Cisco IOS IPv6 Command Reference
ipv6 mobile home-agent (global configuration) through ipv6 ospf database-filter all out

Table Of Contents

ipv6 mobile home-agent (global configuration)

ipv6 mobile home-agent (interface configuration)

ipv6 mobile router

ipv6 mobile router-service roam

ipv6 mtu

ipv6 multicast aaa account receive

ipv6 multicast boundary scope

ipv6 multicast group-range

ipv6 multicast multipath

ipv6 multicast-routing

ipv6 multicast rpf use-bgp

ipv6 nat

ipv6 nat max-entries

ipv6 nat prefix

ipv6 nat prefix v4-mapped

ipv6 nat translation

ipv6 nat v4v6 pool

ipv6 nat v4v6 source

ipv6 nat v6v4 pool

ipv6 nat v6v4 source

ipv6 nd advertisement-interval

ipv6 nd dad attempts

ipv6 nd managed-config-flag

ipv6 nd ns-interval

ipv6 nd other-config-flag

ipv6 nd prefix

ipv6 nd prefix framed-ipv6-prefix

ipv6 nd prefix-advertisement

ipv6 nd ra interval

ipv6 nd ra-interval

ipv6 nd ra lifetime

ipv6 nd ra-lifetime

ipv6 nd ra suppress

ipv6 nd reachable-time

ipv6 nd router-preference

ipv6 nd suppress-ra

ipv6 neighbor

ipv6 next-hop-self eigrp

ipv6 nhrp authentication

ipv6 nhrp holdtime

ipv6 nhrp interest

ipv6 nhrp map

ipv6 nhrp map multicast

ipv6 nhrp map multicast dynamic

ipv6 nhrp max-send

ipv6 nhrp network-id

ipv6 nhrp nhs

ipv6 nhrp record

ipv6 nhrp redirect

ipv6 nhrp registration

ipv6 nhrp responder

ipv6 nhrp server-only

ipv6 nhrp shortcut

ipv6 nhrp trigger-svc

ipv6 nhrp use

ipv6 ospf area

ipv6 ospf authentication

ipv6 ospf bfd

ipv6 ospf cost

ipv6 ospf database-filter all out


ipv6 mobile home-agent (global configuration)

To enter home agent configuration mode, use the ipv6 mobile home-agent command in global configuration mode. To reset to the default settings of the command, use the no form of this command.

ipv6 mobile home-agent

no ipv6 mobile home-agent

Syntax Description

This command has no arguments or keywords.

Command Default

Mobile IPv6 home agent is disabled.

Command Modes

Global configuration

Command History

Release
Modification

12.3(14)T

This command was introduced.


Usage Guidelines

Use the ipv6 mobile home-agent command to enter home agent configuration mode. Once in home agent configuration mode, you can configure binding parameters using the binding command. Once an interface is configured to provide the home-agent service, the ipv6 mobile home-agent global configuration command automatically appears in the global configuration.

The home agent service needs to be started on each interface using the ipv6 mobile home-agent command in interface configuration mode. The ipv6 mobile home-agent command in global configuration mode does not start home agent service on an interface.

Examples

In the following example, the user enters home agent configuration mode:

Router(config)# ipv6 mobile home-agent
Router(config-ha)#

Related Commands

Command
Description

binding

Configures binding options for the Mobile IPv6 home agent feature in home agent configuration mode.

ipv6 mobile home-agent (interface configuration)

Initializes and starts the Mobile IPv6 home agent on a specific interface.

show ipv6 mobile globals

Displays global Mobile IPv6 parameters.


ipv6 mobile home-agent (interface configuration)

To initialize and start the Mobile IPv6 home agent on a specific interface, use the ipv6 mobile home-agent command in interface configuration mode. To discard bindings and any interface parameter settings, and to terminate home agent operation on a specific interface, use the no form of this command.

ipv6 mobile home-agent [preference preference-value]

no ipv6 mobile home-agent

Syntax Description

preference preference-value

(Optional) Configures the Mobile IPv6 home agent preference value on a specified interface. The preference-value argument is an integer to be configured for preference in the home agent information option. The range is from 0 to 65535. The default preference value is 0.


Command Default

Mobile IPv6 home agent is disabled.
The default preference value is 0.

Command Modes

Interface configuration

Command History

Release
Modification

12.3(14)T

This command was introduced.


Usage Guidelines

Before you enable the ipv6 mobile home-agent (interface configuration) command on an interface, you should configure common parameters using the binding command. Once an interface is configured to run the home agent feature, the ipv6 mobile home-agent command in global configuration mode automatically appears in the global configuration.

Once enabled, the ipv6 mobile home-agent (interface configuration) command cannot be disabled if there is a home agent configured on at least one of the interfaces. If there is no home agent service on any interfaces, the no form of the command disables home agent capability from the router.

To configure the home agent preference value, use the optional preference preference-value keyword and argument. A preference value is a 16-bit signed integer used by the home agent sending a router advertisement. The preference value orders the addresses returned to the mobile node in the home agent addresses field of a home agent address discovery reply message. The higher the preference value, the more preferable is the home agent.

If a preference value is not included in a router advertisement, the default value is 0. Values greater than 0 indicate a home agent more preferable than this default value.

Examples

In the following example, the user initializes and starts Mobile IPv6 agent on Ethernet interface 2:

Router(config)# interface Ethernet 2

Router(config-if)# ipv6 mobile home-agent

In the following example, the home agent preference value is set to 10:

Router(config-if)# ipv6 mobile home-agent preference 10

Related Commands

Command
Description

binding

Configures binding options for the Mobile IPv6 home agent feature in home agent configuration mode.

ipv6 mobile home-agent (global configuration)

Enters home agent configuration mode.

show ipv6 mobile globals

Displays global Mobile IPv6 parameters.


ipv6 mobile router

To enable IPv6 network mobility (NEMO) functionality on a router and place the router in IPv6 mobile router configuration mode, use the ipv6 mobile router command in global configuration mode. To disable NEMO functionality on the router, use the no form of the command.

ipv6 mobile router

no ipv6 mobile router

Syntax Description

This command has no arguments or keywords.

Command Default

NEMO functionality is not enabled.

Command Modes

Global configuration (config)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Usage Guidelines

The mobile router is a router that operates as a mobile node. The mobile router can roam from its home network and still provide connectivity for devices on its networks. The mobile networks are locally attached to the router.

Examples

In the following example, the mobile router is enabled:

Router(config)# ipv6 mobile router

ipv6 mobile router-service roam

To enable the IPv6 mobile router interface to roam, use the ipv6 mobile router-service roam command in interface configuration mode. To disable roaming, use the no form if this command.

ipv6 mobile router-service roam [bandwidth-efficient | cost-efficient | optimistic | semi-optimistic | priority value]

no ipv6 mobile router-service roam

Syntax Description

bandwidth-efficient

(Optional) Enables the mobile router to use the largest configured lifetime value.

cost-efficient

(Optional) Prevents a binding update unless a dialup link is up and a valid care-of address is available.

optimistic

(Optional) Allows the mobile router to bypass the duplicate address detection (DAD) function on the care-of address and on the link-local address.

semi-optimistic

(Optional) Allows the mobile router to bypass the DAD function on the care-of address.

priority value

(Optional) Priority value that is compared among multiple configured interfaces to select the interface in which to send the registration request. When multiple interfaces have highest priority, the highest bandwidth is the preferred choice. When multiple interfaces have the same bandwidth, the interface with the highest IPv6 address is preferred. The range is from 0 to 255; the default is 100. Higher values equate to a higher priority.


Command Default

Roaming is not enabled.

Command Modes

Interface configuration (config-if)

Command History

Release
Modification

12.4(20)T

This command was introduced.


Usage Guidelines

The mobile router discovers home agents and foreign agents by receiving agent advertisements.

The bandwidth-efficient keyword enables the mobile router to use the largest configured lifetime value, even when the home agent recommends a shorter lifetime in a binding refresh advice message. This option can be used when the bandwidth is expensive.

Examples

The following example shows how to enable roaming for the IPv6 mobile router interface:

Router(config-if)# ipv6 mobile router-service roam

Related Commands

Command
Description

show ipv6 mobile router

Displays configuration information and monitoring statistics about the IPv6 mobile router.


ipv6 mtu

To set the maximum transmission unit (MTU) size of IPv6 packets sent on an interface, use the ipv6 mtu command in interface configuration mode. To restore the default MTU size, use the no form of this command.

ipv6 mtu bytes

no ipv6 mtu bytes

Syntax Description

bytes

MTU (in bytes).


Command Default

The default value depends on the interface medium, but the minimum for any interface is 1280 bytes.

Command Modes

Interface configuration

Command History

Release
Modification

12.2(2)T

This command was introduced.

12.0(21)ST

This command was integrated into Cisco IOS Release 12.0(21)ST.

12.0(22)S

This command was integrated into Cisco IOS Release 12.0(22)S.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(25)SG

This command was integrated into Cisco IOS Release 12.2(25)SG.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

12.2(33)SXH

This command was integrated into Cisco IOS Release 12.2(33)SXH.


Usage Guidelines

If a nondefault value is configured for an interface, an MTU option is included in router advertisements.

IPv6 routers do not fragment forwarded IPv6 packets. Traffic originating from IPv6 routers may be fragmented.

All devices on a physical medium must have the same protocol MTU in order to operate.

In addition to the "IPv6 MTU value" (set by using the ipv6 mtu command), interfaces also have a nonprotocol specific "MTU value," which is set by using the mtu interface configuration command.


Note The "MTU value" configured by using the mtu interface configuration command must not be less than 1280 bytes.


Examples

The following example sets the maximum IPv6 packet size for serial interface 0/1 to 2000 bytes:

Router(config)# interface serial 0/1
Router(config-if)# ipv6 mtu 2000

Related Commands

Command
Description

ipv6 tcp adjust-mss

Adjusts the maximum segment size (MSS) value of TCP synchronize/start (SYN) packets going through a router.

show ipv6 interface

Displays the usability status of interfaces configured for IPv6.


ipv6 multicast aaa account receive

To enable authentication, authorization, and accounting (AAA) accounting on specified groups or channels, use the ipv6 multicast aaa account receive command in interface configuration mode. To disable AAA accounting, use the no form of this command.

ipv6 multicast aaa account receive access-list-name [throttle throttle-number]

no ipv6 multicast aaa account receive

Syntax Description

access-list-name

Access list to specify which groups or channels are to have AAA accounting enabled.

throttle

(Optional) Limits the number of records sent during channel surfing. No record is sent if a channel is viewed for less than a specified, configurable period of time.

throttle-number

(Optional) Throttle or surfing interval, in seconds.


Command Default

No AAA accounting is performed on any groups or channels.

Command Modes

Interface configuration

Command History

Release
Modification

12.4(4)T

This command was introduced.


Usage Guidelines


Note Including information about IPv6 addresses in accounting and authorization records transmitted between the router and the RADIUS or TACACS+ server is supported. However, there is no support for using IPv6 to communicate with that server. The server must have an IPv4 address.


Use the ipv6 multicast aaa account receive command to enable AAA accounting on specific groups or channels and to set throttle interval limits on records sent during channel surfing.

Examples

The following example enables AAA accounting using an access list named list1:

Router(config-if)# ipv6 multicast aaa account receive list1

Related Commands

Command
Description

aaa accounting multicast default

Enables AAA accounting of IPv6 multicast services for billing or security purposes when you use RADIUS.


ipv6 multicast boundary scope

To configure a multicast boundary on the interface for a specified scope, use the ipv6 multicast boundary scope command in interface configuration mode. To disable this feature, use the no form of this command.

ipv6 multicast boundary scope scope-value

no ipv6 multicast boundary scope scope-value

Syntax Description

scope-value

The scope value can be one of the following:

Link-local address

Subnet-local address

Admin-local address

Site-local address

Organization-local

Virtual Private Network (VPN)

Scope number, which is from 2 through 15


Command Default

Multicast boundary is not configured on the interface.

Command Modes

Interface configuration

Command History

Release
Modification

12.3(14)T

This command was introduced.

12.2(18)SXE

This command was integrated into Cisco IOS Release 12.2(18)SXE.


Usage Guidelines

If the ipv6 multicast boundary scope command is configured for a particular scope on the Reverse Path Forwarding (RPF) interface, then packets are not accepted on that interface for groups that belong to scopes that are less than or equal to the one configured. Protocol Independent Multicast (PIM) join/prune messages for those groups are not sent on the RPF interface. The effect of the scope can be verified by checking the output of the show ipv6 mrib route command. The output will not show the RPF interface with Accept flag.

If the ipv6 multicast boundary scope command is configured for a particular scope on an interface in the outgoing interface list, packets are not forwarded for groups that belong to scopes that are less than or equal to the one configured.

Protocol Independent Multicast (PIM) join/prune (J/P) messages are not processed when received on the interface for groups that belong to scopes that are less than or equal to the one configured. Registers and bootstrap router (BSR) messages are also filtered on the boundary.

Examples

The following example sets the scope value to be a scope number of 6:

ipv6 multicast boundary scope 6

Related Commands

Command
Description

ipv6 pim bsr candidate bsr

Configures a router to be a candidate BSR.

ipv6 pim bsr candidate rp

Configures the candidate RP to send PIM RP advertisements to the BSR.

show ipv6 mrib route

Displays the MRIB route information.


ipv6 multicast group-range

To disable multicast protocol actions and traffic forwarding for unauthorized groups or channels on all the interfaces in a router, use the ipv6 multicast group-range command in global configuration mode. To return to the command's default settings, use the no form of this command.

ipv6 multicast group-range [access-list-name]

no ipv6 multicast group-range [access-list-name]

Syntax Description

access-list-name

(Optional) Name of an access list that contains authenticated subscriber groups and authorized channels that can send traffic to the router.


Command Default

Multicast is enabled for groups and channels permitted by a specified access list and disabled for groups and channels denied by a specified access list.

Command Modes

Global configuration

Command History

Release
Modification

12.4(4)T

This command was introduced.


Usage Guidelines

The ipv6 multicast group-range command provides an access control mechanism for IPv6 multicast edge routing. The access list specified by the access-list-name argument specifies the multicast groups or channels that are to be permitted or denied. For denied groups or channels, the router ignores protocol traffic and actions (for example, no Multicast Listener Discovery (MLD) states are created, no mroute states are created, no Protocol Independent Multicast (PIM) joins are forwarded), and drops data traffic on all interfaces in the system, thus disabling multicast for denied groups or channels.

Using the ipv6 multicast group-range global configuration command is equivalent to configuring the MLD access control and multicast boundary commands on all interfaces in the system. However, the ipv6 multicast group-range command can be overridden on selected interfaces by using the following interface configuration commands:

ipv6 mld access-group access-list-name

ipv6 multicast boundary scope scope-value

Because the no ipv6 multicast group-range command returns the router to its default configuration, existing multicast deployments are not broken.

Examples

The following example ensures that the router disables multicast for groups or channels denied by an access list named list2:

Router(config)# ipv6 multicast group-range list2

The following example shows that the command in the previous example is overridden on an interface specified by int2:

Router(config)# interface int2
Router(config-if)# ipv6 mld access-group int-list2

On int2, MLD states are created for groups or channels permitted by int-list2 but are not created for groups or channels denied by int-list2. On all other interfaces, the access-list named list2 is used for access control.

In this example, list2 can be specified to deny all or most multicast groups or channels, and int-list2 can be specified to permit authorized groups or channels only for interface int2.

Related Commands

Command
Description

ipv6 mld access-group

Performs IPv6 multicast receiver access control.

ipv6 multicast boundary scope

Configures a multicast boundary on the interface for a specified scope.


ipv6 multicast multipath

To enable load splitting of IPv6 multicast traffic across multiple equal-cost paths, use the ipv6 multicast multipath command in global configuration mode. To disable this function, use the no form of this command.

ipv6 multicast multipath

no ipv6 multicast multipath

Syntax Description

This command has no arguments or keywords.

Command Default

This command is enabled.

Command Modes

Global configuration

Command History

Release
Modification

12.3(7)T

This command was introduced.

12.2(25)S

This command was integrated into Cisco IOS Release 12.2(25)S.


Usage Guidelines

The ipv6 multicast multipath command is enabled by default. In the default scenario, the reverse path forwarding (RPF) neighbor is selected randomly from the available equal-cost RPF neighbors, resulting in the load splitting of traffic from different sources among the available equal cost paths. All traffic from a single source is still received from a single neighbor.

When the no ipv6 multicast multipath command is configured, the RPF neighbor with the highest IPv6 address is chosen for all sources with the same prefix, even when there are other available equal-cost paths.

Because the ipv6 multicast multipath command changes the way an RPF neighbor is selected, it must be configured consistently on all routers in a redundant topology to avoid looping.

Examples

The following example enables load splitting of IPv6 traffic:

Router(config)# ipv6 multicast multipath

Related Commands

Command
Description

show ipv6 rpf

Checks RPF information for a given unicast host address and prefix.


ipv6 multicast-routing

To enable multicast routing using Protocol Independent Multicast (PIM) and Multicast Listener Discovery (MLD) on all IPv6-enabled interfaces of the router and to enable multicast forwarding, use the ipv6 multicast-routing command in global configuration mode. To stop multicast routing and forwarding, use the no form of this command.

ipv6 multicast-routing

no ipv6 multicast-routing

Syntax Description

This command has no arguments or keywords.

Command Default

Multicast routing is not enabled.

Command Modes

Global configuration

Command History

Release
Modification

12.3(2)T

This command was introduced.

12.2(18)S

This command was integrated into Cisco IOS Release 12.2(18)S.

12.0(26)S

This command was integrated into Cisco IOS Release 12.0(26)S.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(25)SG

This command was integrated into Cisco IOS Release 12.2(25)SG.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.

12.2(33)SXH

This command was integrated into Cisco IOS Release 12.2(33)SXH.


Usage Guidelines

Enabling IPv6 multicast on all interfaces also includes enabling PIM and MLD protocol processing on the interfaces. Users may configure specific interfaces before multicast is enabled, so that they can then disable PIM and MLD protocol processing on interfaces, as needed.

Examples

The following example enables multicast routing and turns on PIM and MLD on all interfaces:

ipv6 multicast-routing

Related Commands

Command
Description

ipv6 pim rp-address

Configures the address of a PIM RP for a particular group range.

no ipv6 pim

Turns off IPv6 PIM on a specified interface.

no ipv6 mld router

Disables MLD router-side processing on a specified interface.


ipv6 multicast rpf use-bgp

To enable multicast reverse path forwarding (RPF) check to use Border Gateway Protocol (BGP) unicast routes in the routing information base (RIB), use the ipv6 multicast rpf use-bgp command in global configuration mode. To disable this function, use the no form of this command.

ipv6 multicast rpf use-bgp

no ipv6 multicast rpf use-bgp

Syntax Description

This command has no arguments or keywords.

Command Default

Multicast RPF check does not use BGP unicast routes.

Command Modes

Global configuration

Command History

Release
Modification

12.4(2)T

This command was introduced.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.

12.2(33)SRA

This command was integrated into Cisco IOS Release 12.2(33)SRA.


Usage Guidelines

When configured, multicast RPF check uses BGP unicast routes in the RIB. By default, this is not done.

Examples

The following example enables the multicast RPF check function:

ipv6 multicast rpf use-bgp

ipv6 nat

To designate that traffic originating from or destined for the interface is subject to Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat command in interface configuration mode. To prevent the interface from being able to translate, use the no form of this command.

ipv6 nat

no ipv6 nat

Syntax Description

This command has no keywords or arguments.

Command Default

Traffic leaving or arriving at this interface is not subject to NAT-PT.

Command Modes

Interface configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

The ipv6 nat command is usually specified on at least one IPv4 interface and one IPv6 interface at the networking device where you intend to use NAT-PT.

Examples

The following example assigns the IPv4 address 192.168.30.1 to Fast Ethernet interface 1/0 and the IPv6 address 2001:0DB8:0:1::1 to Fast Ethernet interface 2/0. IPv6 routing is globally enabled and both interfaces are configured to run IPv6 and enable NAT-PT translations.

interface fastethernet 1/0
 ip address 192.168.30.1 255.255.255.0
 ipv6 nat
!
interface fastethernet 2/0
 ipv6 address 2001:0DB8:0:1::1/64
 ipv6 nat

Related Commands

Command
Description

ipv6 address link-local

Configures an IPv6 link-local address for an interface and enables IPv6 processing on the interface.

ipv6 address eui-64

Configures an IPv6 address for an interface and enables IPv6 processing on an interface using an EUI-64 interface ID in the low-order 64 bits of the address.

show ipv6 interface

Displays the usability status of interfaces configured for IPv6.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat max-entries

To specify the maximum number of Network Address Translation—Protocol Translation (NAT-PT) translation entries stored by the router, use the ipv6 nat max-entries command in global configuration mode. To restore the default number of NAT-PT entries, use the no form of this command.

ipv6 nat max-entries number

no ipv6 nat max-entries

Syntax Description

number

(Optional) Specifies the maximum number (1-2147483647) of NAT-PT translation entries. Default is unlimited.


Command Default

Unlimited number of NAT-PT entries.

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

Use the ipv6 nat max-entries command to set the maximum number of NAT-PT translation entries stored by the router when the router memory is limited, or the actual number of translations is important.

Examples

The following example sets the maximum number of NAT-PT translation entries to 1000:

ipv6 nat max-entries 1000

Related Commands

Command
Description

clear ipv6 nat translation

Clears dynamic NAT-PT translations from the translation table.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat prefix

To assign an IPv6 prefix where matching IPv6 packets will be translated using Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat prefix command in global configuration or interface configuration mode. To prevent the IPv6 prefix from being used by NAT-PT, use the no form of this command.

ipv6 nat prefix ipv6-prefix/prefix-length

no ipv6 nat prefix ipv6-prefix/prefix-length

Syntax Description

ipv6-prefix

The IPv6 network used as the NAT-PT prefix.

This argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons.

/prefix-length

The length of the IPv6 prefix. A decimal value that indicates how many of the high-order contiguous bits of the address comprise the prefix (the network portion of the address). The only prefix length supported is 96. A slash mark must precede the decimal value.


Command Default

No IPv6 prefixes are used by NAT-PT.

Command Modes

Global configuration
Interface configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

The ipv6 nat prefix command is used to specify an IPv6 address prefix against which the destination prefix in an IPv6 packet is matched. If the match is successful, NAT-PT will translate the IPv6 packet to an IPv4 packet using the configured mapping rules.

Use the ipv6 nat prefix command in global configuration mode to assign a global NAT-PTNAT-PT prefix, or in interface configuration mode to assign a different NAT-PT prefix for each interface. Using a different NAT-PT prefix on several interfaces allows the NAT-PT router to support an IPv6 network with multiple exit points to IPv4 networks.

Examples

The following example assigns the IPv6 prefix 2001:0DB8:1::/96 as the global NAT-PT prefix:

ipv6 nat prefix 2001:0DB8:1::/96

The following example assigns the IPv6 prefix 2001:0DB8:2::/96 as the NAT-PT prefix for the Fast Ethernet interface 1/0, and the IPv6 prefix 2001:0DB8:4::/96 as the NAT-PT prefix for the Fast Ethernet interface 2/0:

interface fastethernet 1/0
 ipv6 address 2001:0DB8:2:1::1/64
 ipv6 nat prefix 2001:0DB8:2::/96
!
interface fastethernet 2/0
 ipv6 address 2001:0DB8:4:1::1/64
 ipv6 nat prefix 2001:0DB8:4::/96

Related Commands

Command
Description

ipv6 address link-local

Configures an IPv6 link-local address for an interface and enables IPv6 processing on the interface.

ipv6 address eui-64

Configures an IPv6 address for an interface and enables IPv6 processing on an interface using an EUI-64 interface ID in the low-order 64 bits of the address.

show ipv6 interface

Displays the usability status of interfaces configured for IPv6.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat prefix v4-mapped

To enable customers to send traffic from their IPv6 network to an IPv4 network without configuring IPv6 destination address mapping, use the ipv6 nat prefix v4-mapped command in global configuration or interface configuration mode. To disable this feature, use the no form of this command.

ipv6 nat prefix ipv6-prefix v4-mapped {access-list-name | ipv6-prefix}

no ipv6 nat prefix ipv6-prefix v4-mapped {access-list-name | ipv6-prefix}

Syntax Description

ipv6-prefix

IPv6 prefix for Network Address Translation—Protocol Translation (NAT-PT).

access-list-name

Name of an IPv6 access list. Names cannot contain a space or quotation mark, or begin with a numeric.


Command Default

This command is not enabled.

Command Modes

Global configuration
Interface configuration

Command History

Release
Modification

12.3(14)T

This command was introduced.


Usage Guidelines

The IPv6 target address of a packet arriving at an interface is checked to discover if it has a NAT-PT prefix that was configured with the ipv6 nat prefix v4-mapped command. If the prefix does match, then an access-list check is performed to discover if the source address matches the access list or prefix list. If the prefix does not match, the packet is dropped.

If the prefix matches, source address translation is performed. If a rule has been configured for the source address translation, the last 32 bits of the destination IPv6 address is used as the IPv4 destination and a flow entry is created.

Examples

In the following example, the access list permits any IPv6 source address with the prefix 2001::/96 to go to the destination with a 2000::/96 prefix. The destination is then translated to the last 32 bit of its IPv6 address; for example: source address = 2001::1, destination address = 2000::192.168.1.1. The destination then becomes 192.168.1.1 in the IPv4 network:

ipv6 nat prefix 2000::/96 v4-mapped v4map_acl

ipv6 access-list v4map_acl 
 permit ipv6 2001::/96 2000::/96 

ipv6 nat translation

To change the amount of time after which Network Address Translation—Protocol Translation (NAT-PT) translations time out, use the ipv6 nat translation command in global configuration mode. To disable the timeout, use the no form of this command.

ipv6 nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout | icmp-timeout | syn-timeout} {seconds | never}

no ipv6 nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout | icmp-timeout | syn-timeout}

Syntax Description

timeout

Specifies that the timeout value applies to dynamic translations. Default is 86400 seconds (24 hours).

udp-timeout

Specifies that the timeout value applies to the User Datagram Protocol (UDP) port. Default is 300 seconds (5 minutes).

dns-timeout

Specifies that the timeout value applies to connections to the Domain Naming System (DNS). Default is 60 seconds.

tcp-timeout

Specifies that the timeout value applies to the TCP port. Default is 86400 seconds (24 hours).

finrst-timeout

Specifies that the timeout value applies to Finish and Reset TCP packets, which terminate a connection. Default is 60 seconds.

icmp-timeout

Specifies the timeout value for Internet Control Message Protocol (ICMP) flows. Default is 60 seconds.

syn-timeout

Specifies that the timeout value applies when a TCP SYN (request to synchronize sequence numbers used when opening a connection) flag is received but the flag is not followed by data belonging to the same TCP session.

seconds

Number of seconds after which the specified translation timer expires. The default is 0.

never

Specifies that the dynamic translation timer never expires.


Command Default

timeout: 86400 seconds (24 hours)
udp-timeout: 300 seconds (5 minutes)
dns-timeout: 60 seconds (1 minute)
tcp-timeout: 86400 seconds (24 hours)
finrst-timeout: 60 seconds (1 minute)
icmp-timeout: 60 seconds (1 minute)

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

Dynamic translations time out after a period of time without any translations. The default timeout period is 24 hours. When port translation is configured, there is finer control over translation entry timeouts because each entry contains more context about the traffic that is using it. Non-DNS UDP translations time out after 5 minutes, and DNS times out in 1 minute. TCP translations time out in 24 hours, unless an RST or FIN flag is seen on the stream, in which case they will time out in 1 minute.

Examples

The following example causes UDP port translation entries to time out after 10 minutes:

ipv6 nat translation udp-timeout 600

Related Commands

Command
Description

clear ipv6 nat translation

Clears dynamic NAT-PT translations from the translation table.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat v4v6 pool

To define a pool of IPv6 addresses for Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v4v6 pool command in global configuration mode. To remove one or more addresses from the pool, use the no form of this command.

ipv6 nat v4v6 pool name start-ipv6 end-ipv6 prefix-length prefix-length

no ipv6 nat v4v6 pool name start-ipv6 end-ipv6 prefix-length prefix-length

Syntax Description

name

Name of the pool.

start-ipv6

Starting IPv6 address that defines the range of IPv6 addresses in the address pool.

end-ipv6

Ending IPv6 address that defines the range of IPv6 addresses in the address pool.

prefix-length prefix-length

Number that indicates how many bits of the address indicate the network. Specify the subnet of the network to which the pool addresses belong.


Command Default

No pool of addresses is defined.

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

This command defines a pool of IPv6 addresses using start address, end address, and prefix length. The pool is used when NAT-PT needs a dynamic mapping of an IPv6 address to translate an IPv4 address.

Examples

The following example configures a dynamic NAT-PT mapping to translate IPv4 addresses to IPv6 addresses using a pool of IPv6 addresses named v6pool. The packets to be translated by NAT-PT are filtered using an access list named pt-list2. One static NAT-PT mapping is configured to access a Domain Naming System (DNS) server. Ethernet interface 3/1 is an IPv6-only host and Ethernet interface 3/3 is an IPv4-only host.

interface Ethernet3/1 
 ipv6 address 2001:0DB8:AABB:1::9/64 
 ipv6 enable 
 ipv6 nat 
! 
interface Ethernet3/3 
 ip address 192.168.30.9 255.255.255.0 
 ipv6 nat 
! 
ipv6 nat v4v6 source list pt-list2 pool v6pool 
ipv6 nat v4v6 pool v6pool 2001:0DB8:EEFF::1 2001:0DB8:EEFF::2 prefix-length 128 
ipv6 nat v6v4 source 2001:0DB8:AABB:1::1 10.21.8.0 
ipv6 nat prefix 2001:0DB8:EEFF::/96 
! 
access-list pt-list2 permit 192.168.30.0 0.0.0.255

Related Commands

Command
Description

clear ipv6 nat translations

Clears dynamic NAT-PT translations from the translation table.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat v4v6 source

To configure IPv4 to IPv6 address translation using Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v4v6 source command in global configuration mode. To remove the static translation or remove the dynamic association to a pool, use the no form of this command.

ipv6 nat v4v6 source {list {access-list-number | name} pool name | ipv4-address ipv6-address}

no ipv6 nat v4v6 source {list {access-list-number | name} pool name | ipv4-address ipv6-address}

Syntax Description

list access-list-number

Standard IP access list number. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.

list name

Name of a standard IP access list. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.

pool name

Name of the pool from which global IP addresses are allocated dynamically.

ipv4-address

Sets up a single static translation. This argument establishes the local IP address assigned to a host on the inside network. The address could be randomly chosen, allocated from RFC 1918, or obsolete.

ipv6-address

Sets up a single static translation. This argument establishes the globally unique IP address of an inside host as it appears to the outside world.


Command Default

No NAT-PT translation of IPv4 to IPv6 addresses occurs.

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

This command has two forms: dynamic and static address translation. The form with an IPv6 access list establishes dynamic translation. Packets from IPv4 addresses that match the standard access list are translated using IPv6 addresses allocated from the pool named with the ipv6 nat v4v6 pool command. The access list is used to specify which traffic is to be translated.

Alternatively, the syntax form using the ipv4-address and ipv6-address arguments establishes a single static translation.

Examples

The following example configures a dynamic NAT-PT mapping to translate IPv4 addresses to IPv6 addresses using a pool of IPv6 addresses named v6pool. The packets to be translated by NAT-PT are filtered using an access list named pt-list2. Ethernet interface 3/1 is an IPv6-only host and Ethernet interface 3/3 is an IPv4-only host.

interface Ethernet3/1 
 ipv6 address 2001:0DB8:AABB:1::9/64 
 ipv6 enable 
 ipv6 nat 
! 
interface Ethernet3/3 
 ip address 192.168.30.9 255.255.255.0 
 ipv6 nat 
! 
ipv6 nat v4v6 source list pt-list2 pool v6pool 
ipv6 nat v4v6 pool v6pool 2001:0DB8:EEFF::1 2001:0DB8:EEFF::2 prefix-length 128 
ipv6 nat prefix 3ffe:c00:yyyy::/96 
! 
access-list pt-list2 permit 192.168.30.0 0.0.0.255

The following example shows a static translation where the IPv4 address 192.168.30.1 is translated into the IPv6 address 2001:0DB8:EEFF::2:

ipv6 nat v4v6 source 192.168.30.1 2001:0DB8:EEFF::2

Related Commands

Command
Description

clear ipv6 nat translation

Clears dynamic NAT-PT translations from the translation state table.

ipv6 nat v4v6 pool

Defines a pool of IPv6 addresses for NAT-PT.

ipv6 nat v6v4 source

Enables NAT-PT for an IPv6 source address.

show ipv6 nat translations

Displays active NAT-PT translations.


ipv6 nat v6v4 pool

To define a pool of IPv4 addresses for Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v6v4 pool global configuration command. To remove one or more addresses from the pool, use the no form of this command.

ipv6 nat v6v4 pool name start-ipv4 end-ipv4 prefix-length prefix-length

no ipv6 nat v6v4 pool name start-ipv4 end-ipv4 prefix-length prefix-length

Syntax Description

name

Name of the pool.

start-ipv4

Starting IPv4 address that defines the range of IPv4 addresses in the address pool.

end-ipv4

Ending IPv4 address that defines the range of IPv4 addresses in the address pool.

prefix-length prefix-length

Number that indicates how many bits of the address indicate the network. Specify the subnet of the network to which the pool addresses belong.


Command Default

No pool of addresses is defined.

Command Modes

Global configuration

Command History

Release
Modification

12.2(13)T

This command was introduced.


Usage Guidelines

This command defines a pool of IPv4 addresses using start address, end address, and prefix length.