How to check , if IPv6 traffic is available at my network ?

[Alfred Berberich]

Hallo

We have an IPv4 network with a lot of firewalls  and I want to see which ipv6 already exists in out network.

What I´am doing is : enabling ipv6 on the firewall interface , defining  a deny any any role and logging enabling .

any other idea or workarounds ?

sincerley

Alfred

[johnlloyd_13]

Hi,

You should try NetFlow instead.

Sent from Cisco Technical Support iPhone App

[Marvin Rhoads · Accepted solution]

I agree Netflow is a better insight method. But then you need a Netflow collector setup somewhere.

Neither Netflow nor an ASA access-list will catch the local segment IPv6 - multicasts, peers establishing adjacencies, etc.

[Alfred Berberich]

Thx for help

I ask my netflow colleagues to have a look, I think we can do it and I will inform you

does it mean  enabling ipv6 parallel to ipv4 on a firewall interface is useless ?

[johnlloyd_13]

Hi,

You could run both IPv4 and IPv6 on your ASA by using the dual stack method.

Please remember to rate useful post and mark the thread answered if resolved.

Sent from Cisco Technical Support iPhone App