ConfiguringIPv6Routing VOSS
ConfiguringIPv6Routing VOSS
NN47227-507
Issue 10.01
July 2017
© 2015-2017, Avaya Inc. YOU DO NOT WISH TO ACCEPT THESE TERMS OF USE, YOU
All Rights Reserved. MUST NOT ACCESS OR USE THE HOSTED SERVICE OR
AUTHORIZE ANYONE TO ACCESS OR USE THE HOSTED
Notice SERVICE.
While reasonable efforts have been made to ensure that the Licenses
information in this document is complete and accurate at the time of
printing, Avaya assumes no liability for any errors. Avaya reserves THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA
the right to make changes and corrections to the information in this WEBSITE, HTTPS://SUPPORT.AVAYA.COM/LICENSEINFO,
document without the obligation to notify any person or organization UNDER THE LINK “AVAYA SOFTWARE LICENSE TERMS (Avaya
of such changes. Products)” OR SUCH SUCCESSOR SITE AS DESIGNATED BY
AVAYA, ARE APPLICABLE TO ANYONE WHO DOWNLOADS,
Documentation disclaimer USES AND/OR INSTALLS AVAYA SOFTWARE, PURCHASED
“Documentation” means information published in varying mediums FROM AVAYA INC., ANY AVAYA AFFILIATE, OR AN AVAYA
which may include product information, operating instructions and CHANNEL PARTNER (AS APPLICABLE) UNDER A COMMERCIAL
performance specifications that are generally made available to users AGREEMENT WITH AVAYA OR AN AVAYA CHANNEL PARTNER.
of products. Documentation does not include marketing materials. UNLESS OTHERWISE AGREED TO BY AVAYA IN WRITING,
Avaya shall not be responsible for any modifications, additions, or AVAYA DOES NOT EXTEND THIS LICENSE IF THE SOFTWARE
deletions to the original published version of Documentation unless WAS OBTAINED FROM ANYONE OTHER THAN AVAYA, AN AVAYA
such modifications, additions, or deletions were performed by or on AFFILIATE OR AN AVAYA CHANNEL PARTNER; AVAYA
the express behalf of Avaya. End User agrees to indemnify and hold RESERVES THE RIGHT TO TAKE LEGAL ACTION AGAINST YOU
harmless Avaya, Avaya's agents, servants and employees against all AND ANYONE ELSE USING OR SELLING THE SOFTWARE
claims, lawsuits, demands and judgments arising out of, or in WITHOUT A LICENSE. BY INSTALLING, DOWNLOADING OR
connection with, subsequent modifications, additions or deletions to USING THE SOFTWARE, OR AUTHORIZING OTHERS TO DO SO,
this documentation, to the extent made by End User. YOU, ON BEHALF OF YOURSELF AND THE ENTITY FOR WHOM
YOU ARE INSTALLING, DOWNLOADING OR USING THE
Link disclaimer SOFTWARE (HEREINAFTER REFERRED TO
Avaya is not responsible for the contents or reliability of any linked INTERCHANGEABLY AS “YOU” AND “END USER”), AGREE TO
websites referenced within this site or Documentation provided by THESE TERMS AND CONDITIONS AND CREATE A BINDING
Avaya. Avaya is not responsible for the accuracy of any information, CONTRACT BETWEEN YOU AND AVAYA INC. OR THE
statement or content provided on these sites and does not APPLICABLE AVAYA AFFILIATE (“AVAYA”).
necessarily endorse the products, services, or information described Avaya grants You a license within the scope of the license types
or offered within them. Avaya does not guarantee that these links will described below, with the exception of Heritage Nortel Software, for
work all the time and has no control over the availability of the linked which the scope of the license is detailed below. Where the order
pages. documentation does not expressly identify a license type, the
Warranty applicable license will be a Designated System License as set forth
below in the Designated System(s) License (DS) section as
Avaya provides a limited warranty on Avaya hardware and software. applicable. The applicable number of licenses and units of capacity
Refer to your sales agreement to establish the terms of the limited for which the license is granted will be one (1), unless a different
warranty. In addition, Avaya’s standard warranty language, as well as number of licenses or units of capacity is specified in the
information regarding support for this product while under warranty is documentation or other materials available to You. “Software” means
available to Avaya customers and other parties through the Avaya computer programs in object code, provided by Avaya or an Avaya
Support website: https://support.avaya.com/helpcenter/ Channel Partner, whether as stand-alone products, pre-installed on
getGenericDetails?detailId=C20091120112456651010 under the link hardware products, and any upgrades, updates, patches, bug fixes,
“Warranty & Product Lifecycle” or such successor site as designated or modified versions thereto. “Designated Processor” means a single
by Avaya. Please note that if You acquired the product(s) from an stand-alone computing device. “Server” means a set of Designated
authorized Avaya Channel Partner outside of the United States and Processors that hosts (physically or virtually) a software application
Canada, the warranty is provided to You by said Avaya Channel to be accessed by multiple users. “Instance” means a single copy of
Partner and not by Avaya. the Software executing at a particular time: (i) on one physical
“Hosted Service” means an Avaya hosted service subscription that machine; or (ii) on one deployed software virtual machine (“VM”) or
You acquire from either Avaya or an authorized Avaya Channel similar deployment.
Partner (as applicable) and which is described further in Hosted SAS Licence types
or other service description documentation regarding the applicable
hosted service. If You purchase a Hosted Service subscription, the Designated System(s) License (DS). End User may install and use
foregoing limited warranty may not apply but You may be entitled to each copy or an Instance of the Software only: 1) on a number of
support services in connection with the Hosted Service as described Designated Processors up to the number indicated in the order; or 2)
further in your service description documents for the applicable up to the number of Instances of the Software as indicated in the
Hosted Service. Contact Avaya or Avaya Channel Partner (as order, Documentation, or as authorized by Avaya in writing. Avaya
applicable) for more information. may require the Designated Processor(s) to be identified in the order
by type, serial number, feature key, Instance, location or other
Hosted Service specific designation, or to be provided by End User to Avaya through
THE FOLLOWING APPLIES ONLY IF YOU PURCHASE AN AVAYA electronic means established by Avaya specifically for this purpose.
HOSTED SERVICE SUBSCRIPTION FROM AVAYA OR AN AVAYA Heritage Nortel Software
CHANNEL PARTNER (AS APPLICABLE), THE TERMS OF USE
FOR HOSTED SERVICES ARE AVAILABLE ON THE AVAYA “Heritage Nortel Software” means the software that was acquired by
WEBSITE, HTTPS://SUPPORT.AVAYA.COM/LICENSEINFO UNDER Avaya as part of its purchase of the Nortel Enterprise Solutions
THE LINK “Avaya Terms of Use for Hosted Services” OR SUCH Business in December 2009. The Heritage Nortel Software is the
SUCCESSOR SITE AS DESIGNATED BY AVAYA, AND ARE software contained within the list of Heritage Nortel Products located
APPLICABLE TO ANYONE WHO ACCESSES OR USES THE at https://support.avaya.com/LicenseInfo under the link “Heritage
HOSTED SERVICE. BY ACCESSING OR USING THE HOSTED Nortel Products” or such successor site as designated by Avaya. For
SERVICE, OR AUTHORIZING OTHERS TO DO SO, YOU, ON Heritage Nortel Software, Avaya grants Customer a license to use
BEHALF OF YOURSELF AND THE ENTITY FOR WHOM YOU ARE Heritage Nortel Software provided hereunder solely to the extent of
DOING SO (HEREINAFTER REFERRED TO INTERCHANGEABLY the authorized activation or authorized usage level, solely for the
AS “YOU” AND “END USER”), AGREE TO THE TERMS OF USE. IF purpose specified in the Documentation, and solely as embedded in,
YOU ARE ACCEPTING THE TERMS OF USE ON BEHALF A for execution on, or for communication with Avaya equipment.
COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT Charges for Heritage Nortel Software may be based on extent of
YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY TO THESE activation or use authorized as specified in an order or invoice.
TERMS OF USE. IF YOU DO NOT HAVE SUCH AUTHORITY, OR IF
Copyright AVAYA CHANNEL PARTNER ACKNOWLEDGES AND AGREES
THE AVAYA CHANNEL PARTNER IS RESPONSIBLE FOR ANY
Except where expressly stated otherwise, no use should be made of AND ALL RELATED FEES AND/OR ROYALTIES. THE G.729
materials on this site, the Documentation, Software, Hosted Service, CODEC IS LICENSED BY SIPRO LAB TELECOM INC. SEE
or hardware provided by Avaya. All content on this site, the WWW.SIPRO.COM/CONTACT.HTML. THE H.264 (AVC) CODEC IS
documentation, Hosted Service, and the product provided by Avaya LICENSED UNDER THE AVC PATENT PORTFOLIO LICENSE FOR
including the selection, arrangement and design of the content is THE PERSONAL USE OF A CONSUMER OR OTHER USES IN
owned either by Avaya or its licensors and is protected by copyright WHICH IT DOES NOT RECEIVE REMUNERATION TO: (I) ENCODE
and other intellectual property laws including the sui generis rights
VIDEO IN COMPLIANCE WITH THE AVC STANDARD (“AVC
relating to the protection of databases. You may not modify, copy, VIDEO”) AND/OR (II) DECODE AVC VIDEO THAT WAS ENCODED
reproduce, republish, upload, post, transmit or distribute in any way
BY A CONSUMER ENGAGED IN A PERSONAL ACTIVITY AND/OR
any content, in whole or in part, including any code and software WAS OBTAINED FROM A VIDEO PROVIDER LICENSED TO
unless expressly authorized by Avaya. Unauthorized reproduction, PROVIDE AVC VIDEO. NO LICENSE IS GRANTED OR SHALL BE
transmission, dissemination, storage, and or use without the express IMPLIED FOR ANY OTHER USE. ADDITIONAL INFORMATION
written consent of Avaya can be a criminal, as well as a civil offense
FOR H.264 (AVC) AND H.265 (HEVC) CODECS MAY BE
under the applicable law. OBTAINED FROM MPEG LA, L.L.C. SEE HTTP://
Virtualization WWW.MPEGLA.COM.
The following applies if the product is deployed on a virtual machine. Compliance with Laws
Each product has its own ordering code and license types. Note,
You acknowledge and agree that it is Your responsibility for
unless otherwise stated, that each Instance of a product must be
complying with any applicable laws and regulations, including, but not
separately licensed and ordered. For example, if the end user
limited to laws and regulations related to call recording, data privacy,
customer or Avaya Channel Partner would like to install two
intellectual property, trade secret, fraud, and music performance
Instances of the same type of products, then two products of that
rights, in the country or territory where the Avaya product is used.
type must be ordered.
Preventing Toll Fraud
Third Party Components
“Toll Fraud” is the unauthorized use of your telecommunications
“Third Party Components” mean certain software programs or
system by an unauthorized party (for example, a person who is not a
portions thereof included in the Software or Hosted Service may
corporate employee, agent, subcontractor, or is not working on your
contain software (including open source software) distributed under
company's behalf). Be aware that there can be a risk of Toll Fraud
third party agreements (“Third Party Components”), which contain
associated with your system and that, if Toll Fraud occurs, it can
terms regarding the rights to use certain portions of the Software
result in substantial additional charges for your telecommunications
(“Third Party Terms”). As required, information regarding distributed
services.
Linux OS source code (for those products that have distributed Linux
OS source code) and identifying the copyright holders of the Third Avaya Toll Fraud intervention
Party Components and the Third Party Terms that apply is available
in the products, Documentation or on Avaya’s website at: https:// If You suspect that You are being victimized by Toll Fraud and You
support.avaya.com/Copyright or such successor site as designated need technical assistance or support, call Technical Service Center
by Avaya. The open source software license terms provided as Third Toll Fraud Intervention Hotline at +1-800-643-2353 for the United
Party Terms are consistent with the license rights granted in these States and Canada. For additional support telephone numbers, see
Software License Terms, and may contain additional rights benefiting the Avaya Support website: https://support.avaya.com or such
successor site as designated by Avaya.
You, such as modification and distribution of the open source
software. The Third Party Terms shall take precedence over these Security Vulnerabilities
Software License Terms, solely with respect to the applicable Third
Party Components to the extent that these Software License Terms Information about Avaya’s security support policies can be found in
impose greater restrictions on You than the applicable Third Party the Security Policies and Support section of https://
Terms. support.avaya.com/security.
The following applies only if the H.264 (AVC) codec is distributed with Suspected Avaya product security vulnerabilities are handled per the
the product. THIS PRODUCT IS LICENSED UNDER THE AVC Avaya Product Security Support Flow (https://
PATENT PORTFOLIO LICENSE FOR THE PERSONAL USE OF A support.avaya.com/css/P8/documents/100161515).
CONSUMER OR OTHER USES IN WHICH IT DOES NOT RECEIVE Downloading Documentation
REMUNERATION TO (i) ENCODE VIDEO IN COMPLIANCE WITH
THE AVC STANDARD (“AVC VIDEO”) AND/OR (ii) DECODE AVC For the most current versions of Documentation, see the Avaya
VIDEO THAT WAS ENCODED BY A CONSUMER ENGAGED IN A Support website: https://support.avaya.com, or such successor site
PERSONAL ACTIVITY AND/OR WAS OBTAINED FROM A VIDEO as designated by Avaya.
PROVIDER LICENSED TO PROVIDE AVC VIDEO. NO LICENSE IS Contact Avaya Support
GRANTED OR SHALL BE IMPLIED FOR ANY OTHER USE.
ADDITIONAL INFORMATION MAY BE OBTAINED FROM MPEG LA, See the Avaya Support website: https://support.avaya.com for
L.L.C. SEE HTTP://WWW.MPEGLA.COM. product or Hosted Service notices and articles, or to report a problem
with your Avaya product or Hosted Service. For a list of support
Service Provider telephone numbers and contact addresses, go to the Avaya Support
THE FOLLOWING APPLIES TO AVAYA CHANNEL PARTNER’S website: https://support.avaya.com (or such successor site as
HOSTING OF AVAYA PRODUCTS OR SERVICES. THE PRODUCT designated by Avaya), scroll to the bottom of the page, and select
OR HOSTED SERVICE MAY USE THIRD PARTY COMPONENTS Contact Avaya Support.
SUBJECT TO THIRD PARTY TERMS AND REQUIRE A SERVICE Trademarks
PROVIDER TO BE INDEPENDENTLY LICENSED DIRECTLY FROM
THE THIRD PARTY SUPPLIER. AN AVAYA CHANNEL PARTNER’S The trademarks, logos and service marks (“Marks”) displayed in this
HOSTING OF AVAYA PRODUCTS MUST BE AUTHORIZED IN site, the Documentation, Hosted Service(s), and product(s) provided
WRITING BY AVAYA AND IF THOSE HOSTED PRODUCTS USE by Avaya are the registered or unregistered Marks of Avaya, its
OR EMBED CERTAIN THIRD PARTY SOFTWARE, INCLUDING affiliates, its licensors, its suppliers, or other third parties. Users are
BUT NOT LIMITED TO MICROSOFT SOFTWARE OR CODECS, not permitted to use such Marks without prior written consent from
THE AVAYA CHANNEL PARTNER IS REQUIRED TO Avaya or such third party which may own the Mark. Nothing
INDEPENDENTLY OBTAIN ANY APPLICABLE LICENSE contained in this site, the Documentation, Hosted Service(s) and
AGREEMENTS, AT THE AVAYA CHANNEL PARTNER’S EXPENSE, product(s) should be construed as granting, by implication, estoppel,
DIRECTLY FROM THE APPLICABLE THIRD PARTY SUPPLIER. or otherwise, any license or right in and to the Marks without the
express written permission of Avaya or the applicable third party.
WITH RESPECT TO CODECS, IF THE AVAYA CHANNEL
PARTNER IS HOSTING ANY PRODUCTS THAT USE OR EMBED Avaya is a registered trademark of Avaya Inc.
THE G.729 CODEC, H.264 CODEC, OR H.265 CODEC, THE
All non-Avaya trademarks are the property of their respective owners.
Linux® is the registered trademark of Linus Torvalds in the U.S. and
other countries.
Contents
Chapter 1: Introduction.......................................................................................................... 10
Purpose................................................................................................................................ 10
Chapter 2: New in this document.......................................................................................... 11
Notice about feature support................................................................................................... 11
Chapter 3: IPv6 basics............................................................................................................ 12
Origins of IPv6...................................................................................................................... 12
Advantages of IPv6............................................................................................................... 12
Comparison of IPv4 and IPv6................................................................................................. 13
IPv6 packet........................................................................................................................... 14
IPv6 header.......................................................................................................................... 14
IPv6 extension headers......................................................................................................... 15
IPv6 address component summary......................................................................................... 17
IPv6 address formats............................................................................................................. 18
Address types....................................................................................................................... 18
IP address prefix................................................................................................................... 23
Interface ID........................................................................................................................... 23
How to write an IPv6 address ................................................................................................ 24
ICMPv6................................................................................................................................ 24
Path MTU discovery.............................................................................................................. 25
Routing................................................................................................................................. 26
Route scaling........................................................................................................................ 30
IPv6 Circuitless IP................................................................................................................. 30
Equal Cost Multipath.............................................................................................................. 31
ECMP with static routes......................................................................................................... 32
Disable IPv6 ICMP multicast.................................................................................................. 32
IPv6 basic configuration using the CLI..................................................................................... 33
Enabling the IPv6–mode boot config flag........................................................................... 33
Configuring an IPv6 static neighbor address...................................................................... 33
Configuring an IPv6 interface .......................................................................................... 36
Assigning IPv6 addresses to a brouter port or VLAN.......................................................... 40
Configuring IPv6 route preferences................................................................................... 41
Viewing global IPv6 information........................................................................................ 42
Creating IPv6 static routes............................................................................................... 47
Viewing routes information............................................................................................... 49
Creating an IPv6 CLIP interface........................................................................................ 51
Enabling IPv6 ECMP globally........................................................................................... 52
Configuring maximum number of ECMP paths .................................................................. 53
Enabling or disabling IPv6 ICMP multicast globally............................................................. 54
Enabling Stateless Address Autoconfiguration................................................................... 54
Purpose
This document provides information on features in VSP Operating System Software (VOSS). VOSS
runs on the following product families:
• Avaya Virtual Services Platform 4000 Series
• Avaya Virtual Services Platform 7200 Series
• Avaya Virtual Services Platform 8000 Series (includes VSP 8200 and VSP 8400 Series)
• Avaya Virtual Services Platform 8600
This document provides conceptual and procedural information to configure IPv6 routing operations.
Included in this document are Operations, Administration, and Management (OA&M), DHCP Relay,
Virtual Router Redundancy Protocol (VRRP), static routes, Open Shortest Path First version 3
(OSPFv3), IPv6 tunnels, and Routed Split MultiLink Trunking (RSMLT).
Note:
The software does not support IPv4-mapped IPv6 addresses, for example, 0::FFFF:a.b.c.d, or
IPv4-compatible IPv6 addresses, for example, 0::a.b.c.d.
Examples and network illustrations in this document may illustrate only one of the supported
platforms. Unless otherwise noted, the concept illustrated applies to all supported platforms.
IPv6 uses the following key security features: SNMP version 3 (SNMPv3) and Secure Shell (SSH).
For detailed information about SNMPv3, see Configuring Security.
For detailed information about SSH, see Administering.
For information about IPv6 prefix lists for route policies, see Configuring IPv4 Routing.
For information about IPv6 shortcuts and IPv6 Inter-VSN routing, see Configuring Fabric Basics and
Layer 2 Services.
The following sections detail what is new in Configuring IPv6 Routing since issue 09.xx.
ICMP redirect support
ICMP redirect functionality has been removed as it is no longer supported.
IPv6 Host mode
IPv6 Host mode is typically used for out of band management interfaces or on end-devices. When
an interface is configured for Host mode, it functions as an IPv6 host. The interface accepts Router
Advertisement (RA) messages from other devices and broadcasts Router Solicitation (RS)
messages to other devices.
This chapter provides concepts and procedures to complete basic IPv6 configuration, for example,
IPv6 forwarding and static routes.
Origins of IPv6
The growth of IP address use is exponential.
Predictions indicated that the IPv4 address pool could be exhausted as early as 1994.
So, in July 1991, the Internet Engineering Task Force (IETF) began researching a replacement for
IPv4.
That replacement is IPv6.
The Internet Assigned Numbers Authority (IANA) free pool of IPv4 addresses reached 0% in
February 2011, according to the American Registry for Internet Numbers (ARIN).
While IPv4 addresses may remain available for some time within reserved pools, no further IPv4
addresses are available for reservation.
Although IPv6 is designed to replace IPv4, IPv6 is not backward-compatible and IPv4 and IPv6
need to coexist within your network during and after the transition to IPv6.
Advantages of IPv6
IPv6 can provide more addresses and support more networks than IPv4. For example, IPv6 offers
enough addresses for every person on Earth to have 1 million addresses.
Because IPv6 offers a larger address space it offers improved scalability.
Following are additional advantages of IPv6 over IPv4:
• With 128 bit addresses, the larger IPv6 address space offers global access and scalability and
solves the pending exhaustion of IP addresses.
• Network Address Translation (NAT) is no longer required.
Flat address space and transparency are restored by IPv6 because NAT is eliminated.
IPv6 packet
Each IPv6 packet can include mandatory and non-mandatory components.
An IPv6 packet includes:
• The basic header, which has a fixed length and is mandatory
• Extension header(s) , which has a variable length and is not mandatory
• Payload, which has a variable length and is not mandatory
The following figure illustrates the components of an IPv6 packet.
Note:
Nodes must be able to handle packets up to 1,280 octets in length.
IPv6 header
The IPv6 header basic length is fixed at 40 octets (bytes) and it contains the following fields:
The following figure illustrates the basic IPv6 header, without extension headers.
IPv6 examines the destination address in the main header of each packet it receives.
This examination determines whether the router is
• the packet destination - if the router is the packet destination, IPv6 examines the header
extensions that contain options for destination processing.
• an intermediate node in the packet data path - if the router is an intermediate node, IPv6
examines the header extensions that contain forwarding options.
By examining only the extension headers that apply to the operations it performs, IPv6 reduces the
amount of time and resources required to process a packet.
IPv6 defines the following extension headers as described in the following table:
For example:
• Each node is a separate zone of the node-local scope.
• Each link is a separate zone of the link-local scope.
• The entire Internet is a single zone of global scope.
Zones of the same scope do not overlap.
Address types
IPv6 uses three main address types to help route packets.
Address types are:
• Unicast: global, link—local, special unspecified, special loopback
• Multicast
• Anycast
Unicast addresses
Unicast addresses provide one-to-one communication.
Global:
A Unicast global address identifies a single interface and is similar to an IPv4 public address.
Unicast global addresses are globally routable in the same manner as IPv4 addresses.
The following figure illustrates the Unicast global address parts.
Special addresses:
The Unicast/special/unspecified address indicates the absence of an address and is the only valid
SRC address for IPv6 Duplicate Address Detection (DAD).
Equivalent to the IPv4 unspecified address 0.0.0.0, represented as 0:0:0:0:0:0:0:0: or ::1; an IPv6
host that does not have a valid address uses the unspecified address as its source address when it
sends a packet to discover whether an address is used by another node (during the boot process
when the host requests address configuration information).
Note:
Do not assign an unspecified address, either statically or dynamically, to an interface.
The Unicast/special/loopback address is a special case Unicast address only found inside a single
node.
The switch does not support the loopback address.
Equivalent to the IPv4 loopback address 127.0.0.1, represented as 0:0:0:0:0:0:0:1 or ::1; a node
uses a loopback address to send a packet to itself.
The loopback address is beneficial in troubleshooting and testing the IP stack because you can use
it to send a packet to the protocol stack without sending it onto the subnet.
Note:
Do not assign a loopback address, either statically or dynamically, to an interface.
Both Loopback and Unspecified addresses are not valid destination addresses.
IPv6 Unicast address example:
An example of a unicast IPv6 address is 1080:0:0:0:8:8000:200C:417A
IPv6 Link-local Unicast address example:
An example of a link-local Unicast IPv6 address is FE80::4445:4eff:fe54:1212
Multicast addresses
Multicast addresses provide one-to-many communication.
An IPv6 multicast address identifies a group of nodes.
The scope is built into the multicast address structure.
The system uses a multicast address to send traffic to multiple destinations. In this situation traffic
experiences less delay with a multicast address than it would with Unicast address.
The following figure shows the format of an IPv6 multicast address.
Flags:
The 4-bit flags field indicates whether the group is permanent or transient. The first 3 bits are
reserved and the 4th bit represents the Transient flag. Currently only the Transient (T) flag is
defined. A T flag set to 0 specifies a permanently assigned multicast address. A T flag set to 1
specifies a transient address.
Group ID:
The 112 bit group ID identifies the multicast group.
An example of a multicast address is FF01:0:0:0:0:0:0:101
Scope field:
The 4-bit scope field within the group ID specifies the multicast traffic scope.
Following is a list of the scope options that limit the scope of the multicast address:
• 1 - node-local
• 2 - link-local
• 3 - subnet local
• 4 - admin local
• 5 - site-local – not supported
• 8 - organization-local
• B - community-local
• E - global
Examples of multicast addresses:
All-nodes addresses look like this:
FF01::1 (Node Local), FF02::1 (Link Local)
All-routers addresses look like this:
FF01::2 (Node Local), FF02::2 (Link Local)
A solicited node or host address looks like this:
FF02::1:FF1E:8329.
In this case the MAC is 00-02-B3-1E-83-29 and the IPv6 address is fe80::202:B3FF:FE1E:8329.
The following table lists some well-known multicast IPv6 addresses
Table 4: Well-known multicast IPv6 addresses
Name Address
All Nodes FF02:0:0:0:0:0:0:1
All Routers FF02:0:0:0:0:0:0:2
OSPFIGP FF02:0:0:0:0:0:0:5
Table continues…
Name Address
OSPFIGP Designated Routers FF02:0:0:0:0:0:0:6
All PIM Routers FF02:0:0:0:0:0:0:D
VRRP FF02:0:0:0:0:0:0:12
All MLDv2–capable routers FF02:0:0:0:0:0:0:16
All DHCP agents FF02:0:0:0:0:0:0:2
Solicited Node address FF02::1:FF00:0000/104
Anycast
Anycast addresses provide one-to-nearest (one to one-of-many) communication.
An anycast address designates a set of interfaces that share an address.
A packet sent to an anycast address goes only to the nearest member of the group. Considering
routing distance, the system delivers packets with anycast addresses only to the nearest member of
a group of multiple interfaces.
Restrictions:
An anycast address must not be:
• used as the source address in an IPv6 packet
• assigned to an IPv6 host (you can assign an anycast address to an IPv6 router)
Anycast address scopes:
Anycast addresses have the following scopes:
• Link-local—the local link; nodes on the same subnet
• Global—IPv6 Internet addresses
Similar to anycast IPv4 addresses, IPv6 anycast addresses are more efficient. They use the unicast
address space but identify multiple interfaces.
IPv6 delivers a packet bearing an anycast address to the nearest interface identified by the address.
Currently anycast addresses are assigned to routers and are used as destination addresses.
Because packets bearing anycast addresses are delivered to the closest router, you can also
access the closest name server or time server with an anycast address.
Visually there is no distinction between an anycast address and a unicast address.
Note:
The switch supports only the subnet-router anycast address.
You cannot configure any specific anycast addresses beyond the automatic, generic subnet-router
anycast address.
Difference between multicast and anycast
Anycast address delivery is from one to one-of-many, whereas multicast address delivery is from
one to many.
IP address prefix
Address prefixes represent one of the following:
• network identifier
• fixed address part
Examples of IP address prefixes:
2001:10F2::/48 represents a summarized route prefix
2001:10F2:0:102F::/64 represents a subnet or link prefix
FF00::/8 represents Multicast IPv6
Interface ID
Interface identifiers identify interfaces on a link.
As long as the interfaces are attached to different subnets, you can use the same identifier on more
than one interface on a single node.
The IPv6 interface ID is as unique as the MAC address.
The interface ID is derived by a formula that uses the link layer 48-bit MAC address. In most cases,
the interface ID is a 64-bit interface ID that contains the 48-bit MAC address. If you enter less than
64 bits, the system adds leading zeroes to extend the interface ID length to 64 bits.
You can configure the interface ID in the following ways:
• Manual configuration
• DHCPv6 (can configure the whole address)
• Automatic derivation from EUI-64 (MAC address or other HW serial)—enables serverless or
stateless auto-configuration when combined with high order part of address learned from router
advertisements
• Pseudo-random generation (client privacy)—enables serverless or stateless auto-configuration
when combined with high order part of address learned from router advertisements
The switch supports manual interface ID configuration or automatic derivation from EUI-64.
Note:
You must manually specify the network prefix, regardless of the interface ID formation method.
For stateless autoconfiguration, the ID is 64 bits in length.
For more information about stateless autoconfiguration, see Host autoconfiguration on page 80.
ICMPv6
Internet Control Message Protocol version 6 (ICMPv6) maintains and improves on features from
ICMP for IPv4.
ICMPv6 reports the delivery of forwarding errors.
For example:
• Destination unreachable
• Packet too big (path MTU)
• Time exceeded (fragmentation)
• Parameter problem
Routing
A routing table is present on all nodes.
The routing table stores information about IPv6 network prefixes and how to reach them.
Note:
The switch requires routing protocols, such as OSPFv3 to exchange IPv6 routing prefixes.
For each incoming packet, the switch checks the destination neighbor cache first. If the destination
is not in the destination neighbor cache, the routing table determines:
• the next-hop interface (the interface used for forwarding)
• the next-hop address
Note:
The system uses the IPv6 Neighbor Cache for on-link, directly-connected destinations only. Off-
link destinations go through a next-hop router, as determined by the next-hop address lookup.
IPv6 routes in a routing table can be:
• directly attached network routes using a 64-bit prefix
• remote network routes using a 64-bit or lower prefix
• host routes using a 128-bit prefix length
• the default route using a prefix of ::/0
The switch supports the following IPv6 routing protocols:
• RIPng
• OSPFv3
• BGP+ (over 6in4 tunnels)
• IPv6 Shortcuts (over Fabric Connect)
You can redistribute IPv6 routes between any of these routing protocols.
This document focuses on OSPFv3. For information about OSPFv2, see Configuring OSPF and
RIP.
To configure IPv6 routing on a VLAN, an IP address is assigned to the VLAN. This IP address is not
associated with any particular physical port, but is used on all ports where this VLAN is a member.
On a brouter port, a single port VLAN is used to route the traffic. IPv4 and IPv6 traffic is routed in the
single-port brouter VLAN.
Other VLANs (which are multiple port VLANs) can bridge and route the traffic.
Virtual routing between IPv6 subnets
The switch supports IPv6 routing between subnets.
When you add an IP address to the VLAN, the system maps an IP subnet to the VLAN.
As shown in the following figure, although VLAN 1 and VLAN 2 reside on the same switch, for traffic
to flow from VLAN 1 to VLAN 2, you must route the traffic.
You must enable IPv6 forwarding to route IPv6 traffic between VLANs. And you must enable IPv6
both globally and on a specific VLAN basis in order for forwarding to function. You can enable or
disable IPv6, either globally or on a specific VLAN basis.
IPv6 forwarding is enabled by default.
When you configure routing on a VLAN, an IPv6 address assigned to the VLAN is the VLAN IP
interface.
The VLAN IPv6 address can be reached through any VLAN port, and frames route from the VLAN
through the gateway IPv6 address.
You can forward traffic to any IPv6 subnet in the switch. A VLAN can be reached only if it has an
IPv6 interface configured on it.
Because a port can belong to multiple VLANs, a one-to-one correspondence no longer exists
between the physical port and the router interface when VLAN tagging is enabled.
If you do not enable VLAN tagging a single port can belong only to one port-based VLAN, but that
same single port can belong to multiple policy-based VLANs.
As with any IPv6 address, you can use any VLAN IP interface for device management.
For the Simple Network Management Protocol (SNMP) or Telnet management, you can use any
VLAN IP interface to access the switch while routing is enabled on the VLAN.
Brouter ports
A brouter port is a single-port VLAN that can route IP packets and bridge all nonroutable traffic.
The difference between a brouter port and a standard protocol-based VLAN configured for routing is
that the routing interface of the brouter port is not subject to the spanning tree state of the port. A
brouter port can be in the blocking state for nonroutable traffic while it routes IP traffic.
Note:
Because a brouter port is a one-port VLAN, each brouter port decreases the number of
available VLANs by one and uses one VLAN ID.
Static routes
Static routes provide an alternative method for establishing route reachability.
Static routes, with dynamic routes, provide routing information from the forwarding database.
Only enabled static routes whose nexthop address is reachable are submitted to the Route Table
Manager (RTM), which determines the best route based on reachability, route preference, and cost.
Action Result
Change the administrative status of the static route Makes the static route unavailable for forwarding
You can use one CLI command to administratively
enable or disable all static routes as follows ipv6
route static enable.
You can administratively disable all routes but
preserve the static route configuration when you use
Table continues…
Action Result
the CLI command: no ipv6 static route
enable.
Delete the IPv6 addresses of a VLAN or brouter port Permanently deletes the static routes with the
corresponding local neighbors from the RTM, the
forwarding database, and the configuration database
Delete a VLAN Removes static routes with a local next-hop option
from the configuration database. Static routes with a
nonlocal next-hop option become inactive (they are
removed from the forwarding database).
Disable forwarding on a VLAN or brouter port Static routes reachable through the locally attached
network become inactive
Disable a VLAN or brouter port Makes the static route inactive
Disable IPv6 forwarding globally Stops forwarding all IPv6 traffic
Learn changes about a dynamically learned neighbor After a neighbor becomes unreachable or is deleted,
the static route with the neighbor becomes inactive,
and the configuration is not affected. The static route
with the neighbor becomes active in the
configuration and is added to the RTM and
forwarding database when the neighbor becomes
reachable.
Enable a static route Adds the route to the RTM to change certain static
routes to active.
Delete a static route Permanently deletes a static route from the
configuration.
Disable a static route Stops traffic on the static route but does not remove
the route from the configuration.
Change a route preference After the static route preference changes, the best
routes for the entries use both static and dynamic
paths.
Delete or disable a tunnel Removes the tunnel entry from the forwarding table
Enable a tunnel Activates the tunnel static routes and adds an entry
to the forwarding table.
The static route table is separate from the system routing table that the router uses to make
forwarding decisions.
You can use the static route table to directly change static routes.
Although the tables are separate, the system routing table automatically reflects the static routing
table manager entries if the next-hop address in the static route is reachable and if the static route is
enabled.
The static route table is indexed by four attributes:
• destination network
• destination mask
• next hop
• interface
You can insert static routes by using the static route table, and you can delete static routes by using
either the static route table or the system routing table. For information on route scaling, see
Release Notes.
Important:
The system routing table stores only active static routes with the best route preference. A static
route is active only if the route is enabled and if the next-hop address is reachable; for example,
if a valid IPv6 neighbor cache entry exists for the next hop.
You can enter multiple routes (for example, multiple default routes) that use different costs and the
lowest cost route that is reachable appears in the routing table.
If you enter multiple next hops for the same route with the same cost, the switch does not replace
the existing route.
If you enter the same route with the same cost and a different next hop, the switch uses the first
route. If that first route becomes unreachable, the system activates the second route, with a different
next-hop, with no connectivity loss.
Route scaling
IPv4 and IPv6 route scaling depends on the combination of the ipv6-mode and urpf-mode boot
config flags. For more information, see Release Notes.
IPv6 Circuitless IP
IPv6 Circuitless IP (CLIP) is a virtual interface that is not associated with any physical port. You can
use an IPv6 CLIP interface to provide uninterrupted connectivity to your switch as long as an actual
path exists to reach the device. The system treats the IPv6 CLIP interface like an IPv6 interface and
treats the network associated with the IPv6 CLIP as a local network attached to the device. This
route always exists and the circuit is always up because no physical attachment exists.
You can use an IPv6 CLIP address as a logical IPv6 address for network management, as well as
for other purposes. The IPv6 CLIP is typically a host address with any prefix length. You can
redistribute this address as part of any other routing protocol update, so that the CLIP address is
known to neighbors and available for use in routing or other types of connectivity. You can use IPv6
CLIP for many kinds of management connectivity such as telnet or SSH. You can also use IPv6
CLIP as a source IP address for sending Syslog messages.
For scaling information on IPv6 CLIP, see Release Notes.
IPv6 CLIP restrictions and limitations
This section describes the restrictions and limitations associated with IPv6 CLIP.
• Stateless address autoconfiguration (SLAAC) is not supported on IPv6 CLIP interfaces.
• IPv6 CLIP does not support link-local address configuration.
• To configure an IPv6 address with a prefix length from 65 to 127 on a CLIP interface, you must
enable the IPv6 mode flag.
Note:
This flag does not apply to all hardware platforms. For more information, see Release
Notes.
• Neighbor discovery (ND) does not run on an IPv6 CLIP interface. Therefore, the system does
not detect duplicate IPv6 address assignment to this interface.
• Multiple IPv6 address configuration on an IPv6 CLIP interface is not supported.
• IPv6 CLIP interface is enabled by default and it cannot be disabled.
• You cannot configure an IPv6 CLIP interface as the source or destination endpoint of an IPv6-
in-IPv4 tunnel.
The following points need to be considered while configuring ECMP with static routes:
• When ECMP is globally enabled, the equal cost static routes are added in the Routing Table
Manager (RTM).
• Static routes that are configured only using an interface, such as VLAN or port, do not support
ECMP as these routes have a preference value of 0 and are treated like local routes.
• If your switch supports a management interface, then static routes configured on the
management interface do not support ECMP.
• Static routes configured by next-hop are not considered equal cost with routes that are
configured by tunnel even if the routes have the same cost and preference.
• A static route configured by tunnel is the least preferred and is programmed only when a next-
hop or an interface does not configure a static route.
• Static routes configured by next-hop that resolves their next-hop using another static route will
be in the notReachable state even if the next-hop can be pinged.
• If there are two static routes configured by next-hop, and both next-hops are resolved via a
dynamic protocol to the same value, then only one route will be in the reachableInRtm state.
The state of the other route will be reachableNotInRtm.
configure terminal
2. Configure an IPv6 neighbor address:
ipv6 neighbor WORD<0-128> port {slot/port[sub-port]} mac
<0x00:0x00:0x00:0x00:0x00:0x00> [vlan <1-4059>
3. Configure optional parameters if the default values do not meet your requirements:
a. Configure the hop limit:
ipv6 hop-limit <0–255>
The default is 64.
b. Configure ICMP network address unreachable messages:
ipv6 icmp addr-unreach
c. Configure the ICMP error interval:
ipv6 icmp error-interval <0–2147483647>
The interval is in milliseconds. An interval of 0 results in no error messages. The default
is 1000.
d. Configure the ICMP error quota:
ipv6 icmp error-quota <0-2000000>
The default is 50.
e. Configure ICMP port unreachable messages:
ipv6 icmp port-unreach
f. Enable response to icmp echo multicast packets:
ipv6 icmp echo-multicast-request
The default is disabled.
g. Enable ICMP network unreachable messages:
ipv6 icmp unreach-msg
The default is disabled.
Example
Add an IPv6 neighbor for a brouter port:
Switch:1(config)#ipv6 neighbor 3000:0:0:0:0:0:0:2 port 1/11 mac 00:0c:
42:07:35:90
On the VSP 8000 Series:
Add an IPv6 neighbor for a VLAN:
Switch:1(config)#ipv6 neighbor 3000::3 port 1/12 mac 01:02:03:04:05:06
vlan 20
Variable definitions
Use the data in the following table to use the ipv6 commands in this procedure.
Variable Value
forwarding Configures whether this entity is an IPv6 router with
respect to the forwarding of datagrams received by,
but not addressed to, this entity. Enable forwarding
to act as a router. The default is enabled.
hop-limit <0–255> Configures the hop limit. The default is 64.
icmp addr-unreach Enables ICMP address unreachable messages.
The default is enabled.
icmp echo-multicast-request Enable response to icmp echo multicast packets.
The default is enable.
icmp error interval <0–2147483647> Configures the interval (in milliseconds) for sending
ICMPv6 error messages. The default is 1000. An
entry of 0 seconds results in no sent ICMPv6 error
messages
icmp error-quota <0-2000000> Configures the number of ICMP error messages that
can be sent during the ICMP error interval.
A value of zero instructs the system not to send an
ICMP error messages.
The default value is 50.
icmp port-unreach Enables ICMP port unreachable messages.
The default is enabled.
icmp unreach-msg Enables ICMP network unreachable messages. The
default is disabled.
neighbor WORD<0-128> port {slot/port[sub-port]} Creates a static IPv6 neighbor with the following
mac <0x00:0x00:0x00:0x00:0x00:0x00> [vlan variables:
<1-4059> ]
• WORD<0-128> specifies the IPv6 addressof the
neighbor in hexadecimal colon format.
• {slot/port[/sub-port]} specifies the brouter port to
use for the neighbor.
Identifies a single slot and port. If your platform
supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
• mac <0x00:0x00:0x00:0x00:0x00:0x00> specifies
the MAC address of the neighbor.
• vlan <1-4059> specifies the VLAN ID to use for the
neighbor.
Table continues…
Variable Value
Specifies the VLAN ID in the range of 1 to 4059.
By default, VLAN IDs 1 to 4059 are configurable
and the system reserves VLAN IDs 4060 to 4094
for internal use. If you enable VRF scaling and
SPBM mode, the system also reserves VLAN IDs
3500 to 3998. VLAN ID 1 is the default VLAN and
you cannot create or delete VLAN ID 1.
Static IPv6 neighbors do not maintain any state
machine and the system assumes that they are
always reachable.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Create IPv6 interface:
ipv6 interface
3. Configure optional parameters to meet your requirements:
a. Enable IPv6 router advertisement on the interface:
ipv6 nd send-ra
b. Configure the maximum number of hops before packets drop:
ipv6 interface hop-limit <1–255>
c. Configure the link-local address:
ipv6 interface link—local WORD<0–19>
d. Configure the mac offset:
ipv6 interface mac-offset <0–127 | 0-511 | 0-767>
e. Configure the maximum transmission unit (MTU):
ipv6 interface mtu <1280–9500>
f. Configure an interface description:
ipv6 interface name WORD<0–255>
g. Configure the time a neighbor is considered reachable after receiving a reachability
confirmation:
ipv6 interface reachable-time <1–3600000>
h. Configure the time between retransmissions of neighbor solicitation messages to a
neighbor when resolving the address or when probing the reachability of a neighbor:
ipv6 interface retransmit-timer <1-4294967295>
i. Configure a brouter port as part of an IPv6 VLAN:
ipv6 interface vlan <1-4059>
j. Configure the interface to perform IPv6 unicast reverse path forwarding:
• To enable urpf-mode boot flag, enter:
boot config flags urpf-mode
• To configure unicast reverse path forwarding, enter:
ipv6 rvs-path-chk mode {strict|exist-only}
Example
Create and administratively enable the interface:
Variable definitions
Use the data in the following table to use the ipv6 interface command.
Variable Value
hop-limit <1–255> Configures the maximum hops. The default is 64.
link-local WORD<0–19> Specifies the 64-bit interface ID used to calculate the
actual link-local address as a name up to 19
characters long.
mac-offset <0–127 | 0-511 | 0-767> Use mac-offset to request a particular MAC for an
IPv6 VLAN.
Note:
This parameter applies only to VLANs.
You can specify a MAC offset when you configure
IPv6 on a VLAN, or the system can assign a MAC
address from within the available range.
Different hardware platforms support different MAC
offset ranges. Use the CLI Help to see the available
range.
mtu <1280–9500> Configures the maximum transmission unit for the
interface: 1280–1500, 1850, or 9500. This value
must be the same for all addresses defined on this
interface.
The default is 1500.
name WORD<0–255> Assigns a descriptive name. The network
management system also configures this string.
reachable-time <0–3600000> Controls how long IPv6 neighbor entries learned on
an interface remain in the REACHABLE state (as
described in RFC 4861).
The system randomizes the value you configure, per
RFC specifications, to be 50%-150% of the
configured value.
By default the reachable-time base value is 30
seconds, with an actual 15-45 second range when
you consider the randomization factor.
The default is 3000 milliseconds
Table continues…
Variable Value
retransmit-timer <0–4294967295> Controls the time, in milliseconds, between
retransmission of Neighbor Solicitation messages
when the system attempts to resolve or reconfirm the
reachability of an IPv6 neighbor.
By default, the system sends three Neighbor
Solicitation messages with a one second interval
between each message. If the system does not
receive a corresponding Neighbor Advertisement
within an interval equal to 3 X retransmit-timer
milliseconds, the system declares the IPv6 neighbor
unreachable.
Tip:
You can increase the retransmit-timer to extend
the interval that the switch waits until it declares
the neighbor unreachable. For example: a
retransmit-timer value of 5000 means the switch
waits 3 X 5000 milliseconds which equals
15000 milliseconds or 15 seconds.
The default is 1000 milliseconds
vlan <1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
This value corresponds to the lower 12 bits of the
IEEE 802.1Q VLAN tag.
Use the data in the following table to use the ipv6 rvs-path-chk command.
Variable Value
mode {strict|exist-only} Specifies the mode for Unicast Reverse Path
Forwarding (uRPF).
In strict mode, uRPF checks whether the source IP
address of the incoming packet exists in the FIB. If
the incoming interface is not the best reverse path,
the packet check fails and uRPF drops the packet.
In exist-only mode, uRPF checks whether the source
IP address of the incoming packet exists in the FIB.
The packet is dropped only if the source address is
not reachable via any interface on that router.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Assign an IPv6 address:
ipv6 interface address WORD<0–255>
Example
Assign an IPv6 address specifying the full 128 bits of the address:
Switch:1(config-if)#ipv6 interface address 30:0:0:0:0:0:0:ffff/64
Assign an IPv6 address specifying only the upper 64 bits of the address:
Switch:1(config-if)#ipv6 nd prefix-interface <prefix> eui <1–3>
In this example you specify only the upper 64 bits of the address and allow the system to auto-
generate the lower 64 bits from the MAC address.
Variable definitions
Use the data in the following table to use the ipv6 interface address command.
Variable Value
WORD<0–255> Specifies the IPv6 address for the port or VLAN.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
================================================================================
IPv6 Route Preference
================================================================================
PROTOCOL DEFAULT CONFIG
--------------------------------------------------------------------------------
LOCAL 0 0
STATIC 5 5
SPBM_L1 7 7
OSPFv3_INTRA 20 20
OSPFv3_INTER 25 25
EBGP 45 45
RIPNG 100 10
OSPFv3_E1 120 120
OSPFv3_E2 125 125
IBGP 175 175
Variable definitions
Use the data in the following table to use the ipv6 route preference and the show ipv6
route preference commands.
Variable Value
<0-255> Assigns a route preference value.
ebgp Configures the preference for protocol type EBGP.
ibgp Configures the preference for protocol type IBGP.
ospfv3-extern1 Configures the preference for protocol type OSPFv3 external type 1.
ospfv3-extern2 Configures the preference for protocol type OSPFv3 external type 2.
ospfv3-intra Configures the preference for protocol type OSPFv3 intra-area.
ospfv3-inter Configures the preference for protocol type OSPFv3 inter-area.
ripng Configures the preference for protocol type RIPng.
spbm-level1 Configures the preference for protocol type spbm-level1.
static Configures the preference for protocol type static.
Procedure
1. Log on to the switch to enter User EXEC mode.
2. Display IPv6 information for an interface:
show ipv6 interface [gigabitethernet {slot/port[/sub-port] [-slot/
port[/sub-port]] [,...]}] [loopback <1-256>][mgmtEthernet {slot/
port[/sub-port][-slot/port[/sub-port]][,...]}][tunnel <1–2000>][vlan
<1-4059>]
3. Display IPv6 tunnel information:
show ipv6 interface tunnel
4. Display IPv6 address information for the specified slot and port:
show ipv6 address interface gigabitethernet {slot/port[/sub-port] [-
slot/port[/sub-port]] [,...]}
5. Display IPv6 address information for the specified IPv6 address:
show ipv6 address interface ip WORD<0-46>
6. Display IPv6 address information for the specified tunnel:
show ipv6 address interface tunnel <1–2000>
7. Display IPv6 address information for the specified VLAN:
show ipv6 address interface vlan <1-4059>
8. Display the current state of IPv6 forwarding:
show ipv6 forwarding
9. Display information on the current state of IPv6 functionality:
show ipv6 global
10. Display IPv6 Gigabit Ethernet (GbE) router advertisement information:
show ipv6 nd interface gigabitethernet [{slot/port[/sub-port] [-
slot/port[/sub-port]] [,...]}]
11. Display IPv6 router advertisement information for the management port:
show ipv6 nd interface mgmtEthernet mgmt
Note:
This step only applies to hardware with a dedicated, physical management interface.
12. Display IPv6 VLAN router advertisement information:
show ipv6 nd interface vlan [<1-4059>]
13. Display detailed information in IPv6 router advertisements:
show ipv6 nd-prefix detail
===========================================================================================================================
Vlan Ipv6 Interface
===========================================================================================================================
IFINDX VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACHABLE RETRANSMIT MCAST IPSEC RPC RPCMODE
INDX ADDRESS STATE STATE LMT TIME TIME STATUS
---------------------------------------------------------------------------------------------------------------------------
2070 22 e4:5d:52:3c:65:02 disable down ETHER 1500 64 30000 1000 disable disable disable existonly
===========================================================================================================================
Vlan Ipv6 Address
===========================================================================================================================
IPV6 ADDRESS VLAN-ID TYPE ORIGIN STATUS
---------------------------------------------------------------------------------------------------------------------------
fe80:0:0:0:e65d:52ff:fe3c:6502 V-22 UNICAST LINKLAYER INACCESSIBLE
======================================================================================================
Tunnel Ipv6 Interface
======================================================================================================
IF Descr VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACHABLE RETRANSMIT MCAST
INDX ADDRESS STATE STATE LMT TIME TIME STATUS
------------------------------------------------------------------------------------------------------
6656 T-1 0 n/a enable up P2P 1280 64 30000 1000 disable
6657 T-2 0 n/a enable up P2P 1280 64 30000 1000 disable
=======================================================================================================
Tunnel Ipv6 Address
=======================================================================================================
IPV6 ADDRESS TUNNEL-ID TYPE ORIGIN STATUS
-------------------------------------------------------------------------------------------------------
2011:beef:3:0:0:0:0:67 T-1 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:4301:101 T-1 UNICAST LINKLAYER PREFERRED
2011:beef:4:0:0:0:0:67 T-2 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:4301:101 T-2 UNICAST LINKLAYER PREFERRED
==========================================================================================
Address Information
==========================================================================================
IPV6 ADDRESS/PREFIX LENGTH VID/BID/TID TYPE ORIGIN STATUS
------------------------------------------------------------------------------------------
44:211:0:0:0:0:0:2/64 T-2 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:d301:3702/64 T-2 UNICAST LINKLAYER PREFERRED
==========================================================================================
Address Information
==========================================================================================
IPV6 ADDRESS/PREFIX LENGTH VID/BID/TID TYPE ORIGIN STATUS
------------------------------------------------------------------------------------------
10:1:50:0:0:0:0:7/64 V-100 UNICAST MANUAL PREFERRED
fe80:0:0:0:b2ad:aaff:fe46:f19a/64 V-100 UNICAST LINKLAYER PREFERRED
==================================================================================================
Vlan Ipv6 Nd
==================================================================================================
IFID VLAN RTR-ADV MAX-INT MIN-INT LIFETIME MANAG OTHER DAD-NS MTU HOP REACHABLE RETRANSMIT
FLAG CONF LIMIT TIME TIME
---------------------------------------------------------------------------------------------------
2148 V-100 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2158 V-110 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2248 V-200 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2258 V-210 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2548 V-500 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2648 V-600 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
2948 V-900 True 600 200 1800 False False 1 0(d) 64(d) 0(d) 0(d)
====================================================================================
Port Ipv6 Nd Prefix
====================================================================================
INTF IPV6 BTR VALID PREF EUI
INDEX ADDRESS/PREFIX LIFE LIFE
------------------------------------------------------------------------------------
344 2011:beef:4004:0:0:0:0:0/64 5/25 2592000 604800 1
====================================================================================
Vlan Ipv6 Nd Prefix
====================================================================================
INTF IPV6 VLAN VALID PREF EUI
INDEX ADDRESS/PREFIX ID LIFE LIFE
------------------------------------------------------------------------------------
2148 2011:beef:100:0:0:0:0:0/64 100 2592000 604800 1
2158 2011:beef:110:0:0:0:0:0/64 110 2592000 604800 1
2248 2011:beef:200:0:0:0:0:0/64 200 2592000 604800 1
2258 2011:beef:210:0:0:0:0:0/48 210 2592000 604800 1
2548 2011:beef:500:0:0:0:0:0/64 500 2592000 604800 1
2648 2011:beef:600:0:0:0:0:0/64 600 2592000 604800 1
2948 2011:beef:900:0:0:0:0:0/64 900 2592000 604800 1
================================================================================
Nd-Prefix Address Information
================================================================================
INTF IPV6 VLAN VALID PREF EUI
INDEX ADDRESS/PREFIX ID LIFE LIFE
--------------------------------------------------------------------------------
2148 2011:beef:100:0:0:0:0:0/64 100 2592000 604800 1
--------------------------------------------------------------------------------
Legend: EUI: eui-not-used(1), eui-used-with-ul-complement(2)eui-used-without-ul-complement(3)
Switch:1#show ipv6 neighbor type 2
================================================================================
Neighbor Information
================================================================================
NET ADDRESS/ IPV6 PHYS TYPE STATE LAST
PHYSICAL ADDRESS INTF INTF UPD
--------------------------------------------------------------------------------
2013:47:17:120:0:0:0:1/ 1/1 1/1 DYNAMIC REACHABLE 5640 00:1d:af:64:a2:01
2013:47:17:120:0:0:0:2/ 1/1 1/1 DYNAMIC STALE 5170 00:18:b0:5a:92:01
2013:47:17:120:1:0:0:7/ 1/1 1/1 DYNAMIC STALE 5321 80:17:7d:76:63:fd
2013:47:17:120:1:0:0:23/ 1/1 1/1 DYNAMIC STALE 5126 00:24:7f:a1:63:fd
2013:47:17:120:1:0:0:231/ 1/1 1/1 DYNAMIC STALE 5398 80:17:7d:76:63:ff
2013:47:17:120:1:0:0:233/ 1/1 1/1 DYNAMIC STALE 5195 80:17:7d:75:93:ff
2013:47:17:120:1:0:0:239/ 1/1 1/1 DYNAMIC STALE 5207 80:17:7d:75:93:fd
2013:47:17:120:1:0:0:243/ 1/1 1/1 DYNAMIC STALE 5190 00:24:7f:a1:63:ff
--More-- (q = quit)
Switch:1(config)#show ipv6 neighbor
================================================================================
Neighbor Information
================================================================================
NET ADDRESS/ IPV6 PHYS TYPE STATE LAST
PHYSICAL ADDRESS INTF INTF UPD
--------------------------------------------------------------------------------
2013:47:17:120:0:0:0:1/ 1/1 1/1 DYNAMIC STALE 5681
00:1d:af:64:a2:01
2013:47:17:120:0:0:0:2/ 1/1 1/1 DYNAMIC STALE 5170
00:18:b0:5a:92:01
2013:47:17:120:1:0:0:7/ 1/1 1/1 DYNAMIC STALE 5321
80:17:7d:76:63:fd
2013:47:17:120:1:0:0:23/ 1/1 1/1 DYNAMIC STALE 5126
00:24:7f:a1:63:fd
2013:47:17:120:1:0:0:231/ 1/1 1/1 DYNAMIC STALE 5398
80:17:7d:76:63:ff
2013:47:17:120:1:0:0:233/ 1/1 1/1 DYNAMIC STALE 5195
80:17:7d:75:93:ff
2013:47:17:120:1:0:0:239/ 1/1 1/1 DYNAMIC STALE 5207
80:17:7d:75:93:fd
2013:47:17:120:1:0:0:243/ 1/1 1/1 DYNAMIC STALE 5190
00:24:7f:a1:63:ff
--More-- (q = quit)
Variable definitions
Use the data in the following table to use the show ipv6 commands.
Variable Value
address interface ip WORD<0-46> Specifies the IPv6 address.
neighbor [WORD<0-46>] Specifies the IPv6 address of the neighbor.
loopback <1-256> Specifies the loopback interface ID value. If you do
not specify a value, the output includes all IPv6
loopback interfaces.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
type <1–4> Specifies the neighbor type as one of the following:
• 1 - other
• 2 - dynamic
• 3 - static
• 4 - local
tunnel <1–2000> Specifies the tunnel ID.
vlan <1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
Variable definitions
Use the data in the following table to use the ipv6 route command.
Variable Value
WORD <0–46> Specifies the IPv6 destination address and prefix.
Variable Value
you must also specify the sub-port in the format slot/
port/sub-port.
tunnel <1–2000> Specifies the tunnel ID.
vlan <1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
Example
Switch:1(config-if)#show ipv6 route
========================================================================================================================
IPv6 Routing Table Information
========================================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
------------------------------------------------------------------------------------------------------------------------
0:0:0:0:0:0:0:0/0 fe80:0:0:0:5a16:26ff:feed:4885 mgmt AUTOCONF 1 0 B 0
2141:141:7:600:0:0:0:0/64 0:0:0:0:0:0:0:0 mgmt AUTOCONF 1 0 B 0
2141:141:7:600:e65d:52ff:fe3e:9c81/128 0:0:0:0:0:0:0:0 mgmt AUTOCONF 1 0 B 0
9876:0:0:0:0:0:0:0/64 0:0:0:0:0:0:0:0 mgmt AUTOCONF 1 0 B 0
9876:0:0:0:e65d:52ff:fe3e:9c81/128 0:0:0:0:0:0:0:0 mgmt AUTOCONF 1 0 B 0
================================================================================
IPv6 Route Summary
================================================================================
TOTAL OSPF RIP BGP STATIC LOCAL ISIS
--------------------------------------------------------------------------------
13 10 0 3 1 2 7
================================================================================
================================================================================
Static Route Information
================================================================================
DEST-IP NET IFINDX(VID/BRT/TUN) ENABLE STATUS
NEXT-HOP PREFERENCE
--------------------------------------------------------------------------------
0:aa:1:0:0:0:0:0 64 0 (0 ) enable
NotReachable0:2910:0:0:0:0:0:10 5
0:aa:1:1:0:0:0:0 64 0 (0 ) enable
NotReachable0:2911:0:0:0:0:0:10 5
0:aa:1:2:0:0:0:0 64 0 (0 ) enable
NotReachable0:2912:0:0:0:0:0:10 5
0:aa:1:3:0:0:0:0 64 0 (0 ) enable
NotReachable0:2913:0:0:0:0:0:10 5
0:aa:1:4:0:0:0:0 64 0 (0 ) enable
NotReachable0:2914:0:0:0:0:0:10 5
0:aa:1:5:0:0:0:0 64 0 (0 ) enable
NotReachable0:2915:0:0:0:0:0:10 5
0:aa:1:6:0:0:0:0 64 0 (0 ) enable
NotReachable0:2916:0:0:0:0:0:10 5
0:aa:1:7:0:0:0:0 64 0 (0 ) enable
NotReachable0:2917:0:0:0:0:0:10 5
--------------------------------------------------------------------------------
8 out of 42 Total Num of Static Routes displayed.
Variable definitions
Use the data in the following table to use the show ipv6 route command.
Variable Value
count-summary Shows the total number of OSPF, static, and local
routes.
dest WORD<0–46> Specifies the IPv6 destination network address. The
prefix value must match the prefix length.
next-hop WORD<0–46> Specifies the IPv6 address of the next hop on this
route.
spbm-nh-as-mac Shows the B-MAC address as the next hop rather
than the host name.
{slot/port[/sub-port]} Identifies a single slot and port. If your platform
supports channelization and the port is channelized,
you must also specify the sub-port in the format slot/
port/sub-port.
static Shows static IPv6 routes.
tunnel <1–2000> Shows route entries for a specific tunnel ID.
vlan<1-4059> Shows route entries for a specific VLAN ID.
===============================================================================================
Loopback IPv6 Interface
===============================================================================================
IF Descr VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACHABLE RETRANSMIT
INDX ADDRESS STATE STATE LMT TIME TIME
----------------------------------------------------------------------------------------------
1344 CLIPv6-1 -- 00:00:00:00:00:01 enable up ETHER 1500 64 30000 1000
==========================================================================================
Loopback IPv6 Address
==========================================================================================
IPV6 ADDRESS/PREFIX LENGTH LOOPBACK-ID TYPE ORIGIN STATUS
------------------------------------------------------------------------------------------
1:210:0:0:0:0:0:210/128 C-1 UNICAST MANUAL PREFERRED
Variable definitions
Use the data in the following table to use the ipv6 commands.
Variable Value
WORD<1–256> Specifies the CLIP interface ID.
WORD<0–255> Specifies the IPv6 address.
Variable definitions
Use the data in the following table to use the ipv6 ecmp command.
Variable Value
enable Enables IPv6 ECMP globally.
Variable Value
Note:
• Enabling IPv6 ECMP sets the maximum
number of paths configured to its default
value. This value is either 4 or 8 depending on
your hardware platform.
• Disabling IPv6 ECMP sets the maximum
number of paths configured to 1.
Note:
The default value for max-path is the maximum value, which varies depending on your
hardware platform.
Example
Switch:1>enable
Switch:1#configure terminal
Variable definitions
Use the data in the following table to use the ipv6 ecmp max-path command.
Variable Value
Depending on your hardware platform, use: Configures the maximum number of ECMP paths.
max-path <1-4 | 1-8> When ECMP is enabled, the default value is either 4
or 8 depending on your hardware platform.
Note:
By default, the IPv6 ICMP multicast feature is enabled.
5. View the IPv6 ICMP multicast state:
show ipv6 global
Procedure
1. Enter Global Configuration mode:
enable
configure terminal
2. Enable IPv6 autoconfiguration:
ipv6 autoconfig
Example
Switch:1(config)#ipv6 autoconfig
The following example shows a sample output for the show ipv6 global command.
Switch:1#show ipv6 global
forwarding : disable
default-hop-cnt : 64
number-of-interfaces : 2
icmp-error-interval : 1000
icmp-error-quota : 50
icmp-unreach-msg : disable
icmp-addr-unreach-msg : enable
icmp-port-unreach-msg : enable
icmp-echo-multicast-request : enable
static-route-admin-status : enable
alternative-route : enable
ecmp : disable
ecmp-max-path : 1
source-route : disable
host-autoconfig : enable
======================================================================================================
Mgmt Ipv6 Nd
======================================================================================================
IFID MGMT-IF RTR-ADV MAX-INT MIN-INT LIFETIME MANAG OTHER DAD-NS MTU HOP REACHABLE RETRANSMIT
FLAG CONF LIMIT TIME TIME
------------------------------------------------------------------------------------------------------
64 mgmt False 600 200 0 False False 2 0(d) 2(s) 0(d) 0(d)
Variable definitions
Use the data in the following table to use the ipv6 nd command.
Variable Value
dad-ns <0–600> Specifies the number of neighbor solicitation
messages for duplicate address detection (DAD).
A value of 0 disables the DAD process on this
interface.
A value of 1 sends one advertisement without
retransmissions.
The default is 1.
hop-limit <0–255> Specifies the current hop limit field sent in router
advertisements from this interface.
The value must be the current diameter of the
Internet.
A value of zero indicates that the advertisement does
not specify a hop-limit value.
The default is 64.
Example
The following examples shows a sample output of the show ipv6 interface process-
redirect command.
VSP-8284XSQ:1#show ipv6 interface process-redirect
===============================================================================
Process ICMP redirect status
===============================================================================
IFINDX DESCR VLAN STATUS
-------------------------------------------------------------------------------
64 PORT-mgmt 4092 Enabled
Job aid
The following table describes the fields in the output for the show ipv6 default-routers
command.
Parameter Description
net address Shows the IPv6 router address received from a valid
router advertisement.
VLAN <1–4059> Shows the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3999. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
LIFETIME Shows the value placed in the router lifetime field of
router advertisements. This value must be either 0 or
between 4 and 9000. A value of zero indicates that
the system is not a default router.
The default is 1800.
IS ACTIVE Shows if the default router is active or inactive.
Name Description
You must enable forwarding to use Telnet or Ping
with IPv6.
DefaultHopLimit Configures the hop limit.
The range is 0 to 255. The default is 64.
Interfaces Shows the number of interfaces.
IfTableLastChange Shows the date of the last interface table change.
IcmpNetUnreach Enables ICMP network unreachable messages. The
default is disabled.
IcmpErrorInterval Configures the interval (in milliseconds) for sending
ICMPv6 error messages. The default is 1000. An
entry of 0 seconds results in no sent ICMPv6 error
messages.
The range is 0 to 2147483647 milliseconds.
IcmpErrorQuota Configures the number of ICMP error messages that
the system can send during the ICMP error interval.
A value of zero specifies not to send any.
The range is 0 to 2000000.
The default value is 50.
IcmpMulticastRequestEnable Globally enables or disables the IPv6 ICMP echo
multicast request feature. This is enabled by default.
IcmpAddrUnreach Enables or disabled ICMP address unreachable
messages.
This is enabled by default.
IcmpPortUnreach Enables or disables ICMP port unreachable
messages.
This is enabled by default.
Autoconfig Enables or disables stateless address
autoconfiguration.
This is disabled by default.
StaticRouteGlobalAdminEnabled Enables IPv6 static routes globally. If you disable
static routes globally, the system removes all enabled
static routes from the RTM and does not add new
static routes to the RTM.
The default is enabled.
RouteStaticClear Clears all IPv6 static routes.
SourceRouteEnable Globally enables or disables the IPv6 Source
Routing feature. It is disabled by default.
PrefixListTableSize Displays the prefix list table size.
RoutePrefTableSize Displays the route preference table size.
Table continues…
Name Description
AlternativeRouteEnable Globally enables or disables the IPv6 alternative
route feature. By default, this feature is enabled.
EcmpEnable Enables or disables the IPv6 ECMP globally. By
default, it is disabled.
EcmpMaxPath Globally configures the maximum number of ECMP
paths.
The number of paths supported is either 1 to 4 or 1
to 8, depending on your hardware platform.
When ECMP is enabled, the default value is either 4
or 8 depending on your hardware platform.
You cannot configure this feature unless ECMP is
enabled globally.
Name Description
CurHopLimit Specifies the current hop limit field sent in router
advertisements from this interface. The value must
be the current diameter of the Internet. A value of
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
MulticastAdminStatus The option to select MulticastAdminStatus is
disabled. You cannot configure the administrative
status for multicast in this context.
MacOffset Requests a particular MAC for an IPv6 VLAN.
You can specify a MAC offset when you configure
IPv6 on a VLAN, or the system can assign a MAC
address from within the available range.
Different hardware platforms support different MAC
offset ranges.
RSMLTEnable Shows whether RSMLT is enabled on the interface.
The default value is disabled (false).
ProcessRedirect Shows whether ND Redirect messages processing is
enabled or disabled on this interface.
The default value is disabled (false).
Name Description
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
MulticastAdminStatus The option to select MulticastAdminStatus is
disabled. You cannot configure the administrative
status for multicast in this context.
MacOffset Requests a particular MAC for an IPv6 VLAN.
You can specify a MAC offset when you configure
IPv6 on a VLAN, or the system can assign a MAC
address from within the available range.
Different hardware platforms support different MAC
offset ranges.
RSMLTEnable Shows whether RSMLT is enabled on the interface.
The default value is disabled (false).
ProcessRedirect Shows whether ND Redirect messages processing is
enabled or disabled on this interface.
The default value is disabled (false).
Name Description
probing the reachability of a neighbor. The default is
1000.
CurHopLimit Specifies the current hop limit field sent in router
advertisements from this interface. The value must
be the current diameter of the Internet. A value of
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
MulticastAdminStatus The option to select MulticastAdminStatus is
disabled. You cannot configure the administrative
status for multicast in this context.
MacOffset Requests a particular MAC for an IPv6 VLAN.
You can specify a MAC offset when you configure
IPv6 on a VLAN, or the system can assign a MAC
address from within the available range.
Different hardware platforms support different MAC
offset ranges.
RSMLTEnable Shows whether RSMLT is enabled on the interface.
The default value is disabled (false).
ProcessRedirect Shows whether ND Redirect messages processing is
enabled or disabled on this interface.
The default value is disabled (false).
Important:
If the IPv6 address exceeds 116 octets, the
object identifiers (OIDS) of instances of columns
in this row are more than 128 subidentifiers and
you cannot use SNMP-v1, SNMPv2c, or
SNMPv3 to access them.
AddrLen Specifies the prefix length value for this address. You
cannot change the address length after you create it.
You must provide this value to create an entry in this
table.
Type Specifies the type of address. The default is unicast.
Origin Specifies the origin of the address. The following list
shows the possible origins:
• other
• manual
• dhcp
• linklayer
• random
Status Specifies the status of the address, describing
whether the address is used for communication. The
following list shows the possible statuses:
• prefered (default)
• deprecated
• invalid
• inaccessible
• unknown
• tentative
Table continues…
Name Description
• duplicate
Created Specifies the sysUpTime of the creation of this entry.
If the entry was created prior to the last
reinitialization of the local management subsystem,
the object contains a zero value.
LastChanged Specifies the value of sysUpTime of the last
modification to this entry. If the entry was created
prior to the last reinitialization of the local
management subsystem, the object contains a zero
value.
ValidLifetime Shows how long, in seconds, the address is valid.
PrefLifetime Shows how long, in seconds, the address is in use.
Name Description
Interface Specifies the port.
Addr Specifies the IPv6 address to which this entry
applies.
Table continues…
Name Description
Note:
If the IPv6 address exceeds 116 octets, the
object identifiers (OIDS) of instances of columns
in this row are more than 128 subidentifiers and
you cannot use SNMP-v1, SNMPv2c, or
SNMPv3 to access them.
AddrLen Specifies the prefix length value for this address. You
cannot change the address length after you create it.
You must provide this value to create an entry in this
table.
Type Specifies the type of address. The default is unicast.
Origin Specifies the origin of the address.
Status Specifies the status of the address, describing
whether the address is used for communication.
Created Specifies the sysUpTime of the creation of this entry.
If the entry was created prior to the last
reinitialization of the local management subsystem,
the object contains a zero value.
LastChanged Specifies the value of sysUpTime of the last
modification to this entry. If the entry was created
prior to the last reinitialization of the local
management subsystem, the object contains a zero
value.
Name Description
Interface Identifies the address to which the address is
assigned.
Addr Specifies an IP address that is associated with a
VLAN.
AddrLen Specifies the prefix address length value for this
address.
Type Specifies the type of address: either unicast or
anycast.
Origin Specifies the origin of the address as one of the
following:
• other
• manual
• dhcp
• linklayer
• random
Status Shows the status of the address and if it can be used
for communication.
Created Shows the time this address entry was created.
LastChanged Shows the time this address entry was last updated.
Name Description
• tryToResolve: The route is not reachable but a
neighbor request entry is built to resolve the next-
hop. This status appears if a local equivalent route
exists in the system to reach the next-hop but the
neighbor is not learned.
• reachableNotInRtm: The static route is reachable
but it is not in RTM. This status appears if the static
route is reachable, but it is not the best among
alternative static routes.
• reachableInRtm: The static route is reachable and
it is in RTM. This status appears if the static route
is reachable, and it is the best among alternative
static routes to be added into RTM.
Preference Specifies the routing preference of the destination
IPv6 address. The range is 1-255. The default value
is 5.
Name Description
DefaultValue Specifies the default preference value for the specified protocol.
Protocol Specifies the protocol name.
ConfiguredValue Configures the preference value for the specified protocol.
Name Description
Type Specifies the type of route.
PathType Specifies the type of path.
Pref Specifies the preference.
Name Description
Address Specifies the learned router address for an IPv6
default routers entry.
IfIndex Specifies the interface number for an IPv6 default
routers entry.
Lifetime Specifies the remaining router lifetime.
Active Specifies if the default router is active for an IPv6
default routers entry.
This chapter provides concepts and procedures to complete IPv6 neighbor discovery configuration.
Neighbor discovery
IPv6 nodes (routers and hosts) on the same link use neighbor discovery (ND) to discover link-layer
addresses and to obtain and advertise various network parameters and reachability information. ND
combines the services for IPv4 with the Address Resolution Protocol (ARP) and router discovery. In
IPv6 ND performs a function similar to ARP (Address Resolution Protocol) in IPv4.
Hosts use ND to discover the routers in the network that you can use as the default routers, and to
determine the link-layer address of neighbors attached to local links. Routers also use ND to
discover neighbors and link-layer information. ND updates the neighbor database with valid entries,
invalid entries, and entries migrated to various locations.
The ND protocol provides the following services:
• address and prefix discovery
Hosts determine the set of addresses that are on-link for the given link. Nodes determine which
addresses or prefixes are locally reachable or remote with address and prefix discovery.
• router discovery
Hosts discover neighboring routers with router discovery. Hosts establish neighbors as default
packet-forwarding routers.
• parameter discovery
Hosts and routers discover link parameters such as the link MTU or the hop-limit value placed
in outgoing packets.
• address autoconfiguration
Hosts configure an address for an interface with address autoconfiguration.
• duplicate address detection
Hosts and nodes determine if an address is assigned to another router or a host.
• address resolution
Hosts determine link-layer addresses (MAC for Ethernet) of the local neighbors (attached on
the local network), provided the IP address is known.
• next-hop determination
Hosts determine how to forward local or remote traffic with next-hop determination. The next
hop can be a local or remote router.
• neighbor unreachability detection
Hosts determine if the neighbor is unreachable, and if address resolution must be performed
again to update the database. For neighbors you use as routers, hosts attempt to forward
traffic through alternative default routers.
• redirect
Routers inform the host of more efficient routes with redirect messages.
Neighbor discovery uses three components:
• host-router discovery
Host-router discovery performs the following functions:
- router discovery
- prefix discovery
- parameter discovery
- address autoconfiguration
• host-host communication
Host-host communication performs the following functions:
- address resolution
- next-hop determination
- neighbor unreachability detection
- duplicate address detection
• route redirect
Note:
When a neighbor transitions to the STALE state, to initiate Neighbor Unreachability detection
(NUD), a duplicate copy of the traffic destined to this neighbor is sent to the switch Control
Processor (CP) on a low priority queue (queue 0). The original packet is forwarded to this
neighbor. Once NUD is initiated, the hardware records are updated and the traffic is no longer
sent to the CP. When a high rate of such traffic is sent to CP, the switch can drop some of these
packets due to the in built CP rate limiting feature, which protects the CP from DOS attacks.
Use the command show qos cosq-stats cpu-port to view drop statistics on the CPU
queue. This design does not result in loss of traffic.
Use the command ipv6 nd reachable-time <0-3600000> to increase the default value
of 3000 milliseconds which in turn delays the scenario of data path sending STALE neighbor
destined packets to the CP.
ND messages
The following table compares the ICMP message types.
Table 6: IPv4 and IPv6 neighbor comparison
State Description
Incomplete Address resolution is in progress and the system has
not yet determined the link-layer address of the
neighbor.
The neighbor cache may also enter the Incomplete
state when the switch cannot confirm subsequent
reachability during the ND process for router
neighbors. By contrast, the system deletes host
neighbors, rather than enter the Incomplete state, if
ND fails to confirm reachability.
Tip:
Router neighbors: when the R bit is set in the
received neighbor advertisement
Host neighbors: when the R bit is not set in the
received neighbor advertisement
Reachable A node receives positive confirmation within the last
reachable time period.
Stale Reachability of the neighbor is unknown.
Until the system sends traffic to the neighbor, make
no attempt to verify its reachability.
Delay A time period longer than the reachable time period
passes since the node received the last positive
Table continues…
State Description
confirmation, and a packet was sent within the last
DELAY_FIRST_PROBE_TIME period.
If no reachability confirmation is received within the
DELAY_FIRST_PROBE_TIME period after entering
the DELAY state, neighbor solicitation is sent and the
state changes to probe.
Probe Reachability confirmation is sought from the device
every retransmit timer period.
The following events involve Layer 2 and Layer 3 interaction during processing and affect the
neighbor cache:
• flushing the virtual LAN (VLAN) MAC
• removing a VLAN or brouter port
• performing an action on all VLANs
• removing a port from a VLAN
• removing a port from a spanning tree group (STG)
• removing a multilink trunk (MLT) group from a VLAN
• removing an MLT port from a VLAN
• removing an MLT port from an STG
• performing an action that disables a VLAN, such as removing all ports from a VLAN
• disabling a tagged port that is a member of multiple routable VLANs
Router discovery
IPv6 nodes discover routers on the local link with router discovery.
Router advertisement:
Configured interfaces on an IPv6 router send router-advertisement messages. Interfaces also send
router advertisements in response to router-solicitation messages from IPv6 nodes on the link.
Router solicitation:
An IPv6 host without a configured unicast address sends router solicitation messages.
Host autoconfiguration
The switch can automatically configure a host (node), and assign IPv6 addresses automatically.
This process is called stateless address autoconfiguration (SLAAC). The neighbor discovery (ND)
protocol performs autoconfiguration.
Stateless autoconfiguration enables serverless basic configuration of IPv6 nodes and renumbering
from a mathematical perspective.
Stateless autoconfiguration uses the following equation:
• Deprecated: an address that remains valid but is withheld for new communication
• Invalid: an address for which a node can no longer send or receive unicast traffic
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Create neighbor discovery prefixes for an interface:
ipv6 nd prefix-interface WORD<0–255> [eui <1–3>] [no-advertise] [no-
autoconfig] [no-onlink]
3. Modify an existing neighbor discovery prefix:
ipv6 nd prefix WORD<0–255> infinite [no-advertise] [preferred-life
<0-4294967295>] [valid-life <0-4294967295>]
Example
Create a new neighbor discovery prefix:
Switch:1(config-if)#ipv6 nd prefix-interface fd48:bfb6:4c09:9499::1/64
Variable definitions
Use the data in the following table to use the ipv6 nd prefix and ipv6 nd prefix-
interface commands.
Variable Value
eui <1–3> Configures the EUI address. The values are:
• (1) EUI not used
• (2) EUI with Universal/Local bit (U/L) complement
enabled
• (3) EUI used without U/L
Use an EUI-64 interface ID in the address field. If
enabled, use EUI, or use EUI-64 and the
complement Universal/Local (U/L) bit. This operation
provides for both global– and link-local addresses.
After you create the entry, you cannot modify this
value. This value is valid for use only when the prefix
length is 64 or less. The default is EUI not used.
If you select EUI not used, this configuration creates
an IPv6 ND prefix but no associated IPv6 address on
the router. IF you select either EUI used with UL
complement or EUI used without UL complement, an
associated IPv6 adress is created by concatenating
the specified prefix with the EUI-64 interface ID.
infinite Configures the prefix valid lifetime so it never
expires. The default is disabled, which means the
prefix expires.
no-advertise Removes the prefix from the neighbor
advertisement. The default is disabled, which means
the prefix is advertised.
no-autoconfig Configures the prefix for use as the autonomous
address configuration. This value is placed in the
autoflag field in the prefix information option. The
value is a 1-bit flag. The default is enabled.
no-onlink Configures the prefix for use when determining if a
node is online. This value is placed in the L-bit field
in the prefix information option. The value is a 1-bit
flag. The default is enabled.
preferred-life <0–4294967295> Configures the preferred lifetime in seconds that
indicates the length of time this prefix is advertised.
The default value is 604800.
The preferred lifetime is the length of time for the
tentative, preferred, and depreciated state of an
autoconfiguration address.
Table continues…
Variable Value
The preferred lifetime value must be less than the
valid lifetime value. If you must configure the valid
lifetime value to a value lower than the current
preferred lifetime, you must lower the preferred
lifetime value first.
valid-life <0–0-4294967295> Configures the valid lifetime in seconds that indicates
the length of time this prefix is advertised. The
default is 2592000.
A valid lifetime is the length of time of the preferred
and depreciated state of an autoconfiguration
address.
The preferred lifetime value must be less than the
valid lifetime value. If you must configure the valid
lifetime to a value lower than the current preferred
lifetime, you must lower the preferred lifetime value
first.
WORD <0–255> Specifies the IPv6 address and prefix.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
Procedure
1. Enter Interface Configuration mode:
enable
configure terminal
interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-
port]][,...]} or interface vlan <1–4059>
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Configure the number of neighbor solicitation messages from duplicate address detection:
ipv6 nd dad-ns <0–600>
3. Configure the hop limit sent in router advertisements:
ipv6 nd hop-limit <0–255>
4. Enable managed address configuration (M-bit) on the router:
ipv6 nd managed-config-flag
5. Configure the MTU for router advertisements:
ipv6 nd mtu <0–9500>
6. Enable other stateful configuration (O-bit) on the router:
ipv6 nd other-config-flag
7. Configure the router lifetime included in router advertisement:
ipv6 nd ra-lifetime <0–9000>
8. Configure the neighbor reachable time:
ipv6 nd reachable-time <0–3600000>
9. Configure the time between neighbor solicitation messages:
ipv6 nd retransmit-timer <0-4294967295>
10. Configure the maximum time allowed between sending unsolicited multicast router
advertisements:
ipv6 nd rtr-advert-max-interval <4–1800>
11. Configure the minimum time allowed between sending unsolicited multicast router
advertisements:
ipv6 nd rtr-advert-min-interval <3–1350>
12. Enable periodic router advertisement messages:
ipv6 nd send-ra
Example
Configure the maximum time between sending unsolicited router advertisements:
Switch:1(config-if)#ipv6 nd rtr-advert-max-interval 700
Configure the minimum time between sending unsolicited router advertisements:
Switch:1(config-if)#ipv6 nd rtr-advert-min-interval 500
Enable periodic router advertisement messages:
Switch:1(config-if)#ipv6 nd send-ra
Variable definitions
Use the data in the following table to use the ipv6 nd commands.
Variable Value
dad-ns <0–600> Specifies the number of neighbor solicitation
messages for duplicate address detection (DAD).
A value of 0 disables the DAD process on this
interface.
A value of 1 sends one advertisement without
retransmissions.
hop-limit <0–255> Specifies the current hop limit field sent in router
advertisements from this interface.
The value must be the current diameter of the
Internet.
A value of zero indicates that the advertisement does
not specify a hop-limit value.
The default is 64.
managed-config-flag Enables the system to configure the M-bit, or
managed address configuration flag, in the router
advertisements
When set, the M-bit flag indicates that addresses are
available through DHCPv6.
If the M flag is set, the O flag is redundant because
DHCPv6 returns all available configuration
information.
If neither the M nor O flags are set, no information is
available through DHCPv6.
The default is disabled.
mtu <0–9500> Shows the MTU value sent in router advertisements
on this interface.
Table continues…
Variable Value
A value of zero indicates that the system sends no
MTU options.
The default is 0.
other-config-flag Enables the O-bit, or other stateful configuration, flag
in the router advertisement.
Other stateful configuration autoconfigures received
information without addresses.
When set, the O-bit flag indicates that other
configuration information is available through
DHCPv6; for example, DNS-related information or
information about other servers within the network.
If neither the M nor O flags are set, no information is
available through DHCPv6.
The default is disabled.
ra-lifetime <0–9000> Specifies a value placed in the router lifetime field of
router advertisements sent from this interface.
This value must be either 0, or 4 to 9000 seconds.
A value of zero indicates that the system is not a
default router.
The default is 1800.
reachable-time <0–3600000> Specifies a value (in milliseconds) placed in the
router advertisement message sent by the router.
The value zero means unspecified (by this system).
Configure the amount of time that a remote IPv6
node is considered reachable after a reachability
confirmation event.
The default is 0.
retransmit-timer <0-4294967295> Specifies a value (in milliseconds) placed in the
retransmit timer field in the router advertisement
message sent from this interface.
The value zero means unspecified (by this system).
The value configures the amount of time the system
waits for the transmission to occur.
The default is 0.
rtr-advert-max-interval <4–1800> Specifies the maximum interval (in seconds) at which
the transmission of route advertisements occurs on
this interface.
The default is 600.
Table continues…
Variable Value
rtr-advert-min-interval <3–1350> Specifies the minimum interval (in seconds) at which
the transmission of route advertisements occurs on
this interface.
The default is 200.
send-ra Specifies whether the router sends periodic router
advertisements and responds to router solicitations
on this interface.
The default is enabled.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
What happens when you change the per interface value and the advertised value:
When you change per-interface values from default to non-default values, the system changes the
advertised values to match the interface values.
For example, when you enter the ipv6 interface mtu 1300 command the values become
• interface mtu 1300
• advertised mtu 1300
Then, when you enter the show ipv6 nd interface command, the system marks the mtu
value with an (i) which signifies that the ND advertised value is inherited from the interface
configuration.
Example:
Switch:1(config-if)#ipv6 interface mtu 1300
Switch:1(config-if)# show ipv6 nd interface GigabitEthernet 1/1
================================================================================
Port Ipv6 Nd
================================================================================
IFID BTR RTR- MAX- MIN- LIFE- MANAG OTHER DAD-NS MTU HOP REACH- RETRANS-
ADV INT INT TIME LIMIT TIME TIME ABLE MIT
FLAG CONF
--------------------------------------------------------------------------------
320 1/1 True 600 200 0 False False 1 1300(i) 64(d) 0(d) 0(d)
Note: (s) = Set, (d) = Default, (i) = inherit
--------------------------------------------------------------------------------
What happens when you change the per interface value but do not change the advertised
value:
To change the per-interface value from the default value to a non-default value but retain the
advertised value of 0 (unspecified), you must enter two commands.
For example, to set the reachable-time to 60000 but retain the advertised value of the reachable-
time parameter at 0, enter the following commands:
ipv6 interface reachable-time 6000
ipv6 nd reachable-time 0
When you enter the show ipv6 nd interface command, the system marks the reachable-time
value with an (s) to signify that this value is explicitly set by the ND configuration.
Example:
Switch:1(config-if)#ipv6 interface reachable-time 60000
Switch:1(config-if)#ipv6 nd reachable-time 0
Switch:1(config-if)#show ipv6 nd interface GigabitEthernet 1/1
================================================================================
Port Ipv6 Nd
================================================================================
IFID BTR RTR- MAX- MIN- LIFETIME MANAG OTHER DAD-NS MTU HOP REACH- RETRANS-
ADV INT INT CONF LIMIT TIME TIME ABLE MIT
FLAG
--------------------------------------------------------------------------------
320 1/1 True 600 200 0 False False 1 1500(i) 64(d) 0(s) 0(d)
Note: (s) = Set, (d) = Default, (i) = inherit
---------------------------------------------------------------------------------
Variable definitions
Use the data in the following table to use the ipv6 neighbor command.
Variable Value
mac <0x00:0x00:0x00:0x00:0x00:0x00> Specifies the MAC address.
{slot/port[/sub-port]} Identifies a single slot and port. If your platform
supports channelization and the port is channelized,
you must also specify the sub-port in the format slot/
port/sub-port.
vlan <1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
Table continues…
Variable Value
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
WORD<0-128> Specifies the IPv6 address in hexadecimal colon
format.
Note:
This step only applies to hardware with a dedicated, physical management interface.
5. View the destination cache for a specific tunnel ID:
Variable definitions
Use the data in the following table to use the show ipv6 dcache and clear ipv6 dcache
commands.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
Table continues…
Variable Value
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port]} Identifies a single slot and port. If your platform
supports channelization and the port is channelized,
you must also specify the sub-port in the format slot/
port/sub-port.
Name Description
Interface Shows a read-only value that indicates an IPv6
interface. For the brouter port, it is the ifindex of the
port and, in the case of the VLAN, it is the ifindex of
the VLAN.
Prefix Configures the prefix to create an IPv6 prefix entry
as either advertised or suppressed.
PrefixLen Configures the mask to create an IPv6 address in
the IPv6 interface table.
VLanId Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
UseDefaultVal Specifies one included value to use the default
value, or use all bits to configure all options to their
default value.
ValidLifetime Configures the valid lifetime in seconds that indicates
the length of time this prefix is advertised. The
default is 2592000.
A valid lifetime is the length of time of the preferred
and depreciated state of an autoconfiguration
address.
The preferred lifetime value must be less than the
valid lifetime value. If you must configure the valid
lifetime value to a value lower than the current
preferred lifetime, you must lower the preferred
lifetime value first.
PreferedLifetime Configures the preferred lifetime in seconds that
indicates the length of time this prefix is advertised.
The default value is 604800.
The preferred lifetime is the length of time for the
tentative, preferred, and depreciated state of an
autoconfiguration address.
The preferred lifetime value must be less than the
valid lifetime value. If you must configure the valid
lifetime value to a value lower than the current
preferred lifetime, you must lower the preferred
lifetime value first.
Infinite Configures the prefix valid lifetime so it never
expires. The default is false.
Table continues…
Name Description
OnLinkFlag Configures the prefix for use when determining if a
node is online. This value is placed in the L-bit field
in the prefix information option. It is a 1-bit flag. The
default is true.
AutoFlag Configures the prefix for use as the autonomous
address configuration. This value is placed in the
autoflag field in the prefix information option. It is a 1-
bit flag. The default is true.
AddressEui Configures the EUI address. Use an EUI-64 interface
ID in the address field. If enabled, use EUI, or use
EUI-64 and the complement Universal/Local (U/L)
bit. This operation provides for both gloal and link-
local addresses. After you create the entry, you
cannot modify this value. This value is valid for use
only when the PrefixLength is 64 or less. The default
is eui-not-used.
If you select eui-not-used, this configuration creates
an IPv6 ND prefix but no associated IPv6 address on
the router. IF you select either eui-used-with-ul-
complement or eui-used-without-ul-complement, an
associated IPv6 adress is created by concatenating
the specified prefix with the EUI-64 interface ID.
NoAdvertise Configures if the prefix is included in the router
advertisement. Select true to not include the prefix in
the router advertisement. The default is false.
8. Click Apply.
Name Description
preferred lifetime, you must lower the preferred
lifetime value first.
Infinite Configures the prefix valid lifetime so it never
expires. The default is false.
OnLinkFlag Configures the prefix for use when determining if a
node is online. This value is placed in the L-bit field
in the prefix information option. It is a 1-bit flag. The
default is true.
AutoFlag Configures the prefix for use as the autonomous
address configuration. This value is placed in the
autoflag field in the prefix information option. It is a 1-
bit flag. The default is true.
AddressEui Configures the EUI address. Use an EUI-64 interface
ID in the address field. If enabled, use EUI, or use
EUI-64 and the complement Universal/Local (U/L)
bit. This operation provides for both gloal and link-
local addresses. After you create the entry, you
cannot modify this value. This value is valid for use
only when the PrefixLength is 64 or less. The default
is eui-not-used.
If you select eui-not-used, this configuration creates
an IPv6 ND prefix but no associated IPv6 address on
the router. IF you select either eui-used-with-ul-
complement or eui-used-without-ul-complement, an
associated IPv6 adress is created by concatenating
the specified prefix with the EUI-64 interface ID.
NoAdvertise Configures if the prefix is included in the router
advertisement. Select true to not include the prefix in
the router advertisement. The default is false.
Name Description
PreferedLifetime Configures the preferred lifetime in seconds that
indicates the length of time this prefix is advertised.
The default value is 604800.
The preferred lifetime is the length of time for the
tentative, preferred, and depreciated state of an
autoconfiguration address.
The preferred lifetime value must be less than the
valid lifetime value. If you must configure the valid
lifetime value to a value lower than the current
preferred lifetime, you must lower the preferred
lifetime value first.
Infinite Configures the prefix valid lifetime so it never
expires. The default is false.
OnLinkFlag Configures the prefix for use when determining if a
node is online. This value is placed in the L-bit field
in the prefix information option. It is a 1-bit flag. The
default is true.
AutoFlag Configures the prefix for use as the autonomous
address configuration. This value is placed in the
autoflag field in the prefix information option. It is a 1-
bit flag. The default is true.
AddressEui Configures the EUI address. Use an EUI-64 interface
ID in the address field. If enabled, use EUI, or use
EUI-64 and the complement Universal/Local (U/L)
bit. This operation provides for both gloal and link-
local addresses. After you create the entry, you
cannot modify this value. This value is valid for use
only when the PrefixLength is 64 or less. The default
is eui-not-used.
If you select eui-not-used, this configuration creates
an IPv6 ND prefix but no associated IPv6 address on
the router. IF you select either eui-used-with-ul-
complement or eui-used-without-ul-complement, an
associated IPv6 adress is created by concatenating
the specified prefix with the EUI-64 interface ID.
NoAdvertise Configures if the prefix is included in the router
advertisement. Select true to not include the prefix in
the router advertisement. The default is false.
Name Description
Configure the amount of time that a remote IPv6
node is considered reachable after a reachability
confirmation event. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
RetransmitTime Shows a value (in milliseconds) placed in the
retransmit timer field in the router advertisement
message sent from this interface. The value zero
means unspecified (by this system). The value
configures the amount of time the system waits for
the transmission to occur. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
DefaultLifeTime Specifies a value placed in the router lifetime field of
router advertisements sent from this interface. This
value must be either 0 or between 4 and 9000
seconds. A value of zero indicates that the system is
not a default router. The default is 1800.
CurHopLimit Specifies the current hop limit field sent in router
advertisements from this interface. The value must
be the current diameter of the Internet. A value of
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
ManagedFlag Enables the system to configure the M-bit or
managed address configuration in the router
advertisements. The default is false.
DadNsNum Specifies the number of neighbor solicitation
messages for duplicate address detection (DAD). A
value of 0 disables the DAD process on this
interface. A value of 1 sends one advertisement
without retransmissions.
LinkMTU Shows the MTU value sent in router advertisements
on this interface. A value of zero indicates that the
system sends no MTU options.
OtherConfigFlag Enables the O-bit (other stateful configuration) in the
router advertisement. Other stateful configuration
autoconfigures received information without
addresses. The default is disabled.
Name Description
node is considered reachable after a reachability
confirmation event. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
RetransmitTime Shows a value (in milliseconds) placed in the
retransmit timer field in the router advertisement
message sent from this interface. The value zero
means unspecified (by this system). The value
configures the amount of time the system waits for
the transmission to occur. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
DefaultLifeTime Specifies a value placed in the router lifetime field of
router advertisements sent from this interface. This
value must be either 0 or between 4 and 9000
seconds. A value of zero indicates that the system is
not a default router. The default is 1800.
CurHopLimit Specifies the current hop limit field sent in router
advertisements from this interface. The value must
be the current diameter of the Internet. A value of
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
ManagedFlag Enables the system to configure the M-bit or
managed address configuration in the router
advertisements. The default is false.
DadNsNum Specifies the number of neighbor solicitation
messages for duplicate address detection (DAD). A
value of 0 disables the DAD process on this
interface. A value of 1 sends one advertisement
without retransmissions.
LinkMTU Shows the MTU value sent in router advertisements
on this interface. A value of zero indicates that the
system sends no MTU options.
OtherConfigFlag Enables the O-bit (other stateful configuration) in the
router advertisement. Other stateful configuration
autoconfigures received information without
addresses. The default is disabled.
Name Description
confirmation event. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
RetransmitTime Shows a value (in milliseconds) placed in the
retransmit timer field in the router advertisement
message sent from this interface. The value zero
means unspecified (by this system). The value
configures the amount of time the system waits for
the transmission to occur. You cannot modify this
parameter; use the Interfaces tab to change the
value for the interface.
DefaultLifeTime Specifies a value placed in the router lifetime field of
router advertisements sent from this interface. This
value must be either 0 or between 4 and 9000
seconds. A value of zero indicates that the system is
not a default router. The default is 1800.
CurHopLimit Specifies the current hop limit field sent in router
advertisements from this interface. The value must
be the current diameter of the Internet. A value of
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
ManagedFlag Enables the system to configure the M-bit or
managed address configuration in the router
advertisements. The default is false.
DadNsNum Specifies the number of neighbor solicitation
messages for duplicate address detection (DAD). A
value of 0 disables the DAD process on this
interface. A value of 1 sends one advertisement
without retransmissions.
LinkMTU Shows the MTU value sent in router advertisements
on this interface. A value of zero indicates that the
system sends no MTU options.
OtherConfigFlag Enables the O-bit (other stateful configuration) in the
router advertisement. Other stateful configuration
autoconfigures received information without
addresses. The default is disabled.
on the neighbor on-link unicast IP address, including information such as the link-layer address. A
neighbor cache entry contains information used by the Neighbor Unreachability Detection algorithm,
including the reachability state, the number of unanswered probes, and the time the next Neighbor
Unreachability Detection event is scheduled.
Procedure
1. In the navigation tree, expand the following folders: Configuration > IPv6.
2. Click IPv6.
3. Click the Neighbors tab.
4. Click Insert.
5. Beside the Interface field, click Port or Port in Vlan.
6. Select a port or VLAN.
7. Configure the remaining parameters as required.
8. Click Insert.
9. Click Apply.
Name Description
• stale: unconfirmed reachability
• delay: waiting for reachability confirmation before
entering the probe state
• probe: actively probing
• invalid: an invalidated mapping
• unknown: state cannot be determined.
• incomplete: address resolution is being performed
BMac Specifies the backbone MAC address.
Cvid Specifies the customer VID.
Name Description
DestAddr Shows the IPv6 destination address.
Interface Shows the interface number that is used to reach the
destination.
NextHop Shows the IPv6 address for the next hop to the
destination.
IfType Specifies the interface type (tunnel, VLAN, or
brouter) or virtual circuit (VRRP, RSMLT).
Table continues…
Name Description
IfData Displays additional information about virtual circuits.
For instance, for a VRRP or RSMLT the virtual router
ID displays. If the interface type is tunnel, VLAN, or
brouter, no additional information displays.
Pmtu Shows the path maximum transmission unit (MTU)
for the destination.
PmtuAge Shows the time, in seconds, since an ICMPv6 packet
too big message was received.
This chapter provides concepts and procedures to complete IPv6 DHCP Relay configuration.
DHCP Relay
The Dynamic Host Configuration Protocol (DHCP) for IPv6 (RFC 3315) enables DHCP servers to
pass configuration parameters such as IPv6 network addresses to IPv6 nodes. DHCP supports
automatic allocation of reusable network addresses and of additional configuration parameters. This
protocol is a stateful counterpart to stateless address autoconfiguration, and you can use it
separately or concurrently with the latter to obtain configuration parameters. For more information
about stateless address autoconfiguration, see Host autoconfiguration on page 80.
To request the assignment of one or more IPv6 addresses, a client first locates a DHCP server, and
then requests the assignment of addresses and other configuration information from the server:
1. The client sends a solicit message to the All_DHCP_Relay_Agents_and_Servers (FF02::1:2)
multicast address to find available DHCP servers.
2. Any server that can meet the requirements responds with an advertise message.
3. The client then chooses one of the servers and sends a request message to the server
asking for confirmed assignment of addresses and other configuration information.
4. The server responds with a reply message that contains the confirmed addresses and
configuration.
If a DHCP client does not need a DHCP server to assign it an IPv6 address, the client can obtain
configuration information such as a list of available DNS servers or NTP servers through a single
message and reply exchanged with a DHCP server.
IPv6 DHCP clients use link-local addresses to send and receive DHCP messages. To permit a
DHCP client to send a message to a DHCP server that is not attached to the same link, you must
configure a DHCP relay agent on the client link to relay messages between the client and server.
The operation of the relay agent is transparent to the client.
A relay agent relays messages from clients and messages from other relay agents. The switch
supports DHCP Relay for IPv6. Configure at least one relay agent when the client and server are in
different networks.
You must configure the relay agent to use a list of destination addresses for available DHCP
servers. The software does not support IPv6 multicast for site-local and global addresses.
The DHCP relay can be a Virtual Router Redundancy Protocol (VRRP) Address. The relay forwards
the DHCP messages only if VRRP is in the Master state, otherwise the relay discards the
messages.
Note:
Since DHCP cannot work on the backup VRRP if the master fails, to achieve optimum results
and to leverage redundancy you must configure DHCP on the backup VRRP.
Clients listen for DHCP messages on UDP port 546. Servers and relay agents listen for DHCP
messages on UDP port 547.
Remote ID
IPv6 DHCP Relay supports the remote ID parameter (RFC4649). After you enable remote ID on the
switch, the relay agent adds information about the relay to DHCPv6 messages before relaying the
messages to the DHCP server. The server can use the supplied information in the process of
assigning the addresses, delegated prefixes, and configuration parameters that the client is to
receive.
The remote ID option contains two fields:
• vendor ID
• MAC address of the client
The switch uses a vendor ID of 1584.
Limitations
The following list identifies configuration limitations:
• You can configure only one relay for a VLAN, regardless of how many addresses are
configured on that VLAN. The default address is the smallest address configured. If the relay is
a VRRP address, the default value is the first VRRP address configured.
• The maximum number of servers to which a relay can send a message from one client, is 10.
• You can configure the number of forwarding paths per system. For information on the
maximum limit, see Release Notes.
Variable definitions
Use the data in the following table to use the ipv6 dhcp-relay fwd-path command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
enable Enables the forwarding path. The default is disabled.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
vrid WORD<1-255> Specifies the VRRP ID to use the VRRP master as
the relay agent interface.
WORD<0-255> Specifies the IPv6 address of the DHCP server for
the interface configuration.
WORD<0-255> WORD<0-255> Specifies the IPv6 address of the relay agent
interface and the IPv6 address of the DHCP server
for the global configuration.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Enable DHCP on the interface:
ipv6 dhcp-relay
3. Configure the maximum hop count:
ipv6 dhcp-relay max-hop <1–32>
4. Enable the remote ID:
ipv6 dhcp-relay remote-id
Example
Configure the maximum hop count:
Switch:1(config-if)#ipv6 dhcp-relay max-hop 30
Disable the remote ID:
Switch:1(config-if)#no ipv6 dhcp-relay remote-id
Variable definitions
Use the data in the following table to use the ipv6 dhcp-relay command.
Variable Value
max-hop <1–32> Specifies the maximum number of hops a DHCP
packet can take from the DHCP client to the DHCP
server. The default is 32.
remote-id Enables the relay agent to add information about the
relay to DHCPv6 messages before relaying the
messages to the DHCP server. The default is
disabled
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
Table continues…
Variable Value
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
Note:
The no ipv6 dhcp-relay command disables DHCP on the interface but does not
delete the entry.
Example
Switch:1(config-if)#show ipv6 dhcp-relay fwd-path
================================================================================
DHCPv6 Fwd-path
================================================================================
INTERFACE SERVER ENABLE
--------------------------------------------------------------------------------
1111:0:0:0:0:0:0:1111 1234:0:0:0:0:0:0:1234 enable
Switch:1(config-if)#show ipv6 dhcp-relay interface gigabitEthernet 5/1
================================================================================
Port Dhcpv6
================================================================================
PORT NUM IF INDEX MAX HOP DHCP-RELAY REMOTE ID
--------------------------------------------------------------------------------
1/1 320 30 enable disable
Variable definitions
Use the information in the following table to help you use the show ipv6 dhcp-relay command.
Variable Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
vlan<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
Name Description
AgentAddr Specifies the IP address of the input interface (relay
agent) on which the DHCP request packets are
received for forwarding. This address is the IPv6 or
VRRP global address of either a brouter port or a
VLAN for which forwarding is enabled.
ServerAddr Specifies the IP address of the DHCP server. The
request is unicast to the server address.
Enabled Enables DHCP Relay for the system. The default is
disabled (clear).
Name Description
IfIndex Shows the unique value to identify an IPv6 interface.
For the brouter port, the value is the ifindex of the
port and, in the case of the VLAN, the value is the
ifindex of the VLAN.
MaxHop Specifies the maximum number of hops a DHCP
packet can take from the DHCP client to the DHCP
server. The default is 32.
RemoteIdEnabled Enables the relay agent to add information about the
relay to DHCPv6 messages before relaying the
messages to the DHCP server. The default is
disabled (clear or false).
Name Description
IfIndex Shows the unique value to identify an IPv6 interface.
MaxHop Specifies the maximum number of hops a DHCP
packet can take from the DHCP client to the DHCP
server. The default is 32.
Table continues…
Name Description
RemoteIdEnabled Enables the relay agent to add information about the
relay to DHCPv6 messages before relaying the
messages to the DHCP server. The default is
disabled (clear or false).
DhcpEnabled Enables (true) or disables (false) DHCP Relay for an
interface with an existing DHCP Relay configuration.
Name Description
IfIndex Shows the unique value to identify an IPv6 interface.
For the brouter port, the value is the ifindex of the
port and, in the case of the VLAN, the value is the
ifindex of the VLAN.
MaxHop Specifies the maximum number of hops a DHCP
packet can take from the DHCP client to the DHCP
server. The default is 32.
RemoteIdEnabled Enables the relay agent to add information about the
relay to DHCPv6 messages before relaying the
messages to the DHCP server. The default is
disabled (clear or false).
DhcpEnabled Enables (true) or disables (false) DHCP Relay for an
interface with an existing DHCP Relay configuration.
Table continues…
Name Description
This field appears on the DHCP Relay tab for a
brouter port only if you modify an existing
configuration. This field does not appear if you create
a new DHCP Relay port configuration.
This chapter provides concepts and procedures to complete IPv6 tunnel configuration.
Tunneling
Tunneling provides a mechanism to transfer IPv6 traffic through an IPv4–only network.
How tunneling works:
IPv6 tunneling encapsulates IPv6 packets in IPv4 packets for delivery across an IPv4 infrastructure.
At the tunnel source, or head end, the system encapsulates an IPv6 packet into an IPv4 packet and
sends it to the remote tunnel destination.
The tunnel destination strips the IPv4 packet header and forwards the original IPv6 packet further
into an IPv6 cloud.
These types of tunnels are called dual-stack tunnels because they support both IPv4 and IPv6.
Manually configured tunnels
Manually configured tunnels can provide communication between two isolated IPv6 domains over
an IPv4 network.
Manually configured tunnels are point-to-point.
You can configure tunnel endpoints to create a point-to-point connection between two isolated IPv6
domains by configuring IPv6 and IPv4 addresses at each end of the tunnel.
Note:
The router or host at the source and destination ends of the tunnel must support both IPv4 and
IPv6 protocol stacks.
Caution:
Ensure that all single-homed point-to-point traffic ingresses and egresses a configured tunnel.
Otherwise the traffic is dropped.
IPv6 reachability enables tunnel forwarding but tunnel operational status depends on the IPv4
reachability of the tunnel endpoint.
The IPv4 tunnel endpoint configuration must be symmetrical; that is, if you configure a tunnel with a
source of 10.10.10.1 and a destination of 11.11.11.1 from switch A, then Switch B must have a
source of 11.11.11.1 and a destination of 10.10.10.1.
Tunnel interfaces are logical point-to-point interfaces.
You can enable dynamic routing when you enable a routing protocol, for example OSPFv3, on the
tunnel interfaces.
Unicast routing protocols can detect link loss and redirect IPv6 route information:
There is no explicit signaling protocol applied to IPv6-in-IPv4 configured tunnels (refer to RFC
4213).
Therefore, if the remote endpoint of a tunnel that terminates several Layer 3 hops away in the
network fails, the local state of the tunnel remains active even though the endpoint has failed.
However, you can enable unicast routing protocols over tunnels, for example OSPFv3. These
unicast routing protocols introduce their own protocol-specific signaling and, when a unicast routing
protocol is present over the tunnel link, the routing protocol can detect link loss and re-direct the
IPv6 route information to use an alternate, reachable nexthop.
Operational events that trigger tunnel state transition:
The switch must be able to locally detect operational events that can trigger a tunnel state transition.
These events include:
• deletion of local IPv4 interface
• change or loss of the IPv4 route to the remote tunnel endpoint
• change in the nexthop of the IPv4 route to the remote tunnel endpoint
• loss of the ARP entry for the nexthop router that is used to reach the IPv4 tunnel endpoint
Tunnels and MTU:
You cannot configure the MTU for tunnels.
The default MTU value for tunnels is 1280.
Packets are forwarded through the tunnel using the line card network processing units (NPUs) only.
Since the packets are not forwarded through the central processing unit (CPU) they do not impact
the CPU load.
Tunnels and BGP+: You must configure an IPv6 tunnel and static routes on BGP+ peers when you
use BGP+. For more information on IPv6 tunnel configuration for BGP+, see Configuring BGP
Services.
Limitations
The following list identifies tunnel configuration limitations.
• You cannot configure IPv6 CLIP addresses for IPv6-in-IPv4 tunnels. Also, you cannot configure
an IPv6 CLIP interface as the source or destination endpoint of an tunnel.
• You cannot configure SMLT on the switch terminating a tunnel.
• You cannot configure tunneling on vIST peers. Termination of tunnels on vIST peers is not
supported.
Configuring a tunnel
Configure a tunnel for IPv6 VLANs or brouter ports to communicate through an IPv4–only network.
Create a point-to-point connection between the two isolated IPv6 devices by configuring the tunnel
endpoints.
Do not create tunnels in a native IPv6 network.
Before you begin
• The router or host at the source and destination of the tunnel must support both IPv4 and IPv6
protocol stacks.
About this task
Manual tunnels are point-to-point, so you configure both source and destination addresses. You
must configure both IPv6 and IPv4 addresses for both source and destination devices. The IPv6
addresses must represent the same network, for example 6666::1/96 and 6666::2/96.
Tunnel interfaces are automatically configured with a link-local address in the format
fe80::<local_ipv4_source_address>.
You cannot configure the maximum transmission unit (MTU) for tunnels. The default MTU value for
tunnels is 1280.
Procedure
1. Enter Global Configuration mode:
enable
configure terminal
2. Create a tunnel:
ipv6 tunnel <1-2000> source {A.B.C.D} address WORD<0-46> destination
{A.B.C.D}
Example
Create tunnel 2:
Switch:1(config)#ipv6 tunnel 2 source 11.11.11.1 address
3000:0:0:0:0:0:0:1/64 destination 12.12.12.2
Variable definitions
Use the data in the following table to use the ipv6 tunnel command.
Variable Value
<1-2000> Configures the ID for the tunnel.
Table continues…
Variable Value
address WORD<0-46> Assigns an IPv6 address and prefix to the tunnel.
destination {A.B.C.D} Configures the address of the remote endpoint of the
tunnel.
source {A.B.C.D} Configures the address of the local endpoint of the
tunnel.
================================================================================
Tunnel Interface Information
================================================================================
ID LOCAL ADDRESS REMOTE ADDRESS OPER STATUS TYPE
--------------------------------------------------------------------------------
2 211.1.55.2 44.1.55.1 active manual
1 211.1.55.2 44.1.55.43 active manual
210 211.1.60.2 47.1.60.1 active manual
--------------------------------------------------------------------------------
================================================================================
Address Information
================================================================================
IPV6 ADDRESS/PREFIX LENGTH TYPE ORIGIN STATUS
--------------------------------------------------------------------------------
43:210:0:0:0:0:0:2/64 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:d301:3702/64 UNICAST LINKLAYER PREFERRED
44:211:0:0:0:0:0:2/64 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:d301:3702/64 UNICAST LINKLAYER PREFERRED
Variable definitions
Use the data in the following table to use the show ipv6 tunnel command.
Variable Value
<1–2000> Shows information for a specific tunnel ID.
detail Shows detailed address information for the tunnel.
local {A.B.C.D} Shows information for a specific local address (the
local endpoint of the tunnel).
remote {A.B.C.D} Shows information for a specific remote address (the
remote endpoint of the tunnel).
Variable definitions
Use the data in the following table to use the ipv6 tunnel command.
Variable Value
<0–255> Configures the maximum number of hops in the
tunnel. The default value is 255.
<1–2000> Specifies the tunnel ID.
Configuring a tunnel
Configure a tunnel for IPv6 VLANs or brouter ports to communicate through an IPv4–only network.
Create a point-to-point connection between the two isolated IPv6 devices by configuring the tunnel
endpoints.
Do not create tunnels in a native IPv6 network.
Before you begin
• The router or host at the source and destination of the tunnel must support both IPv4 and IPv6
protocol stacks.
About this task
Manual tunnels are point-to-point, so you configure both source and destination addresses. You
must configure both IPv6 and IPv4 addresses for both source and destination devices. The IPv6
addresses must represent the same network, for example 6666::1/96 and 6666::2/96.
Tunnel interfaces are automatically configured with a link-local address in the format
fe80::<local_ipv4_source_address>.
You cannot configure the maximum transmission unit (MTU) for tunnels. The default MTU value for
tunnels is 1280.
Procedure
1. In the navigation tree, expand the following folders: Configuration > IPv6.
2. Click Tunnel.
3. Click the Tunnel Config tab.
4. Click Insert.
5. Beside the LocalAddress field, click the button, and then select the IPv4 address for the
local VLAN or brouter port.
6. In the RemoteAddress field, type the IPv4 address for the destination VLAN or brouter port.
7. In the ID field, type a number to represent the tunnel.
8. In the IPv6AddressAddr field, type the IPv6 address for the tunnel VLAN or brouter port.
9. In the IPv6AddressPrefixLength field, type the number of bits to advertise in the IPv6
address.
10. Click Insert.
Name Description
AddressType Shows the address type over which the tunnel
encapsulates packets.
LocalAddress Configures the address of the local endpoint of the
tunnel.
RemoteAddress Configures the address of the remote endpoint of the
tunnel.
EncapsMethod Configures the tunnel mode, which is manual for
manually configured tunnels.
ID Configures the ID for the tunnel.
IfIndex Shows the value of ifIndex that corresponds to the
tunnel interface. A value of 0 indicates that the
interface index has not yet been assigned. This field
appears only on the Tunnel Config tab.
Ipv6AddressAddr Specifies the IPv6 address for the local VLAN or
brouter port. This field appears only on the Insert
Tunnel Config dialog box.
Ipv6AddressPrefixLength Specifies the number of bits to advertise in the IPv6
address. This field appears only on the Insert
Tunnel Config dialog box.
Name Description
Index Identifies the tunnel interface internally. The value is
derived from the tunnel ID.
EncapsMethod Displays the encapsulation method for the tunnel:
manual for manually configured tunnels and 6to4 for
automatically configured tunnels.
HopLimit Configures the maximum number of hops in the
tunnel. The default value is 255.
Security Indicates the type of security on the tunnel interface.
TOS Displays the method used to configure the high 6 bits
(the differentiated services codepoint) of the IPv4
type of service (TOS) or IPv6 traffic class in the outer
IP header.
A value of -1 indicates that the bits are copied from
the payload header. A value of -2 indicates that a
traffic conditioner is invoked and more information
can be available in a traffic conditioner MIB module.
A value from 0 to 63 indicates that the bit field is
configured to the indicated value.
FlowLabel Displays the method used to configure the IPv6 flow
label value. This object is not required where
AddressType indicates the tunnel is not over IPv6. A
value of -1 indicates that a traffic conditioner is
invoked and more information can be available in a
traffic conditioner MIB. Any other value indicates that
the flow label field is configured to the indicated
value.
AddressType Displays manual for a manually configured tunnel, or
sixToFour for autoconfigured tunnels.
LocalInetAddress Identifies the local endpoint address of the tunnel.
RemoteInetAddress Identifies the remote endpoint of the tunnel.
EncapsLimit Displays the maximum number of additional
encapsulations permitted for packets undergoing
encapsulation at this node. A value of -1 indicates
that no limit exists, except as a result of the packet
size.
Procedure
1. In the navigation pane, expand the Configuration > IPv6 folders.
2. Click Tunnel.
3. Click the Tunnel Config tab.
4. Select the tunnel row.
5. Click Tunnel Interface.
6. Double-click the HopLimit value to modify the information as required.
7. Click Apply.
Name Description
Index Identifies the tunnel interface internally. The value is
derived from the tunnel ID.
EncapsMethod Displays the encapsulation method for the tunnel:
manual for manually configured tunnels and 6to4 for
automatically configured tunnels.
HopLimit Configures the maximum number of hops in the
tunnel. The default value is 255.
Security Indicates the type of security on the tunnel interface.
TOS Displays the method used to configure the high 6 bits
(the differentiated services codepoint) of the IPv4
type of service (TOS) or IPv6 traffic class in the outer
IP header.
A value of -1 indicates that the bits are copied from
the payload header. A value of -2 indicates that a
traffic conditioner is invoked and more information
can be available in a traffic conditioner MIB module.
A value from 0 to 63 indicates that the bit field is
configured to the indicated value.
FlowLabel Displays the method used to configure the IPv6 flow
label value. This object is not required where
AddressType indicates the tunnel is not over IPv6. A
value of -1 indicates that a traffic conditioner is
invoked and more information can be available in a
traffic conditioner MIB. Any other value indicates that
the flow label field is configured to the indicated
value.
AddressType Displays manual for a manually configured tunnel, or
sixToFour for autoconfigured tunnels.
Table continues…
Name Description
LocalInetAddress Identifies the local endpoint address of the tunnel.
RemoteInetAddress Identifies the remote endpoint of the tunnel.
EncapsLimit Displays the maximum number of additional
encapsulations permitted for packets undergoing
encapsulation at this node. A value of -1 indicates
that no limit exists, except as a result of the packet
size.
Name Description
AddressType Shows the address type over which the tunnel
encapsulates packets.
LocalAddress Configures the address of the local endpoint of the
tunnel.
RemoteAddress Configures the address of the remote endpoint of the
tunnel.
EncapsMethod Configures the tunnel mode, which is manual for
manually configured tunnels.
ID Configures the ID for the tunnel.
Table continues…
Name Description
IfIndex Shows the value of ifIndex that corresponds to the
tunnel interface. A value of 0 indicates that the
interface index has not yet been assigned. This field
appears only on the Tunnel Config tab.
This chapter provides concepts and procedures to complete IPv6 Open Shortest Path First
(OSPF)v3 configuration.
OSPFv3
The Open Shortest Path First Protocol (OSPF) for IPv6, defined in RFC 2740 and RFC 5340, is an
Interior Gateway Protocol used to distribute IPv6 routing information within a single Autonomous
System (AS).
The IPv4 terms subnet and network are replaced in IPv6 by link. An IPv6 link is a communication
medium between nodes at the link layer. You can assign multiple IP subnets (prefixes) to a link. Two
IPv6 nodes with common or different prefixes can communicate over a single link.
OSPF for IPv6 operates on each link rather than each subnet as in IPv4. IPv6 makes the following
changes to how packets are received and to the contents of network LSAs and hello packets:
• The OSPF packet contains no IPv6 addresses. LSA payloads carried in link state update
packets contain IPv6 addresses.
• The following IDs remain at 32-bits and are not assigned IPv6 addresses: area IDs, LSA link
state IDs, and OSPF router IDs.
• IPv6 OSPF neighbors use Router IDs to identify neighboring routers on broadcast and
nonbroadcast multiaccess (NBMA) networks and for other communication media, point to
point.
Flooding scope
LSA flooding scope is generalized in OSPFv3 and coded in the LS type field of the LSA. The
following three flooding scopes are available for LSAs:
• Link scope: The LSA is not flooded beyond the local link.
• Area scope: The LSA is flooded in a single OSPF area. Area scope is used in router LSAs,
network LSAs, Inter-Area-Prefix-LSAs, Inter-Area-Router LSAs, and Intra-Area-Prefix- LSAs.
• AS scope: The LSA is flooded through the routing domain. AS scope is used for ASexternal-
LSAs.
Link-local addresses
IPv6 uses link-local addresses on a single link. Link-local addresses facilitate features such as
neighbor discovery and autoconfiguration. Datagrams with link-local sources are not forwarded.
Instead, routers assign link-local unicast addresses from the IPv6 address range.
OSPF for IPv6 does not assign link-local unicast addresses to physical segments attached to a
router, it assumes that each router already has link-local unicast addresses assigned. The source
for all OSPF packets sent on OSPF physical interfaces is the associated link-local unicast address.
Routers learn link-local addresses for all other nodes on links. The nexthop information during
packet forwarding includes the learned addresses.
OSPFv3 packets always use link-local addresses as the source and destination, except on a virtual
link. All OSPFv3 packets sent over a virtual link use global addresses.
Link LSA is the only OSPF LSA type that includes link-local addresses. Link-local addresses must
not be advertised in other LSA types.
Authentication
OSPFv3 for IPv6 requires the IP authentication header and the IP encapsulating security payload
for authentication and security. OSPFv3 does not support the authentication feature from OSPFv2.
Packet format
OSPFv3 runs directly over IPv6. All other addressing information is absent in OSPF packet headers.
OSPFv3 is network-protocol-independent. LSA types contain addressing information.
OSPFv3 implements the following packet changes from OSPFv2:
• The hello packet and database description packet operations fields are expanded to 24 bits.
• The packet header does not include Authentication and AuType fields.
• The interface ID replaces the address information in the hello packet. The Interface ID
becomes the network LSA link-state ID, if the router becomes the designated router on the link.
• Router-bit (R-bit) and V6-bit in the options field process router LSAs during Shortest Path First
(SPF) calculation. R-bits and V6-bits determine participation in topology distribution. The V6-bit
specializes the R-bit. If the V6-bit is clear, the OSPF speaker can participate in the OSPF
topology distribution without forwarding IPv6 datagrams. If the R-bit is set and the V6-bit is
clear, the OSPF speaker still does not forward IPv6 datagrams, but it can forward IPv4
datagrams.
• The packet header includes the instance ID, which allows multiple OSPF protocol instances on
the same link.
R-bit
Unlike OSPF for IPv4, OSPFv3 for IPv6 supports the R-bit. The R-bit indicates whether the
originating node is an active router. If the R-bit is cleared, routes that transit the advertising node
cannot be calculated.
For example, if a multi-homed host participates in routing without forwarding non-locally-addressed
packets, the R-bit is cleared.
An IPv6-enabled switch can continue to operate as an OSPFv3 neighbor even if you disable IPv6
forwarding on the switch. This behavior differs from IPv4 OSPF, in which the switch drops a
neighbor, if IP forwarding on the neighbor is disabled.
LSAs
OSPFv3 includes link LSAs and Intra-Area-Prefix LSAs.
Link LSA:
The link LSA uses link flooding scope, not flooded beyond the associated link.
Link LSAs have three purposes:
• to provide the link-local address of the router to all other nodes on the link
• to provide the list of IPv6 prefixes associated with the link
• to allow the router to associate options bits with the network LSA for the link
Intra-Area-Prefix LSA:
The Intra-Area-Prefix-LSA carries all IPv6 prefix information. In IPv4, this information is in router
LSAs and network LSAs.
Unknown LSA types:
In OSPFv3, unknown LSA types are either stored and flooded as though understood or given link
flooding scope. Specific behavior is coded in the LS type field of the header.
Link LSA Suppression
To decrease unnecessary link LSA generation and flooding for non-broadcast and non-NBMA
interfaces, the Link LSA Suppression interface configuration parameter has been added in RFC
5340. If Link LSA Suppression is configured for an interface, and the interface type is not broadcast
or NBMA, the originated link LSA may be suppressed. Link LSA suppression is disabled, by default.
For more information on configuration see, Configuring OSPF on a port or VLAN on page 146.
Stub area
OSPFv3 retains the concept of stub areas, which minimize link-state databases and routing table
sizes.
IPv6 stub areas carry only router LSAs, network LSAs, Inter-Area-Prefix-LSAs, link LSAs, and Intra-
Area-Prefix-LSAs.
Unlike IPv4, IPv6 can store LSAs with unrecognized link-state (LS) types or flood them as though
they are understood. Rules applied to the stub area prevent the excessive growth of the link-state
database. An LSA with an unrecognized link state can be flooded only if the LSA uses area- or link-
flooding scope, and the LSA U-bit is 1 throughout stub and NSSA areas.
Stub area
OSPFv3 retains the concept of stub areas, which minimize link-state databases and routing table
sizes.
IPv6 stub areas carry only router LSAs, network LSAs, Inter-Area-Prefix-LSAs, link LSAs, and Intra-
Area-Prefix-LSAs.
Unlike IPv4, IPv6 can store LSAs with unrecognized link-state (LS) types or flood them as though
they are understood. Rules applied to the stub area prevent the excessive growth of the link-state
database. An LSA with an unrecognized link state can be flooded only if the LSA uses area- or link-
flooding scope, and the LSA U-bit is 0.
Because the device does not know the IPv6 addresses of the OSPFv3 virtual link end points at the
time of configuration, you cannot manually configure the security policy ahead of time. The system
must self-manage its security policy dynamically. The device also dynamically manages the IPsec
enable flag, which the virtual link uses on a Layer 2 interface, either a VLAN or brouter port
interface.
The following events can trigger an IPsec policy activation:
1. An OSPFv3 routing module detects the establishment of a virtual link.
2. IPsec is enabled on the already established virtual link.
On the other hand, the following two events can dynamically trigger an IPsec policy deactivation:
1. The virtual link is turn down.
2. IPsec is disabled on the virtual link.
IPsec policies can also change dynamically if a neighbor address or a local address changes.
You can enable IPsec support for IPv6 OSPF virtual link at the system level through CLI. You must
disable IPsec before you can perform virtual link policy configuration changes.
Until you enable IPsec on both sides of the virtual links, the links cannot exchange OSPFv3 control
messages, and the system drops OSPFv3 exchange packets.
You can configure the direction you want IPsec to protect, either, ingress, egress, or both. In
addition, you can permit or drop communication for the OSPF virtual link.
You can also use IPsec with OSPFv3 on a brouter port or VLAN interface. For a full configuration
example and more information on IPsec, see Configuring Security.
Helper mode
Helper mode is a part of the OSPF Graceful restart feature. Helper mode uses the OSPF routers to
help other OSPF routers on the network stay on the forwarding path while the software is restarting.
The OSPF router sends a type of LSA called a GRACE-LSA to inform the other OSPF routers that it
is restarting the software. When an OSPF router receives a GRACE-LSA from a neighbor OSPF
Router, it enters the Helper mode for that neighbor on that network. An OSPF router supports
Helper mode by default.
Variable definitions
Use the data in the following table to use the ipv6 router-id command.
Variable Value
{A.B.C.D} Specifies a 32–bit integer that identifies the router in
the autonomous system. This value must be unique.
Variable Value
The default value will be one of the IPv4 interface
addresses.
Variable definitions
Use the data in the following table to use the ipv6 area command.
Variable Value
{A.B.C.D} Specifies a 32–bit integer to uniquely identify an
area. Use 0.0.0.0 for the OSPFv3 backbone.
default-cost <0-16777215> Configures the metric value advertised for the default
route to stub and NSSA areas.
import <external|noexternal|nssa> Configures area support for importing AS-external
LSAs:
• external—normal area
• noexternal—stub area
• nssa—not-so-stubby area
AS-scope LSAs are not imported into stub areas or
NSSAs. NSSAs import AS-External data at Type 7
LSAs, which use area scope. The default is external.
import-summaries enable Controls the import of inter-area LSAs into a stub
area. If you disable this parameter, the router does
not originate nor propagate inter-area LSAs into the
stub area. If you enable this parameter (the default),
the router both summarizes and propagates inter-
area LSAs.
<nssa|stub> Configures the type of area. By default, the area is
neither a stub area or an NSSA.
translator-role <1–2> Indicates if the NSSA border router can perform
NSSA translation of Type 7 LSAs to Type 6 LSAs.
The possible values are always (1) or candidate (2).
The default is candidate (2).
Variable definitions
Use the data in the following table to use the ipv6 area range command.
Variable Value
{A.B.C.D} Specifies the area in which the address aggregate
exists. Use dotted decimal notation to specify the
area name.
advertise-metric <0-65535> Specifies a cost value to advertise for the OSPF area
range. This value applies to summary LSAs (Type 3).
If the value is 0, OSPF uses the cost to the farthest
point in the network that is summarized.
advertise-mode <advertise|not-advertise> Specifies the advertisement mode for prefixes in the
range. advertise advertises the aggregate summary
Table continues…
Variable Value
LSA with the same link-state ID. not-advertise does
not advertise networks that fall within the range.
The default is advertise.
<inter-area-prefix-link|nssa-extlink> Specifies the area LSDB type to which the address
aggregate applies. inter-area-prefix-link generates an
aggregated summary. nssa-extlink generates an
NSSA link summary.
WORD<0-255> Specifies the IPv6 address and prefix.
Variable definitions
Use the data in the following table to use the ipv6 area virtual-link command.
Variable Value
{A.B.C.D} {A.B.C.D} Specifies the ID for the transit area that the virtual
link traverses and the router ID of the virtual
neighbor. Do not use 0.0.0.0 for the transit area.
dead-interval <1-65535> Specifies the number of seconds after which the
neighbor declares the router down if it does not
receive hello packets. Configure this value as a
multiple of the hello interval. You must configure the
same value on the virtual neighbor. The default is 60
seconds.
hello-interval <1-65535> Specifies the number of seconds between hello
packets that the router sends on this interface.
Configure the same value on the virtual neighbor.
The default is 10 seconds.
retransmit-interval <1-1800> Specifies the number of seconds between link-state
advertisement retransmissions for adjacencies that
Table continues…
Variable Value
belong to this interface. This value also applies to the
retransmissions of database description and link-
state request packets. The default is 5 seconds.
transit-delay <1-1800> Specifies the estimated number of seconds to
transmit a link-state update packet over this
interface. The default is 1 second.
Variable definitions
Use the data in the following table to use the ipv6 area virtual link {A.B.C.D}
{A.B.C.D} ipsec command.
Variable Value
{A.B.C.D}{A.B.C.D} The first IP address specifies the area IP address,
and the second IP address specifies the virtual-link
IP address.
action <drop|permit> Configures the action of the IPsec policy under the
OSPF virtual tunnel to one of the following:
• drop—Drops the IP packets.
• permit—Permits the IP packets.
The default is permit.
direction <both|in|out> Specifies the direction you want to protect with
IPsec:
• in—Specifies ingress traffic.
• out—Specifies egress traffic.
• both—Specifies both ingress and egress traffic.
The default is both.
enable Enables the IPsec policy under the OSPF virtual link.
security-association WORD<0-32> Links the security association to the OSPF virtual
link.
Procedure
1. Enter OSPF Router Configuration mode:
enable
configure terminal
router ospf
2. Configure OSPF default-cost:
ipv6 default-cost {ethernet|fast-ethernet|forty-gig-ethernet|
hundred-gig-ethernet|gig-ethernet|ten-gig-ethernet|twentyfive-gig-
ethernet|vlan} <1-65535>
Note:
Different hardware platforms support different port speeds. For more information, see
your hardware documentation.
Example
Configure IPv6 default cost metric for Ethernet to 100, for fast Ethernet to 20, for gig-ethernet,
twentyfive-gig-ethernet, forty-gig-Ethernet, and hundred-gig-ethernet to 2, and VLAN to 1.
Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#router ospf
Switch:1(config-ospf)#ipv6 default-cost ethernet 100
Switch:1(config-ospf)#ipv6 default-cost fast-ethernet 20
Switch:1(config-ospf)#ipv6 default-cost gig-ethernet 2
Switch:1(config-ospf)#ipv6 default-cost ten-gig-ethernet 2
Switch:1(config-ospf)#ipv6 default-cost Forty-gig-ethernet 2
Switch:1(config-ospf)#ipv6 default-cost twentyfive-gig-ethernet 2
Switch:1(config-ospf)#ipv6 default-cost hundred-gig-ethernet 2
Switch:1(config-ospf)#ipv6 default-cost vlan 1
Variable definitions
Use the data in the following table to use the ipv6 default-cost command.
Note:
Different hardware platforms support different port speeds. For more information, see your
hardware documentation.
Variable Value
ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
ethernet is for 10 Mb/s Ethernet (default is 100).
fast-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
Table continues…
Variable Value
fast-ethernet is for 100 Mb/s Fast-Ethernet (default is
100).
forty-gig-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
forty-gig-ethernet is for 10 Mb/s Forty-Gigabit-
Ethernet (default is 1).
gigabit-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
gigabit-ethernet is for 10 Mb/s Gigabit-Ethernet
(default is 1).
hundred-gig-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
hundred-gig-ethernet is for 100 Gigabit Ethernet
(default is 1).
ten-gig-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
ten-gig-ethernet is for 10 Mb/s Ten-Gigabit-Ethernet
(default is 1).
twentyfive-gig-ethernet <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
On a channelized 100 Gbps port, the default-cost for
each 25 Gbps channel is 1.
vlan <1-65535> Configures the IPv6 OSPF default metrics. The lower
the metric, the more likely that OSPF chooses the
link to route an OSPF packet.
vlan is for Vlan interfaces (default is 10).
configure terminal
interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-
port]][,...]} or interface vlan <1–4059>
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Create an OSPF area on the interface:
ipv6 ospf area {A.B.C.D}
3. Enable OSPFv3 on the interface:
ipv6 ospf enable
The default is disabled.
4. Configure optional parameters to meet your requirements:
a. Configure the interface metric:
ipv6 ospf cost <0-65535>
The default for a brouter port or VLAN is 1.
Note:
If you do not specify a cost for the interface, the switch dynamically updates the
interface cost with the configured global OSPF default cost. The global OSPF
default cost depends on the speed of the interface.
b. Configure the router dead interval:
ipv6 ospf dead-interval <1-65535>
The default is 40 seconds.
c. Configure the hello interval:
ipv6 ospf hello-interval <1-65535>
The default is 10 seconds.
d. Configure the link LSA suppression:
ipv6 ospf link-lsa-suppression
Note:
Before configuring Link LSA suppression for OSPF, configure Link LSA suppression
for OSPF area for point to point (p2p) or point to multipoint interfaces (p2mp),
otherwise it defaults to a broadcast interface type where you cannot use Link LSA
suppression.
e. Configure the poll interval:
ipv6 ospf poll-interval <0-65535>
Variable definitions
Use the data in the following table to use the ipv6 ospf command.
Variable Value
area {A.B.C.D} Specifies the area ID to which the IPv6 interface
connects. Use 0.0.0.0 for the OSPFv3 backbone.
cost <0-65535> Specifies the cost for the interface.
The default for a brouter port or VLAN is 1.
dead-interval <1-65535> Specifies the number of seconds after which the
neighbor declares the router down, if it does not
receive hello packets. Configure this value as a
multiple of the hello interval. You must configure the
same value on the virtual neighbor.
The default is 40 seconds.
enable Specifies the administrative status for the OSPFv3
interface.
If you enable the status, it is advertised as an interal
route to some areas.
If you disable the status, the interface is external to
OSPFv3.
The default is disabled.
Table continues…
Variable Value
hello-interval <1-65535> Specifies the number of seconds between hello
packets that the router sends on this interface.
Configure the same value on the virtual neighbor.
The default is 10 seconds.
link-lsa-suppression Configures link LSA suppression on the specified
port or VLAN. It is only used for point to point or point
to multipoint interfaces. By default, it is disabled.
poll-interval <0-65535> Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor.
The default is 120.
priority <0-255> Specifies the priority of this interface. Multiaccess
networks use the priority in the designated router
election.
A higher priority value increases the chance the
router becomes the designated router. A value of
zero (0) indicates the router cannot become the
designated router for the network. If more than one
router uses the same priority value, the router ID
determines the designated router.
The default is 1.
retransmit-interval <1-1800> Specifies the number of seconds between link-state
advertisement retransmissions for adjacencies that
belong to this interface. This value also applies to the
retransmissions of database description and link-
state request packets. The default is 5 seconds.
transit-delay <1-1800> Specifies the estimated number of seconds to
transmit a link-state update packet over this
interface.
The default is 1 second.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
Table continues…
Variable Value
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
The default is 1.
f. Configure the retransmit interval:
ipv6 tunnel <1–2000> retransmit-interval <1-1800>
The default is 5 seconds.
g. Configure the transit delay:
ipv6 tunnel <1–2000> transit-delay <1-1800>
The default is 1 second.
Example
Create an OSPF area on the interface:
Switch:1(config-if)#ipv6 tunnel 4 area 0.0.0.0
Enable OSPFv3 on the interface:
Switch:1(config-if)#ipv6 tunnel 4 enable
Variable definitions
Use the data in the following table to use the ipv6 tunnel command.
Variable Value
<1–2000> Specifies the tunnel ID.
area {A.B.C.D} Specifies the area ID to which the IPv6 interface
connects.
Use 0.0.0.0 for the OSPFv3 backbone.
dead-interval <1-65535> Specifies the number of seconds after which the
neighbor declares the router down if it does not
receive hello packets.
Configure this value as a multiple of the hello
interval.
Tip:
You must configure the same value on the
virtual neighbor.
The default is 40 seconds.
enable Specifies the administrative status for the OSPFv3
interface.
If you enable the status, it is advertised as an
internal route to some areas.
If you disable the status, the interface is external to
OSPFv3.
The default is enabled.
Table continues…
Variable Value
hello-interval <1-65535> Specifies the number of seconds between hello
packets that the router sends on this interface.
Tip:
You must configure the same value on the
virtual neighbor.
The default is 10 seconds.
metric <0-65535> Specifies the cost for the interface.
The default for a tunnel is 100.
poll-interval <0-65535> Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor.
The default is 120.
priority <0-255> Specifies the priority of this interface.
Multiaccess networks use the priority in the
designated router election.
A higher priority value increases the likelihood that
the router becomes the designated router.
A value of zero (0) indicates the router cannot
become the designated router for the network.
If more than one router uses the same priority value,
the system uses the router ID to determine which
router becomes the designated router.
The default is 1.
retransmit-interval <1-1800> Specifies the number of seconds between link-state
advertisement retransmissions for adjacencies that
belong to this interface.
The retransmit-interval value also applies to the
retransmissions of database description and link-
state request packets.
The default is 5 seconds.
transit-delay <1-1800> Specifies the estimated number of seconds required
to transmit a link-state update packet over this
interface.
The default is 1 second.
Procedure
1. Enter Privileged EXEC mode:
enable
2. View OSPF global information:
show ipv6 ospf
3. View OSPF areas:
show ipv6 ospf area
4. View OSPF interface information
show ipv6 ospf interface [gigabitEthernet {slot/port[sub-port]}|vlan
<1-4059>]
5. View OSPF interface timers:
show ipv6 ospf int-timers
6. View the link-state database (LSDB) table:
show ipv6 ospf lsdb [adv-rtr <A.B.C.D>] [area <A.B.C.D>] [interface
gigabitEthernet {slot/port[sub-port]}|vlan <1-4059> ] [lsa-type
<1-8>] [lsid <0-4294967295>] [scope <1-3>] [tunnel <1-2000>]
[detail]
7. View OSPF neighbors to see routers with interfaces to a common network, including
neighbors on the virtual link to the OSPF backbone:
show ipv6 ospf neighbor
Example
Switch:1#show ipv6 ospf
=================================================================================
OSPFv3 Global Information
=================================================================================
router-id : 170.76.84.0
admin-state : DISABLE
version : 3
area-bdr-rtr-state : FALSE
as-bdr-rtr-state : FALSE
helper-mode : ENABLED
as-scope-lsa-count : 0
lsa-checksum : 0
originate-new-lsas : 0
rx-new-lsas : 0
ext-lsa-count : 0
default-metric :
ethernet - 100
fast-ethernet - 10
gig-ethernet - 1
ten-gig-ethernet - 1
forty-gig-ethernet - 1
vlan - 10
Switch:1>show ipv6 ospf area
================================================================================
OSPF Area
================================================================================
AREA_ID STUB_AREA NSSA IMPORT_SUM TRANS_ROLE TRANS_STATE
--------------------------------------------------------------------------------
0.0.0.0 false false true always disabled
STUB_METRIC STUB_METRIC_TYPE SPF_RUNS BDR_RTR_CNT ASBDR_RTR_CNT LSA_CNT LSACK_SUM
--------------------------------------------------------------------------------
10 ospfV3Metric 0 0 0 0 0
============================================================================================
========
OSPF Virtual Interface
============================================================================================
========
AREAID NBRIPADDR STATE
--------------------------------------------------------------------------------------------
--------
================================================================================
OSPF Interface Timers
================================================================================
TRANSIT RETRANS HELLO DEAD POLL
IFINDX(VID/BRT) AREAID DELAY INTERVAL INTERVAL INTERVAL INTERVAL
--------------------------------------------------------------------------------
2059 (11 ) 0.0.0.0 1 5 10 40 120
2060 (12 ) 0.0.0.0 1 5 10 40 120
================================================================================
OSPF Virtual Interface Timers
================================================================================
TRANSIT RETRANS HELLO DEAD
================================================================================
OSPF Virtual Neighbor
================================================================================
NBRAREAID NBRROUTERID VIRTINTFID NBRIPV6ADDR
STATE
--------------------------------------------------------------------------------
================================================================================
OSPF NBMA Neighbor
================================================================================
INTERFACE NBRROUTERID NBRIPADDR STATE
--------------------------------------------------------------------------------
Variable definitions
Use the data in the following table to use the show ipv6 ospf lsdb commands.
Variable Value
adv-rtr <A.B.C.D> Shows information for the specified advertising
router.
area <A.B.C.D> Shows information for the specified area.
detail Shows information beyond the basic information.
{slot/port[/sub-port]} Identifies a single slot and port. If your platform
supports channelization and the port is channelized,
you must also specify the sub-port in the format slot/
port/sub-port.
lsa-type <1-8> Shows information for the specified LSA type.
lsid <0-4294967295> Shows information for the specified link-state ID.
Table continues…
Variable Value
scope <1-3> Shows information for the specified scope:
1. link-scope LSAs-View the link-scope LSDB to
view the LSAs that are not flooded beyond the
local link.
2. area-scope LSAs-View the area-scope LSDB to
see the LSAs that are flooded in a single OSPF
area. Area scope is used in router LSAs,
network LSAs, Inter-Area-Prefix-LSAs, Inter-
Area-Router LSAs, and Intra-Area-Prefix-LSAs.
3. AS-scope LSAs-View the AS-scope LSDB to
see the LSAs that are flooded through the
routing domain. The AS scope is used for
ASexternal- LSAs.
tunnel <1-2000> Specifies the ID number of the tunnel.
vlan <1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
100000MbpsPortDefaultMetric: 1
VlanDefaultMetric: 10
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Create a new NBMA neighbor:
ipv6 ospf nbma-nbr WORD<0-43> <0-255>
3. Change the priority of an existing NBMA neighbor:
ipv6 ospf nbma-nbr WORD<0-43> priority <0-255>
Example
Create an NBMA neighbor that will not become the DR:
Switch:1(config-if)#ipv6 ospf nbma-nbr fe80:0:0:0:8217:7dff:fe76:8a03 0
Variable definitions
Use the data in the following table to use the ipv6 ospf nbma-nbr command.
Variable Value
priority <0-255> Specifies the priority to use for this neighbor in the
designated router election process. A value of 0
indicates the neighbor cannot become the
designated router. The higher the priority value, the
higher chance the switch will win the election
process. The default is 1.
WORD<0-43> Specifies the IPv6 address of the neighbor.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Enter the following command:
ipv6 ospf area {A.B.C.D} network {p2p | p2mp} link-lsa-suppression
Example
Variable definitions
Following table describes the variables to the ipv6 ospf area {A.B.C.D} network p2p
link-lsa-suppression command.
Variable Description
area {A.B.C.D} Create an IPv6 OSPF area.
network Sets the type of interface.
[eth|NBMA|p2mp|p2p|passive] Specifies the type of interface.
link-lsa-suppression Enables link LSA suppression.
Variable definitions
Use the data in the following table to use the ipv6 redistribute command.
Variable Value
<bgp|direct|isis|rip|static> Shows the source protocol from which to receive
routes to insert into the OSPFv3 domain. By default,
no routes are announced. Route redistribution is
disabled.
================================================================================
OSPF Redistribute List
================================================================================
direct : disabled
static : disabled
bgp : disabled
isis : disabled
rip : disabled
--------------------------------------------------------------------------------
Name Description
RouterId Specifies a 32–bit integer that identifies the router in
the autonomous system. This value must be unique.
The default value will be one of the IPv4 interface
addresses.
AdminStat Enables or disables OSPFv3 on the router. If you
disable OSPFv3 globally, you disable it on all
interfaces. The default is disabled.
VersionNumber Shows the OSPF version number, which for IPv6 is
version 3.
AreaBdrRtrStatus Shows if the router is an area border router.
ASBdrRtrStatus Configures the router as an autonomous system
boundary router. The default is disabled (clear).
HelperModeDisable Disables Graceful Restart Helper Mode feature.
AsScopeLsaCount Shows the number of AS-external link-state
advertisements in the LSDB.
AsScopeLsaCksumSum Shows the sum of the checksums for the link-scope
LSAs in the LSDB. Use the sum to determine if a
change in the LSDB occurs, and to compare the
LSDBs of the two routers.
OriginateNewLsas Shows the number of new link-state advertisements.
The number increases each time the router
originates a new LSA.
RxNewLsas Shows the number of new link-state advertisements
received. This number does not include new
instances of self-originated link-state advertisements.
ExtLsaCount Shows the number of external (LS type 0x4005)
LSAs in the LSDB.
10MbpsPortDefaultMetric Indicates the default cost applied to 10 Mbps
interfaces (ports). The default is 100.
100MbpsPortDefaultMetric Indicates the default cost applied to 100 Mbps
interfaces (ports). The default is 10.
1000MbpsPortDefaultMetric Indicates the default cost applied to 1 Gbps
interfaces (ports). The default is 1.
10000MbpsPortDefaultMetric Indicates the default cost applied to 10 Gbps
interfaces (ports). The default is 1.
25000MbpsPortDefaultMetric Indicates the default cost applied to 25 Gbps
interfaces (channelized 100 Gbps ports). The default
is 1.
40000MbpsPortDefaultMetric Indicates the default cost applied to 40 Gbps
interfaces (ports). The default is 1.
100000MbpsPortDefaultMetric Indicates the default cost applied to 100 Gbps
interfaces (ports). The default is 1.
Table continues…
Name Description
vlanDefaultMetric Indicates the default cost applied to VLAN interfaces.
The default is 10.
Name Description
Id Specifies a 32–bit integer to uniquely identify an
area. Use 0.0.0.0 for the OSPFv3 backbone.
ImportasExtern Indicates the support for importing AS-external
LSAs::
• importExternal—normal area
• importNoExternal—stub area
• importNssa—not-so-stubby-area
Table continues…
Name Description
AS-scope LSAs are not imported into stub areas or
NSSAs. NSSAs import AS-External data at Type 7
LSAs, which use area scope. importExternal is the
default.
SpfRuns Shows the number of times the intra-area route table
was calculated using the LSDB of this area.
BdrRtrCount Shows the number of reachable ABRs in this area.
The value starts at zero (0). The system calculates
this value in each SPF run.
AsBdrRtrCount Shows the number of reachable ASBRs in this area.
The value starts at zero (0). The system calculates
this value in each SPF run.
ScopeLsaCount Shows the number of area-scope LSAs in the LSDB
for this area.
ScopeLsaCksumSum Shows the sum of the checksums for the area-scope
LSAs in the LSDB. Use the sum to determine if a
change in the LSDB occurs, and to compare the
LSDBs of the two routers.
Summary Controls the import of inter-area LSAs into a stub
area. If the value is noAreaSummary, the router
does not originate nor propagate inter-area LSAs
into the stub area. If the value is
sendAreaSummary (the default), the router both
summarizes and propagates inter-area LSAs.
StubMetric Configures the metric value advertised for the default
route to stub and NSSA areas.
NssaTranslatorRole Indicates if the NSSA border router can perform
NSSA translation of Type 7 LSAs to Type 6 LSAs.
The possible values are always or candidate. The
default is candidate.
NssaTranslatorState Indicates if and how an NSSA border router
translates Type 7 LSAs to Type 5 LSAs. The
possible values are
• enabled—The border router always translates the
LSAs.
• elected—A candidate border router translates the
LSAs.
• disabled—-A candidate border router does not
translate the LSAs.
StubMetricType Specifies the type of metric advertised as a default
route. The possible values are:
• ospfv3Metric—OSPF metric
Table continues…
Name Description
• comparableCost—external Type 1
• nonComparable—external Type 2
The default is ospfv3Metric.
Name Description
AreaID Specifies the area in which the address aggregate
exists. Use dotted decimal notation to specify the
area name.
Table continues…
Name Description
AreaLsdbType Specifies the area LSDB type to which the address
aggregate applies. interAreaPrefixLsa generates an
aggregated summary. nssaExternalLsa generates
an NSSA link summary.
Prefix Specifies the IPv6 prefix. The prefix and prefix length
define the range.
PrefixLength Specifies the length of the prefix, in bits. The prefix
cannot be shorter than 3 bits. The prefix and prefix
length define the range.
Effect Specifies the advertisement mode for prefixes in the
range. advertiseMatching advertises the aggregate
summary LSA with the same link-state ID.
doNotAdvertiseMatching does not advertise
networks that fall within the range.
AdvertiseMetric Specifies a cost value to advertise for the OSPF area
range. This value applies to summary LSAs (Type 3).
If the value is 0, OSPF uses the cost to the farthest
point in the network that is summarized.
Name Description
AreaId Specifies the ID for the transit area that the virtual
link traverses. Do not use 0.0.0.0.
Neighbor Specifies the router ID of the virtual neighbor.
TransitDelay Specifies the estimated number of seconds to
transmit a link-state update packet over this
interface. The default is 1 second.
RetransInterval Specifies the number of seconds between link-state
advertisement retransmissions for adjacencies that
belong to this interface. This value also applies to the
retransmissions of database description and link-
state request packets.
The default is 5 seconds.
HelloInterval Specifies the number of seconds between hello
packets that the router sends on this interface.
Configure the same value on the virtual neighbor.
The default is 10 seconds.
RtrDeadInterval Specifies the number of seconds after which the
neighbor declares the router down if it does not
receive hello packets. Configure this value as a
multiple of the hello interval.
You must configure the same value on the virtual
neighbor. The default is 60 seconds.
State Shows the state of the virtual interface: either down
or pointToPoint.
Events Shows the number of state changes or error events
on the virtual link.
Table continues…
Name Description
LinkScopeLsaCount Shows the number of link-scope LSAs in the LSDB
for the virtual link.
LinkLsaCksumSum Shows the sum of the checksums for the link-scope
LSAs in the LSDB. Use the sum to determine if a
change in the LSDB occurs, and to compare the
LSDBs of the two routers.
Name Description
AreaId Identifies the OSPF virtual link area.
Neighbor Identifies the OSPF virtual link neighbor.
Table continues…
Name Description
SAName Links the security association to the OSPF virtual
link.
AdminStatus Enables the policy. The default is disabled.
Action Configures the action of the IPsec policy under the
OSPF virtual tunnel to one of the following:
• permit—Permits the IP packets.
• drop—Drops the IP packets.
The default is permit.
Direction Specifies the direction you want to protect with
IPsec:
• inBound—Specifies ingress traffic.
• outBound—Specifies egress traffic.
• bothDirections—Specifies both ingress and egress
traffic.
The default is bothDirections.
SrcAddress Shows the address of the source interface to which
the policy applies.
DstAddress Shows the address of the destination interface to
which the policy applies.
LinkID Shows a unique ID for the OSPF virtual link. The
default is 0.
IfIndex Shows the interface index to which OSPF virtual link
the policy applies.
OperStatus Shows the operational status of the link, either up or
down. The default is down.
3. Click IPv6.
4. Click the IPv6 OSPF Interface tab.
5. Click Insert.
6. Select the area ID.
7. Select enabled.
8. Click Insert.
Name Description
Index Shows the interface index for the IPv6 interface on
which OSPFv3 is configured.
AreaId Specifies the area ID to which the IPv6 interface
connects. Use 0.0.0.0 for the OSPFv3 backbone.
Type Specifies the OSPFv3 interface type as one of the
following:
• broadcast
• NBMA
• point-to-point
• point-to-multipoint
AdminStat Specifies the administrative status for the OSPFv3
interface. If you enable the status, it is advertised as
an interal route to some areas. If you disable the
status, the interface is external to OSPFv3. The
default is enabled.
RtrPriority Specifies the priority of this interface. Multiaccess
networks use the priority in the designated router
election.
A higher priority value increases the chance the
router becomes the designated router. A value of
zero (0) indicates the router cannot become the
designated router for the network. If more than one
router uses the same priority value, the router ID
determines the designated router.
The default is 1.
TransitDelay Specifies the estimated number of seconds to
transmit a link-state-update packet over this
interface. The default is 1.
Table continues…
Name Description
RetransInterval Specifies the number of seconds between
retransmission of link-state advertisements for the
adjacencies that belong to this interface, and for
database description and link-state request packets.
The default is 5.
HelloInterval Specifies the number of seconds between the hello
packets that the router sends on this interface. You
must configure this field to the same value for all
routers attached to a common network. The default
is 10.
RtrDeadInterval Specifies the number of seconds after which to
declare a router down if no hello packets are
received. You must configure this field to the same
value for all routers attached to a common network.
The default is 40.
PollInterval Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor. The
default is 120.
State Shows the state of the OSPFv3 interface as one of
the following:
• down
• loopback
• waiting
• pointToPoint
• designatedRouter
• backupDesginatedRouter
• otherDesignatedRouter
DesignatedRouter Shows the router ID for the designated router.
BackupDesignatedRouter Shows the router ID for the backup designated
router.
MetricValue Specifies the cost for the interface. The default value
for a brouter port or VLAN is 1. The default value for
a tunnel is 100.
Note:
If you do not specify a cost for the interface, the
switch dynamically updates the interface cost
with the configured global OSPF default cost.
The global OSPF default cost depends on the
speed of the interface.
LinkLsaSuppression Specifies whether Link LSA suppression is enabled.
Name Description
Index Shows the interface index for the IPv6 interface on
which OSPFv3 is configured.
AreaId Specifies the area ID to which the IPv6 interface
connects. Use 0.0.0.0 for the OSPFv3 backbone.
Type Specifies the OSPFv3 interface type as one of the
following:
• broadcast
• NBMA
• point-to-point
• point-to-multipoint
AdminStat Specifies the administrative status for the OSPFv3
interface. If you enable the status, it is advertised as
an interal route to some areas. If you disable the
Table continues…
Name Description
status, the interface is external to OSPFv3. The
default is enabled.
RtrPriority Specifies the priority of this interface. Multiaccess
networks use the priority in the designated router
election.
A higher priority value increases the chance the
router becomes the designated router. A value of
zero (0) indicates the router cannot become the
designated router for the network. If more than one
router uses the same priority value, the router ID
determines the designated router.
The default is 1.
TransitDelay Specifies the estimated number of seconds to
transmit a link-state-update packet over this
interface. The default is 1.
RetransInterval Specifies the number of seconds between
retransmission of link-state advertisements for the
adjacencies that belong to this interface, and for
database description and link-state request packets.
The default is 5.
HelloInterval Specifies the number of seconds between the hello
packets that the router sends on this interface. You
must configure this field to the same value for all
routers attached to a common network. The default
is 10.
RtrDeadInterval Specifies the number of seconds after which to
declare a router down if no hello packets are
received. You must configure this field to the same
value for all routers attached to a common network.
The default is 40.
PollInterval Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor. The
default is 120.
State Shows the state of the OSPFv3 interface as one of
the following:
• down
• loopback
• waiting
• pointToPoint
• designatedRouter
• backupDesginatedRouter
Table continues…
Name Description
• otherDesignatedRouter
DesignatedRouter Shows the router ID for the designated router.
BackupDesignatedRouter Shows the router ID for the backup designated
router.
MetricValue Specifies the cost for the interface. The default value
for a brouter port or VLAN is 1. The default value for
a tunnel is 100.
Note:
If you do not specify a cost for the interface, the
switch dynamically updates the interface cost
with the configured global OSPF default cost.
The global OSPF default cost depends on the
speed of the interface.
LinkLsaSuppression Specifies whether Link LSA suppression is enabled.
Name Description
Index Shows the interface index for the IPv6 interface on
which OSPFv3 is configured.
AreaId Specifies the area ID to which the IPv6 interface
connects. Use 0.0.0.0 for the OSPFv3 backbone.
Type Specifies the OSPFv3 interface type as one of the
following:
• broadcast
• NBMA
• point-to-point
• point-to-multipoint
AdminStat Specifies the administrative status for the OSPFv3
interface. If you enable the status, it is advertised as
an interal route to some areas. If you disable the
status, the interface is external to OSPFv3. The
default is enabled.
RtrPriority Specifies the priority of this interface. Multiaccess
networks use the priority in the designated router
election.
A higher priority value increases the chance the
router becomes the designated router. A value of
zero (0) indicates the router cannot become the
designated router for the network. If more than one
router uses the same priority value, the router ID
determines the designated router.
The default is 1.
TransitDelay Specifies the estimated number of seconds to
transmit a link-state-update packet over this
interface. The default is 1.
RetransInterval Specifies the number of seconds between
retransmission of link-state advertisements for the
adjacencies that belong to this interface, and for
database description and link-state request packets.
The default is 5.
HelloInterval Specifies the number of seconds between the hello
packets that the router sends on this interface. You
must configure this field to the same value for all
routers attached to a common network. The default
is 10.
RtrDeadInterval Specifies the number of seconds after which to
declare a router down if no hello packets are
received. You must configure this field to the same
Table continues…
Name Description
value for all routers attached to a common network.
The default is 40.
PollInterval Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor. The
default is 120.
State Shows the state of the OSPFv3 interface as one of
the following:
• down
• loopback
• waiting
• pointToPoint
• designatedRouter
• backupDesginatedRouter
• otherDesignatedRouter
DesignatedRouter Shows the router ID for the designated router.
BackupDesignatedRouter Shows the router ID for the backup designated
router.
MetricValue Specifies the cost for the interface. The default value
for a brouter port or VLAN is 1. The default value for
a tunnel is 100.
Note:
If you do not specify a cost for the interface, the
switch dynamically updates the interface cost
with the configured global OSPF default cost.
The global OSPF default cost depends on the
speed of the interface.
LinkLsaSuppression Specifies whether Link LSA suppression is enabled.
Name Description
Type Shows the type of the link-state advertisement. Each
link state type has a separate advertisement format.
AS-scope LSAs not recognized by the router may be
stored in the database.
RouterId Shows the 32 bit number that uniquely identifies the
originating router in the autonomous system.
Lsid Identifies the piece of the routing domain that is
being described by the advertisement.
Sequence Shows a signed 32-bit integer that detects old and
duplicate link-state advertisements. The larger the
sequence number, the more recent the
advertisement.
Age Shows the age of the link-state advertisement in
seconds.
Checksum Indicates the checksum of the complete contents of
the advertisement, except the age field. The age field
is not affected so that the advertisement age value
increments without updating the checksum. The
checksum used is the same for ISO connectionless
datagrams, the Fletcher checksum.
Name Description
AreaId Identifies the area ID from which the LSA is received.
Area ID 0.0.0.0 is the OSPF backbone.
Table continues…
Name Description
Type Identifies the type of the link-state advertisement.
Each link-state type has a separate advertisement
format. Area-scope LSAs unrecognized by the router
are also stored in this database.
RouterId Identifies the originating router in the autonomous
system.
Lsid Identifies the piece of the routing domain that is
described by the advertisement.
Sequence Shows a signed 32-bit integer that detects old and
duplicate link-state advertisements. The larger the
sequence number, the more recent the
advertisement.
Age Shows the age of the link-state advertisement in
seconds.
Checksum Indicates the checksum of the complete contents of
the advertisement, except the age field. The age field
is not affected so that the advertisement age value
increments without updating the checksum. The
checksum used is the same for ISO connectionless
datagrams, the Fletcher checksum.
Name Description
IfIndex Shows the identifier of the link from which the LSA
was received.
Type Shows the type of the link-state advertisement. Each
link state type has a separate advertisement format.
Link-scope LSAs not recognized by the router may
be stored in the database.
Table continues…
Name Description
RouterId Shows the 32 bit number that uniquely identifies the
originating router in the autonomous system.
Lsid Identifies the piece of the routing domain that is
being described by the advertisement.
Sequence Shows a signed 32-bit integer that detects old and
duplicate link-state advertisements. The larger the
sequence number, the more recent the
advertisement.
Age Shows the age of the link-state advertisement in
seconds.
Checksum Indicates the checksum of the complete contents of
the advertisement, except the age field. The age field
is not affected so that the advertisement age value
increments without updating the checksum. The
checksum used is the same for ISO connectionless
datagrams, the Fletcher checksum.
Procedure
1. In the navigation tree, expand the following folders: Configuration > IPv6.
2. Click OSPF.
3. Click the NBMA Neighbors tab.
4. Click Insert.
5. Select the IPv6 port or VLAN interface.
6. Specify the IPv6 address for the neighbor.
7. Specify the priority for the neighbor.
8. Click Insert.
Name Description
IfIndex Specifies the link ID for the link over which the switch
reaches the neighbor.
Address Specifies the IPv6 address of the neighbor.
Priority Specifies the priority to use for this neighbor in the
designated router election process. A value of 0
indicates the neighbor cannot become the
designated router. The higher the priority value, the
higher chance the switch will win the election
process. The default is 1.
RtrId Identifies the neighboring router in the autonomous
system. The value is 0.0.0.0 until the switch receives
a hello message from the neighbor.
State Identifies the state of the relationship with the
neighbor. The state can be one of the following:
• down
• attempt
• init
• twoWay
• exchangeStart
• exchange
• loading
• full
Name Description
DstVrfId Shows the ID of the destination virtual router and
forwarder (VRF). Because IPv6 is not virtualized, the
value is 0 for the Global Router.
Protocol Shows the routing protocol that receives the external
routing information. In this case, the routing protocol
is OSPFv3.
SrcVrfId Shows the ID of the source VRF. Because IPv6 is
not virtualized, the value is 0 for the Global Router.
RouteSource Shows the source protocol from which to receive
routes to insert into the OSPFv3 domain.
Enable Configures the status of route redistribution. The
default is disable.
Name Description
Index Shows the interface index for the IPv6 interface on
which OSPFv3 is configured.
AreaId Specifies the area ID to which the IPv6 interface
connects. Use 0.0.0.0 for the OSPFv3 backbone.
Type Specifies the OSPFv3 interface type as one of the
following:
• broadcast
• NBMA
• point-to-point
• point-to-multipoint
AdminStat Specifies the administrative status for the OSPFv3
interface. If you enable the status, it is advertised as
an interal route to some areas. If you disable the
status, the interface is external to OSPFv3. The
default is enabled.
RtrPriority Specifies the priority of this interface. Multiaccess
networks use the priority in the designated router
election.
A higher priority value increases the chance the
router becomes the designated router. A value of
zero (0) indicates the router cannot become the
Table continues…
Name Description
designated router for the network. If more than one
router uses the same priority value, the router ID
determines the designated router.
The default is 1.
TransitDelay Specifies the estimated number of seconds to
transmit a link-state-update packet over this
interface. The default is 1.
RetransInterval Specifies the number of seconds between
retransmission of link-state advertisements for the
adjacencies that belong to this interface, and for
database description and link-state request packets.
The default is 5.
HelloInterval Specifies the number of seconds between the hello
packets that the router sends on this interface. You
must configure this field to the same value for all
routers attached to a common network. The default
is 10.
RtrDeadInterval Specifies the number of seconds after which to
declare a router down if no hello packets are
received. You must configure this field to the same
value for all routers attached to a common network.
The default is 40.
PollInterval Specifies the number of seconds between hello
packets sent to an inactive NBMA neighbor. The
default is 120.
State Shows the state of the OSPFv3 interface as one of
the following:
• down
• loopback
• waiting
• pointToPoint
• designatedRouter
• backupDesginatedRouter
• otherDesignatedRouter
DesignatedRouter Shows the router ID for the designated router.
BackupDesignatedRouter Shows the router ID for the backup designated
router.
MetricValue Specifies the cost for the interface. The default value
for a brouter port or VLAN is 1. The default value for
a tunnel is 100.
Table continues…
Name Description
Note:
If you do not specify a cost for the interface, the
switch dynamically updates the interface cost
with the configured global OSPF default cost.
The global OSPF default cost depends on the
speed of the interface.
LinkLsaSuppression Specifies whether Link LSA suppression is enabled.
Name Description
IfIndex Displays the local-link ID of the link over which the
neighbor can be reached.
RtrId Identifies the neighboring router in the Autonomous
System.
The value is the router ID of the neighboring router,
which in OSPF uses the same format as an IPv6
address but identifies the router independent of IPv6
address.
Address Displays the IPv6 address for the neighbor
associated with the local link.
Options Displays the bit mask that corresponds to the options
field on the neighbor.
State Displays the state of the relationship with the
neighbor.
Table continues…
Name Description
The value can be one of the following:
• down
• attempt
• init
• twoWay
• exchangeStart
• exchange
• loading
• full
NbrIfId Displays the interface ID that the neighbor advertises
in its hello packets on this link.
DeadIntCnt Displays the Dead interval Count or TTL (time to live)
field that indicates how many seconds remain before
the system declares the Neighbor down.
The starting value is the Router Dead Interval value
and it decrements to 0 if no Hello is received for that
neighbor within the interval. If no Hello is received
within the interval, then the system declares the
neighbor down.
When a hello is received for the neighbor, the system
resets the value to the Router Dead Interval value.
Name Description
Area Shows the ID for the transit area.
Table continues…
Name Description
RtrId Shows the ID for the neighboring router in the
autonomous system.
LocalIfIndex Shows the local interface ID for the virtual link over
which the switch can reach the neighbor.
AddressType Shows the type of address as one of the following:
• ipv4
• ipv6
• ipv4z
• ipv6z
• dns
ipv4z and ipv6z indicate a scope zone.
Address Shows the IPv6 address that this virtual neighbor
advertises. This value must be a global scope
address.
Options Shows a bit mask that corresponds to the OSPF
options field of the neighbor.
State Shows the state of the virtual neighbor relationship.
The value can be one of the following:
• down
• attempt
• init
• twoWay
• exchangeStart
• exchange
• loading
• full
RIPng fundamentals
Routing Information Protocol next generation (RIPng) allows routers to exchange information for
computing routes through an IPv6–based network. You should implement RIPng only on routers.
IPv6 provides neighbor router information required by RIPng protocol to function as intended. A
RIPng router is assumed to have interfaces in several networks and the protocol relies primarily on
the metric of each network to compute routes using the distance vector algorithm.
RIP identifies network reachability based on cost, and cost is defined as hop count. One hop is the
distance from one router to the next. This cost, or hop count, is the metric.
RIPng-enabled routers use UDP port 521 (the RIPng port) to exchange routing information. RIPng
responds to a request by sending a message to the port from which the request originates. Specific
queries can be sent from ports other than the RIPng port, but they must be directed to the RIPng
port on the target machine.
Each router advertises routing information by sending an update every 30 seconds (one interval). If
RIPng does not receive information about a network for 180 seconds, the metric associated with the
network rises to infinity (U); that is, the metric resets to 16, which means the network becomes
unreachable. If RIP does not receive information about a network for 120 seconds, it removes the
network from the routing table.
Note:
These time interval values are default values which are configurable by the user.
Each router that implements RIPng contains a routing table. This table contains one entry for every
destination that is reachable throughout the system operating RIPng. At a minimum, each routing
table entry contains the following information:
• The IPv6 prefix of the destination.
• A metric that represents the total cost of getting a datagram from the router to that destination.
The metric is the sum of the costs of traversing the networks to arrive at the destination.
• The IPv6 address of the next router in the path to the destination (the next hop). The next-hop
IPv6 address is a linklocal address.
• The VLAN or brouter port on which the RIPng routes were learned.
• The age of the RIPng route.
RIPng protocol implementation is specified in IETF document RFC 2080.
RIPng messages and packet format
RIPng-enabled routers use UDP port 521 (the RIPng port) to send and receive datagrams.
The following figure shows the RIPng packet format:
• Garbage collection time interval: After the timeout time interval expires and the route
becomes invalid, it remains in the routing table until the garbage collection time interval
expires. The garbage collection time interval is 120 seconds. Until the garbage collection time
interval expires all updates sent by this router include the invalid route. When the garbage
collection timer expires, the process removes the route from the routing table.
• Triggered update time interval: The triggered update time interval is set to a random value
between 1 and 5 seconds after a triggered update is sent. A single update is sent even if
multiple triggered updates occur before the timer expires.
Configuration of timers or time intervals is supported only at the CLI/SNMP/EDM level. Configuration
of timers or time intervals is not supported at the interface/port level.
Procedure
1. Enter Interface Configuration mode:
enable
configure terminal
interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-
port]][,...]} or interface vlan <1–4059>
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Create a RIPng interface:
ipv6 rip
3. Enable the RIPng interface:
ipv6 rip enable
4. Verify the operational status of the RIPng interface:
show ipv6 rip interface
Example
Switch:1>enable
Switch:1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch:1(config)#interface vlan 22
Switch:1(config-if)#ipv6 rip
Switch:1(config-if)#ipv6 rip enable
Switch:1(config-if)#show ipv6 rip interface
================================================================================
RIPng Interface - GlobalRouter
================================================================================
IFINDX COST POISON SEND ADMIN OPER
STATUS DEFAULT STATUS STATUS
--------------------------------------------------------------------------------
257 (2/2 ) 2 disable disable enable enable
2070 (22 ) 5 disable disable enable disable
Variable definitions
Use the data in the following table to use the ipv6 rip command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By default, VLAN
IDs 1 to 4059 are configurable and the system reserves VLAN IDs
4060 to 4094 for internal use. If you enable VRF scaling and SPBM
Table continues…
Variable Value
mode, the system also reserves VLAN IDs 3500 to 3998. VLAN ID 1
is the default VLAN and you cannot create or delete VLAN ID 1.
This variable applies only to VLAN interfaces, not ports.
{slot/port[/sub-port][-slot/port[/sub- Identifies the slot and port in one of the following formats: a single slot
port]][,...]} and port (slot/port), a range of slots and ports (slot/port-slot/port), or a
series of slots and ports (slot/port,slot/port,slot/port). If your platform
supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Enable RIPng poison:
ipv6 rip poison enable
3. Specify the RIPng cost:
ipv6 rip cost <1-15 Cost>
4. Access router RIPng configuration mode:
router rip
5. Specify the RIPng holddown timer value:
ipv6 timers basic holddown <0-360>
6. Specify the RIPng timeout timer value:
ipv6 timers basic timeout <15-259200>
7. Specify the RIPng update timer value:
================================================================================
RIPng Global - GlobalRouter
================================================================================
Rip : Enabled
HoldDown Time : 120
Timeout Interval : 180
Update Time : 30
Default Info Metric : 1
Default Info State : Enabled
Default Import Metric : 1
Variable definitions
Use the data in the following table to use the ipv6 rip poison, ipv6 default-information
and ipv6 timers basic commands.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By default, VLAN
IDs 1 to 4059 are configurable and the system reserves VLAN IDs
4060 to 4094 for internal use. If you enable VRF scaling and SPBM
mode, the system also reserves VLAN IDs 3500 to 3998. VLAN ID 1
is the default VLAN and you cannot create or delete VLAN ID 1.
This variable applies only to VLAN interfaces, not ports.
port {slot/port[/sub-port] [-slot/port[/ Identifies the slot and port in one of the following formats: a single slot
sub-port]] [,...]} and port (slot/port), a range of slots and ports (slot/port-slot/port), or a
series of slots and ports (slot/port,slot/port,slot/port). If your platform
Table continues…
Variable Value
supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
poison enable Enables Poison Reverse. If you disable Poison Reverse (no poison
enable). Split Horizon is enabled. By default, Split Horizon is enabled.
If you enable Split Horizon, the interface does not advertise IP routes
learned from an immediate neighbor back to the neighbor. If you
enable Poison Reverse, the RIP updates sent to a neighbor from
which a route is learned are poisoned with a metric of 16. Therefore,
the receiver neighbor ignores this route because the metric 16
indicates infinite hops in the network
These mechanisms prevent routing loops.
<1-15 Cost> Configures the RIPng cost for this port (link).
holddown <0-360> Configures the RIPng holddown timer value, the length of time (in
seconds) that RIPng continues to advertise a network after it
determines that the network is unreachable. The default is 120.
timeout <15-259200> Configures the RIPng timeout interval. The default is 180.
update <1–360> Configure the RIPng update timer. The update time is the time
interval between RIPng updates.
default-information <1–15> Configure the default route metric value.
Example
Enable the redistribution instance.
Switch:1#enable
Switch:1#configure terminal
Switch:1(config)#router rip
Switch:1(config-rip)#ipv6 redistribute bgp enable
Switch:1(config-rip)#ipv6 redistribute direct enable
Switch:1(config-rip)#ipv6 redistribute isis enable
Switch:1(config-rip)#ipv6 redistribute ospf enable
Switch:1(config-rip)#ipv6 redistribute static enable
Switch:1(config-rip)#show ipv6 rip redistribute
================================================================================
RIPng Redistribute List
================================================================================
direct : enabled
static : enabled
ospf : enabled
bgp : enabled
isis : enabled
--------------------------------------------------------------------------------
Variable definitions
Use the data in the following table to use the ipv6 redistribute command.
Variable Value
<bgp|direct|isis|ospf|static> Specifies the type of routes to redistribute (the protocol source). Valid
options are bgp, isis, direct, ospf, or static.
8. Click Apply.
Name Description
zero indicates that the advertisement does not
specify a value for CurHopLimit. The default is 64.
MulticastAdminStatus The option to select MulticastAdminStatus is
disabled. You cannot configure the administrative
status for multicast in this context.
MacOffset Requests a particular MAC for an IPv6 VLAN.
You can specify a MAC offset when you configure
IPv6 on a VLAN, or the system can assign a MAC
address from within the available range.
Different hardware platforms support different MAC
offset ranges.
ForwardingEnabled Indicates whether IPv6 forwarding is enabled.
The default is enabled.
RSMLTEnable Shows whether RSMLT is enabled on the interface.
The default value is disabled (false).
Name Description
RipAdminStatus Enable or disable RIPng on an interface.
DefaultInfoState Enable or disable default information at the interface level. The default
is disable.
Cost Specifies the RIPng metric cost. The default is 1.
Poison Enable or disable poison reverse on an RIPng interface. The default is
disable.
RipOperStatus Shows the RIPng operational state on an interface.
Procedure
1. In the navigation tree, expand the following folders: Configuration > IPv6.
2. Click IPv6 RIPng.
3. Click the Redistribute tab.
4. Double-click the value in the Enable column that corresponds with the source protocol type
you want to enable or disable.
5. Select enable or disable from the list.
6. Click Apply.
Name Description
RcvBadRoutes The number of routes, in valid RIPng packets, that were ignored for
any reason (examples: unknown address family or invalid metric).
SentUpdates The number of triggered RIPng updates actually sent on this interface.
RcvUpdates The number of triggered RIPng updates actually received on this
interface. This explicitly does not include full updates received
containing new information.
This chapter provides concepts and procedures to complete IPv6 Virtual Router Redundancy
Protocol (VRRP) configuration.
VRRP
For IPv6 hosts on a LAN to learn about one or more default routers, IPv6-enabled routers send
router advertisements using the IPv6 ND protocol. The routers multicast these router
advertisements every few minutes.
The ND protocol uses a mechanism called neighbor unreachability detection to detect the failure of
a neighbor node (router or host) or the failure of the forwarding path to a neighbor. Nodes can
monitor the health of a forwarding path by sending unicast ND neighbor solicitation messages to the
neighbor node. To reduce traffic, nodes only send neighbor solicitations to neighbors to which they
actively send traffic and only after the node receives no positive indication that the neighbors are up
for a period of time. A host takes a minimum of 5 seconds to learn that a router is unreachable
before it switches to another default router, but this minimum value increases ND traffic. This delay
can cause service disruption.
VRRP for IPv6 provides a faster switchover to an alternate default router than is possible using the
ND protocol. With VRRP for IPv6, a backup router can take over for a failed default router in
approximately three seconds (using default parameters). The switchover is accomplished without
interaction with the hosts and with a minimum amount of VRRP traffic.
The IPv6 VRRP implementation is similar to the existing IPv4 VRRP operation, including support for
holddown timer, critical IP, fast advertisements, and backup master. With backup master enabled,
the backup switch routes all traffic according to its routing table. The backup master switch does not
perform Layer 2 switching for the traffic to the VRRP master.
You must specify a link-local address to associate with the virtual router. Optionally, you can also
assign global unicast IPv6 addresses to associate with the virtual router. Network prefixes for the
virtual router are derived from the global IPv6 addresses assigned to the virtual router.
One active master switch exists for each IPv6 network prefix. All other VRRP interfaces in a network
are in backup mode.
In the backup state, a VRRP router monitors the availability and state of the master router. The
backup does not respond to ND neighbor solicitation and ND router solicitation messages for virtual
router IP addresses and discards packets with a MAC address equal to the virtual router MAC
address. The backup does not accept packets addressed to IP addresses associated with the virtual
router. If a shutdown occurs, it transitions back to the initialize state. If the master router goes down,
the backup router sends the VRRP advertisement and unsolicited ND neighbor advertisements and
ND router advertisements described in the preceding paragraphs and transitions to the controlling
state.
VRRP advertisements and master router failover
When you initialize a VRRP router, the master router continues to send advertisement messages at
the advertisement interval period.
Note:
The VRRP virtual IP address cannot be same as the local IP address of the port or VLAN on
which VRRP is enabled.
The other VRRP routers transition to the backup state in the following situations:
• if the priority in the received advertisement is greater than the local priority
• if the priority in the received advertisement is the same as the local priority and the primary IP
address of the sender is greater than the local primary IP address
The backup routers use the advertisements from the master router as a keepalive to monitor the
health of the master router. If the backup router does not receive an advertisement during the
master downtime interval, calculated as 3 * advertisement interval, then the master router is
declared down.
If a shutdown occurs, the master router sends a VRRP advertisement with a priority of 0 and
transitions to the initialize state
The priority value 0 indicates that the master router has stopped participating in VRRP. This value
triggers the backup router to transition to the master state without waiting for the current master to
time out.
Critical IPv6 address and holddown timer
The critical IPv6 address is an interface that has primary impact on VRRP. If you enable critical IPv6
and the status of the critical IP changes, the master and backup relationship also changes.
If you configure and enable critical IPv6 address, the master transitions to backup if the critical IPv6
is down, and the backup becomes the master. After the critical IPv6 address of the original master
resumes, if the hold-down timer is configured to 0, it becomes the master immediately. Otherwise,
the original master transitions to the master state after the hold-down timer time out.
You can specify the local router IP interface uplink from the VRRP router to the network as the
critical IP address. This ensures that, if the local uplink interface fails, VRRP initiates a master router
failover to one of the backup routers.
The critical address can be one of the global unicast IPv6 addresses assigned to any local IPv6
interfaces.
The holddown timer is a proprietary enhancement to VRRP.
After a master transitions to backup by critical IP changing, one of the backup routers will be elected
as the master router. After the critical IPv6 of the original master is restored, the original master
remains in the backup state for a period of time that you configure by using the holddown-timer
parameter. The router becomes the master immediately if you use the command ipv6 vrrp <1–
255> action preempt.
The holddown timer allows the master router enough time to detect and update the dynamic routes.
The timer delays the preemption of the master over the backup, when the master becomes
available. If the hold-timer is configured to 0, it becomes the master router immediately. Otherwise, it
transitions to the master state only after the holddown timer times out.
The holddown timer does not apply during failovers caused by VRRP router priority change. The
holddown timer applies only to failovers caused by a critical IP failure.
Configure all of your routers to use identical values for the holddown timer.
Important:
Do not use VRRP backup master and critical IP at the same time. Use one or the other. The
critical IP address must be a local address.
VRRP backup master with triangular SMLT
The standard implementation of VRRP supports one active master switch for each IPv6 subnet. All
other VRRP interfaces in a network are in backup mode.
A deficiency occurs when VRRP-enabled switches use SMLT. If VRRP switches are aggregated into
two SMLT switches, the end host traffic is load-shared on all uplinks to the aggregation switches
(based on the Multilink Trunk [MLT] traffic distribution algorithm).
However, VRRP usually has only one active routing interface enabled. All other VRRP routers are in
backup mode. Therefore, all traffic that reaches the backup VRRP router is forwarded over Virtual
Inter-Switch Trunk (vIST) toward the master VRRP router. In this case, vIST potentially does not
have enough bandwidth to carry all the aggregated traffic.
To resolve this issue, assign the backup router as the backup master router. The backup master
router can actively load-share the routing traffic with a master router.
Because the two VRRP peer nodes exchange MAC address tables, the VRRP backup master can
forward traffic directly, on behalf of the master router. The switch in the backup master state routes
all traffic received on the backup master IP interface according to its routing table. The backup
master switch does not perform Layer 2 switching for the traffic to the VRRP master.
If you enable SMLT on the backup master router, the incoming host traffic is forwarded over the
SMLT links as usual.
Important:
Do not use VRRP backup master and critical IP at the same time. Use one or the other.
Fast advertisement
You can configure the advertisement time interval (in seconds) between sending advertisement
messages. This interval permits fast network convergence with standardized VRRP failover.
However, losing connections to servers for more than a second can result in missing critical failures.
Customer network uptime in many cases requires faster network convergence, which means
network problems must be detected within hundreds of milliseconds.
To meet these requirements, the fast advertisement interval are provided.
The fast advertisement interval is similar to the advertisement interval parameter except for the unit
of measure and the range. The fast advertisement interval is expressed in milliseconds and the
range is from 200 to 1,000 milliseconds. This unit of measure must be in multiples of 200
milliseconds.
To configure fast advertisement, you must specify a fast advertisement interval and explicitly enable
the fast advertisement option. After you enable fast advertisement, the fast advertisement interval is
used instead of the advertisement interval.
If you enable fast advertisement, VRRP can only communicate with other products that have the
same configuration.
Accept-mode
When you configure VRRP for IPv6 on an interface you can configure the accept-mode parameter,
which controls whether the VRRP master or backup master accepts packets destined for the IPv6
address associated with the virtual router.
By default, accept-mode is disabled. The accept-mode parameter does not affect the Neighbor
Discovery packets. The master router forwards packets with a destination link-layer MAC address
that matches the virtual MAC address, and accepts packets forwarded over the virtual interswitch
trunk (vIST) toward the master router , if accept-mode is enabled. If you disable accept-mode, you
cannot ping the virtual IPv6 address. If you enable accept-mode, the master router accepts packets
addressed to the IPv6 address that is associated with the virtual router.
When you configure VRRP for IPv6 on an interface, you can configure the accept-mode parameter.
By default, accept-mode is disabled. If you disable accept-mode, the master router does not drop
neighbor solicitations or neighbor advertisements. The master router forwards packets with a
destination link-layer MAC address that matches the virtual MAC address. If you disable accept-
mode, you cannot ping the virtual IPv6 address.
Note:
The VRRP virtual IP address cannot be same as the local IP address of the port or VLAN on
which VRRP is enabled.
VRRPv3
VRRPv3 is a combined protocol for both IPv4 and IPv6. It specifies an election protocol that
dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The
VRRP router that controls the IPv4 or IPv6 addresses associated with a virtual router is called the
Master, and it forwards packets sent to these IPv4 or IPv6 addresses. VRRP Backups wait for a
Master and take ownership when the Master is no longer detected.
The election protocol provides dynamic failover in the forwarding responsibility when the Master is
unavailable. VRRP for IPv4 gains a higher-availability default path without configuring dynamic
routing or router discovery protocols on every end-host. VRRP for IPv6 gains a quick switch-over to
Backup routers compared to the standard IPv6 Neighbor Discovery mechanisms.
The software supports VRRPv3 for IPv4 and VRRPv3 for IPv6. VRRPv3 for IPv6 is compliant to
RFC 5798. The software also supports VRRPv2 for IPv4.
VRRPv3 guidelines
The switch also supports VRRPv2 for IPv4. If you configure VRRP IPv6 on an interface, it runs
independently of the IPv4 version. Configure the version of the VRRP IPv4 on the interface before
you configure any other IPv4 VRRP attributes. By default, the version is not configured to a
particular value. However, when sourcing older configuration files that do not have the version
saved, the router configures the version to VRRPv2 by default. If you change the version, all IPv4
configuration under that interface is automatically removed, and you are prompted for a confirmation
before this operation.
Perform the CLI configuration through ip vrrp or ipv6 vrrp nodes; CLI commands for IPv4 are
common for version 2 and version 3.
The following list identifies the features that make both IPv4 and IPv6 VRRPv3 features compliant to
RFC 5798:
• Advertisement vs Fast-advertisement — Prior to RFC 5798, the minimum advertisement
interval was 1 second, with Fast-advertisement a sub-second interval could be configured.
When this feature is enabled, the VRRP ADVERTISEMENT packets are sent with type 7
instead of 1. With RFC 5798 the sub-second interval is standardised, and the switch sends all
packets for VRRPv3 with type 1. The use of Fast-advertisement remains the same. VRRPv2
packets send with type 7, if Fast-advertisement is enabled.
• Add Master-advertisement-interval — Prior to RFC 5798 compliance, all virtual routers on the
same VLAN had the same Advertisement-Interval configured. RFC 5798 states that you can
use different Advertisement Intervals on the Master and Backup. On the Master, the Master-
advertisement-interval and the Advertisement-Interval have the same value. On the Backup,
the Master-advertisement-interval is used to calculate the timers, and the locally configured
Advertisement-Interval is ignored until the Backup transitions to Master. The Master-
advertisement-interval value is put in the advertisement packet type sent by the Master
• Transition to master as specified in RFC 5798 — Prior to RFC 5798, if a Backup receives an
advertisement with a lower priority (or same priority but lower IP), it immediately sends its own
advertisement and transitions to Master. However, RFC 5798 states that such packets must be
discarded, which means it will transition to Master after the Master_Down_Timer expires
• Add skew-time — RFC 5798 states that skew-time is calculated depending on the priority, and
Master-advertisement-interval assures that the Backup with highest priority sends the first
advertisement when the Master goes down
Skew time is calculated using the formula: (((256 - priority) *
Master_Adver_Interval) / 256).
• Add preempt-mode — Preempt-mode is different from the ipv6 vrrp <vrid> action
preempt command, which is an operational command issued when you want to stop the hold-
down timer. RFC 5798 states that preempt-mode should be set to false when you do not want
a higher priority Backup to transition to Master. By default, it is set to true
Note:
Accept-mode is not fully implemented for IPv4 VRRPv3. You can only ping the virtual IP
address, the same way as it is for IPv4 VRRPv2.
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Associate an address with the virtual router for either link-local or global:
• ipv6 vrrp address <1-255> link-local WORD <0-127>
• ipv6 vrrp address <1-255> global WORD <0-255>
Note:
You must configure the link-local address before you configure the global address.
3. Enable VRRP for the interface:
ipv6 vrrp <1-255> enable
Example
Associate a link-local address with the virtual router ID 12:
Switch:1(config-if)#ipv6 vrrp address 12 link-local fe80::1234
Associate a global address with the virtual router ID 12
Swith:1(config-if)#ipv6 vrrp address 12 global 3333::1234/64
Enable VRRP for the interface:
Switch:1(config-if)#ipv6 vrrp 12 enable
Variable definitions
Use the data in the following table to use the ipv6 vrrp address command.
Variable Value
<1-255> Specifies the virtual router ID. The virtual router acts
as the default router for one or more associated
addresses.
enable Enables IPv6 VRRP. The default is disabled.
global WORD <0–255> Specifies a global IPv6 address and mask to
associate with the virtual router.
link-local WORD <0-127> Specifies a link-local IPv6 address to associate with
the virtual router.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
================================================================================
VRRP Info - GlobalRouter
================================================================================
--------------------------------------------------------------------------------
12 1/1 1111::2222/64
Flags Legend:
HLD DWN: Configured hold-down timer value, REM: REMaining hold-down timer value
--More-- (q = quit)
Switch:1#show ipv6 vrrp interface verbose
==========================================================================================
Vlan Vrrp for IPv6 Extended
==========================================================================================
VLAN VRRP MASTER
ID ID STATE CONTROL PRIORITY IPADDR
------------------------------------------------------------------------------------------
3 3 master enable 100 fe80:0:0:0:b2ad:aaff:fe40:4501
All 1 Vlan Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
All 1 Vlan Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
VLAN VRRP BACKUP BACKUP ADVERTISE FAST ADV FAST ADV MASTER ADV PREEMPT
ID ID MASTER MASTER INTERVAL INTERVAL ENABLE INTERVAL MODE
STATE (s) (ms) (ms)
------------------------------------------------------------------------------------------
All 1 Vlan Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
==========================================================================================
Port Vrrp for IPv6 Extended
==========================================================================================
PORT VRRP MASTER
NUM ID STATE CONTROL PRIORITY IPADDR
------------------------------------------------------------------------------------------
1/1 2 master enable 100 fe80:0:0:0:b2ad:aaff:fe40:4500
All 1 Port Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
All 1 Port Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
PORT VRRP BACKUPBACKUP ADVERTISE FAST ADV FAST ADV MASTER ADV PREEMPT
NUM ID MASTERMASTER INTERVAL INTERVAL ENABLE INTERVAL MODE
STATE (s) (ms) (ms)
------------------------------------------------------------------------------------------
All 1 Port Vrrp Extended Entries out of 2 Total Num of Vrrp displayed
Variable definitions
Use the data in the following table to use the show ipv6 vrrp commands.
Variable Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...]} Identifies the slot and port in one of the following
formats: a single slot and port (slot/port), a range of
slots and ports (slot/port-slot/port), or a series of
slots and ports (slot/port,slot/port,slot/port). If your
platform supports channelization and the port is
channelized, you must also specify the sub-port in
the format slot/port/sub-port.
link-local WORD<0–127> Displays information by link-local IPv6 address.
verbose Displays extended information.
vlan [<1-4059> ] Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
vrid <1–255> Displays information by virtual router ID.
router vrrp
2. Enable the VRRP-router to generate SNMP traps for events:
ipv6 send-trap enable
Example
Disable generation of SNMP traps for VRRP events:
Switch:1(config-vrrp)#no ipv6 send-trap enable
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Configure the accept mode of the master router:
ipv6 vrrp <1-255> accept-mode enable
3. Determine if the router overrides the holddown timer:
ipv6 vrrp <1-255> action <none|preempt>
Variable definitions
Use the data in the following table to use the ipv6 vrrp command.
Variable Value
<1-255> Specifies a number that uniquely identifies a virtual
router on a VRRP router. The virtual router acts as
the default router for one or more assigned
addresses.
accept-mode enable Controls whether the VRRP master or backup
master accepts packets (other than neighbor
discovery packets) destined to the IPv6 address
associated with the virtual router. The default value is
disable.
action <none|preempt> Lists options to override the holddown timer
manually and force preemption:
• none does not override the timer.
• preempt preempts the timer.
Table continues…
Variable Value
This parameter applies only if the holddown timer is
active.
adver-int <1-40> Specifies the time interval, in seconds, between
sending advertisement messages. The default is 1
second. Only the master router sends
advertisements.
backup-master enable Uses the backup VRRP switch for traffic forwarding.
This option reduces the traffic on the vIST. The
default is disabled.
critical-ipv6 enable Enables or disables the use of critical IP. When
disabled, the VRRP ignores the availability of the
address configured as critical IP. This address must
be a local address. The default is disabled.
critical-ipv6-addr WORD<0-46> Specifies an IP interface on the local router
configured so that a change in its state causes a role
switch in the virtual router (for example, from master
to backup) in case the interface stops responding.
fast-adv enable Enables or disables the fast advertisement interval.
When disabled, the regular advertisement interval is
used. The default is disable.
fast-adv-int <200-1000> Configures the interval between VRRP
advertisement messages. You must configure the
same value on all participating routers.
This unit of measure must be in multiples of 200
milliseconds. The default is 200.
holddown-timer <0-21600> Configures the amount of time, in seconds, to wait
before preempting the current VRRP master. The
default is 0.
priority <1-255> Specifies the priority value used by this VRRP router.
The value 255 is reserved for the router that owns
the IP addresses associated with the virtual router.
The default is 100.
configure terminal
interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-
port]][,...]} or interface vlan <1–4059>
Note:
If your platform supports channelization and the port is channelized, you must also
specify the sub-port in the format slot/port/sub-port.
2. Enter the following command:
ipv6 vrrp <vrid> preempt-mode enable
3. Use the following command to set the IPv6 VRRP preempt-mode to its default value:
default ipv6 vrrp <vrid> preempt-mode
4. Use the following command to disable the IPv6 VRRP preempt-mode:
no ipv6 <vrid> preempt-mode enable
Example
Switch:1> enable
Switch:1# configure terminal
Switch:1(config)# interface gigabitethernet 1/2
Variable definitions
Use the data in the following table to use the ipv6 vrrp <vrid> command.
Variable Value
enable Enables preempt-mode for VRRPv3 for IPv6.
vrid <1–255> Specifies the virtual router ID.
Name Description
IfIndex Shows the index value that uniquely identifies the
interface to which this entry applies.
InetAddrType Specifies the address type for the VRRP interface.
VrId Specifies a number that uniquely identifies a virtual
router on a VRRP router.
PrimaryIpAddr Specifies the link-local address assigned to the
VRRP.
VirtualMacAddr Specifies the MAC address of the virtual router
interface.
State Shows the state of the virtual router interface. The
possible states are
• initialize—waiting for a startup event
• backup—monitoring availability and state of the
master router
Table continues…
Name Description
• master—functioning as the forwarding router for
the virtual router IP addresses
Control Displays whether VRRP is enabled or disabled for
the port or VLAN.
Priority Specifies the priority value used by this VRRP router.
The value 255 is reserved for the router that owns
the IP addresses associated with the virtual router.
The default is 100.
AdvInterval Specifies the time interval, in seconds, between
sending advertisement messages. The default is 1
second.
MasterIpAddr Specifies the IP address of the physical interface of
the Master's virtual router.
UpTime Indicates the time interval since this virtual router
exited the INIT state.
CriticalIpAddr Indicates the IP address of the interface that is
critical to VRRP. If that IP interface is down, the
VRRP state will transition to Backup, even if it has
higher priority.
CriticalIpAddrEnabled Enables or disables the use of critical IP. When
disabled, the VRRP ignores the availability of the
address configured as critical IP. This address must
be a local address. The default is disabled.
BackUpMaster Uses the backup VRRP switch for traffic forwarding.
This option reduces the traffic on the vIST. The
default is disabled.
BackUpMasterState Indicates if the Backup-Master is up. If the switch is
in Master state, but Backup-Master is enabled, then
the BACKUP MASTER STATE will be down.
FasterAdvIntervalEnabled Enables or disables the fast advertisement interval.
When disabled, the regular advertisement interval is
used. The default is disable.
FasterAdvInterval Configures the interval between VRRP
advertisement messages. The default is 200.
Enter the values in multiples of 200 milliseconds.
AcceptMode Controls whether the VRRP master or backup
master accepts packets (other than neighbor
discovery packets) destined to the IPv6 address
associated with the virtual router. The default value is
disable.
PreemptMode Issued to preempt the existing router. If a new router
is added to the network with its priority higher than
Table continues…
Name Description
the existing routers, then the new router becomes
the master.
Action Lists options to override the hold-down timer
manually and force preemption:
• none does not override the timer.
• preemptHoldDownTimer preempts the timer.
This parameter applies only if the holddown timer is
active.
HoldDownTimer Configures the amount of time, in seconds, to wait
before preempting the current VRRP master. The
default is 0.
HoldDownTimeRemaining Indicates the amount of time, in seconds, left before
the HoldDownTimer expires.
MasterAdvInterval On the VRRP master, the master advertisement
interval is same as the advertisement interval. On
the VRRPv3 Backup, the master advertisement
interval is set to the Advertisement configured on the
Master (received in the packet).
Name Description
NotificationCntrl Indicates whether the VRRP-enabled router
generates SNMP traps for events.
• enabled: Generate SNMP traps.
• disabled: Do not generate SNMP traps.
The default is enabled.
2. Click VRRP.
3. Click the Interface tab.
4. Select an interface.
5. Click AssociatedIPAddr.
6. Click Insert.
7. Type the address.
8. Type the prefix length.
9. Click Insert.
Name Description
IpAddr Specifies an IP address that is associated with a
virtual router. The number of rows on this tab equals
the number of IP addresses associated (backed up)
by the virtual router
IpAddrPrefixLength Specifies the length of the prefix in bits.
This chapter provides concepts and procedures to complete IPv6 Routed Split MultiLink Trunking
(RSMLT) configuration.
RSMLT
Routed Split Multi-Link Trunking (RSMLT) is an enhancement to SMLT that enables the exchange of
Layer 3 information between peer nodes in a switch cluster. RSMLT provides two main advantages
over SMLT:
• provides backup for the peer after the peer goes down
• routes traffic on behalf of the peer to prevent Virtual Inter-Switch Trunk (vIST) overload
IPv6 RSMLT enables the subsecond failover for IPv6 forwarding.
The overall model for IPv6 RSMLT is essentially identical to that of IPv4 RSMLT. In short, RSMLT
peers exchange their IPv6 configuration and track their states by using vIST messages. An RSMLT
node always performs IPv6 forwarding on the IPv6 packets destined to the MAC addresses of the
peer. If an RSMLT node detects that the RSMLT peer is down, the node forwards IPv6 traffic
destined to the IPv6 addresses of the peer.
With RSMLT enabled, an SMLT switch performs IP forwarding on behalf of the SMLT peer, which
prevents IP traffic from being sent over the vIST.
IPv6 RSMLT supports the full set of topologies and features supported by IPv4 RSMLT, including
SMLT triangles, squares, and SMLT full-mesh topologies, with routing enabled on the core VLANs.
Because you configure RSMLT on a VLAN, not at the IP layer, the configuration applies to both IPv4
and IPv6. You cannot enable or disable RSMLT on a VLAN for IPv6 but not IPv4; or for IPv4 but not
IPv6.
With IPv6, you must configure the RSMLT peers to use the same set of IPv6 prefixes.
Supported routing protocols include the following:
• IPv6 static routes
• OSPFv3
For more information about the IPv4 RSMLT model, see Configuring IPv4 Routing. This section
focuses on the differences between the IPv4 and IPv6 models.
IPv6 differences
The following list identifies ways in which the IPv6 implementation of RSMLT differs from the IPv4
implementation of RSMLT.
• After the switch begins to forward traffic on behalf of the peer, duplicate address detection
(DAD) is not executed for the IPv6 address of the peer. The implementation assumes that the
peer IPv6 address is already known to be unique.
• An RSMLT switch installs a neighbor entry for the peer IPv6 address immediately after the peer
disappearance is detected, possibly while a route for the peer still exists. This action can result
in packets destined to the peer IPv6 address being delivered to the CP for a short period of
time.
• You cannot configure a vIST with IPv6 peer address
• In a dual-stack VLAN, adding or deleting IPv4 or IPv6 does not affect the RSMLT functionality
of one another. If you add IPv4 or IPv6 to an existing IPv6 or IPv4 RSMLT VLAN, the RSMLT
state for the protocol you add second will be the same as the previous RSMLT state.
Variable definitions
Use the data in the following table to use the ip rsmlt command.
Variable Value
holddown-timer <0-3600> Defines how long the recovering or restarting system
remains in a non-Layer 3 forwarding mode for the
peer router MAC address. The default is 60.
If you disable RSMLT on a VLAN, non default values
for this variable do not save across restarts.
holdup-timer <0-9999> Defines how long the RSMLT system maintains
forwarding for its peer. The value is a range from 0 to
3600 seconds or 9999. 9999 means infinity. The
default is 180.
If you disable RSMLT on a VLAN, non default values
for this variable do not save across restarts.
Use the data in the following table to use the interface command.
Variable Value
<1-4059> Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
================================================================================
Ip Rsmlt Local Info - GlobalRouter
================================================================================
VID SMLT ID
--------------------------------------------------------------------------------
101 101
102 102
1020:0:0:0:0:0:0:32/64
fe80:0:0:0:224:7fff:fe9e:da02/128
VID SMLT ID
--------------------------------------------------------------------------------
101 101
102 102
================================================================================
Ip Rsmlt Peer Info - GlobalRouter
================================================================================
--------------------------------------------------------------------------------
101 00:24:7f:9e:ea:01 Enable Up 100 200
1010:0:0:0:0:0:0:0/64
1010:0:0:0:0:0:0:33/64
fe80:0:0:0:224:7fff:fe9e:ea01/128
102 00:24:7f:9e:ea:00 Enable Up 60 180
1020:0:0:0:0:0:0:0/64
1020:0:0:0:0:0:0:33/64
fe80:0:0:0:224:7fff:fe9e:ea00/128
Variable definitions
Use the data in the following table to use the show ip rsmlt command.
Variable Value
local Shows local RSMLT information.
peer Shows RSMLT information for the peer.
vrf WORD<1-16> Shows information for a specific VRF name.
vrfids WORD<0-512> Shows information for a specific VRF ID.
Name Description
Enable Enables RSMLT. The default is disabled.
HoldDownTimer Defines how long the recovering or restarting system remains in a
non-Layer 3 forwarding mode for the peer router MAC address.
The range of this value is from 0 to 3600 seconds. The default is
60.
If you disable RSMLT on a VLAN, non default values for this field
do not save across restarts.
HoldUpTimer Defines how long the RSMLT system maintains forwarding for its
peer. The value is a range from 0 to 3600 seconds or 9999. 9999
means infinity. The default is 180.
If you disable RSMLT on a VLAN, non default values for this field
do not save across restarts.
Name Description
IfIndex Shows the route SMLT operation index.
Ipv6Addr Configures the IPv6 address of the RSMLT interface.
Ipv6PrefixLength Configures the IPv6 prefix length.
Enable Enables or disables RSMLT. The default is disabled.
HoldDownTimer Defines how long the recovering/rebooting switch
remains in a non-Layer 3 forwarding mode for the
peer router MAC address.
The default is 0.
HoldUpTimer Defines how long the RSMLT switch maintains
forwarding for its peer. The value is a range from 0 to
3600 seconds or 9999. 9999 means infinity.
The default is 0.
OperStatus Displays the RSMLT operating status as either up or
down.
SmltId Specifies the ID range for the SMLT.
VlanId Configures the VLAN ID.
MacAddr Configures the MAC address of the VLAN.
VrfId Indicates the virtual router ID to which the local
RSMLT instance belongs.
VrfName Indicates the virtual router name to which the local
RSMLT instance belongs.
Name Description
IfIndex Shows the route SMLT operation index.
Ipv6Addr Configures the IPv6 address of the RSMLT interface.
Ipv6PrefixLength Configures the IPv6 prefix length.
AdminStatus Shows the administrative status of RSMLT on the
peer.
HoldDownTimer Defines how long the recovering/rebooting switch
remains in a non-Layer 3 forwarding mode for the
peer router MAC address.
The default is 0.
HoldDownTimeRemaining Indicates the time remaining in the HoldDownTimer.
HoldUpTimer Defines how long the RSMLT switch maintains
forwarding for its peer. The value is a range from 0 to
3600 seconds or 9999. 9999 means infinity.
The default is 0.
HoldUpTimeRemaining Indicates the time remaining in the HoldUpTimer.
OperStatus Displays the RSMLT operating status as either up or
down.
SmltId Specifies the ID range for the SMLT.
VlanId Specifies the VLAN ID in the range of 1 to 4059. By
default, VLAN IDs 1 to 4059 are configurable and the
system reserves VLAN IDs 4060 to 4094 for internal
use. If you enable VRF scaling and SPBM mode, the
system also reserves VLAN IDs 3500 to 3998. VLAN
ID 1 is the default VLAN and you cannot create or
delete VLAN ID 1.
MacAddr Configures the MAC address of the VLAN.
VrfId Indicates the virtual router ID to which the peer
belongs.
VrfName Indicates the virtual router name to which the peer
belongs.
2. Click RSMLT.
3. Click the Edge Peers tab.
Name Description
PeerVlanId Specifies the ID of the VLAN associated with this
entry.
PeerIpv6Address Specifies the IPv6 address of the peer RSMLT
interface.
PeerIpv6PrefixLength Specifies the peer IPv6 address prefix.
PeerMacAddress Specifies the peer MAC address.
This chapter provides procedures you can use to view IPv6 connection information.
You can establish network connectivity with the following protocols:
• Transmission Control Protocol (TCP), for connection-oriented sessions
• User Datagram Protocol (UDP), for connectionless sessions
When you view TCP information you can
• check the health of the connections, from the switch perspective, as they traverse the network
• detect intermittent connectivity
• detect attacks on resources
• determine which applications are active by checking the port numbers
UDP endpoint information tells you about local and remote UDP activity.
When you view UDP information you can
• determine which applications are active by checking the local and remote port numbers
• identify processes within a UDP session to allow multiplexing of a port mapping for UDP
3. Display IPv6 TCP listener information for the specified IPv6 address:
show ipv6 tcp listener
4. Display IPv6 TCP properties
show ipv6 tcp properties
5. Display IPv6 TCP statistics
show ipv6 tcp statistics
6. Display IPv6 UDP information:
show ipv6 udp endpoints
OR
show ipv6 udp local_addr WORD<0–128> [{slot/port[sub-port]}]
OR
show ipv6 udp remote_addr WORD<0–128> [{slot/port[sub-port]}]
Example
Switch:1>show ipv6 tcp connections
================================================================================
TCP connection table info
================================================================================
LOCALPORT LOCALADDR REMOTEPORT REMOTEADDR STATE
23 3000:0:0:0:0:0:0:1
33471 3000:0:0:0:0:0:0:2 established
23 4000:0:0:0:0:0:0:1
3472 4000:0:0:0:0:0:0:2 established
Switch:1>show ipv6 tcp listener
================================================================================
TCP listener table info
================================================================================
LOCALPORT LOCALADDR
21 0:0:0:0:0:0:0:0:
22 0:0:0:0:0:0:0:0:
23 0:0:0:0:0:0:0:0:
80 0:0:0:0:0:0:0:0:
443 0:0:0:0:0:0:0:0:
513 0:0:0:0:0:0:0:0:
InSegs: 50
OutSegs: 38
RetransSegs: 0
InErrs: 0
OutRsts: 2
HCInSegs: 38
HCOutSegs: 38
================================================================================
UDP endpoint table info
================================================================================
LOCALPORT LOCALADDR
REMOTEPORT REMOTEADDR INSTANCE PROCESS
--------------------------------------------------------------------------------
69 0:0:0:0:0:0:0:0
0 0:0:0:0:0:0:0:0 1219584048 0
161 0:0:0:0:0:0:0:0
0 0:0:0:0:0:0:0:0 1219585596 0
Name Description
RtoAlgorithm Determines the timeout value used for retransmitting
unacknowledged octets.
RtoMin Displays the minimum time (in milliseconds)
permitted by a TCP implementation for the
retransmission timeout.
RtoMax Displays the maximum time (in milliseconds)
permitted by a TCP implementation for the
retransmission timeout.
MaxConn Displays the maximum connections for the device.
Name Description
RemPort Displays the remote port number for the TCP
connection.
State Displays an integer that represents the state for the
connection:
• closed
• listen
• synSent
• synReceived
• established
• finWait1
• finWait2
• closeWait
• lastAck(9)
• closing
• timeWait
• deleteTCB
Process Displays the process ID for the system process
associated with the TCP connection.
2. ClickTCP/UDP.
3. Click the TCP Listeners tab.
Name Description
RemoteAddress Displays the remote IPv6 address.
RemotePort Displays the remote port number.
Instance Distinguishes between multiple processes connected
to the UDP endpoint.
Process Displays the ID for the UDP process.
This chapter provides concepts and procedures to complete IPv6 alternative routes configuration
using the CLI.
Alternative routes
To avoid traffic interruption, you can globally enable the alternative routes feature so the router can
use the next-best route, also known as an alternative route, if the best route becomes unavailable.
Routers learn routes to a destination through routing protocols. Routers maintain a routing table of
the learned alternative routes sorted in order by route preference, route costs, and route sources.
The first route on the list is the best route and the route that the router prefers to use.
The alternative route concept also applies between routing protocols. For example, if an OSPFv3
route becomes unavailable and an alternative RIPng route is available, the system activates the
RIPng route without waiting for the update interval to expire.
Route preference
On the switch, all standard routing protocols have default preference values that determine the
routing priority of the protocol. The router uses default preferences to select the best route when a
clash exists in preference between the protocols.
You can modify the global preference for a protocol to give the protocol a higher or lower priority
than other protocols. If you change the global preference for a static route and all best routes remain
best routes, only the local route tables change. However, if the protocol preference change causes
best routes to no longer be best routes, the change affects neighboring route tables.
Important:
Changing route preferences is a process-intensive operation that can affect system
performance and network reach while you perform route preference procedures. It is
recommended that if you want to change preferences for static routes or routing protocols, do
so when you configure routes or during a maintenance window.
If a router learns a route with the same network mask and cost values from multiple sources, the
router uses the route preferences to select the best route to add to the forwarding database.
Note:
To modify the preference for a route, you do not need to disable a route before you edit the
configuration.
Note:
IPv6 alternative routes are enabled by default.
3. Verify the configuration of the IPv6 alternative route:
show ipv6 global
show ipv6 route alternative
Example:
Switch:1>enable
Switch:1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch:1(config)#ipv6 alternative-route
========================================================================================================
IPv6 Routing Table Information
========================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
--------------------------------------------------------------------------------------------------------
0:0:0:0:0:ffff:301:a02/128 0:0:0:0:0:0:0:0 T-10 STATIC 1 0 B 5
2910:0:0:1:0:0:0:0/64 fe80:0:0:0:b2ad:aaff:fe42:dd00 V-3 OSPF 2 0 B 20
2912:0:0:1:0:0:0:0/64 0:0:0:0:0:0:0:0 V-1001 LOCAL 1 0 B 0
2912:0:0:1:0:0:0:0/64 0:0:0:0:0:0:0:0 T-10 BGP 1 0 A 45
2912:0:0:1:0:0:12:1/128 0:0:0:0:0:0:0:0 V-1001 LOCAL 1 0 B 0
3000:0:0:1:0:0:0:0/64 0:0:0:0:0:0:0:0 V-3 LOCAL 1 0 B 0
3000:0:0:1:0:0:12:1/128 0:0:0:0:0:0:0:0 V-3 LOCAL 1 0 B 0
4001:0:0:1:0:0:0:0/64 0:0:0:0:0:0:0:0 T-10 LOCAL 1 0 B 0
4001:0:0:1:0:0:0:1/128 0:0:0:0:0:0:0:0 T-10 LOCAL 1 0 B 0
5910:0:0:1:0:0:0:0/64 0:0:0:0:0:0:0:0 T-10 BGP 1 0 B 45
5910:0:0:1:0:0:0:0/64 fe80:0:0:0:b2ad:aaff:fe42:dd00 V-3 OSPF 2 0 A 120
5910:0:0:2:0:0:0:0/64 0:0:0:0:0:0:0:0 T-10 BGP 1 0 B 45
5910:0:0:2:0:0:0:0/64 fe80:0:0:0:b2ad:aaff:fe42:dd00 V-3 OSPF 2 0 A 120
-------------------------------------------------------------------------------------------------------
TYPE Legend:
A=Alternative Route, B=Best Route, E=Ecmp Route
The following sections show configuration examples for IPv6 deployment options.
IPv6 tunnels
This section shows examples of manually configured tunnels between brouter ports and VLANs.
Between brouter ports
The following figure shows the tunnel configuration between brouter ports.
exit
Between VLANs
The following figure shows the tunnel configuration between VLANs.
You must configure static routes, and either RIP or OSPF on both the source (Switch 1) and
destination (Switch 2) IPv4 interfaces to communicate on the IPv4 network. You must configure IPv4
addresses on the VLANs.
On the source device:
Create an IPv6 VLAN and add ports to the VLAN.
vlan create 10 type port-mstprstp 1
vlan mlt 10 4
vlan members 10 1/1 portmember
interface vlan 10
ipv6 interface
ipv6 interface enable
ipv6 interface address 4000:0:0:0:0:0:0:1/64
exit
Create an IPv4 VLAN, add ports to the VLAN, and enable OSPF on the VLAN.
vlan create 20 type port-mstprstp 1
vlan mlt 20 4
vlan members 20 1/30 portmember
interface vlan 20
ip address 172.21.80.1 255.0.0.0
ip ospf enable
exit
Create an IPv4 VLAN , add ports to the VLAN, and enable OSPF on the VLAN.
vlan create 30 type port-mstprstp 1
vlan mlt 30 4
vlan members 30 1/30 portmember
interface vlan 30
ip address 192.168.20.1 255.0.0.0
ip ospf enable
exit
Verification
On the source device:
Switch:1(config)#show ipv6 tunnel 1 detail
================================================================================
Tunnel Interface Information
================================================================================
ID LOCAL ADDRESS REMOTE ADDRESS OPER STATUS TYPE
--------------------------------------------------------------------------------
1 172.21.80.1 192.168.20.1 active manual
--------------------------------------------------------------------------------
================================================================================
Address Information
================================================================================
IPV6 TYPE ORIGIN STATUS
ADDRESS
--------------------------------------------------------------------------------
2500:0:0:0:0:0:0:1 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:ac15:5001 UNICAST LINKLAYER PREFERRED
--------------------------------------------------------------------------------
================================================================================
Address Information
================================================================================
IPV6 TYPE ORIGIN STATUS
ADDRESS
--------------------------------------------------------------------------------
2500:0:0:0:0:0:0:2 UNICAST MANUAL PREFERRED
fe80:0:0:0:0:0:c0a8:1401 UNICAST LINKLAYER PREFERRED
OSPFv3
This section shows an example of OSPFv3 configuration. The following figure shows the network.
Verification:
Switch:1#show ipv6 ospf area
================================================================================
OSPF Area
================================================================================
AREA_ID STUB_AREA NSSA IMPORT_SUM TRANS_ROLE TRANS_STATE
--------------------------------------------------------------------------------
0.0.0.0 false false true always disabled
STUB_METRIC STUB_METRIC_TYPE SPF_RUNS BDR_RTR_CNT ASBDR_RTR_CNT LSA_CNT LSACK_SUM
--------------------------------------------------------------------------------
10 ospfV3Metric 0 0 0 0 0
Switch:1#show ipv6 interface vlan 2
================================================================================
Vlan Ipv6 Interface
================================================================================
IF VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACH RETRAN MCAST IPSEC RPC RPC
INDX ABLE SMIT MODE
INDX ADDRESS STATE STATE LMT TIME TIME STATUS
--------------------------------------------------------------------------------
2070 2 00:24:7f: enable up ETHER 1500 64 30000 1000 disable disable exist
al:7a:06 only
================================================================================
Vlan Ipv6 Address
================================================================================
IPV6 ADDRESS VLAN-ID TYPE ORIGIN STATUS
--------------------------------------------------------------------------------
2001:100:102:202:0:0:0:1 V-2 UNICAST MANUAL PREFERRED
fe80:0:0:0:224:7fff:fea1:7a06 V-2 UNICAST LINKLAYER PREFERRED
Configuration on Switch-1
VLAN configuration:
On Switch-1, configure VLAN 2 and the IPv6 interface address 2000:0:0:0:0:0:0:1/64.
Switch1:1:1>enable
Switch1:1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
=======================================================================================
Vlan Basic
=======================================================================================
VLAN MSTP
ID NAME TYPE INST_ID PROTOCOLID SUBNETADDR SUBNETMASK VRFID
---------------------------------------------------------------------------------------
1 Default byPort 0 none N/A N/A 0
2 VLAN-2 byPort 0 none N/A N/A 0
==========================================================================
VLAN PORT ACTIVE STATIC NOT_ALLOW
ID MEMBER MEMBER MEMBER MEMBER
--------------------------------------------------------------------------
1 1/1-1/16,1/17/1- 1/1-1/16,1/17/1-
1/17/4,1/18/1- 1/17/4,1/18/1-
1/18/4,2/1-2/16, 1/18/4,2/1-2/16,
2/17/1-2/17/4, 2/17/1-2/17/4,
2/18/1-2/18/4,3/1- 2/18/1-2/18/4,3/1-
3/6,4/1-4/4,4/6 3/6,4/1-4/4,4/6
2 4/5 4/5
=================================================================================================================
Vlan Ipv6 Interface
=================================================================================================================
IFINDX VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACHABLE RETRANSMIT MCAST IPSEC RPC RPCMODE
INDX ADDRESS STATE STATE LMT TIME TIME STATUS
-----------------------------------------------------------------------------------------------------------------
2050 2 b0:ad:aa:4e:59:00 enable up ETHER 1500 64 30000 1000 disable disable disable existonly
=================================================================================================================
Vlan Ipv6 Address
=================================================================================================================
IPV6 ADDRESS VLAN-ID TYPE ORIGIN STATUS
-----------------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 V-2 UNICAST MANUAL PREFERRED
fe80:0:0:0:b2ad:aaff:fe4e:5900/64 V-2 UNICAST LINKLAYER PREFERRED
Port configuration:
Switch1:1(config)#interface gigabitEthernet 4/5
Switch1:1(config-if)#encapsulation dot1q
Switch1:1(config-if)#no shutdown
Switch1:1(config-if)#exit
=====================================================================
OSPFv3 Global Information
=====================================================================
router-id : 170.78.88.0
admin-state : ENABLED
version : 3
area-bdr-rtr-state : FALSE
as-bdr-rtr-state : FALSE
helper-mode : ENABLED
as-scope-lsa-count : 0
lsa-checksum : 0
originate-new-lsas : 22
rx-new-lsas : 11
ext-lsa-count : 0
Switch1:1(config)#show ipv6 ospf neighbor
=======================================================================================
OSPF Neighbor
=======================================================================================
IFINDX(VID/BRT) NBRROUTERID NBRIPADDR STATE TTL
---------------------------------------------------------------------------------------
2050 (2) 170.78.84.0 fe80:0:0:0:b2ad:aaff:fe4e:5500 Full 31
=======================================================================================
OSPF Virtual Neighbor
=======================================================================================
NBRAREAID NBRROUTERID VIRTINTFID NBRIPV6ADDR STATE
---------------------------------------------------------------------------------------
=======================================================================================
OSPF NBMA Neighbor
=======================================================================================
---------------------------------------------------------------------------------------
Switch1:1(config-if)#exit
================================================================================
RIPng Interface - GlobalRouter
================================================================================
IFINDX COST POISON SEND ADMIN OPER
STATUS DEFAULT STATUS STATUS
--------------------------------------------------------------------------------
2050 (2 ) 1 disable disable enable enable
==========================================================================
RIPng Global - GlobalRouter
===========================================================================
Rip : Enabled
HoldDown Time : 120
Timeout Interval : 180
Update Time : 30
Default Info Metric : 1
Default Info State : Disabled
Default Import Metric : 1
Configuration on Switch–2
On Switch-2, configure VLAN 2 and VLAN 3 with the IPv6 interfaces 2000:0:0:0:0:0:0:2/64
and 3000:0:0:0:0:0:0:2/64 respectively.
VLAN configuration:
Switch2:1>enable
Switch2:1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
===================================================================================
Vlan Basic
===================================================================================
VLAN MSTP
ID NAME TYPE INST_ID PROTOCOLID SUBNETADDR SUBNETMASK VRFID
-----------------------------------------------------------------------------------
1 Default byPort 0 none N/A N/A 0
2 VLAN-2 byPort 0 none N/A N/A 0
3 VLAN-3 byPort 0 none N/A N/A 0
=======================================================================
Vlan Port
========================================================================
VLAN PORT ACTIVE STATIC NOT_ALLOW
ID MEMBER MEMBER MEMBER MEMBER
------------------------------------------------------------------------
1 1/1-1/16,1/17/1- 1/1-1/16,1/17/1-
1/17/4,1/18/1- 1/17/4,1/18/1-
1/18/4,2/1-2/16, 1/18/4,2/1-2/16,
2/17/1-2/17/4, 2/17/1-2/17/4,
2/18/1-2/18/4,3/1- 2/18/1-2/18/4,3/1-
3/6,4/1-4/4 3/6,4/1-4/4
2 4/5 4/5
3 4/6 4/6
==================================================================================================================
Vlan Ipv6 Interface
==================================================================================================================
IFINDX VLAN PHYSICAL ADMIN OPER TYPE MTU HOP REACHABLE RETRANSMIT MCAST IPSEC RPC RPCMODE
INDX ADDRESS STATE STATE LMT TIME TIME STATUS
------------------------------------------------------------------------------------------------------------------
2050 2 b0:ad:aa:4e:55:00 enable up ETHER 1500 64 30000 1000 disable disable disable existonly
2051 3 b0:ad:aa:4e:55:01 enable up ETHER 1500 64 30000 1000 disable disable disable existonly
===================================================================================================================
Vlan Ipv6 Address
===================================================================================================================
IPV6 ADDRESS VLAN-ID TYPE ORIGIN STATUS
-------------------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:2/64 V-2 UNICAST MANUAL PREFERRED
fe80:0:0:0:b2ad:aaff:fe4e:5500/64 V-2 UNICAST LINKLAYER PREFERRED
3000:0:0:0:0:0:0:2/64 V-3 UNICAST MANUAL PREFERRED
fe80:0:0:0:b2ad:aaff:fe4e:5501/64 V-3 UNICAST LINKLAYER PREFERRED
Port configuration:
Switch2:1(config)#interface GigabitEthernet 4/5
Switch2:1(config)#encapsulation dot1q
Switch2:1(config)#no shutdown
Switch2:1(config)#interface vlan 3
================================================================
OSPFv3 Global Information
================================================================
router-id : 170.78.84.0
admin-state : ENABLED
version : 3
area-bdr-rtr-state : FALSE
as-bdr-rtr-state : FALSE
helper-mode : ENABLED
as-scope-lsa-count : 0
lsa-checksum : 0
originate-new-lsas : 56
rx-new-lsas : 62
ext-lsa-count : 0
Switch2:1(config-if)#show ipv6 ospf interface
==================================================================================
OSPF Interface
==================================================================================
IFINDX(VID/BRT) AREAID ADM IFSTATE METRIC PRI DR/BDR IFTYPE
----------------------------------------------------------------------------------
2050 (2 ) 0.0.0.0 ena BDR 1 1 170.78.88.0 BROADCAST
170.78.84.0
2051 (3 ) 0.0.0.0 ena DR 1 1 170.78.84.0 BROADCAST
0.0.0.0
==================================================================================
OSPF Virtual Interface
==================================================================================
----------------------------------------------------------------------------------
==================================================================================
OSPF Neighbor
==================================================================================
IFINDX(VID/BRT) NBRROUTERID NBRIPADDR STATE TTL
----------------------------------------------------------------------------------
2050 (2) 170.78.88.0 fe80:0:0:0:b2ad:aaff:fe4e:5900 Full 30
===================================================================================
OSPF Virtual Neighbor
===================================================================================
NBRAREAID NBRROUTERID VIRTINTFID NBRIPV6ADDR STATE
-----------------------------------------------------------------------------------
===================================================================================
OSPF NBMA Neighbor
===================================================================================
------------------------------------------------------------------------------------
=====================================================================
OSPFv3 Global Information
=====================================================================
router-id : 170.78.88.0
admin-state : ENABLED
version : 3
area-bdr-rtr-state : FALSE
as-bdr-rtr-state : FALSE
helper-mode : ENABLED
as-scope-lsa-count : 0
lsa-checksum : 0
originate-new-lsas : 22
rx-new-lsas : 11
ext-lsa-count : 0
Switch2:1(config)#interface vlan 3
Switch2:1(config-if)#ipv6 rip
Switch2:1(config-if)#ipv6 rip enable
Switch2:1(config-if)#exit
Switch2:1(config)#
Switch2:1(config)#show ipv6 rip interface
========================================================================
RIPng Interface - GlobalRouter
========================================================================
IFINDX COST POISON SEND ADMIN OPER
STATUS DEFAULT STATUS STATUS
-------------------------------------------------------------------------
2050 (2 ) 1 disable disable enable enable
2051 (3 ) 1 disable disable enable enable
=============================================================
RIPng Global - GlobalRouter
==============================================================
Rip : Enabled
HoldDown Time : 120
Timeout Interval : 180
Update Time : 30
Default Info Metric : 1
Default Info State : Disabled
Default Import Metric : 1
====================================================================================================
IPv6 Routing Table Information
====================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
----------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 RIP 2 0 A 100
----------------------------------------------------------------------------------------------------
===================================================================================================
IPv6 Routing Table Information
===================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
---------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
---------------------------------------------------------------------------------------------------
======================================================================================================
IPv6 Routing Table Information
======================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:2/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 LOCAL 2 0 B 20
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 LOCAL 2 0 A 100
------------------------------------------------------------------------------------------------------
==========================================================================================
IPv6 Routing Table Information
==========================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:2/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:2/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 0:0:0:0:0:0:0:0 V-3 LOCAL 1 0 B 20
3000:0:0:0:0:0:0:2/128 0:0:0:0:0:0:0:0 V-3 LOCAL 1 0 B 100
------------------------------------------------------------------------------------------
========================================================================================================
IPv6 Routing Table Information
========================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
--------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 RIP 2 0 A 100
--------------------------------------------------------------------------------------------------------
===================================================================================================
IPv6 Routing Table Information
===================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
---------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
---------------------------------------------------------------------------------------------------
TYPE Legend:
A=Alternative Route, B=Best Route, E=Ecmp Route
Configure a different route preference for the RIPng protocol, for example, 19:
Switch1:1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch1:1(config)#ipv6 route preference protocol ripng 19
Switch1:1(config)#exit
=======================================================================
IPv6 Route Preference
========================================================================
PROTOCOL DEFAULT CONFIG
------------------------------------------------------------------------
LOCAL 0 0
STATIC 5 5
SPBM_L1 7 7
OSPFv3_INTRA 20 20
OSPFv3_INTER 25 25
EBGP 45 45
RIPNG 100 19
OSPFv3_E1 120 120
OSPFv3_E2 125 125
IBGP 175 175
View the updated route preference (for RIPng) on Switch-1. The RIPng route is now learnt as the
best route as it has lesser value of route preference (19) than that of OSPFv3 (20), as shown below.
Switch1:1(config)#show ipv6 route
===================================================================================================
IPv6 Routing Table Information
===================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
---------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 RIP 2 0 B 19
---------------------------------------------------------------------------------------------------
===========================================================================================================
IPv6 Routing Table Information
===========================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
-----------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 RIP 2 0 B 19
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 A 20
-----------------------------------------------------------------------------------------------------------
=======================================================================================================
IPv6 Routing Table Information
=======================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
-------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 RIP 2 0 A 100
-------------------------------------------------------------------------------------------------------
===================================================================================================
IPv6 Routing Table Information
===================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
---------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
---------------------------------------------------------------------------------------------------
======================================================================================================
IPv6 Routing Table Information
======================================================================================================
Destination Address/PrefixLen NEXT HOP VID/BID/TID PROTO COST AGE TYPE PREF
------------------------------------------------------------------------------------------------------
2000:0:0:0:0:0:0:1/64 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
2000:0:0:0:0:0:0:1/128 0:0:0:0:0:0:0:0 V-2 LOCAL 1 0 B 0
3000:0:0:0:0:0:0:2/64 fe80:0:0:0:b2ad:aaff:fe4e:5500 V-2 OSPF 2 0 B 20
------------------------------------------------------------------------------------------------------
Support
Go to the Avaya Support website at http://support.avaya.com for the most up-to-date
documentation, product notices, and knowledge articles. You can also search for release notes,
downloads, and resolutions to issues. Use the online service request system to create a service
request. Chat with live agents to get answers to questions, or request an agent to connect you to a
support team if an issue requires additional expertise.
Documentation
See Documentation Reference for a list of documentation for all VOSS products.
For installation and initial setup information of the Open Networking Adapter (ONA), refer to the
Quick Install Guide that came with your ONA.
Note:
The ONA works only with the Avaya Virtual Services Platform 4000 Series.
Training
Ongoing product training is available. For more information or to register, you can access the Web
site at http://avaya-learning.com/.
Subscribing to e-notifications
Subscribe to e-notifications to receive an email notification when documents are added to or
changed on the Avaya Support website.
About this task
You can subscribe to different types of general notifications, for example, Product Correction Notices
(PCN), which apply to any product or a specific product. You can also subscribe to specific types of
documentation for a specific product, for example, Application & Technical Notes for Ethernet
Routing Switch 5000 Series.
Procedure
1. In an Internet browser, go to https://support.avaya.com.
2. Type your username and password, and then click Login.
3. Under My Information, select SSO login Profile.
4. Click E-NOTIFICATIONS.
5. In the GENERAL NOTIFICATIONS area, select the required documentation types, and then
click UPDATE.
6. Click OK.
7. In the PRODUCT NOTIFICATIONS area, click Add More Products.
8. Scroll through the list, and then select the product name.
9. Select a release version.
10. Select the check box next to the required documentation types.
The Internet Control Message Protocol (ICMPv6) uses many messages identified by a type and
code field (see RFC 4443). Error messages use message types 0 to 127. Informational messages
use message types 128 to 255. The following table provides the type and code reference.
Table 9: ICMPv6 type and code details
route table manager Determines the best route to a destination based on reachability, route
(RTM) preference, and cost.
stateless address Uses a mathematical equation to automatically configure and assign IPv6
autoconfiguration addresses to hosts or nodes on a network. RFC 4862 describes SLAAC.
(SLAAC)