icmpv6

[darkdi0dx]

Hi networkers,

Simple question maybe, but I need some help with this one.

I've got IPv4-network on which I now will implement IPv6(dual-stack) on a couple of subnets, to try it out and to learn more about IPv6.

Okey, subnet A and subnet B is now dual-stack subnets. Between those subnets I've got a Cisco firewall, ASA5550. I've placed a pc (Windows Vista with the windows firewall off) in each subnet with a static IPv4 and an static IPv6 ip-address. So far so good.

Subnet A IPv6 address is: FEC0:0:0:1001::1/64

Subnet B IPv6 address is: FEC0:0:0:1003::1/64

IPv4 ping works fine between pc's in subnet A and B. But, IPv6 ping doesn't work. I have configured IPv6 ACLs to permit ip,  icmp6 and icmp6/echo-reply between subnet A and subnet B. Problem is still there :-(

ASA5550 is running software version: 8.4(1) with ASDM 6.4(1)

What have I forgotten?

BR

Tom

[Andrew Yourtchenko · Accepted solution]

Tom,

Packet tracer would be the first place to start - maybe it gives a hint right away.

If that does not give a quick win - then as Bruce mentioned: split the problem into its parts:

if you have a topology:

A -- [cloud A]---- ASA ---- [cloud B] -- B

Then if you can not ping from A to B, then either the echo request gets dropped by something on the way A->B,

or the echo reply gets dropped by something on the way B->A. (NB: I am not discounting anything, including the clouds

or even hosts themselves, as candidates to drop the packets, to avoid jumping to conclusions)

Various packet captures will allow to probe different points and verify whether the packet is there or not and narrow down to the place where the packets are dropped.

cheers,

andrew