topic Cisco ASA 5505, IPv6 and TunnelBroker in Network Security

Cisco ASA 5505, IPv6 and TunnelBroker

Jose Pena — Mon, 11 Mar 2019 23:21:13 GMT

Hello everybody,

this is the configuration sample that Tunnelbroker gives to IOS router (not ASA )

configure terminal

interface Tunnel0

description Hurricane Electric IPv6 Tunnel Broker

no ip address

ipv6 enable

ipv6 address xx:xx:xx:xx:::2/64

tunnel source MY.WAN.IP..248

tunnel destination TUNNEL.BROERKIP.104.74

tunnel mode ipv6ip

ipv6 route ::/0 Tunnel0

end

The questions is how to put that into Cisco ASA 5505 with 8.2(1) OS version.

If anyone has be done this one, a good sample will be really appreciated.

Have a nice day/night.

Jos P.

Re: Cisco ASA 5505, IPv6 and TunnelBroker

Karsten Iwen — Wed, 20 Jun 2012 06:18:00 GMT

easy: You just don't do that ... These tunnels are not supported on the ASA. As a workaround you could place an IOS-router in front of your ASA or into a DMZ. Or even better, ask your ISP for native IPv6. But for me, asking the ISP did not help in the last five years ...

regards, Karsten

Sent from Cisco Technical Support iPad App

Cisco ASA 5505, IPv6 and TunnelBroker

Tim Glen — Mon, 03 Sep 2012 02:44:18 GMT

I have a tunnel setup with Hurricane Electric. I have an ASA that is in front of an IOS router. Should the ASA pass this tunnel traffic ?

Network looks like....

Internet <-> ASA <-> L3 Switch (IOS15) <-> Windows Boxes

I cannot get the tunnel up.

Do I need to setup any ACL's or static's on the ASA to pass the traffic from the IPv6 provider to the L3 Switch ?

Thanks

Cisco ASA 5505, IPv6 and TunnelBroker

Karsten Iwen — Mon, 03 Sep 2012 06:11:36 GMT

You need to make sure that IP/41 can pass between the two tunnel-endpoints.

Cisco ASA 5505, IPv6 and TunnelBroker

Jose Pena — Tue, 04 Sep 2012 15:26:32 GMT

tglen:

Can you explain how to create a tunnel with TunnelBroker? I read about it here and the ASA can do only encrypted tunnels and tunnelbroker doesn't support encrypted tunnels. I will appreciate any information.

Have a nice day.

Re: Cisco ASA 5505, IPv6 and TunnelBroker

Karsten Iwen — Tue, 04 Sep 2012 19:44:05 GMT

he is talking about transporting a tunnel through the ASA.

Sent from Cisco Technical Support iPad App