07-08-2024 12:11 PM
I know that this will sound odd, but how do I turn off all IPv6 from running in a C9300 running IOS-XE 17.9.5
I've found many articles and STIG's that accomplish this via complicated ACL's but I would like to think there would be an easier way
Solved! Go to Solution.
07-08-2024 12:21 PM
Hi @joseph.duffy ,
IPv6 routing is not enabled by default in IOS-XE.
You need to explicitly turn it on with the following command: ipv6 unicast-routing
What you might be referring to though, is the fact that some IPv6 traffic might traverse the C9300 encapsulated in IPv4 packets. As you mentioned, one way to make sure that this does not happen is to build an ACL that protects you against it.
Regards,
07-08-2024 12:19 PM
I think by Use
Interface range
No ipv6 enable
This will disable ipv6 in all interfaces
MHM
07-09-2024 01:47 PM
MHM,
Thanks, but it's not an option on my interfaces under the 17.9.5 version. Looks like I'll have to implement the larger grouping of ipv6 access-list method
- Joe
07-09-2024 02:02 PM
This command run only in l3 port not under l2 port' this SW so I think all port is l2' you can convert it to l3 via no switchport the add no ipv6 enable.
Goodluck
MHM
07-08-2024 12:21 PM
Hi @joseph.duffy ,
IPv6 routing is not enabled by default in IOS-XE.
You need to explicitly turn it on with the following command: ipv6 unicast-routing
What you might be referring to though, is the fact that some IPv6 traffic might traverse the C9300 encapsulated in IPv4 packets. As you mentioned, one way to make sure that this does not happen is to build an ACL that protects you against it.
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide