IPv6 on ASA

ciscosupp
ciscosupp used Ask the Experts™
on
I have 2 virtual context on my ASA sharing an interface to communicate with each other.
Context named Test and VPN

Problem is I cannot ping from TEST to VPN context via ipv6.
I don’t have any problems with ping the interface with ipv4.
Please see attached my configs.

I tried this setup on 2 different ASA’s one ASA with code 9 and one with code 9.2.
Only problem is connectivity via ipv6.
What did i do wrong with ipv6 configs.
Configs.log
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Can you post the relevant sections of the config?  Is the ASA configured with any IP's and rules for allowing ICMP traffic?

Author

Commented:
Configs are attached????
Does your policy allow the IPV6 traffic flows to the ASA?

harbor235 ;}
The IPv6 neighbor mechanism relies on multicasting and multicasting (ipv4 & ipv6) is not supported on shared interfaces.
Two ways to work around it:
- Define static neighbors. Works fine if you only have 2-3 contexts. Too much work if you need more contexts. You need to setup a full mesh of routes and static neighbors.
- Have some other device in the shared network do routing (router on a stick) for IPv6.

Author

Commented:
I found the solution.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial