How To Implement IPv6

How To Implement IPv6

Following sections describe how to configure Cyberoam IPv6 functionality. Currently, Cyberoam supports IPv6 routing and tunneling. Configuring IPv6 Interfaces Configuring IPv6 routing Configuring IPv6 over IPv4 tunneling Verify Connectivity IPv6 is version 6 of the Internet Protocol. It is an Internet Layer protocol for packetswitched internetworks. It has a larger address space than standard IPv4 hence can provide billions more unique IP addresses than IPv4. This results from the use of a 128-bit address, whereas IPv4 uses only 32 bits. The internet is currently in transition from IPv4 to IPv6 addressing. Cyberoam allows configuring IP address using following notations: Standard notation Compressed notation Represent the address as eight groups of 4 hexadecimal digits For example: 0EDC:BA98:0332:0000:CF8A:000C:2154:7313 If a 4 digit group is 0000, it may be omitted. For example: 3f2e:6c8b:78a3:0000:1725:6a2f:0370:6234 can be written as 3f2e:6c8b:78a3::1725:6a2f:0370:6234 4f7e:6c8b:79a3:0000:1725:0000:0370:6234 can be written as 4f7e:6c8b:79a3::1725::0370:6234 Mixed notation IPv4 addresses that are encapsulated in IPv6 addresses can be represented using the original IPv4 ``.'' notation as follows: For example: 0:0:0:0:0:0:127.32.67.15 0:0:0:0:0:FFFF:127.32.67.15 It is also possible to use the compressed notation, so the addresses above would be represented as: ::127.32.67.15 ::FFFF:127.32.67.15

Configuring IPv6 Interfaces

You can assign both an IPv4 and an IPv6 address to any Interface. Assigning an IPv6 address to the interface does not affect its IPv4 functionality. The IPv6 address you assign to the Interface receives only IPv6- addressed packets. IPv6 is not supported over PPPoE.

Copyright 1999-2010 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd.

How To Implement IPv6

To assign IPv6 address, execute following CLI command: cyberoam ipv6 interface Port<port number> address add <ipaddress6> where Port number Cyberoam Port A, B, C (depending on Cyberoam Appliance model) ipaddress6 IPv6 address E.g. cyberoam ipv6 interface PortB address add 3ffe:501:ffff:101:290:fbff:fe18:5968/64 Add Prefix list for the Interface The Prefix Information provides hosts with on-link prefixes and prefixes for Address Autoconfiguration. The Prefix Information appears in Router Advertisement packets. As a part of IPv6 Neighbor Discovery process, routers exchange lists of address prefixes to determine whether they are reachable on the interface or not. To add IPv6 prefix list, execute following CLI command: cyberoam ipv6 interface Port<port number> prefix add <ipaddress6> validlifetime <number> where port number Cyberoam Port A, B, C (depending on Cyberoam Appliance model) prefix add ipaddress6 Prefix IPv6 address number Integer. It is time in seconds that prefix will remain valid for the purpose of onlink determination.

Configuring IPv6 routing

Configure static routes and the router advertisements that Cyberoam sends on each interface. To configure static route, execute following CLI command: cyberoam ipv6 route add <ipaddress6> gateway <ipaddress6> interface Port<port number> where ipaddress6 IPv6 address Route for IPv6 traffic gateway <ipaddress6> - IPv6 address of gateway i.e. address to which ipv6 traffic is to be forwarded interface Port <port number> Cyberoam Port A, B, C (depending on Cyberoam Appliance model) through which traffic is routed E.g. cyberoam ipv6 route add 3ffe:501:ffff:101::/64 gateway fe80::210:f3ff:fe08:7d6c interface PortC Configuring IPv6 router advertisements To enable and configure router advertisement, execute following CLI command:
Copyright 1999-2010 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd.

How To Implement IPv6

cyberoam ipv6 interface Port<port number> router-adv send-adv enable E.g. cyberoam ipv6 interface PortC router-adv send-adv enable Other parameters that can be configured are: Parameters default-life Description Router Lifetime of router advertisements sent from the interface Current Hop Limit in the router advertisements sent out this interface MTU Value Enable or disable the managed address configuration flag in router advertisements Maximum time interval between sending unsolicited multicast router advertisements Minimum time interval between sending unsolicited multicast router advertisements Enable or disable the other stateful configuration flag in router advertisements Reachable Time Retransmission Time Enable or disable the flag indicating whether or not to send periodic router advertisements and to respond to router solicitations Displays Router Advertisement Configuration Valid Value 0-9000 seconds

hop-limit

0-255

link-mtu manage-flag

Default - Disable

max-interval

4-1800 seconds

min-interval

4-1800 seconds

other-flag

Default - Disable

reachable-time retrans-time send-adv

0-3600 milliseconds Default - Disable

show

Configuring IPv6 over IPv4 tunneling

Cyberoam supports IPv6 over IPv4 tunneling. IPv6 tunneling is transmitting IPv6addressed traffic over an IPv4- addressed network To configure tunnel, execute following CLI command: cyberoam ipv6 tunnel add <tunnel-name> remote-ip <ipaddress> local-ip <ipaddress> local-ip6 <ipaddress6> where tunnel-name name of IPv6 tunnel remote-ip <ipaddress> - The destination IPv4 address for this tunnel local-ip <ipaddress> - The source IPv4 address for this tunnel local-ip6 <ipaddress6> - The network prefix (IPv6 address an dnetmask) assigned to the interface to enableIPv6 processing on the interface.

Copyright 1999-2010 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd.

How To Implement IPv6

Verify connectivity
The output of the show command and ping6 command provides information you can use to confirm your configuration is working properly: ping6 <ipaddress6> <interface> - Ping to verify connectivity through the tunnel cyberoam ipv6 route show - Verifies if a route exists on the IPv6. cyberoam ipv6 tunnel show - Verify that the tunnel is up on the IPv6. cyberoam ipv6 interface Port<port number> prefix show - Displays Interface prefix

Document version 1.0-10.00.0309-20100816

Copyright 1999-2010 Elitecore Technologies Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Elitecore Technologies Ltd.