Hi,

You���re asking for an IA-NA here - a single IP, i.e. stateful IPv6.

Do you have an IPv6 address from SLAAC? Can you show the contents of an RA message?

You want to configure your DHCPv6 client to ask for IA-PD (a prefix).

On 6/10/2018, at 4:44 PM, Bill Walker <bill@wjw.nz> wrote:

It���s trying, but not getting anything back
 
 
IPv6: Sending on 2degrees10
DHCPv6: DHCPv6 client process: going into wait for events...
ICMPv6-ND: Sending RA to ff02::1 on 2degrees10
ICMPv6-ND:     MTU = 1492
IPv6: Packet src fe80::26e9:b3ff:fe92:d96 dest ff02::1 is pre-routed
IPV6: source fe80::26e9:b3ff:fe92:d96 (local)
      dest ff02::1 (2degrees10)
      traffic class 224, flow 0x0, len 72+0, prot 58, hops 255, originating
IPv6: Sending on 2degrees10
DHCPv6: Event received major: 1, minor: 0
DHCPv6: Sending SOLICIT to ff02::1:2 on 2degrees10
IPv6 DHCP: detailed packet contents
    src fe80::26e9:b3ff:fe92:d96
    dst ff02::1:2 (2degrees10)
    type SOLICIT(1), xid 7139920
    option ELAPSED-TIME(8), len 2
    option CLIENTID(1), len 10
    0003000196D2533B450A
    option ORO(6), len 4
    DNS-SERVERS,DOMAIN-LIST
    option IA-NA(3), len 12
    IAID 0x00130001, T1 0, T2 0
 
 
 
Sent from Mail for Windows 10
 
From: Bill Walker
Sent: Saturday, 6 October 2018 9:31 AM
To: Andre Sencioles
Cc: nznog@list.waikato.ac.nz
Subject: Re: [nznog] IPv6 / Cisco ASA / 2degrees UFB
 
On the subinterface I see an address
 
2degrees10 is up, line protocol is up
  IPv6 is enabled, link-local address is fe80::26e9:b3ff:fe92:d96  
  No global unicast address is configured
 
  Joined group address(es):
    ff02::1:ff92:d96
    ff02::2
    ff02::1
  ICMP error messages limited to one every 100 milliseconds
  ICMP redirects are enabled
  ND DAD is enabled, number of DAD attempts: 1
  ND reachable time is 30000 milliseconds
  ND advertised reachable time is 0 milliseconds
  ND advertised retransmit interval is 1000 milliseconds
  ND router advertisements are sent every 200 seconds
  ND router advertisements live for 1800 seconds
  Hosts use stateless autoconfig for addresses.
 
Which is the same interface the ipv4 address comes up on:
 
Interface GigabitEthernet0/7.10 "2degrees10", is up, line protocol is up
  Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
        VLAN identifier 10
        Description: 2degrees
        MAC address 24e9.b392.0d96, MTU 1492
        IP address xxx.xxx.xxx.xxx, subnet mask 255.255.255.255
  Traffic Statistics for "2degrees10":
        258001448 packets input, 203508132527 bytes
        152127591 packets output, 123285082718 bytes
        971621 packets dropped
 
With an ipv6  route set:
 
L   fe80::/10 [0/0]
     via ::, 2degrees10
L   ff00::/8 [0/0]
     via ::, 2degrees10
 
but I don���t get anything else, I���ll try doing some debug over the weekend.
 
Thanks,
 
Bill
 
Sent from Mail for Windows 10
 
From: Andre Sencioles
Sent: Saturday, 6 October 2018 8:41 AM
To: bill@wjw.nz
Cc: nznog@list.waikato.ac.nz
Subject: Re: [nznog] IPv6 / Cisco ASA / 2degrees UFB
 
Took me a while to get it working on my Linux router, but if I remember correctly, you can't request address allocation on the DHCP request. Needs to be PD only, else the DHCP server won't reply (something to do with the client excluding the address allocation from the PD request and the server not supporting the option, or the other way around).
 
The other thing I noticed was that DHCPv6 only worked after I had received the RA from the gateway and the default route was inserted.
 
So the process is:
1. PPPoE connected
2. SLAAC address assigned
3. RA received, default route added
4. DHCPv6 PD
 
This is the config I was using for DHCPcd:
interface pppoe
    ipv6rs
    ia_pd 1 wan/1 lan/2 dmz/3 lab/4 pppoe/5
 
 
Cheers,
Andre
 
 
On Fri, 5 Oct 2018 at 16:50, Bill Walker <bill@wjw.nz> wrote:
Hi All,
 
I���ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput.  I���ve managed to locate a suitably equipped ASA, however I cant get IPv6 going.  The config I have on the ASA is very similar to that of the router:
 
nterface GigabitEthernet0/7
description 2degrees
nameif EXTERNAL
security-level 0
no ip address
ciscoasa# sh run int gi0/7.10
!
interface GigabitEthernet0/7.10
description 2degrees
vlan 10
nameif 2degrees10
security-level 0
pppoe client vpdn group 2degrees
ip address pppoe setroute 
 ipv6 address autoconfig
ipv6 address dhcp
ipv6 enable
ipv6 dhcp client pd 2degrees-v6
 
However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config?
 
In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin)
 
Thanks,
 
Bill
 
Sent from Mail for Windows 10
 
_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
https://list.waikato.ac.nz/mailman/listinfo/nznog
 
 
_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
https://list.waikato.ac.nz/mailman/listinfo/nznog