We help IT Professionals succeed at work.

Cisco IPV6 config

Tom Moore
Tom Moore asked
on
25 Comments
1 Solution
179 Views
Last Modified: 2019-02-06
I have new c9300 switches (pair), When I program an interface, the interface auto adds:

 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
I have tried the 'no' cmd to all these entries - no luck
I have also tried the global no ipv6 unicast-routing
Am I missing something?
Comment
Watch Question

View Solution Only

Tom MooreNetwork Administrator

Author

Commented:
I am looking to turn off ipv6 completely. It is not needed for our network
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
Tom, can you post the output of the following:

show run | inc v6
Tom MooreNetwork Administrator

Author

Commented:
smk4c9g0#sh ru | inc v6
 address-family ipv6
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
okay, something is missing here.

lets try this:

show run all | inc ipv6
Tom MooreNetwork Administrator

Author

Commented:
show run all | inc ipv6
platform urpf loose counter ipv6 supress asymmetric_only
 no ipv6 multicast multitopology
ipv6 hop-limit 64
ipv6 reassembly-queue length 100
ipv6 reassembly-queue time-out 60
ipv6 icmp error-interval 100 10
ipv6 nd cache expire
no ipv6 nd ra solicited unicast
ipv6 nd nsf convergence 120
ipv6 nd nsf throttle 512
ipv6 nd nsf dad suppress 60
ipv6 nd nud limit 256 refresh 10
ipv6 nd reachable-time 0
ipv6 nd ns-interval 0
ipv6 nd resolution data limit 16
ipv6 nd default-route vrf Mgmt-vrf limit 4
ipv6 nd default-route limit 4
ipv6 nd dad time 0
ipv6 nd dad loopback detect
ipv6 nsf-converge 10
ipv6 traffic interface-statistics
ipv6 mld snooping listener-message-suppression
no ipv6 mld snooping tcn query solicit
ipv6 mld snooping tcn flood query count 2
ipv6 mld snooping robustness-variable 2
ipv6 mld snooping last-listener-query-count 2
ipv6 mld snooping last-listener-query-interval 1000
no ipv6 mld snooping
ipv6 rip vrf-mode enable
ipv6 dhcp-relay trust-all
no ipv6 dhcp-relay option vpn
ipv6 dhcp ping packets 0
ipv6 dhcp iapd-route-add
no ipv6 dhcp iana-route-add
ipv6 dhcp ppp terminate
ipv6 dhcp ppp framed-prefix cache
no ipv6 dhcp server vrf enable
ipv6 spd queue max-threshold 74
ipv6 spd queue min-threshold 73
ipv6 multicast multipath
ipv6 multicast rpf use-bgp
ipv6 multicast vrf Mgmt-vrf multipath
ipv6 multicast vrf Mgmt-vrf rpf use-bgp
ipv6 cef optimize neighbor resolution
ipv6 cef load-sharing algorithm universal BCFF9DC6
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 address dhcp rapid-commit
 ipv6 address autoconfig
 ipv6 enable
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 dhcp client request vendor
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 mld snooping tcn flood
****(the above 3 lines repeat 36 times)****
 ipv6 mld snooping tcn floodbles
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
 ipv6 nd reachable-time 0
 ipv6 nd ns-interval 0
 ipv6 nd dad attempts 1
 ipv6 nd dad loopback detect
 ipv6 nd prefix framed-ipv6-prefix
 ipv6 nd nud igp
 no ipv6 nd ra solicited unicast
 ipv6 nd ra lifetime 1800
 ipv6 nd ra interval 200
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 mfib forwarding input
 ipv6 mfib forwarding output
 ipv6 mfib cef input
 ipv6 mfib cef output
  ipv6 redirects
  ipv6 unreachables
ipv6 mld ssm-map query dns
ipv6 mld host-proxy single-report
 ipv6 prefix-list sequence-number
ipv6 access-list log-update threshold 2147483647
Tom MooreNetwork Administrator

Author

Commented:
I see these lines added compared to another stack:
 ipv6 mld query-max-response-time 10
 ipv6 mld query-timeout 255
 ipv6 mld query-interval 125
 ipv6 mld router
 ipv6 address dhcp rapid-commit
 ipv6 address autoconfig
 ipv6 enable
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
Look at for the first instance of these two:

ipv6 address autoconfig
 ipv6 enable

Are they occurring at global?
Tom MooreNetwork Administrator

Author

Commented:
I believe so
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
If those are globally set, then run the "no" of each.
Tom MooreNetwork Administrator

Author

Commented:
Wait I think it is under:
ipv6 cef load-sharing algorithm universal BCFF9DC6
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
try the

no ipv6 enable

under that line then.
Tom MooreNetwork Administrator

Author

Commented:
I tried that, no luck. If you type no ipv6 ? there are none of those options
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
What's got me buggered up is that it was turned on default.
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Have you tried no ipv6 enable under the interfaces?

**EDIT** Sorry didn't see Atlas already mention that.
Tom MooreNetwork Administrator

Author

Commented:
Spears I tried that. It takes the command but instantly returns upon another sh ru
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
It most likely have to do with the sdm template you are running.
atlas_shudderedSr. Network Engineer
CERTIFIED EXPERT

Commented:
One other thing

Go to the host connected to one of those ports and turn v6 off.  See if that clears the interface config.  May need to run the no ipv6 enable on the interface after.
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Can you post the sh sdm prefer?  You are probably running the dual stack ipv4 v6 template
Tom MooreNetwork Administrator

Author

Commented:
This is the Access template.
  Number of VLANs:                                     4094
  Unicast MAC addresses:                               32768
  Overflow Unicast MAC addresses:                      1024
  L2 Multicast entries:                                8192
  Overflow L2 Multicast entries:                       512
  L3 Multicast entries:                                8192
  Overflow L3 Multicast entries:                       512
  Directly connected routes:                           24576
  Indirect routes:                                     8192
  STP Instances:                                       1024
  Security Access Control Entries:                     5120
  QoS Access Control Entries:                          5120
  Policy Based Routing ACEs:                           1024
  Netflow Input ACEs:                                  256
  Netflow Output ACEs:                                 768
  Ingress Netflow ACEs:                                256
  Egress Netflow ACEs:                                 768
  Flow SPAN ACEs:                                      1024
  Tunnels:                                             512
  LISP Instance Mapping Entries:                       512
  Control Plane Entries:                               512
  Input Netflow flows:                                 32768
  Output Netflow flows:                                32768
  SGT/DGT (or) MPLS VPN entries:                       8192
  SGT/DGT (or) MPLS VPN Overflow entries:              512
  Wired clients:                                       2048
  MACSec SPD Entries:                                  256
  MPLS L3 VPN VRF:                                     256
  MPLS Labels:                                         2048
  MPLS L3 VPN Routes VRF Mode:                         7168
  MPLS L3 VPN Routes Prefix Mode:                      3072
  MVPN MDT Tunnels:                                    256
  L2 VPN EOMPLS Attachment Circuit:                    256
  MAX VPLS Bridge Domains :                            128
  MAX VPLS Peers Per Bridge Domain:                    32
  MAX VPLS/VPWS Pseudowires :                          1024
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Try doing a no sdm prefer, then reload the switch if you can at this time.
Tom MooreNetwork Administrator

Author

Commented:
description Mil-Chi Intersite WAN
 no switchport
 ip address 10.254.10.20 255.255.255.0
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
end

smk4c9g0(config-if)#no ipv6 en
smk4c9g0(config-if)#no ipv6 address autoconfig
smk4c9g0(config-if)#no ipv6 dhcp client request vendor
smk4c9g0(config-if)#no  ipv6 address dhcp
smk4c9g0(config-if)#do sh ru int gi2/0/2
Building configuration...

Current configuration : 217 bytes
!
interface GigabitEthernet2/0/2
 description Mil-Chi Intersite WAN
 no switchport
 ip address 10.254.10.20 255.255.255.0
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client request vendor
end
Tom MooreNetwork Administrator

Author

Commented:
Spears I get the same template info on another stack


Tried no sdm prefer - incomplete command as well - FYI
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
no sdm prefer access wasn't an option?
Network Administrator
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Glad you figured it out.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions