PPP over IPv6

[FlorianViaN]

Hello,

I'm trying to configure PPPoE in IPv6 on a Cisco Router 7301 (without RADIUS) but it doesn't send DNS(ip name-server) and an IPv6 configuration from the pool (Windows 7).

I tried in IPv4, and everything worked.

VLANs

2 : fd01::120:0/112

96 : fd01::96:0/112

120 :fd01::120:0/112

This is an IPv6 Test network

Thanks.

My network

Router

aaa new-model
pppoe-forwarding
ip cef
!
ip domain name server1.stageipv6.com
ip name-server fd01::120:53
ip ssh version 2
ipv6 unicast-routing
ipv6 cef
!
username test password 7 06120A3258
!
bba-group pppoe stag_pppoe
 virtual-template 1
 sessions per-mac limit 2
!
interface GigabitEthernet0/0
 description VLAN 2
 ip address 80.245.16.27 255.255.255.128
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
 ipv6 address FD01::2:1000/112
 ipv6 enable
!
interface GigabitEthernet0/1
 description VLAN 96
 ip address 192.168.96.27 255.255.255.0
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
 ipv6 address FD01::96:1/112
 ipv6 enable
 pppoe enable group stag_pppoe
!
interface Virtual-Template1
 description pppoe bba1
 no ip address
 ipv6 address autoconfig
 ipv6 enable
 ipv6 mtu 1492
 no peer default ip address
 peer default ipv6 pool pool_pppoe
 ppp authentication chap callin
!
ipv6 route FD01::120:0/112 FD01::2:2
ipv6 local pool pool_pppoe FD01::96:0/112 114

ipconfig /all

No field IPv6 address
Just IPv6 link local : fe80:....
DNS : fec0:0:0:0:ffff::1%1
 fec0:0:0:0:ffff::2%1
 fec0:0:0:0:ffff::3%1

[FlorianViaN]

Hello,

Windows 7 Professional

I don't know how and why, but now it works correctly.

Thanks for your help and see you later for another question.

Regards

[FlorianViaN]

Hello,

Now I am trying to set Dual Stack in PPPoE, is it possible to provide IPv4 & IPv6 at the same time ?

Regards

[Harold Ritter]

Hi Florian,

Yes, dual stack is supported in the PPPoE context.

Regards

[FlorianViaN]

Hello,

Well, I don't know why but IPv4 is not delivered.

So I've just edited :

ip name-server 80.245.17.100
ip cef
no ip domain lookup
interface Virtual-Template 1
     ip unnumbered Loopback1
     ip mtu 1492
     ipv6 enable
     ipv6 nd other-config-flag
     no ipv6 nd ra suppress
     ipv6 dhcp server test rapid-commit
     peer default ip address pool ipv4ppp
     peer default ipv6 pool pool_pppoe
     ppp authentication chap callin
ip local pool ipv4ppp 192.168.0.5 192.168.0.8
ipv6 local pool pool_pppoe fd01:1:1:94::/62 64

Regards

[Harold Ritter]

Hi Florian,

Does the workstation get an IPv4 address? Can you attach a ipconfig /all from the workstation.

Regards

[FlorianViaN]

Hello,

I don't know why (again) but it works fine now, without changed anything, I wrote the configuration twice times.
Thanks

Regards

[FlorianViaN]

Hello,

Now, I would like to create a tunnel for example :

* To reach 1 website IPv6-only with an IPv4 address

* To reach 1 website IPv4-only with an IPv6 address

I need to create an interface Tunnel on my router but I'm lost in the configuration

6to4 Tunnel

description tunnel to IPv6
no ip address
ipv6 address fd01:1:1:1::1000/64
tunnel source g0/0 
tunnel destination IPv4Website Mask
tunnel mode ipv6ip

Edit : I'm sorry but I saw a problem with the IPv4 PPP. I didn't put a Tunnel for the moment.

Indeed, when I choose only IPv6 in configuration (disabled TCP/IP v4)

=> Ping Website IPv6 = OK

=> Ping Website IPv4 = OK (but why)

With my only IPv4 configuration

=> Nothing works

Regards

[Harold Ritter]

Hi Florian,

I am not sure I understand the following statements:

* To reach 1 website IPv6-only with an IPv4 address

* To reach 1 website IPv4-only with an IPv6 address

Do you mean you would like to access an ipv6 only web server from an ipv4 only client and vice versa? This would only be possible using a NAT64, SLB64 or some sort of web proxy that runs ipv4 on one side and ipv6 on the other.

Could you please explain in a bit more detail.

Regards

[FlorianViaN]

Hello Harold,

Yes, you've understood.

So, with the same test networking schema, I have my server DNS (IPv4 & IPv6) and two websites (one in IPv4, one in IPv6). My network is not visible on the Internet, only if you are connected on the router PPP.

Then, when a client from the PPP is connected with an IPv6 address (disabled IPv4), he could go on the website IPv4-only and vice versa.

I have set up the configuration (tunneling) on the router, don't you ?

I hope that I am understandable, if not tell me.

Edit  Also my IPv4 PPP doesn't work

Thanks, regards.

[Harold Ritter]

Hi Florian,

If the ipv4 only workstation wants to access the ipv4 only web server (or ipv6 only workstation wants to access the ipv6 only wer server), there is no need for any type of tunneling, if of course your network infrastructure is dual stack. Can you please tell about what kind of tunnel you are referring to and between what devices you set it up?

Regards

[FlorianViaN]

Hello,

Yes, but the IPv4-only workstation to IPv6-only website needs tunneling ?
I said that the configuration will be on the router if it is the good thing to do but I didn't set it up.

Regards

[Harold Ritter]

Hi Florian,

For the v4 only workstation to v6 only server, you do not need tunnel, You would rather use something like NAT64, SLB64 or some sort of proxy that can accept a v4 connection and establish a v6 connection to the server on behalf of the v4 workstation.

Tunnels will not help if the workstation and the server do not share a common protocol.

Regards

[FlorianViaN]

Hello,

Okay, but NAT64 & SLB64 are support on ASR 1000 Series only or not ? Because I'm working on 7301 Series.

To set up a proxy on my internal network is it possible ? (proxy v4/v6 like SiXxS, Hurricane)

Thanks for your patience, and your answers.

Regards

[Harold Ritter]

Hi Florian,

Support for nat64 is currently available on the ASA, asr1k, asr9k (with ISM blade) and CRS (with CGSE blade). It is coming on the ISR in version 15.4(1)T. SLB64 is supported on the ACE30.

The best approach is to offer dual stack to all of your users, so they can use either ipv6 or ipv4 to access the Internet. Is this not possible in your case.

Regards

[FlorianViaN]

Hello Harold,

Thanks for all, so I finished the transition part.

I have another question, in IPv6 but it's about a Freeradius configuration (failed to bind IP address) in command line, I'll be back if it doesn't work on the router configuration.

Regards