cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
369
Views
0
Helpful
3
Replies
Highlighted
Beginner
Beginner

Neighbor solicitation / Neighbor advertisement not pass through SG250-26p

Hi, I have a SG250-26 release 2.5.0.90 and I am facing an IPv6 deployment problem.

I've build an IPv6 SLAAC & stateful router on Pfsense, but the communication between devices through the switch is not working.

I can see RA and RS in and out of the switch, devices connected to the switch therefore are getting an a valid IPv6 address (via RD, ULA type), but it is impossible to get unicast of ICMPv6 (ping) working between devices connected to the switch.

Is there an option I must allow/enable to get this ICMPv6 messages to working?

I also have a problem with DHCPv6 solicit messages.

Bridge Multicast Filtering is enabled (forwarding method via IP group address).

 

3 REPLIES 3
Highlighted
Cisco Employee

Re: Neighbor solicitation / Neighbor advertisement not pass through SG250-26p

Bear in mind that the NS is sent on the solicited node multicast address, so any kind of multicast filtering might interfere. It would make sense to disable the multicast filtering and see if the NS and NA could be exchanged.

 

Regards,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México
Highlighted
Beginner
Beginner

Re: Neighbor solicitation / Neighbor advertisement not pass through SG250-26p

Thanks for the feedback. At first glance I did not see any improvements. I'll have to perform some more testing to confirm if it changed anything. I have the MLD snooper/querrier enabled as well... of course it only works if filtering is on, but when it's enabled should I not see an entry in the MLD group table like "ff02::1:2" when a DHCPv6 solicit is sent by a client? Because that's also not working :( 

Highlighted
Beginner
Beginner

Re: Neighbor solicitation / Neighbor advertisement not pass through SG250-26p

It may sound stupid, but I'll ask anyway. Do I need to turn on IPv6 interface on the switch to actively enable IPv6 unicast traffic? Meaning do I need to assign an IPv6 address to my switch for it to allow IPv6 unicast traffic through my network or should it just let everything pass through it? 

I am managing my switch over IPv4 and until now did not see a need to enable IPv6 interface and routing, but perhaps I should start there?

This widget could not be displayed.