cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
593
Views
0
Helpful
2
Replies

IPv6 Routing

Hello Experts,

 

Am currently in the midst of IPv6 deployment in our company's LAN but I hit a problem after configuring all our router and firewall with IPv6. Our current firewall is Cisco ASA 5510 with software version 8.4(4)1 while our WAN router (CE) with software version 12.4(24)T (Advanced IP services). After configuring our WAN router and firewall (we are using dual-stack mode), we found out that we unable to access internet using IPv6 from behind of our firewall though we had allowed the IPv6 traffic to pass through. Our firewall is running on routed mode instead of transparent.

There's a few things that I had encountered besides not able to access internet using IPv6:

  • Using my desktop, am able to test connectivity (PING) up to our WAN router (2001:0db8:0:110::2/126) but not beyond.
  • Using online ping and traceroute utilities for connectivity test to my desktop from internet. The result is failed but it works when I did for our WAN router's IPv6 address.
  • Am able to ping and perform traceroute to Google DNSes, our ISP DNSes and various sites using IPv6 from our WAN router but not from our Cisco ASA firewall and behind.
  • Our network routing has been set at our router which pointing to our network as well as the default routing to our ISP (we are using static route).

I believe that I made a mistake somewhere but am not sure what it is and where. Our ISP advised us to check on our LAN configuration but am not sure what they meant by that since our configuration and set up is fairly straight forward and simple.

 

Thank you very much for your advice.

 

Regards,

 

Alex

2 Replies 2

johnd2310
Level 8
Level 8

Hi,

 

Have you had a second look at you firewall rules for IPV6. Are you using routing protocol or static routing for IPV6? Have a look at the routing as well?

 

Thanks

John

**Please rate posts you find helpful**

Hi,

Just found out the routing issue is at our ISP. They had 'fixed' the problem and we are now able to use IPv6 for internet.

 

Thanks for your advice.

 

Regards,

 

Alex