Table Of Contents
ipv6 mobile home-agent (global configuration)
ipv6 mobile home-agent (interface configuration)
ipv6 mobile router
ipv6 mobile router-service roam
ipv6 mtu
ipv6 multicast aaa account receive
ipv6 multicast boundary scope
ipv6 multicast group-range
ipv6 multicast multipath
ipv6 multicast-routing
ipv6 multicast rpf use-bgp
ipv6 nat
ipv6 nat max-entries
ipv6 nat prefix
ipv6 nat prefix v4-mapped
ipv6 nat translation
ipv6 nat v4v6 pool
ipv6 nat v4v6 source
ipv6 nat v6v4 pool
ipv6 nat v6v4 source
ipv6 nd advertisement-interval
ipv6 nd dad attempts
ipv6 nd managed-config-flag
ipv6 nd ns-interval
ipv6 nd other-config-flag
ipv6 nd prefix
ipv6 nd prefix framed-ipv6-prefix
ipv6 nd prefix-advertisement
ipv6 nd ra interval
ipv6 nd ra-interval
ipv6 nd ra lifetime
ipv6 nd ra-lifetime
ipv6 nd ra suppress
ipv6 nd reachable-time
ipv6 nd router-preference
ipv6 nd suppress-ra
ipv6 neighbor
ipv6 next-hop-self eigrp
ipv6 nhrp authentication
ipv6 nhrp holdtime
ipv6 nhrp interest
ipv6 nhrp map
ipv6 nhrp map multicast
ipv6 nhrp map multicast dynamic
ipv6 nhrp max-send
ipv6 nhrp network-id
ipv6 nhrp nhs
ipv6 nhrp record
ipv6 nhrp redirect
ipv6 nhrp registration
ipv6 nhrp responder
ipv6 nhrp server-only
ipv6 nhrp shortcut
ipv6 nhrp trigger-svc
ipv6 nhrp use
ipv6 ospf area
ipv6 ospf authentication
ipv6 ospf bfd
ipv6 ospf cost
ipv6 ospf database-filter all out
ipv6 mobile home-agent (global configuration)
To enter home agent configuration mode, use the ipv6 mobile home-agent command in global configuration mode. To reset to the default settings of the command, use the no form of this command.
ipv6 mobile home-agent
no ipv6 mobile home-agent
Syntax Description
This command has no arguments or keywords.
Command Default
Mobile IPv6 home agent is disabled.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.3(14)T
|
This command was introduced.
|
Usage Guidelines
Use the ipv6 mobile home-agent command to enter home agent configuration mode. Once in home agent configuration mode, you can configure binding parameters using the binding command. Once an interface is configured to provide the home-agent service, the ipv6 mobile home-agent global configuration command automatically appears in the global configuration.
The home agent service needs to be started on each interface using the ipv6 mobile home-agent command in interface configuration mode. The ipv6 mobile home-agent command in global configuration mode does not start home agent service on an interface.
Examples
In the following example, the user enters home agent configuration mode:
Router(config)# ipv6 mobile home-agent
Related Commands
Command
|
Description
|
binding
|
Configures binding options for the Mobile IPv6 home agent feature in home agent configuration mode.
|
ipv6 mobile home-agent (interface configuration)
|
Initializes and starts the Mobile IPv6 home agent on a specific interface.
|
show ipv6 mobile globals
|
Displays global Mobile IPv6 parameters.
|
ipv6 mobile home-agent (interface configuration)
To initialize and start the Mobile IPv6 home agent on a specific interface, use the ipv6 mobile home-agent command in interface configuration mode. To discard bindings and any interface parameter settings, and to terminate home agent operation on a specific interface, use the no form of this command.
ipv6 mobile home-agent [preference preference-value]
no ipv6 mobile home-agent
Syntax Description
preference preference-value
|
(Optional) Configures the Mobile IPv6 home agent preference value on a specified interface. The preference-value argument is an integer to be configured for preference in the home agent information option. The range is from 0 to 65535. The default preference value is 0.
|
Command Default
Mobile IPv6 home agent is disabled.
The default preference value is 0.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.3(14)T
|
This command was introduced.
|
Usage Guidelines
Before you enable the ipv6 mobile home-agent (interface configuration) command on an interface, you should configure common parameters using the binding command. Once an interface is configured to run the home agent feature, the ipv6 mobile home-agent command in global configuration mode automatically appears in the global configuration.
Once enabled, the ipv6 mobile home-agent (interface configuration) command cannot be disabled if there is a home agent configured on at least one of the interfaces. If there is no home agent service on any interfaces, the no form of the command disables home agent capability from the router.
To configure the home agent preference value, use the optional preference preference-value keyword and argument. A preference value is a 16-bit signed integer used by the home agent sending a router advertisement. The preference value orders the addresses returned to the mobile node in the home agent addresses field of a home agent address discovery reply message. The higher the preference value, the more preferable is the home agent.
If a preference value is not included in a router advertisement, the default value is 0. Values greater than 0 indicate a home agent more preferable than this default value.
Examples
In the following example, the user initializes and starts Mobile IPv6 agent on Ethernet interface 2:
Router(config)# interface Ethernet 2
Router(config-if)# ipv6 mobile home-agent
In the following example, the home agent preference value is set to 10:
Router(config-if)# ipv6 mobile home-agent preference 10
Related Commands
Command
|
Description
|
binding
|
Configures binding options for the Mobile IPv6 home agent feature in home agent configuration mode.
|
ipv6 mobile home-agent (global configuration)
|
Enters home agent configuration mode.
|
show ipv6 mobile globals
|
Displays global Mobile IPv6 parameters.
|
ipv6 mobile router
To enable IPv6 network mobility (NEMO) functionality on a router and place the router in IPv6 mobile router configuration mode, use the ipv6 mobile router command in global configuration mode. To disable NEMO functionality on the router, use the no form of the command.
ipv6 mobile router
no ipv6 mobile router
Syntax Description
This command has no arguments or keywords.
Command Default
NEMO functionality is not enabled.
Command Modes
Global configuration (config)
Command History
Release
|
Modification
|
12.4(20)T
|
This command was introduced.
|
Usage Guidelines
The mobile router is a router that operates as a mobile node. The mobile router can roam from its home network and still provide connectivity for devices on its networks. The mobile networks are locally attached to the router.
Examples
In the following example, the mobile router is enabled:
Router(config)# ipv6 mobile router
ipv6 mobile router-service roam
To enable the IPv6 mobile router interface to roam, use the ipv6 mobile router-service roam command in interface configuration mode. To disable roaming, use the no form if this command.
ipv6 mobile router-service roam [bandwidth-efficient | cost-efficient | optimistic |
semi-optimistic | priority value]
no ipv6 mobile router-service roam
Syntax Description
bandwidth-efficient
|
(Optional) Enables the mobile router to use the largest configured lifetime value.
|
cost-efficient
|
(Optional) Prevents a binding update unless a dialup link is up and a valid care-of address is available.
|
optimistic
|
(Optional) Allows the mobile router to bypass the duplicate address detection (DAD) function on the care-of address and on the link-local address.
|
semi-optimistic
|
(Optional) Allows the mobile router to bypass the DAD function on the care-of address.
|
priority value
|
(Optional) Priority value that is compared among multiple configured interfaces to select the interface in which to send the registration request. When multiple interfaces have highest priority, the highest bandwidth is the preferred choice. When multiple interfaces have the same bandwidth, the interface with the highest IPv6 address is preferred. The range is from 0 to 255; the default is 100. Higher values equate to a higher priority.
|
Command Default
Roaming is not enabled.
Command Modes
Interface configuration (config-if)
Command History
Release
|
Modification
|
12.4(20)T
|
This command was introduced.
|
Usage Guidelines
The mobile router discovers home agents and foreign agents by receiving agent advertisements.
The bandwidth-efficient keyword enables the mobile router to use the largest configured lifetime value, even when the home agent recommends a shorter lifetime in a binding refresh advice message. This option can be used when the bandwidth is expensive.
Examples
The following example shows how to enable roaming for the IPv6 mobile router interface:
Router(config-if)# ipv6 mobile router-service roam
Related Commands
Command
|
Description
|
show ipv6 mobile router
|
Displays configuration information and monitoring statistics about the IPv6 mobile router.
|
ipv6 mtu
To set the maximum transmission unit (MTU) size of IPv6 packets sent on an interface, use the ipv6 mtu command in interface configuration mode. To restore the default MTU size, use the no form of this command.
ipv6 mtu bytes
no ipv6 mtu bytes
Syntax Description
Command Default
The default value depends on the interface medium, but the minimum for any interface is 1280 bytes.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.2(2)T
|
This command was introduced.
|
12.0(21)ST
|
This command was integrated into Cisco IOS Release 12.0(21)ST.
|
12.0(22)S
|
This command was integrated into Cisco IOS Release 12.0(22)S.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
12.2(28)SB
|
This command was integrated into Cisco IOS Release 12.2(28)SB.
|
12.2(25)SG
|
This command was integrated into Cisco IOS Release 12.2(25)SG.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2(33)SXH
|
This command was integrated into Cisco IOS Release 12.2(33)SXH.
|
Usage Guidelines
If a nondefault value is configured for an interface, an MTU option is included in router advertisements.
IPv6 routers do not fragment forwarded IPv6 packets. Traffic originating from IPv6 routers may be fragmented.
All devices on a physical medium must have the same protocol MTU in order to operate.
In addition to the "IPv6 MTU value" (set by using the ipv6 mtu command), interfaces also have a nonprotocol specific "MTU value," which is set by using the mtu interface configuration command.
Note
The "MTU value" configured by using the mtu interface configuration command must not be less than 1280 bytes.
Examples
The following example sets the maximum IPv6 packet size for serial interface 0/1 to 2000 bytes:
Router(config)# interface serial 0/1
Router(config-if)# ipv6 mtu 2000
Related Commands
Command
|
Description
|
ipv6 tcp adjust-mss
|
Adjusts the maximum segment size (MSS) value of TCP synchronize/start (SYN) packets going through a router.
|
show ipv6 interface
|
Displays the usability status of interfaces configured for IPv6.
|
ipv6 multicast aaa account receive
To enable authentication, authorization, and accounting (AAA) accounting on specified groups or channels, use the ipv6 multicast aaa account receive command in interface configuration mode. To disable AAA accounting, use the no form of this command.
ipv6 multicast aaa account receive access-list-name [throttle throttle-number]
no ipv6 multicast aaa account receive
Syntax Description
access-list-name
|
Access list to specify which groups or channels are to have AAA accounting enabled.
|
throttle
|
(Optional) Limits the number of records sent during channel surfing. No record is sent if a channel is viewed for less than a specified, configurable period of time.
|
throttle-number
|
(Optional) Throttle or surfing interval, in seconds.
|
Command Default
No AAA accounting is performed on any groups or channels.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.4(4)T
|
This command was introduced.
|
Usage Guidelines
Note
Including information about IPv6 addresses in accounting and authorization records transmitted between the router and the RADIUS or TACACS+ server is supported. However, there is no support for using IPv6 to communicate with that server. The server must have an IPv4 address.
Use the ipv6 multicast aaa account receive command to enable AAA accounting on specific groups or channels and to set throttle interval limits on records sent during channel surfing.
Examples
The following example enables AAA accounting using an access list named list1:
Router(config-if)# ipv6 multicast aaa account receive list1
Related Commands
Command
|
Description
|
aaa accounting multicast default
|
Enables AAA accounting of IPv6 multicast services for billing or security purposes when you use RADIUS.
|
ipv6 multicast boundary scope
To configure a multicast boundary on the interface for a specified scope, use the ipv6 multicast boundary scope command in interface configuration mode. To disable this feature, use the no form of this command.
ipv6 multicast boundary scope scope-value
no ipv6 multicast boundary scope scope-value
Syntax Description
scope-value
|
The scope value can be one of the following:
• Link-local address
• Subnet-local address
• Admin-local address
• Site-local address
• Organization-local
• Virtual Private Network (VPN)
• Scope number, which is from 2 through 15
|
Command Default
Multicast boundary is not configured on the interface.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.3(14)T
|
This command was introduced.
|
12.2(18)SXE
|
This command was integrated into Cisco IOS Release 12.2(18)SXE.
|
Usage Guidelines
If the ipv6 multicast boundary scope command is configured for a particular scope on the Reverse Path Forwarding (RPF) interface, then packets are not accepted on that interface for groups that belong to scopes that are less than or equal to the one configured. Protocol Independent Multicast (PIM) join/prune messages for those groups are not sent on the RPF interface. The effect of the scope can be verified by checking the output of the show ipv6 mrib route command. The output will not show the RPF interface with Accept flag.
If the ipv6 multicast boundary scope command is configured for a particular scope on an interface in the outgoing interface list, packets are not forwarded for groups that belong to scopes that are less than or equal to the one configured.
Protocol Independent Multicast (PIM) join/prune (J/P) messages are not processed when received on the interface for groups that belong to scopes that are less than or equal to the one configured. Registers and bootstrap router (BSR) messages are also filtered on the boundary.
Examples
The following example sets the scope value to be a scope number of 6:
ipv6 multicast boundary scope 6
Related Commands
Command
|
Description
|
ipv6 pim bsr candidate bsr
|
Configures a router to be a candidate BSR.
|
ipv6 pim bsr candidate rp
|
Configures the candidate RP to send PIM RP advertisements to the BSR.
|
show ipv6 mrib route
|
Displays the MRIB route information.
|
ipv6 multicast group-range
To disable multicast protocol actions and traffic forwarding for unauthorized groups or channels on all the interfaces in a router, use the ipv6 multicast group-range command in global configuration mode. To return to the command's default settings, use the no form of this command.
ipv6 multicast group-range [access-list-name]
no ipv6 multicast group-range [access-list-name]
Syntax Description
access-list-name
|
(Optional) Name of an access list that contains authenticated subscriber groups and authorized channels that can send traffic to the router.
|
Command Default
Multicast is enabled for groups and channels permitted by a specified access list and disabled for groups and channels denied by a specified access list.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.4(4)T
|
This command was introduced.
|
Usage Guidelines
The ipv6 multicast group-range command provides an access control mechanism for IPv6 multicast edge routing. The access list specified by the access-list-name argument specifies the multicast groups or channels that are to be permitted or denied. For denied groups or channels, the router ignores protocol traffic and actions (for example, no Multicast Listener Discovery (MLD) states are created, no mroute states are created, no Protocol Independent Multicast (PIM) joins are forwarded), and drops data traffic on all interfaces in the system, thus disabling multicast for denied groups or channels.
Using the ipv6 multicast group-range global configuration command is equivalent to configuring the MLD access control and multicast boundary commands on all interfaces in the system. However, the ipv6 multicast group-range command can be overridden on selected interfaces by using the following interface configuration commands:
•
ipv6 mld access-group access-list-name
•
ipv6 multicast boundary scope scope-value
Because the no ipv6 multicast group-range command returns the router to its default configuration, existing multicast deployments are not broken.
Examples
The following example ensures that the router disables multicast for groups or channels denied by an access list named list2:
Router(config)# ipv6 multicast group-range list2
The following example shows that the command in the previous example is overridden on an interface specified by int2:
Router(config)# interface int2
Router(config-if)# ipv6 mld access-group int-list2
On int2, MLD states are created for groups or channels permitted by int-list2 but are not created for groups or channels denied by int-list2. On all other interfaces, the access-list named list2 is used for access control.
In this example, list2 can be specified to deny all or most multicast groups or channels, and int-list2 can be specified to permit authorized groups or channels only for interface int2.
Related Commands
Command
|
Description
|
ipv6 mld access-group
|
Performs IPv6 multicast receiver access control.
|
ipv6 multicast boundary scope
|
Configures a multicast boundary on the interface for a specified scope.
|
ipv6 multicast multipath
To enable load splitting of IPv6 multicast traffic across multiple equal-cost paths, use the ipv6 multicast multipath command in global configuration mode. To disable this function, use the no form of this command.
ipv6 multicast multipath
no ipv6 multicast multipath
Syntax Description
This command has no arguments or keywords.
Command Default
This command is enabled.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.3(7)T
|
This command was introduced.
|
12.2(25)S
|
This command was integrated into Cisco IOS Release 12.2(25)S.
|
Usage Guidelines
The ipv6 multicast multipath command is enabled by default. In the default scenario, the reverse path forwarding (RPF) neighbor is selected randomly from the available equal-cost RPF neighbors, resulting in the load splitting of traffic from different sources among the available equal cost paths. All traffic from a single source is still received from a single neighbor.
When the no ipv6 multicast multipath command is configured, the RPF neighbor with the highest IPv6 address is chosen for all sources with the same prefix, even when there are other available equal-cost paths.
Because the ipv6 multicast multipath command changes the way an RPF neighbor is selected, it must be configured consistently on all routers in a redundant topology to avoid looping.
Examples
The following example enables load splitting of IPv6 traffic:
Router(config)# ipv6 multicast multipath
Related Commands
Command
|
Description
|
show ipv6 rpf
|
Checks RPF information for a given unicast host address and prefix.
|
ipv6 multicast-routing
To enable multicast routing using Protocol Independent Multicast (PIM) and Multicast Listener Discovery (MLD) on all IPv6-enabled interfaces of the router and to enable multicast forwarding, use the ipv6 multicast-routing command in global configuration mode. To stop multicast routing and forwarding, use the no form of this command.
ipv6 multicast-routing
no ipv6 multicast-routing
Syntax Description
This command has no arguments or keywords.
Command Default
Multicast routing is not enabled.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.3(2)T
|
This command was introduced.
|
12.2(18)S
|
This command was integrated into Cisco IOS Release 12.2(18)S.
|
12.0(26)S
|
This command was integrated into Cisco IOS Release 12.0(26)S.
|
12.2(28)SB
|
This command was integrated into Cisco IOS Release 12.2(28)SB.
|
12.2(25)SG
|
This command was integrated into Cisco IOS Release 12.2(25)SG.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
12.2(33)SXH
|
This command was integrated into Cisco IOS Release 12.2(33)SXH.
|
Usage Guidelines
Enabling IPv6 multicast on all interfaces also includes enabling PIM and MLD protocol processing on the interfaces. Users may configure specific interfaces before multicast is enabled, so that they can then disable PIM and MLD protocol processing on interfaces, as needed.
Examples
The following example enables multicast routing and turns on PIM and MLD on all interfaces:
Related Commands
Command
|
Description
|
ipv6 pim rp-address
|
Configures the address of a PIM RP for a particular group range.
|
no ipv6 pim
|
Turns off IPv6 PIM on a specified interface.
|
no ipv6 mld router
|
Disables MLD router-side processing on a specified interface.
|
ipv6 multicast rpf use-bgp
To enable multicast reverse path forwarding (RPF) check to use Border Gateway Protocol (BGP) unicast routes in the routing information base (RIB), use the ipv6 multicast rpf use-bgp command in global configuration mode. To disable this function, use the no form of this command.
ipv6 multicast rpf use-bgp
no ipv6 multicast rpf use-bgp
Syntax Description
This command has no arguments or keywords.
Command Default
Multicast RPF check does not use BGP unicast routes.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.4(2)T
|
This command was introduced.
|
12.2(28)SB
|
This command was integrated into Cisco IOS Release 12.2(28)SB.
|
12.2(33)SRA
|
This command was integrated into Cisco IOS Release 12.2(33)SRA.
|
Usage Guidelines
When configured, multicast RPF check uses BGP unicast routes in the RIB. By default, this is not done.
Examples
The following example enables the multicast RPF check function:
ipv6 multicast rpf use-bgp
ipv6 nat
To designate that traffic originating from or destined for the interface is subject to Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat command in interface configuration mode. To prevent the interface from being able to translate, use the no form of this command.
ipv6 nat
no ipv6 nat
Syntax Description
This command has no keywords or arguments.
Command Default
Traffic leaving or arriving at this interface is not subject to NAT-PT.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
The ipv6 nat command is usually specified on at least one IPv4 interface and one IPv6 interface at the networking device where you intend to use NAT-PT.
Examples
The following example assigns the IPv4 address 192.168.30.1 to Fast Ethernet interface 1/0 and the IPv6 address 2001:0DB8:0:1::1 to Fast Ethernet interface 2/0. IPv6 routing is globally enabled and both interfaces are configured to run IPv6 and enable NAT-PT translations.
interface fastethernet 1/0
ip address 192.168.30.1 255.255.255.0
interface fastethernet 2/0
ipv6 address 2001:0DB8:0:1::1/64
Related Commands
Command
|
Description
|
ipv6 address link-local
|
Configures an IPv6 link-local address for an interface and enables IPv6 processing on the interface.
|
ipv6 address eui-64
|
Configures an IPv6 address for an interface and enables IPv6 processing on an interface using an EUI-64 interface ID in the low-order 64 bits of the address.
|
show ipv6 interface
|
Displays the usability status of interfaces configured for IPv6.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat max-entries
To specify the maximum number of Network Address Translation—Protocol Translation (NAT-PT) translation entries stored by the router, use the ipv6 nat max-entries command in global configuration mode. To restore the default number of NAT-PT entries, use the no form of this command.
ipv6 nat max-entries number
no ipv6 nat max-entries
Syntax Description
number
|
(Optional) Specifies the maximum number (1-2147483647) of NAT-PT translation entries. Default is unlimited.
|
Command Default
Unlimited number of NAT-PT entries.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
Use the ipv6 nat max-entries command to set the maximum number of NAT-PT translation entries stored by the router when the router memory is limited, or the actual number of translations is important.
Examples
The following example sets the maximum number of NAT-PT translation entries to 1000:
ipv6 nat max-entries 1000
Related Commands
Command
|
Description
|
clear ipv6 nat translation
|
Clears dynamic NAT-PT translations from the translation table.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat prefix
To assign an IPv6 prefix where matching IPv6 packets will be translated using Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat prefix command in global configuration or interface configuration mode. To prevent the IPv6 prefix from being used by NAT-PT, use the no form of this command.
ipv6 nat prefix ipv6-prefix/prefix-length
no ipv6 nat prefix ipv6-prefix/prefix-length
Syntax Description
ipv6-prefix
|
The IPv6 network used as the NAT-PT prefix.
This argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons.
|
/prefix-length
|
The length of the IPv6 prefix. A decimal value that indicates how many of the high-order contiguous bits of the address comprise the prefix (the network portion of the address). The only prefix length supported is 96. A slash mark must precede the decimal value.
|
Command Default
No IPv6 prefixes are used by NAT-PT.
Command Modes
Global configuration
Interface configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
The ipv6 nat prefix command is used to specify an IPv6 address prefix against which the destination prefix in an IPv6 packet is matched. If the match is successful, NAT-PT will translate the IPv6 packet to an IPv4 packet using the configured mapping rules.
Use the ipv6 nat prefix command in global configuration mode to assign a global NAT-PTNAT-PT prefix, or in interface configuration mode to assign a different NAT-PT prefix for each interface. Using a different NAT-PT prefix on several interfaces allows the NAT-PT router to support an IPv6 network with multiple exit points to IPv4 networks.
Examples
The following example assigns the IPv6 prefix 2001:0DB8:1::/96 as the global NAT-PT prefix:
ipv6 nat prefix 2001:0DB8:1::/96
The following example assigns the IPv6 prefix 2001:0DB8:2::/96 as the NAT-PT prefix for the Fast Ethernet interface 1/0, and the IPv6 prefix 2001:0DB8:4::/96 as the NAT-PT prefix for the Fast Ethernet interface 2/0:
interface fastethernet 1/0
ipv6 address 2001:0DB8:2:1::1/64
ipv6 nat prefix 2001:0DB8:2::/96
interface fastethernet 2/0
ipv6 address 2001:0DB8:4:1::1/64
ipv6 nat prefix 2001:0DB8:4::/96
Related Commands
Command
|
Description
|
ipv6 address link-local
|
Configures an IPv6 link-local address for an interface and enables IPv6 processing on the interface.
|
ipv6 address eui-64
|
Configures an IPv6 address for an interface and enables IPv6 processing on an interface using an EUI-64 interface ID in the low-order 64 bits of the address.
|
show ipv6 interface
|
Displays the usability status of interfaces configured for IPv6.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat prefix v4-mapped
To enable customers to send traffic from their IPv6 network to an IPv4 network without configuring IPv6 destination address mapping, use the ipv6 nat prefix v4-mapped command in global configuration or interface configuration mode. To disable this feature, use the no form of this command.
ipv6 nat prefix ipv6-prefix v4-mapped {access-list-name | ipv6-prefix}
no ipv6 nat prefix ipv6-prefix v4-mapped {access-list-name | ipv6-prefix}
Syntax Description
ipv6-prefix
|
IPv6 prefix for Network Address Translation—Protocol Translation (NAT-PT).
|
access-list-name
|
Name of an IPv6 access list. Names cannot contain a space or quotation mark, or begin with a numeric.
|
Command Default
This command is not enabled.
Command Modes
Global configuration
Interface configuration
Command History
Release
|
Modification
|
12.3(14)T
|
This command was introduced.
|
Usage Guidelines
The IPv6 target address of a packet arriving at an interface is checked to discover if it has a NAT-PT prefix that was configured with the ipv6 nat prefix v4-mapped command. If the prefix does match, then an access-list check is performed to discover if the source address matches the access list or prefix list. If the prefix does not match, the packet is dropped.
If the prefix matches, source address translation is performed. If a rule has been configured for the source address translation, the last 32 bits of the destination IPv6 address is used as the IPv4 destination and a flow entry is created.
Examples
In the following example, the access list permits any IPv6 source address with the prefix 2001::/96 to go to the destination with a 2000::/96 prefix. The destination is then translated to the last 32 bit of its IPv6 address; for example: source address = 2001::1, destination address = 2000::192.168.1.1. The destination then becomes 192.168.1.1 in the IPv4 network:
ipv6 nat prefix 2000::/96 v4-mapped v4map_acl
ipv6 access-list v4map_acl
permit ipv6 2001::/96 2000::/96
ipv6 nat translation
To change the amount of time after which Network Address Translation—Protocol Translation (NAT-PT) translations time out, use the ipv6 nat translation command in global configuration mode. To disable the timeout, use the no form of this command.
ipv6 nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout |
icmp-timeout | syn-timeout} {seconds | never}
no ipv6 nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout |
icmp-timeout | syn-timeout}
Syntax Description
timeout
|
Specifies that the timeout value applies to dynamic translations. Default is 86400 seconds (24 hours).
|
udp-timeout
|
Specifies that the timeout value applies to the User Datagram Protocol (UDP) port. Default is 300 seconds (5 minutes).
|
dns-timeout
|
Specifies that the timeout value applies to connections to the Domain Naming System (DNS). Default is 60 seconds.
|
tcp-timeout
|
Specifies that the timeout value applies to the TCP port. Default is 86400 seconds (24 hours).
|
finrst-timeout
|
Specifies that the timeout value applies to Finish and Reset TCP packets, which terminate a connection. Default is 60 seconds.
|
icmp-timeout
|
Specifies the timeout value for Internet Control Message Protocol (ICMP) flows. Default is 60 seconds.
|
syn-timeout
|
Specifies that the timeout value applies when a TCP SYN (request to synchronize sequence numbers used when opening a connection) flag is received but the flag is not followed by data belonging to the same TCP session.
|
seconds
|
Number of seconds after which the specified translation timer expires. The default is 0.
|
never
|
Specifies that the dynamic translation timer never expires.
|
Command Default
timeout: 86400 seconds (24 hours)
udp-timeout: 300 seconds (5 minutes)
dns-timeout: 60 seconds (1 minute)
tcp-timeout: 86400 seconds (24 hours)
finrst-timeout: 60 seconds (1 minute)
icmp-timeout: 60 seconds (1 minute)
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
Dynamic translations time out after a period of time without any translations. The default timeout period is 24 hours. When port translation is configured, there is finer control over translation entry timeouts because each entry contains more context about the traffic that is using it. Non-DNS UDP translations time out after 5 minutes, and DNS times out in 1 minute. TCP translations time out in 24 hours, unless an RST or FIN flag is seen on the stream, in which case they will time out in 1 minute.
Examples
The following example causes UDP port translation entries to time out after 10 minutes:
ipv6 nat translation udp-timeout 600
Related Commands
Command
|
Description
|
clear ipv6 nat translation
|
Clears dynamic NAT-PT translations from the translation table.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat v4v6 pool
To define a pool of IPv6 addresses for Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v4v6 pool command in global configuration mode. To remove one or more addresses from the pool, use the no form of this command.
ipv6 nat v4v6 pool name start-ipv6 end-ipv6 prefix-length prefix-length
no ipv6 nat v4v6 pool name start-ipv6 end-ipv6 prefix-length prefix-length
Syntax Description
name
|
Name of the pool.
|
start-ipv6
|
Starting IPv6 address that defines the range of IPv6 addresses in the address pool.
|
end-ipv6
|
Ending IPv6 address that defines the range of IPv6 addresses in the address pool.
|
prefix-length prefix-length
|
Number that indicates how many bits of the address indicate the network. Specify the subnet of the network to which the pool addresses belong.
|
Command Default
No pool of addresses is defined.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
This command defines a pool of IPv6 addresses using start address, end address, and prefix length. The pool is used when NAT-PT needs a dynamic mapping of an IPv6 address to translate an IPv4 address.
Examples
The following example configures a dynamic NAT-PT mapping to translate IPv4 addresses to IPv6 addresses using a pool of IPv6 addresses named v6pool. The packets to be translated by NAT-PT are filtered using an access list named pt-list2. One static NAT-PT mapping is configured to access a Domain Naming System (DNS) server. Ethernet interface 3/1 is an IPv6-only host and Ethernet interface 3/3 is an IPv4-only host.
ipv6 address 2001:0DB8:AABB:1::9/64
ip address 192.168.30.9 255.255.255.0
ipv6 nat v4v6 source list pt-list2 pool v6pool
ipv6 nat v4v6 pool v6pool 2001:0DB8:EEFF::1 2001:0DB8:EEFF::2 prefix-length 128
ipv6 nat v6v4 source 2001:0DB8:AABB:1::1 10.21.8.0
ipv6 nat prefix 2001:0DB8:EEFF::/96
access-list pt-list2 permit 192.168.30.0 0.0.0.255
Related Commands
Command
|
Description
|
clear ipv6 nat translations
|
Clears dynamic NAT-PT translations from the translation table.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat v4v6 source
To configure IPv4 to IPv6 address translation using Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v4v6 source command in global configuration mode. To remove the static translation or remove the dynamic association to a pool, use the no form of this command.
ipv6 nat v4v6 source {list {access-list-number | name} pool name | ipv4-address ipv6-address}
no ipv6 nat v4v6 source {list {access-list-number | name} pool name | ipv4-address ipv6-address}
Syntax Description
list access-list-number
|
Standard IP access list number. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.
|
list name
|
Name of a standard IP access list. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.
|
pool name
|
Name of the pool from which global IP addresses are allocated dynamically.
|
ipv4-address
|
Sets up a single static translation. This argument establishes the local IP address assigned to a host on the inside network. The address could be randomly chosen, allocated from RFC 1918, or obsolete.
|
ipv6-address
|
Sets up a single static translation. This argument establishes the globally unique IP address of an inside host as it appears to the outside world.
|
Command Default
No NAT-PT translation of IPv4 to IPv6 addresses occurs.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
This command has two forms: dynamic and static address translation. The form with an IPv6 access list establishes dynamic translation. Packets from IPv4 addresses that match the standard access list are translated using IPv6 addresses allocated from the pool named with the ipv6 nat v4v6 pool command. The access list is used to specify which traffic is to be translated.
Alternatively, the syntax form using the ipv4-address and ipv6-address arguments establishes a single static translation.
Examples
The following example configures a dynamic NAT-PT mapping to translate IPv4 addresses to IPv6 addresses using a pool of IPv6 addresses named v6pool. The packets to be translated by NAT-PT are filtered using an access list named pt-list2. Ethernet interface 3/1 is an IPv6-only host and Ethernet interface 3/3 is an IPv4-only host.
ipv6 address 2001:0DB8:AABB:1::9/64
ip address 192.168.30.9 255.255.255.0
ipv6 nat v4v6 source list pt-list2 pool v6pool
ipv6 nat v4v6 pool v6pool 2001:0DB8:EEFF::1 2001:0DB8:EEFF::2 prefix-length 128
ipv6 nat prefix 3ffe:c00:yyyy::/96
access-list pt-list2 permit 192.168.30.0 0.0.0.255
The following example shows a static translation where the IPv4 address 192.168.30.1 is translated into the IPv6 address 2001:0DB8:EEFF::2:
ipv6 nat v4v6 source 192.168.30.1 2001:0DB8:EEFF::2
Related Commands
Command
|
Description
|
clear ipv6 nat translation
|
Clears dynamic NAT-PT translations from the translation state table.
|
ipv6 nat v4v6 pool
|
Defines a pool of IPv6 addresses for NAT-PT.
|
ipv6 nat v6v4 source
|
Enables NAT-PT for an IPv6 source address.
|
show ipv6 nat translations
|
Displays active NAT-PT translations.
|
ipv6 nat v6v4 pool
To define a pool of IPv4 addresses for Network Address Translation—Protocol Translation (NAT-PT), use the ipv6 nat v6v4 pool global configuration command. To remove one or more addresses from the pool, use the no form of this command.
ipv6 nat v6v4 pool name start-ipv4 end-ipv4 prefix-length prefix-length
no ipv6 nat v6v4 pool name start-ipv4 end-ipv4 prefix-length prefix-length
Syntax Description
name
|
Name of the pool.
|
start-ipv4
|
Starting IPv4 address that defines the range of IPv4 addresses in the address pool.
|
end-ipv4
|
Ending IPv4 address that defines the range of IPv4 addresses in the address pool.
|
prefix-length prefix-length
|
Number that indicates how many bits of the address indicate the network. Specify the subnet of the network to which the pool addresses belong.
|
Command Default
No pool of addresses is defined.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
This command defines a pool of IPv4 addresses using start address, end address, and prefix length.