Understanding IPv6 Address from RIR

Hi Folks,
I am very new to IPv6 and having some question need you guys advices as we are planning to integrate IPv6 to our existing network environment.
RIR allocated 2300:1480::/32 to us, but they said the assignment windows is 2300:1480::/48.
So what is the actual subnet to us? we don't quite understand the address assignment. How about 33-47 bits, it is belong to me or belong to RIR?
(Actual IPv6 address has been removed/modified)
Sent from Cisco Technical Support iPhone App

Hi Sean,
Further clarification with APNIC, this is their reply....
Does it meant, bit /33-47 is my main subnet And /48-/63 id customer's subnet and /64 is interface id or host in generally?
+++++
For your own infrastructure, you can assign the IP as per your
requirement. For your customers, you can only assign up to /48. If you
need to assign more then /48 to your customers, you need to submit your
APNIC second opinion request.
+++++
Sent from Cisco Technical Support iPhone App

Similar Messages

Static ipv6 address from a /64

Hi all
I have a cisco 6500 that i configured a /64 on int1/39 that has a linux server connected to it and supressed RAs. On this server i assigned a static ip,
2001:x:77:4::2. i can ping to/from the server with no issues. However when doing a show ipv6 neighbors i still see the auto config ipv6 on fast1/39.
interface FastEthernet1/39
ip address x.x.x.33 255.255.255.240
ip flow ingress
speed 100
duplex full
ipv6 address 2001:x:77:4::1/64
ipv6 nd ra suppress
spanning-tree portfast edge
My question why is that attached server getting an auto config ipv6 address when i have the supress command under interface. Also is it correct to assign a /64 to an int/vlan and statically assign ips instead or should i move to a /56. I'm not really sure if what im doing is common or if it create issues.
TIA, Paul

Deepak, while i assigned a static ip to the server doing a show ipv6 neighbor shows this static ip and it also shows the auto config ip. Again based on my config above shouldnt it jsut show the static ip. Why is SLAAC in play here if i have
ipv6 nd ra suppress on the interface, will this setup cause issues.
sh ipv6 neighbors
IPv6 Address                              Age Link-layer Addr State Interface
2001:x:77:4::2                            1 0019.b9e6.5647 STALE Fa1/39
2001:x:77:4:219:B9FF:FEE6:x     49 0019.b9e6.5647 STALE Fa1/39
FE80::219:B9FF:FEE6:5647                    1 0019.b9e6.5647 STALE Fa1/39
note i can ping the static and auto config ip and the server lists both of them.

Not receiving temp IPv6 address from router

I have spent the day trying to get IPv6 internet connectivity working in Arch and Im failing. No matter what I do my Arch install just isnt receiving and ipv6 temp address. If I use the exact same system but boot into another OS i automatically get an IPv6 temp address and can ping 1pv6.google.com .
If there is anything that might prevent this networking function from working Id appreciate to know what it could be. Thanks a lot.

I wont consider this solved until auto config works but in the mean time I have an ugly work around. I created a profile for eth0 to come up at 0.0.0.0 and I got static ipv6 working in my bridge like this
INTERFACE="br0"
CONNECTION="bridge"
DESCRIPTION="Gigabit Bridge"
POST_UP="ip -6 route add default via fe80::c851:85ff:fed0:e71f dev br0"
BRIDGE_INTERFACES="eth0"
IP="dhcp"
IP6="static"
ADDR6=(2001:470:1f07:be8:bd9a:b66d:248a:b866/64)
Gateway6=fe80::c851:85ff:fed0:e71f
ADDR='192.168.11.66'
#ROUTES=('192.168.0.0/24 via 192.168.1.2')
#GATEWAY='192.168.11.1'
#DNS=('8.8.8.8')

IPv6 address questions

I'm having trouble understanding IPv6 addresses. In IPv4 the CIDR slash notation means what subnet the address is in. But a /48 in IPv6 does not mean subnet. I have no idea what it means. For instance I've seen the address 2001:0:1:5::1/64, and I have no idea what the /64 means. Can someone explain it?
Link local address: it's not enough to put an FE80 to identify this kind of address, but for some reason, they decided to put FFFE in the middle of the ipv6 address. What were they thinking? Why do they need to identify this kind of address TWICE within the address, AND why couldn't they put the FFFE at the end or the beginning, but instead they put it right in the middle? WTF?
3 types of addresses? What why? with that many bits in an address there's no reason to have 3 of them. Theres enough for everyone.
Illogical allocation of bits. A global ip address reserves the last 64 bits for the host ip. This is equivalent to 18 quintillion hosts on ONE SUBNET! YEAH RIGHT! There's no way that's even remotely logical, feasible, or practical. The more I look at IPv6 notation, the more I think my 5th grader could have come up with a better design.
Also, why didn't they adopt the OSI model of addressing, like in ISIS. That has more than enough addresses for everyone.
Obviously i'm missing the point completely on IPv6. It sounds like the most unthoughtful pile of rubbish ever conceived. So can someone please direct me to a place or explain what the thought process was when creating this new addressing scheme?
bonus points: what happened to ipv5, and what was ipv1,ipv2,ipv3? I think the inventor should have called it IPv2000, because he really went overboard.

Hi Richee,
ISPs generally give ipv6 addresses to companies with /48 prefix length.
The company receiving this can create its own subnets within the /48 and /64 range.
The last 64 for bits of the address are generally used to insert the mac-address of the local interface when using stateless auto-configuration, but you can use it for subnetting as well, if you configure your addresses manually.
For the other questions I think this link could give you more info:
http://www.cisco.com/en/US/tech/tk872/tsd_technology_support_protocol_home.html
And one more little addition:
Nothing is perfect in this universe. Everything can be considered good or bad, it is just a question of viewpoint.
Try to look at ipv6 from both viewpoints. You will have surprises.
Cheers:
Istvan

IP phone not getting IPv6 address

Hi guys,
I am having trouble with receiving IPv6 address from my 2811 CME router that has been configured as a DHCPv6. Could you please help me what is wrong with my configuration below? Thank you.
Router#sh run
Building configuration...
Current configuration : 2327 bytes
! Last configuration change at 22:52:14 UTC Mon Feb 17 2014
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Router
boot-start-marker
boot-end-marker
no aaa new-model
dot11 syslog
ip source-route
no ip cef
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
ipv6 dhcp pool VOICE
address prefix 2001::/64
vendor-specific 9
suboption 1 address 2001::1
suboption 2 ascii "IP-Phone"
multilink bundle-name authenticated
voice-card 0
crypto pki token default removal timeout 0
license udi pid CISCO2811 sn FHK1213F0HN
redundancy
interface FastEthernet0/0
bandwidth 50
no ip address
duplex auto
speed auto
interface FastEthernet0/0.10
encapsulation dot1Q 10
ipv6 address 2001::1/64
ipv6 enable
ipv6 nd other-config-flag
ipv6 dhcp server VOICE
interface FastEthernet0/1
bandwidth 50
no ip address
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
tftp-server flash:SCCP41.9-3-1SR2-1S.loads
tftp-server flash:cnu41.9-3-1ES13.sbn
tftp-server flash:cvm41sccp.9-3-1ES13.sbn
tftp-server flash:dsp41.9-3-1ES13.sbn
tftp-server flash:jar41sccp.9-3-1ES13.sbn
tftp-server flash:term41.default.loads
tftp-server flash:apps41.9-3-1ES13.sbn
tftp-server flash:mk-sccp.jar alias English_United_States/mk-sccp.jar
tftp-server flash:g3-tones.xml alias United_States/g3-tones.xml
control-plane
mgcp profile default
telephony-service
protocol mode dual-stack preference ipv6
max-ephones 5
max-dn 5
ip source-address 2001::1
cnf-file location flash:
load 7941 SCCP41.9-3-1SR2-1S.loads
max-conferences 8 gain -6
transfer-system full-consult
create cnf-files version-stamp Jan 01 2002 00:00:00
ephone-dn 1
number 1000
ephone-dn 2
number 2000
ephone-dn 3
number 7000
ephone 1
device-security-mode none
mac-address 0017.9406.FD55
type 7941
button 1:1
ephone 2
device-security-mode none
mac-address 0016.46F5.F08E
button 1:2
ephone 3
device-security-mode none
mac-address 0017.941D.BE05
type 7941
button 1:3
line con 0
logging synchronous
line aux 0
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
end

Duplicate posts.
Go here: https://supportforums.cisco.com/thread/2267863

ISCSI Initiator favourites revert to using the IPv6 or the apipa IP address from other NICs instead of the source IP address that I specified

Windows 2008 R2
ISCSI Initiator favourites revert to using the IPv6 or the apipa IP address from other NICs instead of the source IP address that I specified.
When I manually connect to multiple targets and specify the correct ISCSI source IP address, I check the favourites and everything looks okay. But when the server is rebooted I check the favourites again and the source IP is now referencing the IPv6 and
sometimes the apipa address.
I have unbound IPv6 from the ISCSI NICS but this has made no difference.
Can anyone explain why this is happening?
Although the server still reconnects to the storage oaky, I’m concerned that if a path goes down that is might try to use the wrong interface to re-establish a connection.
Thanks.

Hi,
IPV6 is supported with MS iSCSI. Do you have Multiple Connections per Session (MCS) configured? Is your storage configured to use both IPv4 and IPv6?
If yes, please see if http://support.microsoft.com/kb/2014131 helps.
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to disable ipv6 address autoconfiguration ???

I am trying to disable ipv6 stateless address autoconfiguration to implement what this document describes:
http://docs.sun.com/app/docs/doc/816-4554/6maoq01o3?a=view
There are several problems though:
1)The manual says that something must be put inside the hostname6.xxx file but then goes on to give the command as it should be given from the command line instead of the content of the file. The manual should provide some form of exapmle content for the file.
2)I go to /etc/inet/ndpd.conf and put "ifdefault StatelessAddrConf false" inside, then I pkill -HUP in.ndpd and finally I issue ifconfig eri0 inet6 token fe80::c/10. However nothing happens. The interface address remains the one generated through autoconfiguration.
Could someone that has knowledge of this subject provide any help?
Thanks very much,
Thanasis

Hi,
I have a same problem, and think we didn't understand the documentation.
Here is the link of the ndpd.conf configuration page:
http://docs.sun.com/app/docs/doc/816-4554/6maoq01qt?a=view#ipv6-ref-10
I think this is the right sintax:
if
Sets per-interface parameters. Use the following syntax:
if interface [variable-value]
Table 11�3 /etc/inet/ndpd.conf Interface Configuration Variables
StatelessAddrConf
True
Controls whether the node configures its IPv6 address through stateless address autoconfiguration. If False is declared in ndpd.conf, then the address must be manually configured. For more information, refer to How to Configure a User-Specified IPv6 Token.
I think the variable is this: StatelessAddrConf
if-variable-name StatelessAddrConf false
I think: if StatelessAddrConf false
But I found the 'false' parameter with uppercase and lowercase letter.
(It is not working for me!)
And I found another configuration file, what is include the rules of the address (/usr/sbin/ipaddrsel ).
Here is the link:
http://docs.sun.com/app/docs/doc/816-5166/6mbb1kq56?a=view
Maybe, I found the solution.
http://docs.sun.com/app/docs/doc/816-4554/6maoq01qt?a=view#ipv6-ref-10
You can creat a logical interface, and you can set the IP address of this interface.
Example 11�6 Adding a Logical IPv6 Interface With the -addif Option of the ifconfig Command
The following form of the ifconfig command creates the hme0:3 logical interface:
// this is teh example, and it is not perfect on Sol10
# ifconfig hme0 inet6 addif up
Created new logical interface hme0:3
This form of ifconfig verifies the creation of the new interface:
# ifconfig hme0:3 inet6
hme0:3: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 2
inet6 inet6 fe80::203:baff:fe11:b321/10
Here is my solution:
ifconfig e1000g0 inet6 addif 1234:0000:0000:0000:0200:50FF:FE09:B980/10
ifconfig e1000g0:1 inet6 up
# ifconfig -a6
lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1
inet6 ::1/128
e1000g0: flags=2000840<RUNNING,MULTICAST,IPv6> mtu 1500 index 2
inet6 fe80::20d:60ff:feee:aba8/10
ether 0:d:60:ee:ab:a8
e1000g0:1: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 2
inet6 1234::200:50ff:fe09:b980/10
I have special IP address, but I don't know that it is working or not.
If you have any idea, please write!
Br,
Sanyi

IPv6 address allocation

I've got a best practices question.
We're planning our transition to IPv6. We've gone to ARIN and aquired a /48 for the company. My question is about the best way to manage that space.
Our company already has one a second office location (which is international) in addition to our corporate offices. I expect we will have more within the next couple of years. I can allocate pieces of our /48 to these locations (trying to plan careful to support route aggregation) or I can have each of our international locations get their own /48 from their respective registries.
What's the intent about the best way to handle this?
Thx
Patrick

Hi Patrick,
before jumping to provide an answer I would like you to consider the nature of the network you are building and whether or not you will be using own dedicated links or using the Internet as transmission infrastructure.
In the first case you own provider independent IPv6 addressing could be a good idea if you run BGP. This also would allow you to be multihomed in different countries and could also become a transit AS.
But if you only are forwarding own traffic and have a couple of connection in different countries with stable and reputable ISPs maybe the only thing you need is provider assigned space for each location and you do not even need to run BGP only an IGP to prevent your internal traffic from spilling on the Internet. This would prevent rerouting of traffico from a different link to a network with a failed ISP connection.
You might also consider provider independent address space assigned by RIR in the country where you have your subsidiaries and use BGP to advertise the whole address space to the entire world and achieve redundancy.
Fact is more parameters are needed to answer you question:
Are you running BGP now (do you have an AS number)
Are you (or willing to be) a transit network
Are you looking for multihoming (in a single RIR area or multiple)
How much money are investing to obtain resilience and reliability.
I hope this question will help you better define your problem
Cheers
Fabio

Transferring email addresses from one account to another

I'm not sure if this is a good place to post this but after spending a good bit of time on the phone with FiOS customer service and technical support I just feel like venting my frustrations and hope that maybe someone could give me a valid explanation of why this cannot be done.
To give a brief (hopefully) summary of what's going on...
My wife and I are currently in the process of moving from Florida to Maryland because of the current job market and economy situation. As always...the moving process has been a "blast". For at least a few months we will be "between" homes and will be staying with friends. Because of this we had to cancel our FiOS service (which I did last week and it will be shutting off sometime today). Since we've been very please with the actual service FiOS provides we have (or maybe I should say "had") every intention of signing back up with Verizon once we're in a new home in the Maryland area.
So here's where the trouble comes into play...I contacted Verizon to see if it would be possible to somehow transfer our existing Verizon.net email addresses from our account to my friend's account (the person I'm staying with). You would've thought I was asking for a year's worth fo free service. Initially I was told by customer service that this can't be done. They explained that an email address is like a phone number and two separate accounts cannot have the same email address. Thanks for the newsflash! I explained again that what I wanted to do was move my email addresses so they would now be associated with my friends account. This didn't seem like such a horrible request considering my friend pays for FiOS service and with that gets 9 available email addresses....and was only using 2 of them. She ultimately just told me it was something that couldn't be done. But she did inform me of the "Verizon Your Domain" service that would allow current FiOS subscribers to associate their Verizon.net email account with a new domain name that you create. It would cost $20 per year and would allow you to keep your Verizon.net email if you canceled FiOS service. This sounded like an ok option.
But still -- I was curious why I couldn't transfer email addresses. So I then contacted technical support. This time it was explained to me that an email address was like a social security #. It couldn't just be given to another person. Great analogies in use at Verizon....I give them that. I told the guy I was a fellow "techie" and asked him for a more detailed explanation. That's when it got good. That's what killed me. He spent all this time talking about ACL's and routing and how email addresses couldn't be moved because "you're talking about 2 million addresses". Long and short he was trying to say the Verizon email system was just too complex. Finally I told him that it had to be something that could be done....and his exact words were "well sure it can be done...but we're not going to do it if you're not paying for a service". Wow! Great response! I've been a paying customer of FiOS for about two years. I've had some form of service with Verizon for about 15 years (from phone service to mobile service with V-Wireless). I fully understand that I'm no longer paying for FiOS service. But my friend is. And he has 7 email accounts he's not using. So why couldn't they be moved? Because the system is too complex? Give me a break. Like this guy finally admitted...it boils down to money.
Finally I gave up. I told my wife that we'd just have to deal with switching to a new email address. Life will move on. She wanted to try the "Verizon Your Domain" option though. She started doing the process online...had some questions....and decided to call customer service. She got transferred around to three different people...the last of which told her "you need to call a different department" and then CLICK.
Great, great job Verizon. All I ask is if someone could give me some sort of response that makes sense. If you just don't want to offer the transfer option then tell me.
I expect to be in a new home within a month or two. And suddenly Comcast is looking very good.

spacedebris wrote:
Well, CS was right when they said that Verizon cannot transfer your email to another account. In order to do that they would have to overwrite the email of your friend ( I dont think your friend would apreciate that ). This is due to a limitation on the email system.
However, you may have another option. If you are going to be getting Verizon service again in the realitivly near future (4-8 weeks or so), Then after your acount is closed, contact tech support. If you get the right agent they will "enable" your email. That way you can continue to use it even though you dont have service any more. Now they cant do this for long but for temporary it can be done. Then once you get your service back, they can then move your existing email to your new account. (this can now be done as they will overwrite your new email with your old).
Now if your going to be without Verizon service for more than a couple months, you may be out of luck but this is one option
umm, oh bhoy!
In fact, a "repoint" of an email address CAN be completed onto another account AND it does not overwrite anything on the receiving account.    Each acount, whether its a FiOS account or a copper account, has an account number. The email address is assigned to the account number.    The email address can be "repointed" from one account to another, as an 'add-on' to the new account, then it can be 'repointed' back to another account later.    HOWEVER, the contract does say that you must have a valid account. AND, Verizon cannot (no company can) allow you to manipulate someone else's account.
as to the "after your acount is closed, contact tech support. If you get the right agent they will "enable" your email", well, the fact is that the account has to be provisioned to an address. So, though I have come accross accounts that seemed to still be "on" after the listed close date, it was not something that verizon's tier 1 tech support can effect (that's who you get on the phone when you call tech support) (note that 'sales' could not do this for you, either)   So good luck with that.
What happens is that Verizon will not allow anyone to take your email addresses for at least 6 months.
Before you cancelled you may have had an option to have a notice auto-replied to any email that gets sent to your email address, for a limited amount of time, like they can do with a telephone number ("this number has been changed to . . . . . ") that "this email address is temporarily suspended, or something. . . . I said MAY have had the opportunity. .. .   but if it was me, I would get to where you are going and make sure they have Verizon internet account already   and have them call verizon tech support (so they can verify their account info) with you standing there so that you can verify your old account info and immediately and plainly ask if you can have an email "repoint" done for you.
my .02
cjacobs001

How do i remove my e mail address from my i message

Can anyone tell me how I can remove my e mail address from my i mail, was notified by friends that everytime I i mail them my full e mail address shows instead of my name as usual?????
Hope somebody can help

Perhaps I don't understand your question. Above you mention "i mail"; I'm assuming you meant "iMessage". If that is want you meant, then have you turned iMessage to On in Settings>Messages? And if so, does it say anything just below the iMessage On/Off button (such as "waiting for activation")?

IPv6 Addressing Point to Point Links in the enterprise

For an enterprise, it doesn't seem to make sense to use Global addressing for point to point, transit-only links and loopbacks.
Link-local only addressing breaks debugging tools like traceroute, DNS, etc.
Is Unique Local the correct choice for this?
I've searched quite a bit and I've not found a lot of discussion about scope selection for point to point links. Some RFCs such as 6164 imply Global scope vs Unique Local scope usage is a preference. Most discussions of point to point addressing focus on bit length. I'm assuming this means design concerns are agnostic toward scope selection.
Is anyone aware of documentation I've missed or have any recommendations in this area?
If ULA was the correct choice, address hierarchy might look like this:
DataNetwork1 -- Router1 -- ULA.1.1 -- Link -- ULA1.2 -- Agg Router -- Core
DataNetwork2 -- Router2 -- ULA.2.1 -- Link -- ULA2.2 -- Agg Router /
DataNetwork3 -- Router3 -- ULA.3.1 -- Link -- ULA3.2 -- Agg Router /
The network core would have summarized entries for DataNetwork[1|2|3] and ULA[1|2|3]. IE, there would be a Global hierarchy and a ULA hierarchy.

Scott,
Let me break this down into some categories for you.
Address selection:
I believe that best practice is to use Global Unicast Addressing everywhere (coupled with a proper security policy at your edge). ULA was a compromise for Site Local never being properly defined and whilst it can be used in the same way as GUA I don't believe it is worth it. Irrespective of what you use (GUA or ULA), subject to your security and routing policy traceroute will work from both ends (e.g. you tracing out, someone tracing in)
Address masking:
The general rule of thumb is that you allocate /64s to eveything and then mask down to the appropriate mask for the function you are expecting (P.S. Forget everything you learnt about IPv4 address conservation). If you are using /127 masks then in theory every p2p link in your network is either a 0 (::) or a 1 (::1)
e.g.
traceroute HostB:
1     2001:1234:abcd:1::1
2     2001:1234:abcd:2::1
3     2001:1234:abcd:3::1
4     2001::4:10
The only exception to this is loopbacks, you can sequentially allocate /128s from the same /64 block
NOTE: /127 support is recent and may not be supported by some vendors, in this case use /126 masking (same as you would use /30s in IPv4)
If you have a /48 ( a normal enterise allocation) or larger then this should not be an issue ( you have access to 65536 x /64s) the only reason you would consider ULA for infrastructure numbering is because you have a small IPv6 pool. I would still argue you should get more IPv6 addresses than use ULA.
I hope this helps
Cheers

Need help understanding ipv6

Hi... I have a new wireless network camera and I've been successful at getting it connected but there is a big question as to whether I have the ipv6 part of it set up correctly... By the way, on the router end I have an AEBS...
I've been trying to understand the correct format for an ipv6 IP address... I found a little Windows based utility called IP Convert that when I put in an ipv4 address like 10.0.1.252, it converts that to ::0A00:01FC which is simply the hex equivalent of the above decimal numbers... On the other hand the network camera produces a page that shows the same ipv4 address (10.0.1.252) in the ipv6 realm as one of the following two lines... (There is confusion as to which is really the ipv6 IP address but I don't understand either one or how they might relate to the simpler one, ::0A00:01FC, above... These two lines are,
fe80::280:f0ff:fea7:8c5c
2002:4c67:6043:0:280:f0ff:fea7:8c5c
On one of the camera pages, both the above lines sit next to the single header, ipv6 IP Address...
Can anyone make any sense out of these two lines I've posted above and how they might relate to 10.0.1.252 in the ipv4 realm???
Any help would be much appreciated... thanks... bob...

Hi Robert,
You're correct -- IPv6 addresses are written in hex. But you can't just convert your IPv4 address to hex and have it be IPv6. IPv6 and IPv4 have different address spaces -- there is no connection between your IPv4 address and your IPv6 address.
It sounds as if your network camera does in fact support IPv6. Out of curiosity, what model is it?
Both of the IPv6 addresses you listed are being used by the camera. The fe80 address is its link-local address. These addresses are not routeable. They're used for internal "housekeeping" communication on the subnet (more technically, they're used for the IPv6 replacement for ARP, which isn't used in IPv6).
The 2002 address is the camera's public IPv6 address.
Having two addresses like this is very common for IPv6 devices. IPv6 devices always have the fe80 link-local address. In addition, they might have one or more public IPv6 addresses (which don't always start with 2002).
Hope this helps,
-derek

Clients not receiving DHCP IP address from HREAP centrally Switched Guest SSID

Hi All,
I am facing a problem in a newly deployed branch site where the Clients are not receiving DHCP IP address from a centrally switched Guest SSID. I see the client status is associated but the policy manager state is in DHCP_REQD.
The dhcp pool is configured on the controller itself. The local guest clients are able to get DHCP and all works fine, the issue is only with the clients in the remote site. The Hreap APs are in connected mode. Could you please suggest what could be the problem. Below is the out of the debug client.
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 Adding mobile on LWAPP AP 3c:ce:73:6d:37:00(1)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 Reassociation received from mobile on AP 3c:ce:73:6d:37:00
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 START (0) Changing ACL 'Guest-ACL' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1393)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 Applying site-specific IPv6 override for station 10:40:f3:91:7e:24 - vapId 17, site 'APG-MONZA', interface 'vlan_81'
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 START (0) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1393)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 Applying IPv6 Interface Policy for station 10:40:f3:91:7e:24 - vlan 81, interface id 13, interface 'vlan_81'
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 Applying site-specific override for station 10:40:f3:91:7e:24 - vapId 17, site 'APG-MONZA', interface 'vlan_81'
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 START (0) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1393)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 AUTHCHECK (2) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 3c:ce:73:6d:37:00 vapId 17 apVapId 1
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)
*apfMsConnTask_3: May 24 13:26:49.372: 10:40:f3:91:7e:24 apfMsAssoStateInc
*apfMsConnTask_3: May 24 13:26:49.373: 10:40:f3:91:7e:24 apfPemAddUser2 (apf_policy.c:222) Changing state for mobile 10:40:f3:91:7e:24 on AP 3c:ce:73:6d:37:00 from Idle to Associated
*apfMsConnTask_3: May 24 13:26:49.373: 10:40:f3:91:7e:24 Scheduling deletion of Mobile Station: (callerId: 49) in 28800 seconds
*apfMsConnTask_3: May 24 13:26:49.373: 10:40:f3:91:7e:24 Sending Assoc Response to station on BSSID 3c:ce:73:6d:37:00 (status 0) ApVapId 1 Slot 1
*apfMsConnTask_3: May 24 13:26:49.373: 10:40:f3:91:7e:24 apfProcessAssocReq (apf_80211.c:4672) Changing state for mobile 10:40:f3:91:7e:24 on AP 3c:ce:73:6d:37:00 from Associated to Associated
*apfReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4183, Adding TMP rule
*apfReceiveTask: May 24 11:35:53.373: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 3c:ce:73:6d:37:00, slot 1, interface = 13, QOS = 3
ACL Id = 255, Jumbo F
*apfReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 81, IPv6 intf id = 13
*apfReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)
*pemReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 Sent an XID frame
*apfMsConnTask_3: May 24 13:26:49.401: 10:40:f3:91:7e:24 Updating AID for REAP AP Client 3c:ce:73:6d:37:00 - AID ===> 1
*apfReceiveTask: May 24 13:28:49.315: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout
*apfReceiveTask: May 24 13:28:49.315: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs.
*apfReceiveTask: May 24 13:28:49.315: 10:40:f3:91:7e:24 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds
*osapiBsnTimer: May 24 13:28:59.315: 10:40:f3:91:7e:24 apfMsExpireCallback (apf_ms.c:599) Expiring Mobile!
*apfReceiveTask: May 24 13:28:59.315: 10:40:f3:91:7e:24 apfMsExpireMobileStation (apf_ms.c:4897) Changing state for mobile 10:40:f3:91:7e:24 on AP 3c:ce:73:6d:37:00 from Associated to Disassociated
*apfReceiveTask: May 24 13:28:59.315: 10:40:f3:91:7e:24 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds
*osapiBsnTimer: May 24 13:29:09.315: 10:40:f3:91:7e:24 apfMsExpireCallback (apf_ms.c:599) Expiring Mobile!
*apfReceiveTask: May 24 13:29:09.316: 10:40:f3:91:7e:24 Sent Deauthenticate to mobile on BSSID 3c:ce:73:6d:37:00 slot 1(caller apf_ms.c:4981)
*apfReceiveTask: May 24 13:29:09.316: 10:40:f3:91:7e:24 apfMsAssoStateDec
*apfReceiveTask: May 24 13:29:09.316: 10:40:f3:91:7e:24 apfMsExpireMobileStation (apf_ms.c:5018) Changing state for mobile 10:40:f3:91:7e:24 on AP 3c:ce:73:6d:37:00 from Disassociated to Idle
*apfReceiveTask: May 24 13:29:09.316: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [3c:ce:73:6d:37:00]
*apfReceiveTask: May 24 13:29:09.316: 10:40:f3:91:7e:24 Deleting mobile on AP 3c:ce:73:6d:37:00(1)
*pemReceiveTask: May 24 13:29:09.317: 10:40:f3:91:7e:24 0.0.0.0 Removed NPU entry.

#does the client at the remote site roams between AP that connects to different WLC?
#type 9 is not good.
*pemReceiveTask: May 24 13:26:49.373: 10:40:f3:91:7e:24 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
#Does your dhcp server getting hits.
#Also, get debug dhcp message & packet.
#Dhcp server is not responding.
*apfReceiveTask: May 24 13:28:49.315: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout
*apfReceiveTask: May 24 13:28:49.315: 10:40:f3:91:7e:24 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs.

Connect to server using IPv6 address in afp URL

I'm not sure whether this is the correct forum for this question, but does anyone know whether I can specify an IPv6 address in the "Connect to Server" dialog?
I've setup IPv6 over direct-wired ethernet between my MBP and Mini. Using ping6, I can ping one from the other (but only when I specify -I en0)
I've tried the following URLs:
afp://[fe80::0216:cbff:dead:beef]
afp://[fe80::0216:cbff:dead:beef%en0]
I think the problem might be because I don't have an IPv6 router between the two hosts.
Thanks.
MacBook Pro 15 2.0GHz Mac OS X (10.4.8) mini 1.83GHz

I have the same problem and for me it extends to everything from SSH to HTTP. I think that mac has a bug in it networking. I can't get it to work on any mac I've tried. Can your mini connect to your laptop?
I've been googling for 3 days and can't find any solution.
MBP Mac OS X (10.4.9)

Can't get ipv6 address assigned correctly.

I use NetworkManager and dhclient for auto-configuration but it has some weird problems.
When I boot up my laptop, I only have chance to get access to ipv6 network, when I fail, I tried to delete the connection in Network Management Settings, and then added a new profile, disable and then enable the network again. Sometimes it works well, but sometimes it failed to auto-config.
If I use the command:
$ ip -6 rout
then I'll get the following message:
unreachable fe80::/64 dev lo proto kernel metric 256 error -101
fe80::/64 dev wlan0 proto kernel metric 256
default via fe80::2e0:2ff:fe54:59 dev wlan0 proto static metric 1
every time the default gateway is configured well, sometimes the address the address is missed , and if I do the following:
$ ping6 -I wlan0 -c 4 fe80::2e0:2ff:fe54:59
It responses normally.
PING fe80::2e0:2ff:fe54:59(fe80::2e0:2ff:fe54:59) from fe80::1034:56ff:fe78:9124 wlan0: 56 data bytes
64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=1 ttl=64 time=5.32 ms
64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=2 ttl=64 time=6.64 ms
64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=3 ttl=64 time=10.6 ms
64 bytes from fe80::2e0:2ff:fe54:59: icmp_seq=4 ttl=64 time=3.60 ms
--- fe80::2e0:2ff:fe54:59 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 3.603/6.546/10.617/2.587 ms
do the following:
$ ip -6 addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000
inet6 2001:250:4400:d000::161/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::1034:56ff:fe78:9124/64 scope link
valid_lft forever preferred_lft forever
I found I just sometimes can get the ipv6 address start with 2001:
If the address is assigned, then:
$ ping6 ipv6.google.com
PING ipv6.google.com(ipv6.google.com) 56 data bytes
^C
--- ipv6.google.com ping statistics ---
11 packets transmitted, 0 received, 100% packet loss, time 10008ms
response nothing!
Then I switch into Windows 7, if something like above happened, then I managed to set the MAC address to a random value such as 12-34-56-78-91-23, soon, the problem will be corrected, I'll get a new ipv6 address assigned by DHCPv6 server. If I switch back to arch, set the MAC address in NetworkManager, it didn't have function at most time, and the ipv6 address even won't change!
Can anyone help me with this problem?
by the way, I never get ipv6 address when I use dhcpcd.

bernarcher wrote:
Hello and welcome to the forums heliumhgy.
Just in case you are wondering where your post has been gone: The moderators board received this message from you:
I dont need tunnel to access to ipv6, My univ use dual-stack to get both ipv4 and v6 work around all campus.
This is because you inadvertently used the "Report" link. But don't worry this happens rather often.
Just cause I caught the glimpse of re-blabla, and mistaken it as reply
Last edited by heliumhgy (2012-11-29 03:16:11)

Understanding IPv6 Address from RIR

Similar Messages

Maybe you are looking for