Re: [nznog] IPv6 / Cisco ASA / 2degrees UFB

I have packet level logging turned on, can’t see any drops. Also have logging on the default deny rule. Sent from my iPhone

On 6/10/2018, at 6:52 PM, Pieter De Wit wrote:

Firewall not dropping it ?

Sent from my iPhone

...

On 6/10/2018, at 16:44, Bill Walker wrote:

It’s trying, but not getting anything back

IPv6: Sending on 2degrees10 DHCPv6: DHCPv6 client process: going into wait for events... ICMPv6-ND: Sending RA to ff02::1 on 2degrees10 ICMPv6-ND: MTU = 1492 IPv6: Packet src fe80::26e9:b3ff:fe92:d96 dest ff02::1 is pre-routed IPV6: source fe80::26e9:b3ff:fe92:d96 (local) dest ff02::1 (2degrees10) traffic class 224, flow 0x0, len 72+0, prot 58, hops 255, originating IPv6: Sending on 2degrees10 DHCPv6: Event received major: 1, minor: 0 DHCPv6: Sending SOLICIT to ff02::1:2 on 2degrees10 IPv6 DHCP: detailed packet contents src fe80::26e9:b3ff:fe92:d96 dst ff02::1:2 (2degrees10) type SOLICIT(1), xid 7139920 option ELAPSED-TIME(8), len 2 option CLIENTID(1), len 10 0003000196D2533B450A option ORO(6), len 4 DNS-SERVERS,DOMAIN-LIST option IA-NA(3), len 12 IAID 0x00130001, T1 0, T2 0

Sent from Mail for Windows 10

From: Bill Walker Sent: Saturday, 6 October 2018 9:31 AM To: Andre Sencioles Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] IPv6 / Cisco ASA / 2degrees UFB

On the subinterface I see an address

2degrees10 is up, line protocol is up IPv6 is enabled, link-local address is fe80::26e9:b3ff:fe92:d96 No global unicast address is configured

Joined group address(es): ff02::1:ff92:d96 ff02::2 ff02::1 ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 1000 milliseconds ND router advertisements are sent every 200 seconds ND router advertisements live for 1800 seconds Hosts use stateless autoconfig for addresses.

Which is the same interface the ipv4 address comes up on:

Interface GigabitEthernet0/7.10 "2degrees10", is up, line protocol is up Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec VLAN identifier 10 Description: 2degrees MAC address 24e9.b392.0d96, MTU 1492 IP address xxx.xxx.xxx.xxx, subnet mask 255.255.255.255 Traffic Statistics for "2degrees10": 258001448 packets input, 203508132527 bytes 152127591 packets output, 123285082718 bytes 971621 packets dropped

With an ipv6 route set:

L fe80::/10 [0/0] via ::, 2degrees10 L ff00::/8 [0/0] via ::, 2degrees10

but I don’t get anything else, I’ll try doing some debug over the weekend.

Thanks,

Bill

Sent from Mail for Windows 10

From: Andre Sencioles Sent: Saturday, 6 October 2018 8:41 AM To: bill(a)wjw.nz Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] IPv6 / Cisco ASA / 2degrees UFB

Took me a while to get it working on my Linux router, but if I remember correctly, you can't request address allocation on the DHCP request. Needs to be PD only, else the DHCP server won't reply (something to do with the client excluding the address allocation from the PD request and the server not supporting the option, or the other way around).

The other thing I noticed was that DHCPv6 only worked after I had received the RA from the gateway and the default route was inserted.

So the process is: 1. PPPoE connected 2. SLAAC address assigned 3. RA received, default route added 4. DHCPv6 PD

This is the config I was using for DHCPcd: interface pppoe ipv6rs ia_pd 1 wan/1 lan/2 dmz/3 lab/4 pppoe/5

Cheers, Andre

On Fri, 5 Oct 2018 at 16:50, Bill Walker wrote: Hi All,

I’ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput. I’ve managed to locate a suitably equipped ASA, however I cant get IPv6 going. The config I have on the ASA is very similar to that of the router:

nterface GigabitEthernet0/7 description 2degrees nameif EXTERNAL security-level 0 no ip address ciscoasa# sh run int gi0/7.10 ! interface GigabitEthernet0/7.10 description 2degrees vlan 10 nameif 2degrees10 security-level 0 pppoe client vpdn group 2degrees ip address pppoe setroute ipv6 address autoconfig ipv6 address dhcp ipv6 enable ipv6 dhcp client pd 2degrees-v6

However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config?

In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin)

Thanks,

Bill

Sent from Mail for Windows 10

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog