• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

IPv6 with Cisco 1801W Router

Started by bardack, January 28, 2011, 04:52:19 AM

Previous topic - Next topic

bardack

The funny thing is that from outside it is the opposite:

outside -> router (::1)  -> OK
outside -> server (::2)  -> NOT OK
outside -> laptop (::3)  -> NOT OK

This is very strange, but probably a small detail apparently ...

antillie

What is the running config of the router? You don't have any IPv6 ACLs on it do you?

bardack

Please check the first page, complete config of my 1801W is there.

I suspect the problem is coming from the router but where ... ?

Thx :)

cconn

hopefully my google-fu is working;

from http://www.gossamer-threads.com/lists/cisco/nsp/52397


I think you need "ipv6 enable" on your FastEthernet0 interface.  Is this where you are plugging in the server???


also, what is your IOS version?  I remember reading that IPv6 over BVI interfaces was iffy/non-functional.  But in your case the BVI seems to be working....so I suspect that is not the issue.

bardack

Well I already tested to "ipv6 enable" on Fa0 and also on BVI1, but nothing worked.

My Router is on version: Version 12.4(15)T4

My server is connected to Cisco 2900 switch, and my switch is then connected to the Router

bardack

I kept 'ipv6 enable' activated on Fa0 + BVI1.
I cannot use that command for my Dot11Radio0 ... strange.

It doesn't look as an acl or something ... this is just weird ... :(

cconn

what port is your 2900 switch connecting to?  Fe0?

run a tcpdump/wireshark and see if you are getting RAs from the 1801.

bardack

Server is connected on Fa0/1
Layer 2 switch, then no power on any Fa0/* interfaces.

I'll run wireshark and check what's going wrong ...

bardack

# tcpdump -t -n -i eth0 -s 512 -vv ip6 or proto ipv6

ping from laptop (::3) to router (::1) :


IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:1f15:131a::3 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:1f15:131a::1
  source link-address option (1), length 8 (1): 00:23:14:c1:14:40
    0x0000:  0023 14c1 1440
IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:1f15:131a::3 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:1f15:131a::1
  source link-address option (1), length 8 (1): 00:23:14:c1:14:40
    0x0000:  0023 14c1 1440
IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:1f15:131a::3 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:1f15:131a::1
  source link-address option (1), length 8 (1): 00:23:14:c1:14:40
    0x0000:  0023 14c1 1440
IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:1f15:131a::3 > ff02::1:ff00:1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:1f15:131a::1
  source link-address option (1), length 8 (1): 00:23:14:c1:14:40
    0x0000:  0023 14c1 1440


It seems that nobody is answering that, from inside.
From outside, the ping works on 2001:470:1f15:131a::1 ... which means that from outside it answer ...

Rahhh so weird :(:(:(

bardack

I enabled debug:

# debug ipv6 packet detail
# terminal monitor

on my Cisco router ...

I issued the same ping again (from laptop/server -> router) ... no debug written ...


pbrutsch

bardack,

The version of IOS you are running does not support IPv6 on BVI interfaces.

You will need to run IOS 15.1T, not IOS 12.4(15)T.

Upgrading IOS may also require a DRAM upgrade.

cconn

yeah I thought I had read that somewhere....

welcome to the new world of cisco licensing of IOS15  ::)

according to this tho, you could try and move your IP processing from the BVI to the Fe interface;

http://www.gossamer-threads.com/lists/cisco/nsp/52397

leaving your IPv4 stuff on the BVI and IPv6 on an interface that is in the bridge group...worth a try, I have no BVI routers to test on.


bardack

Arghhhhh :(:(:(

At least, many thanks for the final answer.
I cannot move ipv6 to Fa interface because the only layer3 Fa I have on my router is Fa0 ...

Well ... What other solution do I have? ... :(


bardack

I tested with my Cisco router 837 (no wifi but I use a LinkSys as AP) and it works perfectly :)

from laptop/server, I am able to ping the other client and the router :):):)
It finally works locally.

From outside, I am able to ping the inside address of the router (1F15 ::1) but not the addresses of the clients ...
Almost done :)

Thx for your help anyway

bardack

laptop->outside : works
server -> outside: works

outside -> laptop : not working
outside -> server: works

:):):)