:59 ping statistics ---
    4 packets transmitted, 4 received, 0% packet loss, time 3005ms
    rtt min/avg/max/mdev = 3.603/6.546/10.617/2.587 ms
    do the following:
    $ ip -6 addr
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436
    inet6 ::1/128 scope host
    valid_lft forever preferred_lft forever
    3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
    inet6 2001:250:4400:d000::161/128 scope global
    valid_lft forever preferred_lft forever
    inet6 fe80::1034:56ff:fe78:9124/64 scope link
    valid_lft forever preferred_lft forever
    I found I just sometimes can get the ipv6 address start with 2001:
    If the address is assigned, then:
    $ ping6 ipv6.google.com
    PING ipv6.google.com(ipv6.google.com) 56 data bytes
    ^C
    --- ipv6.google.com ping statistics ---
    11 packets transmitted, 0 received, 100% packet loss, time 10008ms
    response nothing!
    Then I switch into Windows 7, if something like above happened, then I managed to set the MAC address to a random value such as 12-34-56-78-91-23, soon, the problem will be corrected, I'll get a new ipv6 address assigned by DHCPv6 server. If I switch back to arch, set the MAC address in NetworkManager, it didn't have function at most time, and the ipv6 address even won't change!
    Can anyone help me with this problem?
    by the way, I never get ipv6 address when I use dhcpcd.

    bernarcher wrote:
    Hello and welcome to the forums heliumhgy.
    Just in case you are wondering where your post has been gone: The moderators board received this message from you:
    I dont need tunnel to access to ipv6, My univ use dual-stack to get both ipv4 and v6 work around all campus.
    This is because you inadvertently used the "Report" link. But don't worry this happens rather often.
    Just cause I caught the glimpse of re-blabla, and mistaken it as reply
    Last edited by heliumhgy (2012-11-29 03:16:11)

  • IPv6 Address Management and Security Questions

    I'm trying to draft an IPv6-based version of our location's current routing configuration in anticipation of when our ISP will finally roll it out, and address management has been giving me the biggest headache - ironic, considering IPv6 was supposed to simplify address allocation.
    My first config draft was made assuming that I would be getting a static /56 or /60 prefix from the ISP, and I was just going to insert the prefix into my DHCP pools and there would be no issues. That was before reading around and discovering that some ISPs are considering prefix delegation (PD) for both residential and business accounts instead of static blocks. Now I have questions about how to stick as close to the current IPv4 configuration as possible.
    For the PD scenario, what I am looking at now are two addresses ranges for each network - a ULA /120 space that I want to control using stateful DHCPv6, and the global space which can be /64 and auto-configured. That way there will be a "private" address space for internal routing in the event of a prefix change or an extended outage. But I'm not sure how the config should look for such a scenario. What I have drafted so far is this:
    ipv6 dhcp pool DHCP6_INTERNAL
     address prefix FDAB::1:0/120
     domain-name whatever.net
     dns-server FDAB::1:1
    ipv6 dhcp pool DHCP6_DMZ-WIFI
     address prefix FDAB::2:0/120
     domain-name guest.whatever.net
     dns-server FDAB::2:1
    interface GigabitEthernet0
     description WAN-LINK
     ipv6 enable
     ipv6 address dhcp
     no ipv6 unreachables
     no ipv6 redirects
     ipv6 flow ingress
     ipv6 flow egress
     ipv6 virtual-reassembly in
     ipv6 nd autoconfig default-route
     ipv6 dhcp client pd hint ::/56
     ipv6 dhcp client pd ISP-PREFIX
     zone-member security OUTSIDE
     speed auto
     duplex auto
     no cdp enable
    interface FastEthernet8.1
     description VLAN_1-INTERNAL
     encapsulation dot1Q 1 native
     ipv6 enable
     ipv6 address FDAB::1:1/120
     ipv6 address ISP-PREFIX ::1:0:0:0:1/64
     ipv6 flow ingress
     ipv6 flow egress
     ipv6 virtual-reassembly in
     zone-member security INSIDE
     ip tcp adjust-mss 1300
     ipv6 dhcp server DHCP6_INTERNAL
     ipv6 nd managed-config-flag
     ipv6 nd other-config-flag
    interface FastEthernet8.2
     description VLAN_2-DMZ-WIFI
     encapsulation dot1Q 2
     ipv6 enable
     ipv6 address FDAB::2:1/120
     ipv6 address ISP-PREFIX ::2:0:0:0:1/64
     ipv6 flow ingress
     ipv6 flow egress
     ipv6 virtual-reassembly in
     zone-member security DMZ
     ip tcp adjust-mss 1300
     ipv6 dhcp server DHCP6_DMZ-WIFI
     ipv6 nd managed-config-flag
     ipv6 nd other-config-flag
    Will this config work? By which I mean: will the DHCPv6 servers provide ULA addresses, and will SLAAC work for global address allocation? If not, what needs to be changed?
    Also, another question. I found a few references to a prefix name (the "ISP-PREFIX") which can be used as part of a static IPv6 address on an interface, which is a good idea in case the prefix changes. But that brings up another concern - if the prefix changes, that will invalidate ACLs referencing the global addresses using the previous prefix. Is there anything similar to the prefix name string that can be used in ACLs to keep this from occurring?

    DHCPv6-PD is not necessarily dynamic the same way as DHCP was with the public IPv4 addresses in the IPv4 world.
    While the outside network (PPPoE, DHCPv6, anything) might be truly dynamic and changing with possibly every login session, the DHCPv6 delegated prefix might be tied to your login credentials or DHCPv6 client's DUID after the first connection. A bit like a DHCP lease reservation.
    If that is the case, there is some possibility that your ISP will run reverse route injection, and will always route your "fixed" prefix  to the currently active dynamic "outside" address.
    Talk to your ISP and have them confirm that, once the PD'd /48 or /56 is initially assigned, it won't change, and that the same prefix will be delegated every time. Then you can treat it as if it were fully static, and you won't have to go down the ULA path.
    I contacted one of our local ISPs, and they're doing it exactly that way: PPPoE for IPv4 and IPv6 (fully dynamic), and DHCPv6-PD with the /48 tied to the PPPoE login credentials. I might change to that ISP sooner or later.
    With my current ISP, my IPv6 access is 6RD based. I get a /60, with my current public ipv4 address (by DHCP) embedded into those 60 bits. Readressing is bound to happen sooner or later, and it happens every so often, and it breaks my IPv6 ACLs.
    I'm also looking for a way to write IPv6 ACLs with wildcard bits, not prefix/mask, so I can use them with ZBFW. So far, no sign of it.
    A few more comments:
    ULA addressing: 
    It may look tempting, plausible and intuitive to use dual global and ULA addressing. 
    I started this way as well. However, it turns out that Windows 7 has (had?) some issues with proper source address selection. The "longest common prefix" rule never seemed to work properly. In some cases, it would pick the global address to talk to ULA hosts, or stubbornly insist to use the ULA address to talk to an IPv6 internet host. It was a frustrating experience. Be sure to test this to the full extent (and back, and again and then some more) with every operating system you intend to use.
    Using /120:
    Be sure to test this as well, and very thoroughly. Subnet masks longer than /64 are sometimes called "uncharted territory" in IPv6. Longer subnet masks will break SLAAC, and there may be (embedded) devices that will not react benevolently to a subnet mask other than /64, or simply lack support for DHCPv6.
    adjust-mss
    I see you have "ip tcp adjust-mss 1300". While PMTUd may be mandatory with IPv6, I found it being broken already :-( . "ipv6 tcp adjust-mss .... " is now a separate command since IOS 15.4(1). I would suggest considering it, depending with your experience with PMTUd on IPv6.

  • IPv6 address  comparison

    Hi,
    How to do a comparison between two IPv6 address.
    Like I have a address range 1080::8:800:200C:417A to 1080::8:800:200C:417D
    Now user enter a IP address 1080::8:800:200C:417C
    How to find that this lies between the above range ??? How to claulate.
    Please help
    Regards,

    Here is some code (working but inefficient? Also, errors are not handled):
    import java.math.BigInteger;
    * @author talha
    public class IPV6Compare {
        public static void main(String... args){
            String lowerBound="1080::8:800:200C:417A";
            String upperBound="1080::8:800:200C:417D";
            String addressToTest="1080::8:800:200C:417C";
            BigInteger lowerBoundInt=new BigInteger(convertToStdForm(lowerBound).replace(":", ""), 16);
            BigInteger upperBoundInt=new BigInteger(convertToStdForm(upperBound).replace(":", ""), 16);
            BigInteger addressToTestInt=new BigInteger(convertToStdForm(addressToTest).replace(":", ""), 16);
            if(addressToTestInt.compareTo(lowerBoundInt)>=0 && addressToTestInt.compareTo(upperBoundInt)<=0){
                System.out.println("Address within range.");
            }else{
                System.out.println("Address out of range.");
        private static String convertToStdForm(String address){
            StringBuilder stdForm = new StringBuilder();
            address=address.trim();
            String[] splitted=address.split(":");
            for(String str:splitted){
                if("".equals(str)){
                    for(int i=0;i<8-splitted.length;i++){
                        stdForm.append("0000:");
                }else{
                    while(str.length()!=4)str="0"+str;
                    stdForm.append(str+":");
            return stdForm.substring(0, stdForm.length()-1);
    }Thanks!
    Edit: A little more efficient code (there is no need to convert to BigInteger :-)
    * @author talha
    public class IPV6Compare {
        public static void main(String... args){
            String lowerBound="1080::8:800:200C:417A";
            String upperBound="1080::8:800:200C:417D";
            String addressToTest="1080::8:800:200C:417C";
            lowerBound=convertToStdForm(lowerBound);
            upperBound=convertToStdForm(upperBound);
            addressToTest=convertToStdForm(addressToTest);
            if(addressToTest.compareTo(lowerBound)>=0 && addressToTest.compareTo(upperBound)<=0){
                System.out.println("Address within range.");
            }else {
                System.out.println("Address out of range.");
        private static String convertToStdForm(String address){
            StringBuilder stdForm = new StringBuilder();
            address=address.trim();
            String[] splitted=address.split(":");
            for(String str:splitted){
                if("".equals(str)){
                    for(int i=0;i<8-splitted.length;i++){
                        stdForm.append("0000:");
                }else{
                    while(str.length()!=4)str="0"+str;
                    stdForm.append(str+":");
            return stdForm.substring(0, stdForm.length()-1);
    }Edited by: T.B.M on Aug 4, 2009 12:43 AM

  • Cisco SF302-08P пропадает с порта trunk native vlan, когда подключаю IP PHONE.

    Здравствуйте!
    У меня возникла проблема с коммутатором Cisco SF302-08P. В частности проблема заключается в настройке порта для IP phone и ПК.
    Как известно это PoE коммутатор.
    vlan database
    vlan 47,147
    exit
    voice vlan id 147
    voice vlan oui-table add 0001e3 Siemens_AG_phone________
    voice vlan oui-table add 00036b Cisco_phone_____________
    voice vlan oui-table add 00096e Avaya___________________
    voice vlan oui-table add 000fe2 H3C_Aolynk______________
    voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
    voice vlan oui-table add 00d01e Pingtel_phone___________
    voice vlan oui-table add 00e075 Polycom/Veritel_phone___
    voice vlan oui-table add 00e0bb 3Com_phone______________
    hostname DepGrajdIniciativ
    ip ssh server
    snmp-server server
    ip telnet server
    interface vlan 47
     ip address 172.27.47.253 255.255.255.0
     no ip address dhcp
    interface fastethernet1
     storm-control broadcast enable
     storm-control broadcast level 10
     storm-control include-multicast
     port security max 10
     port security mode max-addresses
     port security discard trap 60
     spanning-tree portfast
     switchport trunk allowed vlan add 147
     switchport trunk native vlan 47                 <-----               
     macro description ip_phone_desktop
     !next command is internal.
     macro auto smartport dynamic_type ip_phone_desktop
    147 влан для Ip phone. 47 влан для компьютера.
    Дело в том, что когда, например, на 1 порт подключаю IP phone (cisco 6921), с порта пропадает настройка  "switchport trunk native vlan 47", соотвественно, на компьютере, который подключен к телефону на порт "computer", пропадает связь (теряется vlan 47?).  Приходится по новой прописывать, но он сохраняется до следующей перезагрзуки коммутатора или телефона.
    P.S. настройки на коммутаторе сохраняем командой "copy run start" или "wr". На телефоне "admin vlan" указан 147. 
    P.S.S. телефон питается по PoE.
    В чем может быть проблема? я работал со многими cisco коммутаторами, но нигде такой картины не видел....

  • SF302-08P layer 3 mode

    Hi,
    i'm trying to configure SF302-08P in layer 3 mode.
    ports 1 to 8 have ip phones and desktops, port GE1 in connected to a router (not cisco) that links to the internet.
    i created vlan 100 and assigned to ports 1 to 8 (untagged)
    i created vlan 200 and assigned to port ge1 (untagged)
    activated dhcp server , created pool with 192.168.26.0/24 gw 192.168.26.1
                           |router A| (192.168.16.0/24 gw 192.168.16.1)
                               |
                               |
                               | GE1 (192.168.16.14)
                           | SF302-08P |
                                     |
                                     |
    SPA504G+DESKTOP |    SPA504G+DESKTOP
            192.168.26.2                      192.168.26.4
             192.168.26.3                      192.168.26.5
    the problem that i'm facing is that SPA504G and desktops access the internet with their inter address 192.168.26.0/24 and not 192.168.16.14.
    is there a way to achieve what i'm looking ? how does routing work in this case ? shouldn't there be some kind of NAT ?
    thank you

    Hello Luis,
    Is there a particular reason that the switch needs to be in Layer 3 Mode?
    I think your scenario would work better if you configure NAT on your router and let the router act as the DHCP server. Then, the switch could be in Layer 2 Mode.
    Alex

  • 6to4 Addresses vs Regular IPv6 Addresses - Confusion

    Hi All, (Apologies if this question appears twice. Apparently I had an interface problem)
    I'm finishing up my studies on the IPv6 portion of the CCNA material, and my book seems to completly ignore the fact that 6to4 addresses seem to look different than how the rest of the chapter portrays IPv6 addressing. I've done google searches, and unfortunately I don't have anyone at work who is versed enough in this who will know, so I'm hoping someone can help.
    1. A normal IPv6 address:  2001:0db8:3c4d:0012:0000:0000:1234:56ab
       The same address in shorthand:  2001:db8:3c4d:12::1234:56ab
       A /64 of this space with autoconfiguration:  2001:db8:3c4d:12::/64 eui-64
       All of these addresses have, or will have 8 octets if written in long-hand, in other words - a valid IPv6 address.
    Here's my problem:  The addresses in the 6to4 section look like this:
       ipv6 address 2001:db8:2:2::1/64
    The book fails to mention what the "1" before the /64 is for, but I am assuming that it is an identifier and not part of the IPv6 address due to the " :: "   However, if this is the case, I only see 4 octets, and no eui-64 command, directing that the other 4 will be populated by the MAC padded.  And the "ipv6 address" syntax leads me to believe that this is a host address, and not a block/space statement (i.e. "ip address 192.168.0.1. 255.255.255.0," as opposed to "network 192.168.0.0 255.255.255.0)."
    If someone could shed some light on this, it would be most appreciated, as it is very confusing.

    Also, 6to4 IPv6 addresses have the IPv4 address of the 6to4 gateway embeded in them as well.  That is why they have a whole reseved block of 2002:/16.  Any gateway can algorithmically extract the IPv4 address for forwarding.
    2002:0b0c:0205:5/48 for example, would be correlated to IPv4 address 11.12.2.5 (which is the decimal of the IPv4 address 0b0c:2025 shown in hex)
    Earl Carter wrote a nice blog article on the general topic of IPv6 addresses at http://blogs.cisco.com/security/ipv6-addressing/
    And the commonutiy has settled on calling the 16-bit numbers between the colons "hextets."  In IPv4, each 8-bit portion between dotrs is called an "octet."  The truly pedantic will object taht a hextet should be 6 dits, bit "hextet" is easier to say than "hexadecitet." :-)
    Anotehr trivia point:  The letters in an IPv6 address should awalys be lower case.
    More arcana can be found at http://tools.ietf.org/html/draft-hartmann-6man-addresspartnaming-01, which is on track to become an RFC.

  • IPv6 Addressing Point to Point Links in the enterprise

    For an enterprise, it doesn't seem to make sense to use Global addressing for point to point, transit-only links and loopbacks.
    Link-local only addressing breaks debugging tools like traceroute, DNS, etc.
    Is Unique Local the correct choice for this?
    I've searched quite a bit and I've not found a lot of discussion about scope selection for point to point links.  Some RFCs such as 6164 imply Global scope vs Unique Local scope usage is a preference.  Most discussions of point to point addressing focus on bit length.  I'm assuming this means design concerns are agnostic toward scope selection.
    Is anyone aware of documentation I've missed or have any recommendations in this area?
    If ULA was the correct choice, address hierarchy might look like this:
    DataNetwork1 -- Router1 -- ULA.1.1 -- Link -- ULA1.2 -- Agg Router -- Core
    DataNetwork2 -- Router2 -- ULA.2.1 -- Link -- ULA2.2 -- Agg Router /
    DataNetwork3 -- Router3 -- ULA.3.1 -- Link -- ULA3.2 -- Agg Router /
    The network core would have summarized entries for DataNetwork[1|2|3] and ULA[1|2|3].  IE, there would be a Global hierarchy and a ULA hierarchy.

    Scott,
    Let me break this down into some categories for you.
    Address selection:
    I believe that best practice is to use Global Unicast Addressing everywhere (coupled with a proper security policy at your edge). ULA was a compromise for Site Local never being properly defined and whilst it can be used in the same way as GUA I don't believe it is worth it. Irrespective of what you use (GUA or ULA), subject to your security and routing policy traceroute will work from both ends (e.g. you tracing out, someone tracing in)
    Address masking:
    The general rule of thumb is that you allocate /64s to eveything and then mask down to the appropriate mask for the function you are expecting (P.S. Forget everything you learnt about IPv4 address conservation). If you are using /127 masks then in theory every p2p link in your network is either a 0 (::) or a 1 (::1)
    e.g.
    traceroute HostB:
    1     2001:1234:abcd:1::1
    2     2001:1234:abcd:2::1
    3     2001:1234:abcd:3::1
    4     2001::4:10
    The only exception to this is loopbacks, you can sequentially allocate /128s from the same /64 block
    NOTE: /127 support is recent and may not be supported by some vendors, in this case use /126 masking (same as you would use /30s in IPv4)
    If you have a /48 ( a normal enterise allocation) or larger then this should not be an issue ( you have access to 65536 x /64s) the only reason you would consider ULA for infrastructure numbering is because you have a small IPv6 pool. I would still argue you should get more IPv6 addresses than use ULA.
    I hope this helps
    Cheers

  • Connect to server using IPv6 address in afp URL

    I'm not sure whether this is the correct forum for this question, but does anyone know whether I can specify an IPv6 address in the "Connect to Server" dialog?
    I've setup IPv6 over direct-wired ethernet between my MBP and Mini. Using ping6, I can ping one from the other (but only when I specify -I en0)
    I've tried the following URLs:
    afp://[fe80::0216:cbff:dead:beef]
    afp://[fe80::0216:cbff:dead:beef%en0]
    I think the problem might be because I don't have an IPv6 router between the two hosts.
    Thanks.
    MacBook Pro 15 2.0GHz   Mac OS X (10.4.8)   mini 1.83GHz

    I have the same problem and for me it extends to everything from SSH to HTTP. I think that mac has a bug in it networking. I can't get it to work on any mac I've tried. Can your mini connect to your laptop?
    I've been googling for 3 days and can't find any solution.
    MBP   Mac OS X (10.4.9)  

  • Is it normal?(NetworkManager applet's strange output & 3 IPv6 address)

    1) label ppp0 appears in NetworkManager applet every time when I up vpn-connection
    2) Also something strange with enp5s0. Output of "ip addr":
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
        inet 127.0.0.1/8 scope host lo
           valid_lft forever preferred_lft forever
        inet6 ::1/128 scope host
           valid_lft forever preferred_lft forever
    2: enp5s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
        link/ether 10:bf:48:20:61:a4 brd ff:ff:ff:ff:ff:ff
        inet 10.0.122.144/8 brd 10.255.255.255 scope global dynamic enp5s0
           valid_lft 9283sec preferred_lft 9283sec
        inet6 2002:5be2:8e63:b:12bf:48ff:fe20:61a4/64 scope global noprefixroute dynamic
           valid_lft 2592003sec preferred_lft 604803sec
        inet6 fec0::b:12bf:48ff:fe20:61a4/64 scope site noprefixroute dynamic
           valid_lft 2592003sec preferred_lft 604803sec
        inet6 fe80::12bf:48ff:fe20:61a4/64 scope link
           valid_lft forever preferred_lft forever
    3: wlp3s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
        link/ether 00:08:ca:67:17:e9 brd ff:ff:ff:ff:ff:ff
    9: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1400 qdisc pfifo_fast state UNKNOWN group default qlen 3
        link/ppp
        inet 91.226.141.81 peer 1.1.1.1/32 scope global ppp0
           valid_lft forever preferred_lft forever
        inet 91.226.141.81/32 brd 91.226.141.81 scope global ppp0
           valid_lft forever preferred_lft forever
    Is it normal that this interface has three IPv6 addresses?

    Hi,
    We are hitting the software bug and the bug ID is CSCsz56711
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsz56711
    The issue is related to PCI componenet on the AP hardware and log that points to that is..
    bsnInitRcbSlot: slot 0 has venus radio(UNSUPPORT)
    The Replacement is the resolution and please contact your reseller or partner and if ur are the partner then RMA ids the resolution..
    Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
    Regards
    Surendra

  • Regarding the ipv6 address handling

    Hi,
    Are there any built-in functions in pl/sql for handling ipv6 addresses?
    The functions similar to inet_ntop and inet_pton in c++ are available in pl/sql?

    The closest I get to it is maybe dbms_network_acl_utility
    http://download.oracle.com/docs/cd/E11882_01/appdev.112/e16760/d_networkacl_utl.htm#ARPLS67249
    Subprogram     Description
    CONTAINS_HOST Function
    Determines if the given host is equal to or contained in the given host, domain, or subnet
    DOMAIN_LEVEL Function
    Returns the domain level of the given host name, domain, or subnet
    DOMAINS Function
    For a given host, this function returns the domains whose ACL assigned is used to determine if a user has the privilege to access the given host or not.
    EQUALS_HOST Function
    Determines if the two given hosts, domains, or subnets are equal

  • How to verify  if an IPV6 address entered in a textbox is valid ?

    Hi,
    How to verify if an IPV6 address entered in a text box is valid. I have a swing application. Until now we used only IPV4 address and we had a gui component with only four entries, which checked if the number entered is <= 255, so the user had to enter a correct address. Now with IPV6 there are IPV6 addresses, IPV4 mapped addresses, IPV6 zero compressed addresses and leading zeroes dropped kinds. We cannot supply a fix gui component.
    So if I provide a textcomponent which accepts strings - how do i check if the ip addresses entered by the user is valid. Can I use INET6Address to do this ? is there a way ?
    Thanks.

    InetAddress.getByName(String host)
    If it returns an Inet6Address without throwing an exception, I guess that would work.

Maybe you are looking for