Hi,
theres an Cisco 1921er Router within an SEC Lic. My Provider does DUALSTACK on WAN (ipv4 and ipv6).
My Problem: Clients on GigabitEthernet0/1 can only via ipv4 on the Internet,by enable IPV6 it will not works
when disable ipv4 and actiate ipv6 on the client( e.g. like an MAC OS X PC) , then only google.de works....
maybe i may something wrong? Can someone help me please?
<code>
Cisco1921#show running-config
Building configuration...
Current configuration : 6950 bytes
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime localtime
service password-encryption
!
hostname Cisco1921
!
boot-start-marker
boot-end-marker
!
!
security authentication failure rate 3 log
security passwords min-length 10
enable secret 5 $1$LhN7$kX2KVBkrnJKrKopjJiE/o/
!
no aaa new-model
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
!
!
!
!
!
!
!
!
!
ip dhcp binding cleanup interval 600
ip dhcp excluded-address 192.168.50.170 192.168.50.254
ip dhcp excluded-address 192.168.50.1 192.168.50.153
!
ip dhcp pool Internal Network
network 192.168.50.0 255.255.255.0
domain-name soho.intern
default-router 192.168.50.2
dns-server 192.168.50.2
!
!
!
ip domain name soho.intern
ip name-server 212.18.0.5
ip name-server 212.18.3.5
ip name-server 2001:A60::53:1
ip name-server 2001:A60::53:2
ip inspect name Firewall udp
ip inspect name Firewall sip
ip inspect name Firewall rtsp
ip inspect name Firewall ftp
ip inspect name Firewall icmp
ip inspect name Firewall pptp
ip inspect name Firewall tcp
ip inspect name Firewall https
ip inspect name Firewall pop3s
ip inspect name Firewall smtp
ip inspect name Firewall imaps
ip cef
ipv6 unicast-routing
ipv6 dhcp pool NODE-DHCPV6
dns-server 2001:A60::53:1
dns-server 2001:A60::53:2
domain-name soho.intern
!
ipv6 inspect name inspectv6 tcp
ipv6 inspect name inspectv6 udp
ipv6 inspect name inspectv6 icmp
ipv6 inspect name inspectv6 ftp
ipv6 cef
!
multilink bundle-name authenticated
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-3541750139
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3541750139
revocation-check none
rsakeypair TP-self-signed-3541750139
!
!
crypto pki certificate chain TP-self-signed-3541750139
certificate self-signed 01
XXXXXXX
6BCD837F 3B77ED7C E35EB8E4 506E08
quit
license udi pid CISCO1921/K9 sn FXXXXX
!
!
username user4754 password 7 XXXXXXXXXX
!
redundancy
!
!
!
!
!
controller VDSL 0/1/0
firmware filename flash:VA_A_39m_B_38u_24h.bin
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
description NETWORK INTERN
ip address 192.168.50.2 255.255.255.0
ip access-group 111 out
ip accounting output-packets
ip accounting access-violations
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
duplex auto
speed auto
ipv6 address NODE-PD ::1:0:0:0:1/64
ipv6 enable
ipv6 nd other-config-flag
ipv6 dhcp server NODE-DHCPV6 rapid-commit preference 1 allow-hint
ipv6 verify unicast reverse-path
ipv6 inspect inspectv6 out
no mop enabled
!
interface ATM0/1/0
no ip address
no atm ilmi-keepalive
!
interface ATM0/1/0.1 point-to-point
pvc 1/32
bridge-dot1q encap 40
pppoe-client dial-pool-number 1
!
!
interface Ethernet0/1/0
no ip address
no ip route-cache
!
interface Ethernet0/1/0.40
encapsulation dot1Q 40
no ip route-cache
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface GigabitEthernet0/0/0
description NETWORK VOIP
no ip address
!
interface GigabitEthernet0/0/1
no ip address
!
interface GigabitEthernet0/0/2
no ip address
!
interface GigabitEthernet0/0/3
no ip address
!
interface Vlan1
no ip address
!
interface Dialer0
description VDSL Einwahl Interface to ISP MNET
mtu 1492
ip address negotiated
ip access-group 111 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip inspect Firewall out
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer idle-timeout 1800 inbound
dialer-group 1
ipv6 address NODE-PD ::FF:0:0:0:1/128
ipv6 enable
ipv6 mtu 1492
ipv6 dhcp client pd NODE-PD rapid-commit
ipv6 verify unicast reverse-path
ipv6 inspect inspectv6 out
ipv6 traffic-filter native-ipv6-Firewall in
no keepalive
ppp authentication pap chap callin
ppp chap hostname XXXXXXXXX@mdsl.mnet-online.de
ppp chap password 7 XXXXXXX
ppp ipcp dns request
ppp ipcp mask request
ppp ipcp route default
no cdp enable
!
ip forward-protocol nd
!
ip http server
ip http secure-server
!
ip dns server
no ip nat service sip udp port 5060
ip nat inside source list 101 interface Dialer0 overload
!
dialer-list 1 protocol ip list 101
ipv6 route ::/0 Dialer0
!
!
access-list 101 permit ip 192.168.50.0 0.0.0.255 any
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq domain any
access-list 111 permit tcp any eq domain any
access-list 111 permit udp any eq ntp any
access-list 111 permit gre any any
access-list 111 permit udp any eq bootps any
access-list 111 permit udp any any eq 546
access-list 111 permit udp any eq 5060 any
access-list 111 deny ip any any log
!
ipv6 access-list native-ipv6-Firewall
permit icmp any any
permit udp 2001::/56 eq 547 2001::/56
permit udp FE80::/10 eq 547 FE80::/10
permit tcp 2001::/56 eq 547 2001::/56
permit tcp any any established
permit udp any any eq 546
deny ipv6 any any
!
control-plane
!
!
!
line con 0
logging synchronous
login local
transport preferred none
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 XXXXXXXX
login local
transport preferred none
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end
</code>
Annother Commands , maybe helpful?
<code>
Cisco1921#sh ipv6 int brief
Em0/0 [administratively down/down]
unassigned
GigabitEthernet0/0 [administratively down/down]
unassigned
GigabitEthernet0/1 [up/up]
FE80::669E:F3FF:FE57:B41
2001:A61:20F8:C401::1
ATM0/1/0 [up/up]
unassigned
ATM0/1/0.1 [up/up]
unassigned
Ethernet0/1/0 [down/down]
unassigned
Ethernet0/1/0.40 [down/down]
unassigned
GigabitEthernet0/0/0 [down/down]
unassigned
GigabitEthernet0/0/1 [down/down]
unassigned
GigabitEthernet0/0/2 [down/down]
unassigned
GigabitEthernet0/0/3 [down/down]
unassigned
Dialer0 [up/up]
FE80::669E:F3FF:FE57:B40
2001:A61:20F8:C4FF::1
NVI0 [up/up]
unassigned
Virtual-Access1 [up/up]
unassigned
Virtual-Access2 [up/up]
FE80::669E:F3FF:FE57:B40
Vlan1 [down/down]
unassigned
</code>
This are my IPs from the DHCP on Cisco .....
IPV6:Addresse: 2001:a61:20f8:c401:aa20:66ff:fe52:4e84 Prefix 64
IPV6:Addresse: 2001:a61:20f8:78bd:3de2:4de2:aed5:1c82 Prefix 64
Router IPV6___:fe80::669e:f3ff:fe57:b41
DNS :dns-server 2001:A60::53:1 (from ISP)
DNS:dns-server dns-server 2001:A60::53:2 (from ISP)
by checking ipv6 on Clientbrowser like Firefox (howismyipv6.com),, i also may get the following ipv6:
2001:A61:20F8:C401:34DF:A000:EFF4:2015
some more Commands....
<code>
Cisco1921#show ipv6 int
GigabitEthernet0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::669E:F3FF:FE57:B41
No Virtual link-local address(es):
Description: NETWORK INTERN
General-prefix in use for addressing
Global unicast address(es):
2001:A61:20F8:C401::1, subnet is 2001:A61:20F8:C401::/64 [CAL/PRE]
valid lifetime 5731 preferred lifetime 2131
Joined group address(es):
FF02::1
FF02::2
FF02::1:2
FF02::1:FF00:1
FF02::1:FF57:B41
FF05::1:3
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Input features: Common Flow Table Stile classification Common pak subblock Verify Unicast Reverse-Path
Output features: Common Flow Table Stile Classification Firewall Inspection
IPv6 verify source reachable-via rx, allow default
17 verification drop(s) (process), 0 (CEF)
0 suppressed verification drop(s) (process), 0 (CEF)
Outbound Inspection Rule inspectv6
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Hosts use DHCP to obtain other configuration.
Dialer0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::669E:F3FF:FE57:B40
No Virtual link-local address(es):
Description: VDSL Einwahl Interface to ISP MNET
General-prefix in use for addressing
Global unicast address(es):
2001:A61:20F8:C4FF::1, subnet is 2001:A61:20F8:C4FF::1/128 [CAL/PRE]
valid lifetime 5731 preferred lifetime 2131
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
FF02::1:FF57:B40
MTU is 1492 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Input features: Common Flow Table Stile classification Dialer i/f override Common pak subblock Access List Verify Unicast Reverse-Path
Output features: Common Flow Table Stile Classification Firewall Inspection
Inbound access list native-ipv6-Firewall
IPv6 verify source reachable-via rx, allow default
130 verification drop(s) (process), 0 (CEF)
0 suppressed verification drop(s) (process), 0 (CEF)
Outbound Inspection Rule inspectv6
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
Virtual-Access2 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::669E:F3FF:FE57:B40
No Virtual link-local address(es):
Description: VDSL Einwahl Interface to ISP MNET
No global unicast address is configured
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF57:B40
MTU is 1492 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Input features: Dialer i/f override Common pak subblock
Output features: Firewall Inspection Dialer idle reset
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
</code>
<code>
Cisco1921#show ipv6 dhcp pool
DHCPv6 pool: NODE-DHCPV6
DNS server: 2001:A60::53:1
DNS server: 2001:A60::53:2
Domain name: soho.intern
Active clients: 0
</code>
Hmm why is Active Clients:0??? theres only a Cisco connected to the WAN PORT (EHWIC.VA-DSL-B, and GigabitEthernet0/1 ) connected with my MACOSX....., so one Client..
should there also being one? but why ZERO=?????
NACHTRAG:
Some LOGS from Console.....
<code>
*Oct 3 09:53:50: %IPV6_ROUTING-3-RIB: ipv6_is_addr_ours called for link-local address with wrong tableid -Process= "DNS Server", ipl= 0, pid= 433
-Traceback= 22B31DC4z 22B321B8z 22B35E70z 22B35FF8z 210329D0z 210329B4z
*Oct 3 09:54:00: %IPV6_ROUTING-3-RIB: ipv6_is_addr_ours called for link-local address with wrong tableid -Process= "DNS Server", ipl= 0, pid= 433
-Traceback= 22B31DC4z 22B321B8z 22B35E70z 22B35FF8z 210329D0z 210329B4z
*Oct 3 09:54:50: %IPV6_ROUTING-3-RIB: ipv6_is_addr_ours called for link-local address with wrong tableid -Process= "DNS Server", ipl= 0, pid= 433
-Traceback= 22B31DC4z 22B321B8z 22B35E70z 22B35FF8z 210329D0z 210329B4z
*Oct 3 09:54:50: %IPV6_ROUTING-3-RIB: ipv6_is_addr_ours called for link-local address with wrong tableid -Process= "DNS Server", ipl= 0, pid= 433
-Traceback= 22B31DC4z 22B321B8z 22B35E70z 22B35FF8z 210329D0z 210329B4z
*Oct 3 09:54:50: %IPV6_ROUTING-3-RIB: ipv6_is_addr_ours called for link-local address with wrong tableid -Process= "DNS Server", ipl= 0, pid= 433
-Traceback= 22B31DC4z 22B321B8z 22B35E70z 22B35FF8z 210329D0z 210329B4z
</code>
<code>
Cisco1921#show ipv6 route
IPv6 Routing Table - default - 6 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
a - Application
S ::/0 [1/0]
via Dialer0, directly connected
S 2001:A61:20F8:C400::/56 [1/0]
via Null0, directly connected
C 2001:A61:20F8:C401::/64 [0/0]
via GigabitEthernet0/1, directly connected
L 2001:A61:20F8:C401::1/128 [0/0]
via GigabitEthernet0/1, receive
LC 2001:A61:20F8:C4FF::1/128 [0/0]
via Dialer0, receive
L FF00::/8 [0/0]
via Null0, receive
</code>
Thanks
Regards brooks
