Cisco ASA 5505, IPv6 and TunnelBroker

[Jose Pena]

Hello everybody,

this is the configuration sample that Tunnelbroker gives to IOS router (not ASA )

configure terminal

interface Tunnel0

description Hurricane Electric IPv6 Tunnel Broker

no ip address

ipv6 enable

ipv6 address xx:xx:xx:xx:::2/64

tunnel source MY.WAN.IP..248

tunnel destination TUNNEL.BROERKIP.104.74

tunnel mode ipv6ip

ipv6 route ::/0 Tunnel0

end

The questions is how to put that into Cisco ASA 5505 with 8.2(1) OS version.

If anyone has be done this one, a good sample will be really appreciated.

Have a nice day/night.

Jos P.

[Karsten Iwen · Accepted solution]

easy: You just don't do that ... These tunnels are not supported on the ASA. As a workaround you could place an IOS-router in front of your ASA or into a DMZ. Or even better, ask your ISP for native IPv6. But for me, asking the ISP did not help in the last five years ...

regards, Karsten

Sent from Cisco Technical Support iPad App

[Tim Glen]

I have a tunnel setup with Hurricane Electric.   I have an ASA that is in front of an IOS router. Should the ASA pass this tunnel traffic ? 

Network looks like....

Internet <->  ASA <->  L3 Switch (IOS15) <-> Windows Boxes

I cannot get the tunnel up.

Do I need to setup any ACL's or static's on the ASA to pass the traffic from the IPv6 provider to the L3 Switch ?

Thanks

[Karsten Iwen]

You need to make sure that IP/41 can pass between the two tunnel-endpoints.

[Jose Pena]

tglen:

Can you explain how to create a tunnel with TunnelBroker? I read about it here and the ASA can do only encrypted tunnels and tunnelbroker doesn't support encrypted tunnels. I will appreciate any information.

Have a nice day.

[Karsten Iwen]

he is talking about transporting a tunnel through the ASA.

Sent from Cisco Technical Support iPad App