ipv6 configuration guide, cisco ios release 15 · ipv6 configuration guide, cisco ios release...

Download IPv6 Configuration Guide, Cisco IOS Release 15 · IPv6 Configuration Guide, Cisco IOS Release 15.2MT Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706

If you can't read please download the document

Upload: dangdung

Post on 02-Apr-2018

259 views

Category:

Documents


5 download

TRANSCRIPT

  • IPv6 Configuration Guide, Cisco IOSRelease 15.2MT

    Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000 800 553-NETS (6387)Fax: 408 527-0883

  • THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

    THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPEDWITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITEDWARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

    The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCBs public domain versionof the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.

    NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALLFAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OFMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADEPRACTICE.

    IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO ORITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

    Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationshipbetween Cisco and any other company. (1110R)

    Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output,network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative contentis unintentional and coincidental.

    2012 Cisco Systems, Inc. All rights reserved.

    http://www.cisco.com/go/trademarks

  • C O N T E N T S

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features 1

    Finding Feature Information 1

    Cisco IOS Software Platform Dependencies and Restrictions 1

    Cisco IOS IPv6 Features and Supported Software Releases 2

    Cisco Platforms Supporting IPv6 Hardware Forwarding 27

    Supported Platforms 27

    Additional 12.2S Release Trains 29

    Additional References 30

    Implementing IPv6 Addressing and Basic Connectivity 39

    Finding Feature Information 39

    Prerequisites for Implementing IPv6 Addressing and Basic Connectivity 39

    Restrictions for Implementing IPv6 Addressing and Basic Connectivity 40

    Information About Implementing IPv6 Addressing and Basic Connectivity 40

    IPv6 for Cisco Software 41

    Large IPv6 Address Space for Unique Addresses 41

    IPv6 Address Formats 42

    IPv6 Address Type: Unicast 43

    Aggregatable Global Address 43

    Link-Local Address 44

    IPv4-Compatible IPv6 Address 45

    Unique Local Address 45

    Site-Local Address 46

    IPv6 Address Type: Anycast 46

    IPv6 Address Type Multicast 46

    IPv6 Multicast Groups 48

    IPv6 Address Output Display 48

    Simplified IPv6 Packet Header 49

    Cisco Express Forwarding and Distributed Cisco Express Forwarding Switching for IPv6 52

    Unicast Reverse Path Forwarding 53

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT iii

  • DNS for IPv6 54

    Path MTU Discovery for IPv6 54

    Cisco Discovery Protocol IPv6 Address Support 55

    ICMP for IPv6 55

    IPv6 ICMP Rate Limiting 55

    IPv6 Neighbor Discovery 56

    Stateful Switchover 56

    IPv6 Neighbor Solicitation Message 56

    Enhanced IPv6 Neighbor Discovery Cache Management 58

    IPv6 Router Advertisement Message 59

    Default Router Preferences for Traffic Engineering 60

    IPv6 Neighbor Redirect Message 60

    Per-Interface Neighbor Discovery Cache Limit 62

    Link, Subnet, and Site Addressing Changes 62

    IPv6 Stateless Autoconfiguration 62

    Simplified Network Renumbering for IPv6 Hosts 62

    IPv6 General Prefixes 63

    DHCP for IPv6 Prefix Delegation 63

    IPv6 Prefix Aggregation 64

    IPv6 Site Multihoming 64

    IPv6 Data Links 64

    IPv6 for Cisco Software Support for Wide-Area Networking Technologies 65

    IPv6 Addresses and PVCs 65

    Routed Bridge Encapsulation for IPv6 65

    IPv6 Redirect Messages 65

    IPv6 on BVI Interfaces for Bridging and Routing 66

    Dual IPv4 and IPv6 Protocol Stacks 66

    How to Implement IPv6 Addressing and Basic Connectivity 67

    Configuring IPv6 Addressing and Enabling IPv6 Routing 68

    Configuring a Neighbor Discovery Cache Limit 69

    Configuring a Neighbor Discovery Cache Limit on a Specified Router Interface 70

    Configuring a Neighbor Discovery Cache Limit on All Device Interfaces 70

    Customizing the Parameters for IPv6 Neighbor Discovery 71

    Defining and Using IPv6 General Prefixes 72

    Defining a General Prefix Manually 73

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTiv

  • Defining a General Prefix Based on a 6to4 Interface 73

    Defining a General Prefix with the DHCP for IPv6 Prefix Delegation Client Function 74

    Using a General Prefix in IPv6 74

    Configuring an Interface to Support the IPv4 and IPv6 Protocol Stacks 75

    Customizing IPv6 ICMP Rate Limiting 76

    Configuring the DRP Extension for Traffic Engineering 77

    Configuring Cisco Express Forwarding and Distributed Cisco Express Forwarding Switching

    for IPv6 78

    Configuring Cisco Express Forwarding Switching on Distributed and Nondistributed

    Architecture Platforms 78

    Configuring Unicast RPF 81

    Mapping Hostnames to IPv6 Addresses 83

    Mapping IPv6 Addresses to IPv6 ATM and Frame Relay Interfaces 84

    Displaying IPv6 Redirect Messages 87

    Examples 89

    Configuration Examples for Implementing IPv6 Addressing and Basic Connectivity 92

    Example: IPv6 Addressing and IPv6 Routing Configuration 92

    Example: Customizing the Parameters for IPv6 Neighbor Discovery 93

    Example: Dual-Protocol Stack Configuration 93

    Example: IPv6 ICMP Rate Limiting Configuration 94

    Example: Cisco Express Forwarding and Distributed Cisco Express Forwarding Configuration 94

    Example: Hostname-to-Address Mappings Configuration 94

    Examples: IPv6 Address to ATM and Frame Relay PVC Mapping Configuration 95

    Example: IPv6 ATM PVC Mapping Configuration (Point-to-Point Interface) 95

    Example: IPv6 ATM PVC Mapping Configuration (Point-to-Multipoint Interface) 95

    Example: IPv6 Frame Relay PVC Mapping Configuration (Point-to-Point Interface) 96

    Example: IPv6 Frame Relay PVC Mapping Configuration (Point-to-Multipoint Interface) 97

    Additional References 97

    Feature Information for Implementing IPv6 Addressing and Basic Connectivity 100

    Implementing ADSL and Deploying Dial Access for IPv6 111

    Finding Feature Information 111

    Restrictions for Implementing ADSL and Deploying Dial Access for IPv6 111

    Information About Implementing ADSL and Deploying Dial Access for IPv6 111

    Address Assignment for IPv6 112

    Stateless Address Autoconfiguration 112

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT v

  • Prefix Delegation 112

    DHCP SIP Server Options 113

    AAA over IPv6 113

    RADIUS over IPv6 113

    RADIUS Per-User Attributes for Virtual Access in IPv6 Environments 113

    TACACS+ Over an IPv6 Transport 115

    IPv6 Prefix Pools 115

    How to Configure ADSL and Deploy Dial Access in IPv6 115

    Configuring the NAS 115

    Configuring the Remote CE Router 119

    Configuring the DHCPv6 Server to Obtain Prefixes from RADIUS Servers 121

    Configuring DHCPv6 AAA and SIP Options 122

    Configuring TACACS+ over IPv6 123

    Configuring the TACACS+ Server over IPv6 124

    Specifying the Source Address in TACACS+ Packets 125

    Configuring TACACS+ Server Group Options 126

    Configuration Examples for Implementing ADSL and Deploying Dial Access for IPv6 127

    Example Implementing ADSL and Deploying Dial Access for IPv6 127

    Additional References 128

    Feature Information for Implementing ADSL and Deploying Dial Access for IPv6 130

    Implementing Bidirectional Forwarding Detection for IPv6 133

    Finding Feature Information 133

    Prerequisites for Implementing Bidirectional Forwarding Detection for IPv6 133

    Restrictions for Implementing Bidirectional Forwarding Detection for IPv6 134

    Information About Implementing Bidirectional Forwarding Detection for IPv6 134

    Overview of the BFDv6 Protocol 134

    BFDv6 Registration 134

    BFDv6 Global and Link-Local Addresses 134

    BFD for IPv4 and IPv6 on the Same Interface 135

    Static Route Support for BFD over IPv6 135

    BFDv6 Associated Mode 135

    BFDv6 Unassociated Mode 136

    BFD Support for OSPFv3 136

    How to Configure Bidirectional Forwarding Detection for IPv6 136

    Specifying a Static BFDv6 Neighbor 136

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTvi

  • Associating an IPv6 Static Route with a BFDv6 Neighbor 137

    Configuring BFD Support for OSPFv3 138

    Configuring Baseline BFD Session Parameters on the Interface 139

    Configuring BFD Support for OSPFv3 for All Interfaces 140

    Configuring BFDv6 Support for OSPFv3 on One or More OSPFv3 Interfaces 141

    Retrieving BFDv6 Information for Monitoring and Troubleshooting 143

    Configuration Examples for Bidirectional Forwarding Detection for IPv6 144

    Example: Specifying an IPv6 Static BFDv6 Neighbor 144

    Example: Associating an IPv6 Static Route with a BFDv6 Neighbor 144

    Example: Displaying OSPF Interface Information about BFD 144

    Additional References 144

    Feature Information for Implementing Bidirectional Forwarding Detection for IPv6 146

    Implementing DHCP for IPv6 149

    Finding Feature Information 149

    Restrictions for Implementing DHCP for IPv6 149

    Information About Implementing DHCP for IPv6 149

    DHCPv6 Prefix Delegation 150

    Configuring Nodes Without Prefix Delegation 150

    Client and Server Identification 150

    Rapid Commit 150

    DHCPv6 Client, Server, and Relay Functions 151

    Client Function 151

    Server Function 151

    DHCPv6 Relay Agent 155

    DHCPv6 Relay Source Configuration 155

    DHCPv6 Relay SSO and ISSU 155

    DHCPv6 Server and RelayMPLS VPN Support 156

    How to Implement DHCP for IPv6 156

    Configuring the DHCPv6 Server Function 157

    Configuring the DHCPv6 Configuration Pool 157

    Configuring a Binding Database Agent for the Server Function 159

    Configuring the DHCPv6 Client Function 160

    Configuring the DHCPv6 Relay Agent 161

    Configuring Route Addition for Relay/Server 162

    Configuring a DHCPv6 Relay Source 162

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT vii

  • Restrictions for Configuring a DHCPv6 Relay Source 162

    Configuring a DHCPv6 Relay Source on an Interface 162

    Configuring a DHCPv6 Relay Source Globally 163

    Configuring DHCPv6 Bulk-Lease Query Parameters 164

    Configuring DHCPv6 Address Assignment 165

    Prerequisites for Configuring DHCPv6 Address Assignment 165

    Enabling the DHCPv6 Server Function on an Interface 165

    Enabling the DHCPv6 Client Function on an Interface 168

    Configuring the Stateless DHCPv6 Function 170

    Configuring the Stateless DHCPv6 Server 170

    Configuring the Stateless DHCPv6 Client 172

    Enabling Processing of Packets with Source Routing Header Options 173

    Configuring the DHCPv6 Server Options 174

    Configuring the Information Refresh Server Option 174

    Importing the Information Refresh Server Option 175

    Configuring NIS- and NISP-Related Server Options 176

    Importing NIS- and NIS+-Related Server Options 178

    Importing SIP Server Options 179

    Configuring the SNTP Server 180

    Importing the SNTP Server Option 181

    Importing Stateless DHCPv6 Server Options 182

    Defining a General Prefix with the DHCPv6 Prefix Delegation Client Function 184

    Configuring a VRF-Aware Relay and Server for MPLS VPN Support 185

    Configuring a VRF-Aware Relay 185

    Configuring a VRF-Aware Server 186

    Deleting Automatic Client Bindings from the DHCPv6 Binding Table 187

    Troubleshooting DHCPv6 188

    Verifying DHCPv6 Configuration and Operation 189

    Examples 190

    Configuration Examples for Implementing DHCPv6 192

    Example: Configuring the DHCPv6 Server Function 193

    Example: Configuring the DHCPv6 Client Function 194

    Example: Configuring a Database Agent for the Server Function 194

    Example: Configuring DHCP for IPv6 Address Assignment 194

    Example: Configuring the Stateless DHCPv6 Function 195

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTviii

  • Additional References 195

    Feature Information for Implementing DHCP for IPv6 197

    Implementing Dynamic Multipoint VPN for IPv6 201

    Finding Feature Information 201

    Prerequisites for Implementing DMVPN for IPv6 202

    Restrictions for Implementing DMVPN for IPv6 202

    Information About Implementing DMVPN for IPv6 202

    DMVPN for IPv6 Overview 202

    NHRP Routing 203

    IPv6 NHRP Redirect and Shortcut Features 204

    IPv6 Routing 204

    IPv6 Addressing and Restrictions 204

    mGRE Support over IPv6 204

    How to Configure DMVPN for IPv6 205

    Configuring an IPsec Profile in DMVPN for IPv6 205

    Configuring the Hub for IPv6 over DMVPN 207

    Configuring the NHRP Redirect and Shortcut Features on the Hub 210

    Configuring the Spoke for IPv6 over DMVPN 211

    Verifying DMVPN for IPv6 Configuration 216

    Examples 218

    Monitoring and Maintaining DMVPN for IPv6 Configuration and Operation 221

    Configuration Examples for Implementing DMVPN for IPv6 222

    Example: Configuring an IPsec Profile 222

    Example: Configuring the Hub for DMVPN 223

    Example: Configuring the NHRP Redirect and Shortcut Features on the Hub 224

    Example: Configuring the Spoke for DMVPN 224

    Additional References 225

    Feature Information for Implementing DMVPN for IPv6 227

    Implementing EIGRP for IPv6 229

    Finding Feature Information 229

    Restrictions for Implementing EIGRP for IPv6 229

    Information About Implementing EIGRP for IPv6 230

    Cisco EIGRP for IPv6 Implementation 230

    How to Implement EIGRP for IPv6 231

    Enabling EIGRP for IPv6 on an Interface 232

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT ix

  • Configuring the Percentage of Link Bandwidth Used by EIGRP 234

    Configuring Summary Addresses 235

    Configuring EIGRP Route Authentication 236

    Overriding the Next Hop in EIGRP 239

    Adjusting the Interval Between Hello Packets in EIGRP for IPv6 240

    Adjusting the Hold Time in EIGRP for IPv6 241

    Disabling Split Horizon in EIGRP for IPv6 242

    Configuring EIGRP Stub Routing for Greater Network Stability 243

    Configuring a Device for EIGRP Stub Routing 244

    Verifying EIGRP Stub Routing 245

    Customizing an EIGRP for IPv6 Routing Process 245

    Logging EIGRP Neighbor Adjacency Changes 245

    Configuring Intervals Between Neighbor Warnings 246

    Adjusting EIGRP for IPv6 Metric Weights 247

    Deleting Entries from EIGRP for IPv6 Routing Tables 248

    Configuration Examples for Implementing EIGRP for IPv6 249

    Example: Configuring EIGRP to Establish Adjacencies on an Interface 249

    Additional References 249

    Feature Information for Implementing EIGRP for IPv6 250

    Configuring First Hop Redundancy Protocols in IPv6 253

    Finding Feature Information 253

    Prerequisites for First Hop Redundancy Protocols in IPv6 253

    Information About First Hop Redundancy Protocols in IPv6 254

    GLBP for IPv6 254

    GLBP for IPv6 Overview 254

    GLBP Benefits 254

    Load Sharing 254

    Multiple Virtual Routers 255

    Preemption 255

    Authentication 255

    GLBP Active Virtual Gateway 255

    GLBP Virtual MAC Address Assignment 256

    GLBP Virtual Gateway Redundancy 256

    GLBP Virtual Forwarder Redundancy 257

    GLBP Gateway Priority 257

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTx

  • GLBP Gateway Weighting and Tracking 257

    HSRP for IPv6 258

    HSRP for IPv6 Overview 258

    HSRP IPv6 Virtual MAC Address Range 258

    HSRP IPv6 UDP Port Number 258

    HSRP Global IPv6 Address 259

    How to Configure First Hop Redundancy Protocols in IPv6 260

    Configuring and Customizing GLBP 260

    Customizing GLBP 260

    Configuring GLBP Authentication 262

    Configuring GLBP MD5 Authentication Using a Key String 263

    Configuring GLBP MD5 Authentication Using a Key Chain 264

    Configuring GLBP Text Authentication 267

    Configuring GLBP Weighting Values and Object Tracking 269

    Enabling and Verifying GLBP 271

    Troubleshooting GLBP 272

    Enabling an HSRP Group for IPv6 Operation 274

    Enabling HSRP Version 2 274

    Enabling and Verifying an HSRP Group for IPv6 Operation 275

    Configuration Examples for First Hop Redundancy Protocols in IPv6 277

    Example: Customizing GLBP Configuration 278

    Example GLBP MD5 Authentication Using Key Strings 278

    Example GLBP MD5 Authentication Using Key Chains 278

    Example GLBP Text Authentication 278

    Example: GLBP Weighting 278

    Example: Enabling GLBP Configuration 279

    Example Enabling and Verifying an HSRP Group for IPv6 Operation 279

    Example: Configuration and Verification for an HSRP Group 279

    Example: Configuring HSRP Global IPv6 Addresses 280

    Additional References 281

    Feature Information for First Hop Redundancy Protocols in IPv6 282

    Glossary 283

    Implementing First Hop Security in IPv6 285

    Finding Feature Information 285

    Prerequisites for Implementing First Hop Security in IPv6 286

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xi

  • Restrictions for Implementing First Hop Security in IPv6 286

    Information About Implementing First Hop Security in IPv6 286

    IPv6 First-Hop Security Binding Table 287

    IPv6 Device Tracking 287

    IPv6 Port-Based Access List Support 287

    IPv6 Global Policies 287

    IPv6 RA Guard 287

    IPv6 ND Inspection 287

    Secure Neighbor Discovery in IPv6 288

    IPv6 Neighbor Discovery Trust Models and Threats 288

    SeND Protocol 288

    Cryptographically Generated Addresses in SeND 288

    Authorization Delegation Discovery 289

    SeND Deployment Models 289

    Host-to-Host Deployment Without a Trust Anchor 289

    Neighbor Solicitation Flow 289

    Host-Router Deployment Model 290

    Router Advertisement and Certificate Path Flows 291

    Single CA Model 292

    How to Implement First Hop Security in IPv6 293

    Configuring the IPv6 Binding Table Content 293

    Configuring IPv6 Device Tracking 294

    Configuring IPv6 ND Inspection 295

    Configuring IPv6 ND Inspection Globally 295

    Applying IPv6 ND Inspection on a Specified Interface 297

    Verifying and Troubleshooting IPv6 ND Inspection 298

    Configuring IPv6 RA Guard 299

    Configuring the IPv6 RA Guard on a Specified Interface 299

    Configuring IPv6 RA Guard in Cisco IOS Release 12.2(33)SXI4 and 12.2(54)SG 300

    Verifying and Troubleshooting IPv6 RA Guard 301

    Configuring SeND for IPv6 302

    Configuring Certificate Servers to Enable SeND 303

    Configuring a Host to Enable SeND 305

    Configuring a Router to Enable SeND 308

    Implementing IPv6 SeND 312

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxii

  • Creating the RSA Key Pair and CGA Modifier for the Key Pair 312

    Configuring Certificate Enrollment for a PKI 313

    Configuring a Cryptographically Generated Address 317

    Configuring General CGA Parameters 317

    Configuring CGA Address Generation on an Interface 317

    Configuring SeND Parameters 318

    Configuring the SeND Trustpoint 319

    Configuring SeND Trust Anchors on the Interface 322

    Configuring Secured and Nonsecured Neighbor Discovery Message Coexistence Mode 323

    Configuring SeND Parameters Globally 324

    Configuring the SeND Time Stamp 325

    Configuring IPv6 PACL 326

    Creating an IPv6 Access List 326

    Configuring PACL Mode and Applying IPv6 PACL on an Interface 326

    Configuration Examples for Implementing First Hop Security in IPv6 328

    Example: IPv6 ND Inspection and RA Guard Configuration 328

    Example: IPv6 RA Guard Configuration 328

    Example Configuring PACL Mode and Applying IPv6 PACL on an Interface 328

    Example SeND Configuration Examples 329

    Example Configuring Certificate Servers 329

    Example Configuring a Host to Enable SeND 330

    Example Configuring a Router to Enable SeND 330

    Example Configuring a SeND Trustpoint in Router Mode 332

    Example Configuring SeND Trust Anchors in the Host Mode 332

    Example Configuring CGA Address Generation on an Interface 332

    Additional References 333

    Feature Information for Implementing First Hop Security in IPv6 334

    Glossary 337

    Implementing IPsec in IPv6 Security 339

    Finding Feature Information 339

    Information About Implementing IPsec for IPv6 Security 339

    IPsec for IPv6 339

    IPv6 IPsec Site-to-Site Protection Using Virtual Tunnel Interface 340

    OSPFv3 Authentication Support with IPsec 341

    How to Implement IPsec for IPv6 Security 342

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xiii

  • Configuring a VTI for Site-to-Site IPv6 IPsec Protection 342

    Creating an IKE Policy and a Preshared Key in IPv6 342

    Configuring ISAKMP Aggressive Mode 345

    Configuring an IPsec Transform Set and IPsec Profile 346

    Defining an ISAKMP Profile in IPv6 347

    Configuring IPv6 IPsec VTI 349

    Verifying IPsec Tunnel Mode Configuration 351

    Troubleshooting IPsec for IPv6 Configuration and Operation 354

    Examples 354

    Configuration Examples for IPsec for IPv6 Security 357

    Example: Configuring a VTI for Site-to-Site IPv6 IPsec Protection 357

    Additional References 358

    Feature Information for Implementing IPsec in IPv6 Security 359

    Implementing IS-IS for IPv6 361

    Finding Feature Information 361

    Restrictions for Implementing IS-IS for IPv6 361

    Information About Implementing IS-IS for IPv6 362

    IS-IS Enhancements for IPv6 362

    IS-IS Single-Topology Support for IPv6 362

    IS-IS Multitopology Support for IPv6 362

    Transition from Single-Topology to Multitopology Support for IPv6 363

    IPv6 IS-IS Local RIB 363

    How to Implement IS-IS for IPv6 363

    Configuring Single-Topology IS-IS for IPv6 363

    Configuring Multitopology IS-IS for IPv6 365

    Customizing IPv6 IS-IS 367

    Redistributing Routes into an IPv6 IS-IS Routing Process 370

    Redistributing IPv6 IS-IS Routes Between IS-IS Levels 371

    Disabling IPv6 Protocol-Support Consistency Checks 372

    Disabling IPv4 Subnet Consistency Checks 373

    Verifying IPv6 IS-IS Configuration and Operation 374

    Examples 376

    Configuration Examples for IPv6 IS-IS 378

    Example Configuring Single-Topology IS-IS for IPv6 378

    Example: Customizing IPv6 IS-IS 379

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxiv

  • Example: Redistributing Routes into an IPv6 IS-IS Routing Process 379

    Example: Redistributing IPv6 IS-IS Routes Between IS-IS Levels 379

    Example: Disabling IPv6 Protocol-Support Consistency Checks 379

    Example Configuring Multitopology IS-IS for IPv6 379

    Example: Configuring the IS-IS IPv6 Metric for Multitopology IS-IS 380

    Additional References 380

    Feature Information for Implementing IS-IS for IPv6 381

    Implementing IPv6 for Network Management 383

    Finding Feature Information 383

    Information About Implementing IPv6 for Network Management 383

    Telnet Access over IPv6 383

    TFTP IPv6 Support 384

    TFTP File Downloading for IPv6 384

    ping and traceroute Commands in IPv6 384

    SSH over an IPv6 Transport 384

    SNMP over an IPv6 Transport 384

    Cisco IPv6 MIBs 384

    MIBs Supported for IPv6 385

    Cisco IPv6 Embedded Management Components 385

    Syslog 385

    CNS Agents 386

    CNS Configuration Agent 386

    CNS Event Agent 386

    CNS EXEC Agent 386

    CNS Image Agent 386

    Config Logger 387

    HTTP(S) IPv6 Support 387

    TCL 387

    NETCONF 387

    SOAP Message Format 387

    IP SLAs for IPv6 387

    How to Implement IPv6 for Network Management 388

    Enabling Telnet Access to an IPv6 Device and Establishing a Telnet Session 388

    Enabling SSH on an IPv6 Device 390

    Configuring an SNMP Notification Server over IPv6 391

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xv

  • Configuring Cisco IOS IPv6 Embedded Management Components 393

    Configuring Syslog over IPv6 394

    Disabling HTTP Access to an IPv6 Device 394

    Configuration Examples for Implementing IPv6 for Network Management 395

    Examples: Enabling Telnet Access to an IPv6 Device 395

    Example: Disabling HTTP Access to the Device 396

    Examples: Configuring an SNMP Notification Server over IPv6 397

    Additional References 397

    Feature Information for Implementing IPv6 for Network Management 400

    Implementing Mobile IPv6 403

    Finding Feature Information 403

    Restrictions for Implementing Mobile IPv6 403

    Information About Implementing Mobile IPv6 403

    Mobile IPv6 Overview 404

    How Mobile IPv6 Works 404

    IPv6 NEMO 404

    Mobile IPv6 Home Agent 405

    Binding Cache in Mobile IPv6 Home Agent 405

    Binding Update List in Mobile IPv6 Home Agent 405

    Home Agents List 405

    NEMO-Compliant Home Agent 406

    Implicit Prefix Registration 406

    Explicit Prefix Registration 406

    Packet Headers in Mobile IPv6 406

    IPv6 Neighbor Discovery with Mobile IPv6 407

    IPv6 Neighbor Discovery Duplicate Address Detection in NEMO 407

    Mobile IPv6 Tunnel Optimization 407

    IPv6 Host Group Configuration 407

    Mobile IPv6 Node Identification Based on NAI 408

    Authentication Protocol for Mobile IPv6 408

    How to Implement Mobile IPv6 409

    Enabling Mobile IPv6 on the Router 409

    Configuring Binding Information for Mobile IPv6 410

    Enabling and Configuring NEMO on the IPv6 Mobile Router 412

    Enabling NEMO on the IPv6 Mobile Router Home Agent 414

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxvi

  • Enabling Roaming on the IPv6 Mobile Router Interface 415

    Filtering Mobile IPv6 Protocol Headers and Options 416

    Controlling ICMP Unreachable Messages 419

    Verifying Native IPv6 Tunneling for Mobile IPv6 420

    Configuring and Verifying Host Groups for Mobile IPv6 420

    Customizing Mobile IPv6 on the Interface 423

    Monitoring and Maintaining Mobile IPv6 on the Router 425

    Examples 426

    Configuration Examples for Implementing Mobile IPv6 428

    Example: Enabling Mobile IPv6 on the Router 429

    Example: Enabling and Configuring NEMO on the IPv6 Mobile Router 429

    Example: Enabling NEMO on the IPv6 Mobile Router Home Agent 430

    Example: Enabling Roaming on the IPv6 Mobile Router Interface 430

    Example: Configuring Host Groups for Mobile IPv6 431

    Additional References 431

    Feature Information for Implementing Mobile IPv6 432

    Implementing IPv6 Multicast 435

    Finding Feature Information 435

    Prerequisites for Implementing IPv6 Multicast 435

    Restrictions for Implementing IPv6 Multicast 435

    Information About Implementing IPv6 Multicast 437

    IPv6 Multicast Overview 437

    IPv6 Multicast Addressing 438

    IPv6 Multicast Groups 439

    Scoped Address Architecture 439

    IPv6 Multicast Routing Implementation 440

    Multicast Listener Discovery Protocol for IPv6 441

    MLD Access Group 442

    Explicit Tracking of Receivers 442

    IPv6 Multicast User Authentication and Profile Support 442

    IPv6 MLD Proxy 443

    Protocol Independent Multicast 443

    PIM-Sparse Mode 443

    Designated Router 444

    Rendezvous Point 445

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xvii

  • PIMv6 Anycast RP Solution Overview 446

    IPv6 BSR: Configure RP Mapping 446

    PIM-Source Specific Multicast 446

    SSM Mapping for IPv6 447

    PIM Shared Tree and Source Tree (Shortest-Path Tree) 447

    Reverse Path Forwarding 449

    Routable Address Hello Option 449

    Bidirectional PIM 449

    Static Mroutes 450

    MRIB 450

    MFIB 450

    Distributed MFIB 450

    IPv6 Multicast VRF Lite 451

    IPv6 Multicast Process Switching and Fast Switching 451

    Multiprotocol BGP for the IPv6 Multicast Address Family 452

    NSF and SSO Support In IPv6 Multicast 452

    Bandwidth-Based CAC for IPv6 Multicast 452

    How to Implement IPv6 Multicast 452

    Enabling IPv6 Multicast Routing 453

    Customizing and Verifying the MLD Protocol 453

    Customizing and Verifying MLD on an Interface 454

    Implementing MLD Group Limits 456

    Implementing MLD Group Limits Globally 457

    Implementing MLD Group Limits per Interface 457

    Configuring Explicit Tracking of Receivers to Track Host Behavior 458

    Configuring Multicast User Authentication and Profile Support 459

    Prerequisites 459

    Restrictions 459

    Enabling AAA Access Control for IPv6 Multicast 460

    Specifying Method Lists and Enabling Multicast Accounting 460

    Disabling the Router from Receiving Unauthenticated Multicast Traffic 461

    Enabling MLD Proxy in IPv6 462

    Resetting Authorization Status on an MLD Interface 463

    Resetting the MLD Traffic Counters 464

    Clearing the MLD Interface Counters 465

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxviii

  • Configuring PIM 465

    Configuring PIM-SM and Displaying PIM-SM Information for a Group Range 465

    Configuring PIM Options 467

    Configuring Bidirectional PIM and Displaying Bidirectional PIM Information 469

    Resetting the PIM Traffic Counters 471

    Clearing the PIM Topology Table to Reset the MRIB Connection 471

    Configuring a BSR 473

    Configuring a BSR and Verifying BSR Information 474

    Sending PIM RP Advertisements to the BSR 475

    Configuring BSR for Use Within Scoped Zones 476

    Configuring BSR Routers to Announce Scope-to-RP Mappings 477

    Configuring SSM Mapping 478

    Configuring Static Mroutes 480

    Configuring IPv6 Multiprotocol BGP 481

    Configuring an IPv6 Peer Group to Perform Multicast BGP Routing 482

    What to Do Next 483

    Advertising Routes into IPv6 Multiprotocol BGP 484

    Redistributing Prefixes into IPv6 Multiprotocol BGP 485

    Assigning a BGP Administrative Distance 486

    Generating Translate Updates for IPv6 Multicast BGP 487

    Resetting IPv6 BGP Sessions 488

    Clearing External BGP Peers 489

    Clearing IPv6 BGP Route Dampening Information 490

    Clearing IPv6 BGP Flap Statistics 490

    Configuring Bandwidth-Based CAC for IPv6 491

    Configuring the Interface Limit for Bandwidth-Based CAC in IPv6 491

    Configuring an Access List for Bandwidth-Based CAC in IPv6 492

    Configuring the Global Limit for Bandwidth-Based CAC in IPv6 494

    Using MFIB in IPv6 Multicast 494

    Verifying MFIB Operation in IPv6 Multicast 494

    Resetting MFIB Traffic Counters 496

    Disabling Default Features in IPv6 Multicast 497

    Disabling Embedded RP Support in IPv6 PIM 497

    Turning Off IPv6 PIM on a Specified Interface 498

    Disabling MLD Router-Side Processing 499

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xix

  • Disabling MFIB on the device 500

    Disabling MFIB on a Distributed Platform 501

    Disabling MFIB Interrupt-Level IPv6 Multicast Forwarding 502

    Examples 502

    Configuration Examples for Implementing IPv6 Multicast 509

    Example: Enabling IPv6 Multicast Routing 509

    Example: Configuring the MLD Protocol 509

    Example: Configuring Explicit Tracking of Receivers 510

    Example: Configuring MLD Proxy 511

    Example: Configuring PIM 511

    Example: Configuring PIM Options 511

    Example Configuring Mroutes 512

    Example Configuring an IPv6 Multiprotocol BGP Peer Group 512

    Example Redistributing Prefixes into IPv6 Multiprotocol BGP 512

    Example: Generating Translate Updates for IPv6 Multicast BGP 512

    Example: Configuring Bandwidth-Based CAC for IPv6 512

    Example: Configuring the Interface Limit for Bandwidth-Based CAC in IPv6 512

    Example: Configuring an Access List for Bandwidth-Based CAC in IPv6 513

    Example: Configuring the Global Limit for Bandwidth-Based CAC 513

    Example: Disabling Embedded RP Support in IPv6 PIM 513

    Example Turning Off IPv6 PIM on a Specified Interface 513

    Example: Disabling MLD Router-Side Processing 513

    Example Disabling and Reenabling MFIB 513

    Additional References 514

    Feature Information for Implementing IPv6 Multicast 515

    PIMv6 Anycast RP Solution 523

    Finding Feature Information 523

    Information About the PIMv6 Anycast RP Solution 523

    PIMv6 Anycast RP Solution Overview 523

    PIMv6 Anycast RP Normal Operation 524

    PIMv6 Anycast RP Failover 524

    How to Configure the PIMv6 Anycast RP Solution 525

    Configuring PIMv6 Anycast RP 525

    Configuration Examples for the PIMv6 Anycast RP Solution 528

    Example: Configuring PIMv6 Anycast RP 528

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxx

  • Additional References 529

    Feature Information for the PIMv6 Anycast RP Solution 530

    Implementing Multiprotocol BGP for IPv6 531

    Finding Feature Information 531

    Information About Implementing Multiprotocol BGP for IPv6 531

    Multiprotocol BGP Extensions for IPv6 531

    IPv6 Multiprotocol BGP Peering Using a Link-Local Address 532

    Multiprotocol BGP for the IPv6 Multicast Address Family 532

    Nonstop Forwarding and Graceful Restart for MP-BGP IPv6 Address Family 532

    How to Implement Multiprotocol BGP for IPv6 533

    Configuring an IPv6 BGP Routing Process and BGP Router ID 533

    Configuring IPv6 Multiprotocol BGP Between Two Peers 534

    Configuring an IPv6 Multiprotocol BGP Peer Using a Link-Local Address 536

    Troubleshooting Tips 540

    Configuring an IPv6 Multiprotocol BGP Peer Group 540

    Advertising Routes into IPv6 Multiprotocol BGP 543

    Configuring a Route Map for IPv6 Multiprotocol BGP Prefixes 544

    Redistributing Prefixes into IPv6 Multiprotocol BGP 547

    Advertising IPv4 Routes Between IPv6 BGP Peers 548

    Assigning BGP Administrative Distance for Multicast BGP Routes 551

    Generating IPv6 Multicast BGP Updates 552

    Configuring the IPv6 BGP Graceful Restart Capability 554

    Resetting IPv6 BGP Sessions 555

    Clearing External BGP Peers 555

    Clearing IPv6 BGP Route Dampening Information 556

    Clearing IPv6 BGP Flap Statistics 556

    Verifying IPv6 Multiprotocol BGP Configuration and Operation 557

    Configuration Examples for Multiprotocol BGP for IPv6 558

    Example: Configuring a BGP Process, BGP Router ID, and IPv6 Multiprotocol BGP Peer 559

    Example: Configuring an IPv6 Multiprotocol BGP Peer Using a Link-Local Address 559

    Example: Configuring an IPv6 Multiprotocol BGP Peer Group 559

    Example: Advertising Routes into IPv6 Multiprotocol BGP 560

    Example: Configuring a Route Map for IPv6 Multiprotocol BGP Prefixes 560

    Example: Redistributing Prefixes into IPv6 Multiprotocol BGP 560

    Example: Advertising IPv4 Routes Between IPv6 Peers 560

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxi

  • Additional References 561

    Feature Information for Implementing Multiprotocol BGPfor IPv6 562

    Implementing NAT-PT for IPv6 565

    Finding Feature Information 565

    Prerequisites for Implementing NAT-PT for IPv6 565

    Restrictions for Implementing NAT-PT for IPv6 565

    Information About Implementing NAT-PT for IPv6 566

    NAT-PT Overview 566

    Static NAT-PT Operation 567

    Dynamic NAT-PT Operation 567

    Port Address Translation or Overload 568

    IPv4-Mapped Operation 568

    How to Implement NAT-PT for IPv6 569

    Configuring Basic IPv6 to IPv4 Connectivity for NAT-PT for IPv6 569

    Configuring IPv4-Mapped NAT-PT 571

    Configuring Mappings for IPv6 Hosts Accessing IPv4 Hosts 572

    Configuring Mappings for IPv4 Hosts Accessing IPv6 Hosts 575

    Configuring PAT for IPv6 to IPv4 Address Mappings 577

    Verifying NAT-PT Configuration and Operation 579

    Examples 580

    Configuration Examples for NAT-PT for IPv6 582

    Example: Static NAT-PT Configuration 582

    Example: Enabling Traffic to be Sent from an IPv6 Network to an IPv4 Network 582

    Example: Dynamic NAT-PT Configuration for IPv6 Hosts Accessing IPv4 Hosts 582

    Example: Dynamic NAT-PT Configuration for IPv4 Hosts Accessing IPv6 Hosts 583

    Additional References 583

    Feature Information for Implementing NAT-PT for IPv6 585

    Netflow v9 for IPv6 587

    Finding Feature Information 587

    Prerequisites for Netflow v9 for IPv6 587

    Information About Netflow v9 for IPv6 587

    NetFlow and NDE on the PFC 587

    NetFlow Export Format Version 9 588

    Configuring Netflow v9 for IPv6 590

    Configuration Examples for Configuring Netflow v9 for IPv6 593

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxii

  • Example: Configuring the NetFlow v9 for IPv6 Feature 593

    Additional References 594

    Feature Information for Netflow v9 for IPv6 595

    Implementing NTPv4 in IPv6 597

    Finding Feature Information 597

    Information About Implementing NTPv4 in IPv6 597

    NTP Version 4 597

    NTPv4 Overview 598

    NTPv4 Features 598

    IPv6 Multicast Mode 598

    NTP Access Groups versus Symmetric Key Authentication 599

    DNS Support for IPv6 in NTPv4 599

    How to Implement NTPv4 in IPv6 599

    Configuring Poll-Based NTPv4 Associations 599

    Configuring Symmetric Active Mode 600

    Configuring Client Mode 601

    Configuring Multicast-Based NTPv4 Associations 602

    Configuring an Interface to Send NTPv4 Multicast Packets 602

    Configuring an Interface to Receive NTPv4 Multicast Packets 603

    Defining an NTPv4 Access Group 604

    Configuring NTPv4 Authentication 604

    Disabling NTPv4 Services on a Specific Interface 605

    Configuring the Source IPv6 Address for NTPv4 Packets 606

    Configuring the System as an Authoritative NTP Server 607

    Updating the Hardware Clock 608

    Resetting the Drift Value in the Persistent Data File 608

    Troubleshooting NTPv4 in IPv6 609

    Configuration Examples for NTPv4 in IPv6 610

    Example: Defining an NTPv4 Access Group 610

    Additional References 610

    Feature Information for Implementing NTPv4 in IPv6 612

    Implementing OSPFv3 613

    Finding Feature Information 613

    Prerequisites for Implementing OSPFv3 613

    Restrictions for Implementing OSPFv3 614

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxiii

  • Information About Implementing OSPFv3 614

    How OSPFv3 Works 614

    Comparison of OSPFv3 and OSPF Version 2 615

    OSPFv3 Address Families 615

    LSA Types for OSPFv3 616

    OSPFv3 Max-Metric Router LSA 617

    NBMA in OSPFv3 617

    Force SPF in OSPFv3 618

    Fast Convergence: LSA and SPF Throttling 618

    Load Balancing in OSPFv3 618

    Addresses Imported into OSPFv3 618

    OSPFv3 Customization 618

    OSPFv3 Authentication Support with IPsec 619

    OSPFv3 Virtual Links 620

    OSPFv3 Cost Calculation 620

    OSPFv3 External Path Preference Option 622

    OSPFv3 Graceful Restart 622

    BFD Support for OSPFv3 623

    How to Implement OSPFv3 623

    Configuring the OSPFv3 Router Process 623

    Configuring the IPv6 Address Family in OSPFv3 626

    Configuring the IPv4 Address Family in OSPFv3 628

    Configuring Route Redistribution in OSPFv3 631

    Enabling OSPFv3 on an Interface 632

    Defining an OSPFv3 Area Range for the IPv6 or IPv4 Address Family 633

    Defining an OSPFv3 Area Range 635

    Configuring the OSPFv3 Max-Metric Router LSA 636

    Configuring IPsec on OSPFv3 637

    Defining Authentication on an Interface 637

    Defining Encryption on an Interface 638

    Defining Authentication in an OSPFv3 Area 640

    Defining Encryption in an OSPFv3 Area 641

    Defining Authentication and Encryption for a Virtual Link in an OSPFv3 Area 642

    Configuring NBMA Interfaces in OSPFv3 643

    Tuning LSA and SPF Timers for OSPFv3 Fast Convergence 645

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxiv

  • Configuring LSA and SPF Throttling for OSPFv3 Fast Convergence 646

    Enabling Event Logging for LSA and SPF Rate Limiting for the IPv6 and IPv4 Address

    Family 647

    Enabling Event Logging for LSA and SPF Rate Limiting 649

    Clearing the Content of an Event Log 649

    Calculating OSPFv3 External Path Preferences per RFC 5340 650

    Enabling OSPFv3 Graceful Restart 651

    Enabling OSPFv3 Graceful Restart on a Graceful-Restart-Capable Router 651

    Enabling OSPFv3 Graceful Restart on a Graceful-Restart-Capable Router 652

    Enabling OSPFv3 Graceful Restart on a Graceful-Restart-Aware Router 653

    Enabling OSPFv3 Graceful Restart on a Graceful-Restart-Aware Router 653

    Forcing an SPF Calculation 654

    Verifying OSPFv3 Configuration and Operation 655

    Verifying OSPFv3 Configuration and Operation 659

    Examples 660

    Configuration Examples for Implementing OSPFv3 663

    Example: Enabling OSPFv3 on an Interface Configuration 663

    Example: Defining an OSPFv3 Area Range 663

    Example: Defining Authentication on an Interface 663

    Example: Defining Authentication in an OSPFv3 Area 664

    Example: Configuring NBMA Interfaces 664

    Example: Configuring LSA and SPF Throttling for OSPFv3 Fast Convergence 664

    Example: Forcing SPF Configuration 664

    Additional References 664

    Feature Information for Implementing OSPFv3 666

    Implementing IPv6 over MPLS 671

    Finding Feature Information 671

    Prerequisites for Implementing IPv6 over MPLS 671

    Information About Implementing IPv6 over MPLS 672

    Benefits of Deploying IPv6 over MPLS Backbones 672

    IPv6 over a Circuit Transport over MPLS 672

    IPv6 Using Tunnels on the Customer Edge Routers 672

    IPv6 on the Provider Edge Routers 673

    6PE Multipath 674

    How to Implement IPv6 over MPLS 675

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxv

  • Deploying IPv6 over a Circuit Transport over MPLS 675

    Deploying IPv6 on the Provider Edge Routers (6PE) 675

    Specifying the Source Address Interface on a 6PE Router 675

    Binding and Advertising the 6PE Label to Advertise Prefixes 677

    Configuring iBGP Multipath Load Sharing 679

    Verifying 6PE Configuration and Operation 680

    Output Examples 681

    Configuration Examples for IPv6 over MPLS 683

    Example: Customer Edge Router 683

    Example: Provider Edge Router 683

    Example: Core Router 684

    Where to Go Next 685

    Additional References 685

    Feature Information for Implementing IPv6 over MPLS 686

    Implementing IPv6 VPN over MPLS 689

    Finding Feature Information 689

    Prerequisites for Implementing IPv6 VPN over MPLS 689

    Restrictions for Implementing IPv6 VPN over MPLS 690

    Information About Implementing IPv6 VPN over MPLS 690

    IPv6 VPN over MPLS Overview 690

    Addressing Considerations for IPv6 VPN over MPLS 690

    Basic IPv6 VPN over MPLS Functionality 691

    IPv6 VPN Architecture Overview 691

    IPv6 VPN Next Hop 692

    MPLS Forwarding 692

    6VPE over GRE Tunnels 692

    VRF Concepts 693

    IPv6 VPN Scalability 693

    Advanced IPv6 MPLS VPN Functionality 694

    Internet Access 694

    Multiautonomous-System Backbones 695

    Carrier Supporting Carriers 696

    BGP IPv6 PIC Edge for IP MPLS 696

    How to Implement IPv6 VPN over MPLS 696

    Configuring a Virtual Routing and Forwarding Instance for IPv6 697

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxvi

  • Binding a VRF to an Interface 699

    Configuring a Static Route for PE-to-CE Routing 701

    Configuring eBGP PE-to-CE Routing Sessions 701

    Configuring the IPv6 VPN Address Family for iBGP 703

    Configuring Route Reflectors for Improved Scalability 704

    Configuring Internet Access 712

    Configuring the Internet Gateway 712

    Configuring iBGP 6PE Peering to the VPN PE 712

    Configuring the Internet Gateway as the Gateway to the Public Domain 714

    Configuring eBGP Peering to the Internet 715

    Configuring the IPv6 VPN PE 717

    Configuring a Default Static Route from the VRF to the Internet Gateway 717

    Configuring a Static Route from the Default Table to the VRF 718

    Configuring iBGP 6PE Peering to the Internet Gateway 719

    Configuring a Multiautonomous-System Backbone for IPv6 VPN 720

    Configuring the PE VPN for a Multiautonomous-System Backbone 722

    Configuring iBGP IPv6 VPN Peering to a Route Reflector 722

    Configuring IPv4 and Label iBGP Peering to a Route Reflector 724

    Configuring the Route Reflector for a Multiautonomous-System Backbone 725

    Configuring Peering to the PE VPN 726

    Configuring the Route Reflector 728

    Configuring Peering to the Autonomous System Boundary Router 731

    Configuring Peering to Another ISP Route Reflector 733

    Configuring the ASBR 735

    Configuring Peering with Router Reflector RR1 736

    Configuring Peering with the Other ISP ASBR2 737

    Configuring CSC for IPv6 VPN 740

    Configuring BGP IPv6 PIC Edge for IP MPLS 741

    Verifying and Troubleshooting IPv6 VPN 743

    Verifying and Troubleshooting Routing 743

    Example: BGP IPv6 Activity Summary 743

    Example: Dumping the BGP IPv6 Tables 743

    Example: Dumping the IPv6 Routing Tables 744

    Verifying and Troubleshooting Forwarding 744

    Example: PE-CE Connectivity 744

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxvii

  • Example: PE Imposition Path 745

    Example: PE Disposition Path 747

    Example: Label Switch Path 747

    Example: VRF Information 748

    Debugging Routing and Forwarding 748

    Configuration Examples for Implementing IPv6 VPN over MPLS 749

    Example: IPv6 VPN Configuration Using IPv4 Next Hop 749

    Additional References 749

    Feature Information for Implementing IPv6 VPN over MPLS 751

    Glossary 752

    Implementing Policy-Based Routing for IPv6 755

    Finding Feature Information 755

    Restrictions for Implementing Policy-Based Routing for IPv6 755

    Information About Implementing Policy-Based Routing for IPv6 756

    Policy-Based Routing Overview 756

    How Policy-Based Routing Works 756

    Packet Matching 757

    Packet Forwarding Using Set Statements 757

    When to Use Policy-Based Routing 758

    How to Implement Policy-Based Routing for IPv6 758

    Enabling PBR on an Interface 758

    Enabling Local PBR for IPv6 763

    Enabling Cisco Express Forwarding-Switched PBR for IPv6 763

    Verifying Configuration and Operation of PBR for IPv6 763

    Troubleshooting PBR for IPv6 764

    Examples 765

    Configuration Examples for Implementing Policy-Based Routing for IPv6 765

    Example: Enabling PBR on an Interface 765

    Example: Enabling Local PBR for IPv6 766

    Additional References 766

    Feature Information for Implementing Policy-Based Routing for IPv6 767

    Implementing QoS for IPv6 769

    Finding Feature Information 769

    Restrictions for Implementing QoS for IPv6 769

    Information About Implementing QoS for IPv6 769

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxviii

  • Implementation Strategy for QoS for IPv6 770

    Packet Classification in IPv6 770

    Policies and Class-Based Packet Marking in IPv6 Networks 770

    Congestion Management in IPv6 Networks 771

    Congestion Avoidance for IPv6 Traffic 771

    Traffic Policing in IPv6 Environments 771

    How to Implement QoS for IPv6 771

    Classifying Traffic in IPv6 Networks 771

    Specifying Marking Criteria for IPv6 Packets 771

    Using the Match Criteria to Manage IPv6 Traffic Flows 773

    Confirming the Service Policy 774

    Configuration Examples for Implementing QoS for IPv6 776

    Example: Verifying Cisco Express Forwarding Switching 776

    Example: Verifying Packet Marking Criteria 777

    Example: Matching DSCP Value 782

    Additional References 783

    Feature Information for Implementing QoS for IPv6 784

    Implementing RIP for IPv6 787

    Finding Feature Information 787

    Information About Implementing RIP for IPv6 787

    RIP for IPv6 787

    Nonstop Forwarding for IPv6 RIP 788

    How to Implement RIP for IPv6 788

    Enabling the IPv6 RIP Process 788

    Customizing IPv6 RIP 789

    Redistributing Routes into an IPv6 RIP Routing Process 791

    Configuring Route Tags for IPv6 RIP Routes 792

    Filtering IPv6 RIP Routing Updates 793

    Verifying IPv6 RIP Configuration and Operation 796

    Examples 796

    Configuration Examples for IPv6 RIP 798

    Example IPv6 RIP Configuration 798

    Additional References 799

    Feature Information for Implementing RIP for IPv6 800

    Implementing Selective Packet Discard in IPv6 803

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxix

  • Finding Feature Information 803

    Contents 803

    Information About Implementing Selective Packet Discard in IPv6 803

    SPD in IPv6 Overview 804

    SPD State Check 804

    SPD Mode 804

    SPD Headroom 804

    How to Implement Selective Packet Discard in IPv6 805

    Configuring the SPD Process Input Queue 805

    Configuring an SPD Mode 806

    Configuring SPD Headroom 807

    Configuration Examples for IPv6 Selective Packet Discard 808

    Example Configuring the SPD Process Input Queue 808

    Additional References 808

    Feature Information for Implementing Selective Packet Discard in IPv6 810

    Implementing Static Routes for IPv6 813

    Finding Feature Information 813

    Restrictions for IPv6 Routing: Static Routing 813

    Information About Implementing Static Routes for IPv6 813

    Static Routes 814

    Directly Attached Static Routes 814

    Recursive Static Routes 814

    Fully Specified Static Routes 815

    Floating Static Routes 815

    How to Implement Static Routes for IPv6 816

    Configuring a Static IPv6 Route 816

    Configuring a Recursive IPv6 Static Route to Use a Default IPv6 Static Route 817

    Configuring a Floating Static IPv6 Route 817

    Verifying Static IPv6 Route Configuration and Operation 819

    Examples 820

    Configuration Examples for Implementing Static Routes for IPv6 823

    Example: Configuring Manual Summarization 823

    Example: Configuring Traffic Discard 824

    Example: Configuring a Fixed Default Route 824

    Example: Configuring a Floating Static Route 824

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxx

  • Additional References 825

    Feature Information for Implementing Static Routes for IPv6 826

    Implementing Traffic Filters and Firewalls for IPv6 Security 829

    Finding Feature Information 829

    Restrictions for Implementing Traffic Filters and Firewalls for IPv6 Security 829

    Information About Implementing Traffic Filters and Firewalls for IPv6 Security 830

    Access Control Lists for IPv6 Traffic Filtering 830

    IPv6 ACL Extensions for IPsec Authentication Header 830

    Access Class Filtering in IPv6 830

    Tunneling Support 831

    Virtual Fragment Reassembly 831

    Cisco IOS Firewall for IPv6 831

    PAM in Cisco IOS Firewall for IPv6 831

    Cisco IOS Firewall Alerts Audit Trails and System Logging 832

    IPv6 Packet Inspection 832

    Cisco IOS Firewall Restrictions 832

    Zone-Based Policy Firewall IPv6 Support 832

    ACL--Hardware and Software Counters Granularity for IPv4 and IPv6 ACL Statistics 832

    How to Implement Traffic Filters and Firewalls for IPv6 Security 833

    Configuring IPv6 Traffic Filtering 833

    Creating and Configuring an IPv6 ACL for Traffic Filtering 833

    Applying the IPv6 ACL to an Interface 835

    Controlling Access to a vty 836

    Creating an IPv6 ACL to Provide Access Class Filtering 836

    Applying an IPv6 ACL to the Virtual Terminal Line 838

    Configuring TCP or UDP Matching 839

    Creating an IPv6 ACL for Traffic Filtering in Cisco IOS Release 12.2(11)T 12.0(22)S or

    Earlier Releases 840

    Creating an IPv6 ACL in Cisco IOS Release 12.2(11)T 12.0(22)S or Earlier Releases 841

    Applying the IPv6 ACL to an Interface in Cisco IOS Release 12.2(11)T 12.0(22)S or

    Earlier Releases 842

    Configuring the Cisco IOS Firewall for IPv6 843

    Configuring PAM for IPv6 846

    Creating an IPv6 Access Class Filter for PAM 846

    Applying the IPv6 Access Class Filter to PAM 848

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxxi

  • Configuring Zone-Based Firewall in IPv6 849

    Configuring an Inspect-Type Parameter Map 849

    Creating and Using an Inspect-Type Class Map 850

    Creating and Using an Inspect-Type Policy Map 852

    Creating Security Zones and Zone Pairs 853

    Configuring ACL Hardware and Software Counters Granularity for IPv4 and IPv6 ACL

    Statistics 854

    Verifying IPv6 Security Configuration and Operation 855

    Troubleshooting IPv6 Security Configuration and Operation 857

    Examples 859

    Configuration Examples for Implementing Traffic Filters and Firewalls for IPv6 Security 863

    Examples Creating and Applying IPv6 ACLs 863

    Example: Creating and Applying an IPv6 ACL 863

    Example Creating and Applying an IPv6 ACL for 12.2(11)T 12.0(22)S or Earlier

    Releases 864

    Example Controlling Access to a vty 864

    Example: Configuring TCP or UDP Matching 865

    Example: Configuring Cisco IOS Firewall for IPv6 865

    Example: Configuring Cisco IOS Zone-Based Firewall for IPv6 866

    Additional References 866

    Feature Information for Implementing Traffic Filters and Firewalls for IPv6 Security 868

    IPv6 ACL Extensions for Hop by Hop Filtering 871

    Finding Feature Information 871

    Information About IPv6 ACL Extensions for Hop by Hop Filtering 871

    ACLs and Traffic Forwarding 871

    How to Configure IPv6 ACL Extensions for Hop by Hop Filtering 872

    Configuring IPv6 ACL Extensions for Hop by Hop Filtering 872

    Configuration Example for IPv6 ACL Extensions for Hop by Hop Filtering 873

    Example: IPv6 ACL Extensions for Hop by Hop Filtering 873

    Additional References 874

    Feature Information for IPv6 ACL Extensions for Hop by Hop Filtering 875

    Implementing Tunneling for IPv6 877

    Finding Feature Information 877

    Restrictions for Implementing Tunneling for IPv6 877

    Information About Implementing Tunneling for IPv6 877

    Overlay Tunnels for IPv6 878

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxxii

  • IPv6 Manually Configured Tunnels 880

    GRE IPv4 Tunnel Support for IPv6 Traffic 880

    GRE Support over IPv6 Transport 881

    mGRE Tunnels Support over IPv6 881

    GRE CLNS Tunnel Support for IPv4 and IPv6 Packets 881

    Automatic 6to4 Tunnels 881

    Automatic IPv4-Compatible IPv6 Tunnels 882

    IPv6 Rapid Deployment Tunnels 882

    ISATAP Tunnels 882

    IPv6 IPsec Site-to-Site Protection Using Virtual Tunnel Interface 883

    How to Implement Tunneling for IPv6 883

    Configuring Manual IPv6 Tunnels 883

    Configuring GRE IPv6 Tunnels 885

    Configuring Automatic 6to4 Tunnels 886

    Configuring IPv4-Compatible IPv6 Tunnels 888

    Configuring 6RD Tunnels 890

    Configuring ISATAP Tunnels 891

    Verifying IPv6 Tunnel Configuration and Operation 892

    Examples 893

    Configuration Examples for Implementing Tunneling for IPv6 895

    Example: Configuring Manual IPv6 Tunnels 895

    Example Configuring GRE Tunnels 895

    Example: GRE Tunnel Running IS-IS and IPv6 Traffic 895

    Example: Tunnel Destination Address for IPv6 Tunnel 896

    Example: Configuring CTunnels in GRE Mode to Carry IPv6 Packets in CLNS 897

    Example: Configuring 6to4 Tunnels 897

    Example: Configuring IPv4-Compatible IPv6 Tunnels 898

    Example: Configuring 6RD Tunnels 898

    Example: Configuring ISATAP Tunnels 899

    Additional References 899

    Feature Information for Implementing Tunneling for IPv6 900

    Implementing VoIP for IPv6 905

    Finding Feature Information 905

    Prerequisites for Implementing VoIP for IPv6 905

    Restrictions for Implementing VoIP for IPv6 906

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxxiii

  • Information About Implementing VoIP for IPv6 906

    SIP Voice Gateways in VoIPv6 906

    Cisco Unified Border Element in VoIPv6 906

    MTP Used with Voice Gateways in VoIPv6 906

    How to Implement VoIP for IPv6 906

    Configuring a SIP Voice Gateway for IPv6 907

    Restrictions 907

    Shutting Down or Enabling VoIPv6 Service on Cisco Gateways 908

    Shutting Down or Enabling VoIPv6 Submodes on Cisco Gateways 908

    Configuring the Protocol Mode of the SIP Stack 909

    Disabling ANAT Mode 910

    Configuring the Source IPv6 Address of Signaling and Media Packets 911

    Configuring the SIP Server 912

    Configuring the Session Target 914

    Configuring SIP Register Support 915

    Configuring Outbound Proxy Server Globally on a SIP Gateway 916

    Verifying SIP Gateway Status 917

    Configuring H.323 IPv4-to-SIPv6 Connections in a Cisco Unified Border Element 920

    Configuring MTP Used with Voice Gateways 921

    Restrictions 922

    Configuring MTP for IPv4-to-IPv6 Translation 922

    RTCP Pass-Through 924

    Restrictions 925

    Configuring T.38 Fax Globally 925

    Configuring IPv6 Support for Cisco UBE 927

    Example: Verifying RTCP Pass-Through 928

    Verifying T.38 Fax Configuration 929

    Configuration Examples for Implementing VoIP over IPv6 931

    Example: Configuring the SIP Trunk 931

    Example: Configuring the Source IPv6 Address of Signaling and Media Packets 931

    Example; Configuring the SIP Server 932

    Example: Configuring the Session Target 932

    Example: Configuring SIP Register Support 932

    Example: Configuring H.323 IPv4 to SIPv6 Connections in a Cisco Unified Border

    Element 932

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxxiv

  • Example Configuring MTP for IPv4-to-IPv6 Translation 933

    Additional References 933

    Feature Information for Implementing VoIP for IPv6 935

    IPv6 RFCs 937

    Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT xxxv

  • Contents

    IPv6 Configuration Guide, Cisco IOS Release 15.2MTxxxvi

  • Start Here: Cisco IOS Software ReleaseSpecifics for IPv6 Features

    The IPv6 for Cisco IOS software feature documentation provides implementation and command referenceinformation for IPv6 features supported in the Cisco IOS software. This Start Here document details onlythe Cisco IOS software release specifics for IPv6 features. Not all IPv6 features may be supported in yourCisco IOS software release. We strongly recommend that you read this entire document before reading theother IPv6 for Cisco IOS software feature documentation.

    Finding Feature Information, page 1 Cisco IOS Software Platform Dependencies and Restrictions, page 1 Cisco IOS IPv6 Features and Supported Software Releases, page 2 Cisco Platforms Supporting IPv6 Hardware Forwarding, page 27 Additional References, page 30

    Finding Feature InformationYour software release may not support all the features documented in this module. For the latest caveatsand feature information, see Bug Search Tool and the release notes for your platform and software release.To find information about the features documented in this module, and to see a list of the releases in whicheach feature is supported, see the feature information table at the end of this module.

    Use Cisco Feature Navigator to find information about platform support and Cisco software image support.To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.

    Cisco IOS Software Platform Dependencies and RestrictionsSee the table below to determine which IPv6 features are supported in each release of the Cisco IOSsoftware trains.

    Note For information about IPv6 features in Cisco IOS XE software releases, see "Start Here: Cisco IOS XESoftware Release Specifics for IPv6 Features."

    IPv6 was introduced on the 12.0(21)ST Cisco IOS software release train, which was merged with the12.0S Cisco IOS software release train starting at Cisco IOS Release 12.0(22)S. The 12.0S Cisco IOSsoftware release train provides IPv6 support on Cisco 12000 series Internet routers and Cisco 10720Internet routers only.

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 1

    http://www.cisco.com/cisco/psn/bssprt/bsshttp://www.cisco.com/go/cfn

  • The 12.2S Cisco IOS release train comprises a family of release trains, each supporting differentplatforms as follows:

    The 12.2SB Cisco IOS release train comprises the Cisco 10000, 7304, 7301, and 7200 series. Asof Cisco IOS Release 12.2(33)SB, the Cisco 7200 and 7301 series are not supported on the12.2SB release train.

    The 12.2SE Cisco IOS release train consists of the Cisco Catalyst 3560, 3750, 3560E, 3750E series, and theCisco Catalyst 3750 Metro series.

    The 12.2SG Cisco IOS release train consists of the Cisco Catalyst 4500 and Cisco Catalyst 4900series.

    The 12.2SR Cisco IOS release train consists of the Cisco 7600 and 7200 series routers. The 12.2SX Cisco IOS release train consists of the Cisco Catalyst 6500. Before the 12.2SR Cisco

    IOS release train, the 12.2SX release train also included the Cisco 7600 series. The 15.0M, 15.1T, and 15.2T Cisco IOS release trains are a continuation of the 12.2, 12.3, and 12.4

    Cisco IOS release trains. IPv6 is also supported in some special software release trains.

    Cisco IOS IPv6 Features and Supported Software ReleasesThe table below lists the IPv6 features supported in the 12.0S, 12.x T, 12.2S, 12.2SR, 12.2SX, 12.2SY,12.3, 12.4, 15.0M, 15.0S, 15.0SY, 15.1S, 15.2S, 15.1T, and 15.2T Cisco IOS software release trains.

    Note The table identifies the earliest release for each software release train in which the feature becameavailable. Unless noted otherwise in the table, subsequent releases of that Cisco IOS software release trainalso support that feature.

    Table 1 Supported IPv6 Feature

    Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6

    IPv6: BaseProtocolsHighAvailability

    ImplementingIPv6Addressing andBasicConnectivity

    -- -- -- -- 12.2(33)SRE --

    IPv6: CNSAgents forIPv6

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2 (50)SY

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT2

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 DeviceTracking

    ImplementingFirst HopSecurity inIPv6

    -- -- -- -- -- 12.2 (50)SY

    EnhancedIPv6NeighborDiscoveryCacheManagement

    ImplementingIPv6Addressing andBasicConnectivity

    -- -- -- -- -- 12.2 (33)SXI7

    IPv6: FullSelectivePacketDiscardSupport

    ImplementingSelectivePacket Discardin IPv6

    15.1(3) -- -- -- -- --

    IPv6:HTTP(S)IPv6 Support(Infrastructure)

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 12.2 (44)SE 12.2 (44)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2 (50)SY

    IPv6: ICMPRate Limiting

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(8) 12.3 12.2 (25)SE 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6:ICMPv6

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 12.2 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA (17a)SX1

    IPv6:ICMPv6Redirect

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(4) 12.3 12.2 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: IPv6ICMP RFC4443

    ImplementingIPv6Addressing andBasicConnectivity

    12.4(9)T -- 12.2(52) 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    -- 12.2 (33)SXI

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 3

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6: IPSLAs forIPv6

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2 (33)SRC 12.2 (50)SY

    IPv6 ACLExtensions forMobile IPv6

    ImplementingMobile IPv6

    12.4(2) -- -- -- 12.2(33)SRB 12.2(33)SXI

    IPv6: IPv6DefaultRouterPreferences

    ImplementingIPv6Addressing andBasicConnectivity

    12.4(2) 15.0 (46) 12.2 (46)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (33)SXH

    IPv6: IPv6 forConfigLogger

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2(50)SY

    IPv6: IPv6MTU PathDiscovery

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: IPv6NeighborDiscovery

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2(17a)SX1

    IPv6: IPv6NETCONFSupport

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2 (50)SY

    IPv6: IPv6StatelessAutocon-figuration

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: IPv6StatelessAddressAutoconfiguration RFC4862

    ImplementingIPv6Addressing andBasicConnectivity

    12.4(9)T -- 12.2(52) 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    -- 12.2 (33)SXI

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT4

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6: IPv6Static CacheEntry forNeighborDiscovery

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(8) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: Per-InterfaceNeighborDiscoveryCache Limit

    ImplementingIPv6Addressing andBasicConnectivity

    15.1(3) -- -- -- -- --

    IPv6: IPv6Support forTCL

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2(50)SY

    IPv6: IPv6Support inSOAP

    ImplementingIPv6 forNetworkManagement

    12.4(20) 15.0 -- 12.2 (50)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2 (50)SY

    TACACS+over IPv6

    ImplementingADSL andDeploying DialAccess for IPv6

    15.2(1) 15.1(1)S (58) -- 15.1(1)S 12.2(33)SXJ

    IPv6 VPNover MPLS

    ImplementingIPv6 VPN overMPLS

    12.4(20) 15.0 -- -- 12.2(33)SRB 12.2 (33)SXI

    Mobile IPv6Basic NEMO

    ImplementingMobile IPv6

    12.4(20) 15.0 -- -- -- --

    Mobile IPv6Home Agent

    ImplementingMobile IPv6

    12.3(14) 12.4 -- -- -- --

    MPLS VPN6VPE Supportover IPTunnels

    ImplementingIPv6 VPN overMPLS

    -- -- -- -- 12.2(33)SRB1 12.2 (33)SXI

    BGP IPv6PIC Edge forIP/MPLS

    ImplementingIPv6 VPN overMPLS

    -- -- -- -- 15.1(2)S --

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 5

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    BGP IPv6Client forSingle_HopBFD

    ConfiguringBGP NeighborSessionOptions

    -- -- -- -- 15.1(2)S --

    IPv6:NeighborDiscoveryDuplicateAddressDetection

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(4) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6 NDInspection

    ImplementingFirst HopSecurity inIPv6

    -- -- -- -- -- 12.2 (50)SY

    IPv6: FlexibleNetFlow forIPv6 ReplacesIPv6 NetFlow

    ImplementingNetFlow forIPv6

    12.4(20) 15.0 -- -- -- --

    IPv6: Ping ImplementingIPv6 forNetworkManagement

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: syslogover IPv6

    ImplementingIPv6 forNetworkManagement

    12.4(4) 15.0 (44) 12.2 (44)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRB 12.2 (33)SXI

    IPv6: Telnet,DNS, TFTPClient,Traceroute

    ImplementingIPv6Addressing andBasicConnectivity,ImplementingIPv6 forNetworkManagement

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2(17a)SX1

    IPv6: uRPF ImplementingIPv6Addressing andBasicConnectivity

    -- -- -- -- -- 12.2 (50)SY

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT6

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 AddressTypes:Anycast

    ImplementingIPv6Addressing andBasicConnectivity

    12.3(4) 12.4 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (33)SXH

    IPv6 AddressTypes:Unicast

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 (25)SEA -- 12.2(33)SRA 12.2 (17a)SX1

    IPv6 PACLSupport

    ImplementingFirst HopSecurity inIPv6

    -- -- (46) 12.2 (54)SG

    3.2.0SG

    15.0(2)SG

    -- 12.2(33)SXI4

    IPv6 RAGuard

    ImplementingFirst HopSecurity inIPv6

    -- -- -- 12.2 (54)SG

    3.2.0SG

    15.0(2)SG

    -- 12.2 (33)SXI4

    IPv6 SelectivePacketDiscard

    ImplementingSelectivePacket Discardin IPv6

    -- -- -- -- 12.2(33)SRC 12.2 (33)SXH

    IPv6 Supporton BVIInterfaces

    ImplementingIPv6Addressing andBasicConnectivity

    15.1(2) -- -- -- -- --

    FTP IPv6Support

    ImplementingIPv6 forNetworkManagement

    15.2(1) -- -- -- 15.1(3)S --

    IPv6SwitchingServices

    CEFv6SwitchedConfiguredIPv6 overIPv4 Tunnels

    ImplementingTunneling forIPv6

    15.1(3) -- -- -- -- --

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 7

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    CEFv6SwitchedConfiguredIPv6 overIPv6 GRETunnels

    ImplementingTunneling forIPv6

    15.1(3) -- -- -- -- --

    IPv6Switching:CEFv6SwitchedAutomaticIPv4-CompatibleTunnels

    ImplementingTunneling forIPv6

    12.3(2) 12.4 -- -- 12.2(33)SRA 12.2(17a)SX1

    IPv6Switching:CEFv6SwitchedConfiguredIPv6 overIPv4 Tunnels

    ImplementingTunneling forIPv6

    12.2(13) 12.4 -- -- 12.2(33)SRA 12.2(18)SXE

    IPv6Switching:CEFv6SwitchedISATAP

    ImplementingTunneling forIPv6

    12.3(2) 12.4 -- 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2(17a)SX1

    IPv6Switching:Cisco ExpressForwarding/DistributedCisco ExpressForwardingSupport

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(13) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6Switching:Provider EdgeRouter overMPLS (6PE)

    ImplementingIPv6 overMPLS

    12.2(15) 12.3 -- -- 12.2(33)SRA 12.2(17b)SXA

    IPv6 Routing

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT8

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    BFD IPv6EncapsulationSupport

    ImplementingBidirectionalForwardingDetection forIPv6

    15.1(2) -- -- -- 12.2(33)SRE 15.0(1)SY

    BFD Supportfor EIGRPIPv6

    IP Routing:BFDConfigurationGuide

    -- -- -- -- 15.2(2)S --

    EIGRP IPv6VRF Lite

    ImplementingEIGRP forIPv6

    -- -- -- -- 15.1(1)S 15.0(1)SY1

    IPv6 Routing:EIGRPSupport

    ImplementingEIGRP forIPv6

    12.4(6) -- (40) 12.2 (40)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRB 12.2 (33)SXI

    IPv6 Policy-BasedRouting

    ImplementingPolicy-BasedRouting forIPv6

    12.3(7) 12.4 -- -- 15.2(1)S 12.2 (33)SXI4

    IPv6 Routing:IS-ISMultitopologySupport forIPv6

    ImplementingIS-IS for IPv6

    12.2(15) 12.3 -- 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (18)SXE

    IPv6 Routing:IS-IS Supportfor IPv6

    ImplementingIS-IS for IPv6

    12.2(8) 12.3 -- 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA (17a)SX1

    IPv6 IS-ISLocal RIB

    ImplementingIS-IS for IPv6

    12.3(4)T 12.4 -- -- 12.2(33)SRA 12.2 (33)SXH

    IPv6 Routing:MultiprotocolBGPExtensions forIPv6

    ImplementingMultiprotocolBGP for IPv6

    12.2(2) 12.3 -- 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 9

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 Routing:MultiprotocolBGP Link-Local AddressPeering

    ImplementingMultiprotocolBGP for IPv6

    12.2(4) 12.3 -- 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2(17a)SX1

    IPv6: NSFand GracefulRestart forMP-BGPIPv6 AddressFamily

    ImplementingMultiprotocolBGP for IPv6

    -- -- -- -- 12.2(33)SRE 15.0(1)SY

    OSPFv3 FastConvergence:LSA and SPFThrottling

    ImplementingOSPFv3

    -- 15.0(1)M -- -- 12.2(33)SRC 15.0(1)SY

    IPv6 Routing:OSPFv3

    ImplementingOSPFv3

    12.2(15) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6 Routing:OSPF forIPv6Authentication Supportwith IPsec

    ImplementingOSPFv3

    12.3(4) 12.4 -- -- 15.2(1)S 15.0(1)SY1

    OSPFv3IPSec ESPEncryptionandAuthenticationn

    ImplementingOSPFv3

    12.4(9) 15.0 -- -- -- 15.0(1)SY1

    IPv6 Routing:RIP for IPv6(RIPng)

    ImplementingRIP for IPv6

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6: RIPngNonstopForwarding

    ImplementingRIP for IPv6

    -- -- -- -- 12.2(33)SRE 15.0(1)SY

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT10

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 Routing:RouteRedistribution

    ImplementingIS-IS for IPv6,ImplementingRIP for IPv6

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (18)SXE

    IPv6 Routing:Static Routing

    ImplementingStatic Routesfor IPv6

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    OSPFv3AddressFamilies

    ImplementingOSPFv3

    15.2(1) -- -- -- 15.1(3)S --

    OSPFv3DynamicInterface CostSupport

    ImplementingOSPFv3

    12.4(15) 15.0 -- -- -- --

    OSPFv3External PathPreferenceOption

    ImplementingOSPFv3

    15.2(3) -- -- -- 15.1(3)S --

    OSPFv3 forBFD

    ImplementingOSPFv3,ImplementingBidirectionalForwardingDetection forIPv6

    15.1(2) -- -- -- 12.2(33)SRE 15.0(1)SY

    OSPFv3GracefulRestart

    ImplementingOSPFv3

    -- 15.0(1)M (58) -- 12.2(33)SRE 15.0(1)SY

    OSPFv3ManetExtensions

    IP MobilityGuide

    15.2(1) -- -- -- -- --

    OSPFv3 Max-Metric RouterLSA

    ImplementingOSPFv3

    15.2(3) -- -- -- 15.1(3)S --

    Static RouteSupport forBFD overIPv6

    ImplementingBidirectionalForwardingDetection forIPv6

    15.1(2) -- -- -- -- 15.0(1)SY1

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 11

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    VRF LiteSupport forIPv6

    ImplementingMultiprotocolBGP for IPv6

    -- -- (58) -- -- --

    IPv6 ServicesandManagement

    Hardware andSoftwareCountersGranularityfor IPv4 andIPv6 ACLStatistics

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    -- -- -- -- -- 12.2 (50)SY

    IPsec IPv6Phase 2Support

    ImplementingIPSec in IPv6Security

    12.4(4) 15.0 -- -- -- --

    IPv6 SecureNeighborDiscovery(SeND)

    ImplementingFirst HopSecurity inIPv6

    12.4(24) 15.0 -- -- -- --

    IPv6 Services:AAAA DNSLookups overan IPv4Transport

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(2) 12.3 (25)SEA 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6 Services:CiscoDiscoveryProtocol: IPv6AddressFamilySupport forNeighborInformation

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(8) 12.3 (25)SEE 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (18)SXE

    IPv6 Services:CISCO-IP-FORWARDING-MIBSupport

    ImplementingIPv6 forNetworkManagement

    12.2(15) 12.3 (25)SEE 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (18)SXE

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT12

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 Services:CISCO-IP-MIB Support

    ImplementingIPv6 forNetworkManagement

    12.2(15) 12.3 (25)SEE 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (18)SXE

    IPv6 Services:DNS Lookupsover an IPv6Transport

    ImplementingIPv6Addressing andBasicConnectivity

    12.2(8) 12.3 (25)SED 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRE2 12.2 (17a)SX1

    IPv6 Services:ExtendedAccessControl Lists

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    12.2(13) 12.3 (25)SED 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    FHRP: GLBPfor IPv6

    ConfiguringFirst HopRedundancyProtocols inIPv6

    12.4(6) 15.0 (58) -- -- 12.2 (33)SXI

    IPv6 Services:GenericPrefix

    ImplementingIPv6Addressing andBasicConnectivity

    12.3(4) 12.4 -- -- -- --

    HSRP forIPv6

    ConfiguringFirst HopRedundancyProtocols inIPv6

    12.4(4) 15.0 (46) 12.2 (52)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRB 12.2 (33)SXI

    HSRP: GlobalIPv6 Address

    ConfiguringFirst HopRedundancyProtocols inIPv6

    -- -- -- -- -- 12.2 (33)SXI4

    SSO: HSRP ConfiguringFirst HopRedundancyProtocols inIPv6

    -- -- -- 12.2 (52)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (33)SXH

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 13

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    ISSU: HSRP ConfiguringFirst HopRedundancyProtocols inIPv6

    -- -- -- 12.2 (52)SG

    3.2.0SG

    15.0(2)SG

    -- 12.2 (33)SXI

    IOS Zone-BasedFirewall

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    15.1(2) -- -- -- -- --

    IPv6 ACLExtensions forIPsecAuthentication Header

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    12.4(20) 15.0 -- -- -- --

    IPv6 ACLExtensions forHop by HopFiltering

    IPv6 ACLExtensions forHop by HopFiltering

    15.2(3) -- -- -- 15.2(2)S --

    IPv6 IOSFirewall

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    12.3(7) 12.4 -- -- -- --

    IPv6 IOSFirewall FTPApplicationSupport

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    12.3(11) -- -- -- -- --

    IPv6 IPsecVPN

    ImplementingIPSec in IPv6Security

    12.4(4) 15.0 -- -- -- --

    IPv6 RemoteAccess forIPSec VPN

    FlexVPN andInternet KeyExchangeVersion 2ConfigurationGuide

    15.2(3) -- -- -- -- --

    Start Here: Cisco IOS Software Release Specifics for IPv6 Features Cisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT14

  • Feature Location 12.x T/ 15.x TRelease

    12.x /15.xRelease

    12.2SERelease

    12.2SG,15.xxSG 3.xSG Release

    12.2SR/ 15SRelease

    12.2SX, 12.2SY,15.0SYRelease

    IPv6 overDMVPN

    ImplementingDynamicMultipointVPN over IPv6

    12.4(20) 15.0 -- -- -- --

    IPv6Transport forDMVPN

    ImplementingDynamicMultipointVPN over IPv6

    15.2(1) -- -- -- -- --

    IPv6 Services:RFC 4293 IP-MIB (IPv6Only) andRFC 4292 IP-FORWARD-MIB (IPv6Only)

    ImplementingIPv6 forNetworkManagement

    15.1(3) -- (58) 12.2 (54)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRC 12.2 (50)SY

    IPv6 Services:Secure Shell(SSH)Support overIPv6

    ImplementingIPv6 forNetworkManagement

    12.2(8) 12.3 (25)SEE 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2 (17a)SX1

    IPv6 Services:SNMP overIPv6

    ImplementingIPv6 forNetworkManagement

    12.3(14) 12.4 (44) 12.2 (44)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRB 12.2(33)SXI

    IPv6 Services:StandardAccessControl Lists

    ImplementingTraffic Filtersand Firewallsfor IPv6Security

    12.2(2) 12.3 (25)SED 12.2 (25)SG

    3.2.0SG

    15.0(2)SG

    12.2(33)SRA 12.2(17a)SX1

    IKEv2HeadendSupport forRemoteAccessClients

    http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ikevpn/configuration/15-2mt/sec-key-exch-ver2.html

    15.2(1) -- -- -- -- --

    Start Here: Cisco IOS Software Release Specifics for IPv6 FeaturesCisco IOS IPv6 Features and Supported Software Releases

    IPv6 Configuration Guide, Cisco IOS Release 15.2MT 15

  • Feature L