Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Create a new article
4497
Views
5
Helpful
3
Comments

ASA 5506-X with ipv6 no access to internet

Klaxel
Level 1
Level 1

‎02-08-2018 01:25 AM - edited ‎03-08-2019 07:03 PM

We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.

In Syslog I also see that the inside request for the ipv6 Website (https://[2a00:1450:4016:80d::2003]/) and also the traffic fro outside to the ip of the Computer were the https: command was started.

 

Any idea why the Website will not been displayed?

Labels:
Comments
timway001
Level 1
Level 1
‎02-08-2018 07:01 PM

Are you able to ping Google's IPv6 DNS servers? If so, try varying the MTU to ensure that path MTU discovery is working through the ASA.

Klaxel
Level 1
Level 1
‎02-08-2018 10:05 PM
No ping is also not working!
James Leinweber
Level 4
Level 4
‎02-19-2018 08:54 AM
If ICMPv6 echo request/reply (ping) isn't working, you probably have to solve an IPv6 routing issue first. If you capture traffic from the outside interface of the firewall, is it receiving ICMPv6 Router Advertisements from your ISP? If not, talk to your ISP. If so, does it include an prefix matching your outside interface address?
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents