Native IPv6 over PPPoA on Cisco IOS
(Update: this post was updated based on comments from my colleagues)
Here is a short howto on how to configure native IPv6 (so, no tunnel) on a PPP based DSL line, without an underlying subnet or whatever. The modem/router we'll be using is a Cisco 877 on a Dutch DSL (an unnamed ISP providing L3 connectivity) line
It is assumed that IPv4 and the underlying ADSL is working normally. We'll be configuring things as a dual-stack system, with the Cisco handing out IPv6 addresses to clients. Remember, this is IPv6, so we will be needing a firewall as soon as everything works!
I have configured a VLAN interface for handling the LAN side of the router, but you could just as easily do this on a FastEthernet port. The Dialer0 interface is the dialer handling the PPP session.
ipv6 unicast-routing ipv6 cef interface Vlan1 description LAN ipv6 address YOUR_IPV6_NET:SUBNET::/64 eui-64 ipv6 enable interface Dialer0 ipv6 address autoconfig ipv6 enable ipv6 route ::/0 Dialer0
If you received a /48 from your ISP, something like 2xxx:yyyy:zzzz::/48, then pick a subnet from this assignment, in my case I chose 100, but this could be anything. So my VLAN 1 config looks like this:
interface Vlan1 description LAN ipv6 address 2xxx:yyyy:zzzz::100::/64 eui-64 ipv6 enable
Note that on a Cisco 877 (or any other Cisco router) you could assign various subnets like this to each and every port, VLAN or WIFI interface you have available. This should give you loads of neat opportunities for micromanaging access between subnets on your LAN.
Nothing else is needed, unless you also want to assign an IPv6 address for the DNS server, then you also need to add the following:
ipv6 dhcp pool DHCPv6 dns-server DNS_SERVER_IPV6_ADDRESS domain-name YOUR_LOCAL_DOMAIN interface Vlan1 ipv6 nd managed-config-flag ipv6 dhcp server DHCPv6
Next time, firewalling.
Comments
Comments powered by Disqus