HI,
I am trying to get IPv6 to work across my VLAN's I have IPv4 working no problem but to be perfectly honest I'm a newbie to IPv6 and am very confused here as to what need sot take place.
Topology
Comcast Modem > Ubiquity EdgeMax Lite > Cisco 3560-X
VLAN 192 on the Cisco 3560 is the Internet uplink to the Ubiquity Edge Lite.
Cisco VLAN 192 Configuration
c3560x(config-if)#do sh run int vlan 192
Building configuration...
Current configuration : 155 bytes
!
interface Vlan192
description Internet VLAN
ip address 192.168.1.2 255.255.255.0
ipv6 address autoconfig default
ipv6 nd router-preference High
end
c3560x(config-if)#
The Ubiquity EdgeMax Configuration looks as follows
ubnt@gw01:~$ show configuration
firewall {
all-ping enable
broadcast-ping disable
group {
network-group BOGONS {
network 10.0.0.0/8
network 100.64.0.0/10
network 127.0.0.0/8
network 169.254.0.0/16
network 172.16.0.0/12
network 192.0.0.0/24
network 192.0.2.0/24
network 192.168.0.0/16
network 198.18.0.0/15
network 198.51.100.0/24
network 203.0.113.0/24
network 224.0.0.0/4
network 240.0.0.0/4
}
}
ipv6-name WANv6_IN {
default-action drop
description "WAN inbound traffic forwarded to LAN"
enable-default-log
rule 10 {
action accept
description "Allow established/related sessions"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
ipv6-name WANv6_LOCAL {
default-action drop
description "WAN inbound traffic to the router"
enable-default-log
rule 10 {
action accept
description "Allow established/related sessions"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow IPv6 icmp"
protocol ipv6-icmp
}
rule 40 {
action accept
description "allow dhcpv6"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name LAN_IN {
default-action accept
description "drop invlaid state"
rule 1 {
action drop
log disable
state {
invalid enable
}
}
}
name WAN_IN {
default-action drop
description WAN-To-LAN
rule 10 {
action accept
description "Allow established/related"
log disable
state {
established enable
related enable
}
}
rule 30 {
action drop
description "Drop invalid state"
log disable
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description WAN-to-Router-Interface
rule 10 {
action accept
description "Allow established/related"
log disable
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
log disable
state {
invalid enable
}
}
rule 30 {
action accept
description "allow icmp"
log disable
protocol icmp
}
rule 40 {
action drop
description "drop bogon source"
disable
log enable
source {
group {
network-group BOGONS
}
}
}
rule 50 {
action accept
description "Allow external connections to OpenVPN"
destination {
port 1194
}
log disable
protocol udp
}
}
name WAN_OUT {
default-action accept
description "BLOCK OutBound Traffic"
rule 1 {
action drop
description "NTP BLOCK PORT 123"
destination {
port 123
}
log enable
protocol tcp_udp
source {
address 10.0.1.155
}
state {
established enable
invalid enable
new enable
related enable
}
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
address dhcp
description Internet
dhcpv6-pd {
pd 0 {
interface eth1 {
host-address ::1
prefix-id :1
service slaac
}
interface eth2 {
host-address ::1
prefix-id :2
service slaac
}
prefix-length 60
}
rapid-commit enable
}
duplex auto
firewall {
in {
ipv6-name WANv6_IN
name WAN_IN
}
local {
ipv6-name WANv6_LOCAL
name WAN_LOCAL
}
out {
name WAN_OUT
}
}
speed auto
}
ethernet eth1 {
address 192.168.1.1/24
description Local
duplex auto
firewall {
in {
name LAN_IN
}
}
speed auto
}
ethernet eth2 {
address 192.168.2.1/24
description "Local 2"
disable
duplex auto
firewall {
in {
name LAN_IN
}
}
speed auto
}
ubnt@gw01:~$
Any help would be greatly appreciated.
