cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
841
Views
0
Helpful
5
Replies

DHCPv6 by default on 3750?

tylerhall
Level 1
Level 1

I have a very strange problem.  I gave one of my interfaces a IPv6 address the other day and now all of my servers have IPv6 addresses in that subnet.

I'm reading about "ipv6 nd suppress-ra" and I think that's what I need to disable but that's not a valid command on the 3750. 

Is there a way to disable this 'automatic IP giving out' thing that I have going on?

1 Accepted Solution

Accepted Solutions

Harold Ritter
Spotlight
Spotlight

Hi Tyler,

This is actually not dhcpv6 but rather Stateless Adress Autoconfiguration (SLACC) that you are seeing. SLAAC is enabled by default when "ipv6 unicast-routing" is configured and that an ipv6 address is assigned to an interface.

Try using "ipv6 nd ra suppress all" to completely disable the RA on a specific interface.

Hope this helps

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

View solution in original post

5 Replies 5

Harold Ritter
Spotlight
Spotlight

Hi Tyler,

This is actually not dhcpv6 but rather Stateless Adress Autoconfiguration (SLACC) that you are seeing. SLAAC is enabled by default when "ipv6 unicast-routing" is configured and that an ipv6 address is assigned to an interface.

Try using "ipv6 nd ra suppress all" to completely disable the RA on a specific interface.

Hope this helps

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

Thanks.  I have a "ipv6 nd ra suppress" under the interface which I've applied.

Hi Tyler,

Bear in mind that the "ipv6 nd ra suppress" without the "all" keyword will suppress the periodic RA from the router but will not suppress the RA sent in response to a RS message from the workstation. The "all" keyword is relatively recent and might not be available in the version of code you are currently running. One of the workaround is to use an ACL to block incoming RS on the specific interface.

Regards

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

Thanks Harold.

I just upgraded to the newest firmware (12.2(55)SE7) but I still don't have a 'all' under suppress.

Any ideas?

Hi Tyler,

The support for the "all" keyword started in 12.2(58)SE1. As a workaround, you could use either one of the following commands under the specific interface:

ipv6 nd prefix [prefix] no-autoconfig

or

ipv6 nd prefix [prefix] no-advertise

Hope this helps

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México
Review Cisco Networking for a $25 gift card