Monday, December 28, 2020

Cisco ASA IPV6 - SLAAC and prefix delegation

Hello fellow networkers!

So i've been given a small project of implementing ipv6 on a customer firewall.

I must admit, IPv6 is not my strong force, and i barely touched it since i joined networking in 2010. My proudest ipv6 moment is probably ospfv3 in an ISP network.

Anyhow - i got an ASA 5506 and i need to get ipv6 up and running.

I've configured the router infront - and the outside interface of the ASA. All good here seems to be working.

On the inside my customer wants 2 things.

A /64 for the clients - xxxx:xxxx:1002::/64

and a /52 for prefix delegation xxxx:xxxx:1002:1000::/52

So for the clients i've configured the inside interface, and made a dhcp pool aswell.

ipv6 dhcp pool IPv6-DHCP dns-server 2001:4860:4860::8888 dns-server 2001:4860:4860::8844 interface GigabitEthernet1/2 nameif inside ipv6 address xxxx:xxxx:1002::1/64 ipv6 nd other-config-flag ipv6 dhcp server IPv6-DHCP 

I haven't tested it with the customer yet, but i do believe this works aswell, since i see clients in my show ipv6 neighbors.

So this is where my problem begins, because whenever i wanna add a prefix delegation it just tells me I can't when i have dhcp server configured.

(config-if)# ipv6 dhcp client pd Test-prefix ERROR: Interface is in DHCPv6 server mode 

I might just be stupid, but is there any way i can have this working?



No comments:

Post a Comment