moving to ipv6

[Richard Langly]

I have a 5506-X that I currently use for my home network which is all ipv4 now. I'm trying to move to ipv6 to get accustomed to it. It's more of a learning process for me, will try to go ipv6 all the way since things are headed in that direction.Here are the commands I've used so far.

    $ interface GigabitEthernet 1/1
    $ ipv6 address autoconfig
    $ ipv6 enable
    $ ipv6 nd suppress-ra

# sh ipv6 interface outside
outside is up, line protocol is up
  IPv6 is enabled, link-local address is fe80::7aba:f9ff:fedb:2a32  
  No global unicast address is configured
  Joined group address(es):
    ff02::1:ffdb:2a32
    ff02::2
    ff02::1
  ICMP error messages limited to one every 100 milliseconds
  ICMP redirects are enabled
  ND DAD is enabled, number of DAD attempts: 1
  ND reachable time is 30000 milliseconds
  Hosts use stateless autoconfig for addresses.

So that was my outside interface. I have 3 internal interfaces that I've done nothing for yet. Do I do the same for those? Anything else needed?

[Julio Carvajal]

Hello,

Right now you have configured your Outside Interface o use DHCPv6 Autoconfig and you are not getting anything.

Is the ISP aware of this or this is just a lab.

Note: You can do the same on the other interfaces if you have a DHCP server or Router providing IPv6 addresses.

Regards

[James Leinweber]

As Julio notes, until your ISP is offering native IPv6 you won't get offsite with that configuration.  In the interim you would have to tunnel IPv6 traffic across the ISP's IPv4 moat using something like 6rd or 6in4; Cisco VPN connections can also provide dual-stack tunneling.  Most client operating systems such as windows 7 or Linux can tunnel; I'm not sure how well the ASA can on its own. 

The ISP's website should say if they are offering a 6rd relay; if they are, and your broadband gear is recent enough (e.g. DOCSIS 3.0 or later for a cable modem), it might be configurable to use that.  At that point your router interface would probably work.   If your ISP isn't offering either native IPv6 or 6rd, nag them.  Meanwhile, an example free 6in4 provider would be tunnelbroker.net (run by Hurricane Electric).

The ASA can provide DHCPv6 and RA's to your inside interfaces if you configure it to.

Best wishes with the experiments,

-- Jim Leinweber, WI State Lab of Hygiene