<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Grant,<div><br></div><div>Full config here:</div><div><a href="http://forums.juniper.net/t5/SRX-Services-Gateway/Branch-SRX-as-a-DHCPv6-prefix-delegation-client/m-p/200175/highlight/true#M25189">http://forums.juniper.net/t5/SRX-Services-Gateway/Branch-SRX-as-a-DHCPv6-prefix-delegation-client/m-p/200175/highlight/true#M25189</a></div><div><br></div><div>I've found a few major bugs; best to read the next page or so. Not sure it is going to be 100% stable.</div><div><br></div><div>Please do let me know!</div><div><br></div><div>I've CCed the list as it might be useful.</div><div><br><div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span><div style="margin: 0px; font-size: 15px; font-family: 'Helvetica Neue Light'; color: rgb(30, 73, 125); "><div style="color: rgb(0, 0, 0); margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">Thanks,</span></div><div style="color: rgb(0, 0, 0); margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">Michael.</span></div></div></span></div><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline" style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span><span><img height="104" width="281" id="66c6afa5-0558-461b-9cc4-75c9481d21c3" apple-width="yes" apple-height="yes" src="cid:5DB5F357-7F76-4779-84D7-3216D1076483@lttd.net"></span><div style="color: rgb(0, 0, 0); font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-family: 'Helvetica Neue Light'; font-size: 15px; margin: 0px; "><span style="letter-spacing: 0px; font-size: 12px; "><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">Direct: +61 2 9043 5780</span></div><div style="color: rgb(0, 0, 0); font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-family: 'Helvetica Neue Light'; font-size: 15px; margin: 0px; "><div style="margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">Mobile: +61 422 770 473</span></div><div style="margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">Web site:<span class="Apple-converted-space"> </span><a href="http://www.dalegroup.net/"><span style="letter-spacing: 0px; ">www.dalegroup.net</span></a></span></div><div style="margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">Support Portal:<span class="Apple-converted-space"> </span><span style="letter-spacing: 0px; "><a href="https://support.dalegroup.net/">support.dalegroup.net</a></span></span></div><div style="margin: 0px; font-size: 12px; "><span style="letter-spacing: 0px; ">CodeCanyon Support Portal: </span><a href="http://portal.dalegroup.net/" style="letter-spacing: 0px; font-family: Helvetica; ">portal.dalegroup.net</a></div></div>
</span></span></span></div>
<br><div><div>On 21/07/2013, at 10:07 PM, Grant Phillips <<a href="mailto:grant.phillips@gwtp.id.au">grant.phillips@gwtp.id.au</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">Hi Michael,<div><br></div><div>Are you able to update the list with your full config? I'm running Billion router in bridge mode with SRX100 performing the PPPoE. I'm not getting any progress, i cant seem to get any output on the 'show dhcpv6 client binding'. Hoping there is something in your configuration I'm missing. </div>
<div><br></div><div>Cheers,</div><div>Grant Phillips</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Jul 20, 2013 at 10:42 PM, Michael Dale <span dir="ltr"><<a href="mailto:mdale@dalegroup.net" target="_blank">mdale@dalegroup.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Hey Ben,<div><br></div><div>Awesome! I have something. Thanks!!</div><div><br></div>
<div>
Looks like removing IA-NA fixed it, but in my config I get:</div><div><div>##</div><div>## Warning: IA-NA identity association is required for ia-pd</div><div>##</div><div><br></div><div>Commits fine though.</div><div><br>
</div><div>Just going to do some testing and then I will post the full config.</div><div><br></div><div><div class="im"><div>root@jbox# run show dhcpv6 client binding </div><div><br></div><div>IP/prefix Expires State ClientType Interface Client DUID</div>
</div><div>2001:44b8:31f4:d800::/56 7043 BOUND STATEFULL at-1/0/0.0 LL0x1-00:24:dc:d4:e6:20</div><div><br></div></div><div><div class="h5"><div><span style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:normal;text-transform:none;font-size:medium;white-space:normal;font-family:Helvetica;word-spacing:0px">
</span></div>
<br><div><div>On 20/07/2013, at 10:25 PM, Ben Dale <<a href="mailto:bdale@comlinx.com.au" target="_blank">bdale@comlinx.com.au</a>> wrote:</div><br><blockquote type="cite"><div style="word-wrap:break-word">Hi Guys,<div>
<br></div><div>I don't have a 'node connection handy, but I just configured up an 878 with the config from Internode's page[1] and had a look at the results in wireshark to see what fields were being set in the DHCPv6 solicit. </div>
<div><br></div><div>In your config, try removing the "client-ia-type ia-na" and changing the "duid-type" to "duid-ll" eg:</div><div><br></div><div> family inet6 {<br> dhcpv6-client {<br>
client-type statefull;<br> client-ia-type ia-pd;<br> rapid-commit;<br> client-identifier duid-type duid-ll;<br> }<br> }<br>
</div><div><br></div><div>and see if that makes any difference. Also, based on their configuration, you should have:</div><div><br></div><div>set routing-options rib inet6.0 static route ::/0 next-hop at-1/0/0.0</div><div>
<br></div>There's a bit of a quirk with the "new" JDHCP server too - if you have any Macs or other devices that either aren't getting a DHCP address, or seem to take a long time (eg >30s) add the following command in:<div>
<br></div><div>set system services dhcp-local group YOUR-GROUP overrides no-unicast-replies</div><div><div><br></div><div>and that'll fix up any issues.</div><div><br></div><div>
<span style="border-collapse:separate;border-spacing:0px"><span style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px;font-size:medium"><div style="word-wrap:break-word">
Cheers,<br><br>Ben<br></div></span></span>
</div>
<div><br></div><div>[1] <a href="http://www.internode.on.net/support/guides/internet_access/ipv6/cisco_routers/" target="_blank">http://www.internode.on.net/support/guides/internet_access/ipv6/cisco_routers/</a></div><br>
<div><div>On 20/07/2013, at 5:46 PM, Michael Dale <<a href="mailto:mdale@dalegroup.net" target="_blank">mdale@dalegroup.net</a>> wrote:</div><br><blockquote type="cite"><div style="word-wrap:break-word">Thanks Ben! Very helpful.<div>
<br></div><div>Here is what I have so far (not working just yet but getting close I hope):</div><div><br></div><div><div>version 12.1X45;</div><div>interfaces {</div><div> at-1/0/0 {</div><div> encapsulation atm-pvc;</div>
<div> atm-options {</div><div> vpi 8;</div><div> }</div><div> dsl-options {</div><div> operating-mode annexm-adsl2plus;</div><div> }</div><div> unit 0 {</div><div>
description "Internode ADSL";</div>
<div> encapsulation atm-ppp-vc-mux;</div><div> vci 8.35;</div><div> ppp-options {</div><div> pap {</div><div> local-name "<a href="mailto:username@internode.on.net" target="_blank">username@internode.on.net</a>";</div>
<div> local-password "xxx"; ## SECRET-DATA</div><div> passive;</div><div> }</div><div> }</div><div> family inet {</div><div> negotiate-address;</div>
<div> }</div><div> family inet6 {</div><div> dhcpv6-client {</div><div> client-type statefull;</div><div> client-ia-type ia-pd;</div><div> client-ia-type ia-na;</div>
<div> rapid-commit;</div><div> client-identifier duid-type duid-llt;</div><div> }</div><div> }</div><div> }</div><div> }</div><div>}</div><div><br>
</div><div><br></div><div>access {</div><div> address-assignment {</div><div> pool trust {</div><div> family inet {</div><div> network <a href="http://10.0.0.0/22" target="_blank">10.0.0.0/22</a>;</div>
<div> range pool {</div><div> low 10.0.1.1;</div><div> high 10.0.2.254;</div><div> }</div><div> dhcp-attributes {</div><div> maximum-lease-time 691200;</div>
<div> domain-name <a href="http://dalegroup.net/" target="_blank">dalegroup.net</a>;</div><div> name-server {</div><div> 10.0.0.254;</div><div> }</div>
<div> router {</div><div> 10.0.0.254;</div><div> }</div><div> }</div><div> host static-ip-1 {</div><div> hardware-address 00:0c:29:xx:xx:xx;</div>
<div> ip-address 10.0.2.7;</div><div> }</div><div><br></div><div> }</div><div> }</div><div> }</div><div>}</div></div><div><br></div><div><br></div><div><br><div><span style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-family:'Helvetica Neue Light';font-size:15px;margin:0px">
</div>
</span></div>
<br><div><div>On 20/07/2013, at 5:37 PM, Shane Short <<a href="mailto:shane@short.id.au" target="_blank">shane@short.id.au</a>> wrote:</div><br><blockquote type="cite">
<div text="#000000" bgcolor="#FFFFFF">Any chance you could give
us an example of how to configure that? I've spent a good 20 minutes
looking and I'm stuck at the same spot Michael is :)<br>
<br>
-Shane<br>
<br>
Ben Dale wrote:
<blockquote style="word-wrap:break-word" type="cite">
This is because there are actually two DHCP clients/server daemons you
can use on the SRX.
<div><br></div>
<div>The original one (set system services dhcp / family inet dhcp)
and the "new" one that is back-ported from the MX (set system services
dhcp-local-server / family inet dhcp-client).</div>
<div><br></div>
<div>This was done to get DHCP in a routing-instance on the SRX
without duplicating effort</div>
<div><br></div>
<div>When you configure DHCP client make sure you only have the
statements from one OR the other (eg if you're using the original DHCP
server, then you need "family inet dhcp" on your client interfaces or
else if you want "family inet6 dhcp-client you'll need to switch your
server to the new format), otherwise you'll get that commit error.</div>
<div><br></div>
<div>Anyone from iinet/Westnet out there that knows about your v6
plans for DSL?</div>
<div><br></div>
<div>Cheers,</div>
<div><br></div>
<div>Ben</div>
<div><br><div>
<span style="border-collapse:separate;border-spacing:0px"><span style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px;font-size:medium"><div style="word-wrap:break-word">
<br></div></span></span></div><div><div>On
20/07/2013, at 3:12 PM, Michael Dale <<a href="mailto:mdale@dalegroup.net" target="_blank">mdale@dalegroup.net</a>> wrote:</div><br><blockquote type="cite"><div style="word-wrap:break-word"><div>I have tried and failed
thus far.</div><div><br></div><div>SRX210 + ADSL mPim + Internode +
12.1XD45</div><div><br></div><div>There is some information here that I
followed:</div><div><a href="http://blog.ciscoinferno.net/dhcpv6-client-on-the-srx" target="_blank">http://blog.ciscoinferno.net/dhcpv6-client-on-the-srx</a></div><div><br></div><div>Unfortunately
I get the error:</div><div>Incompatible with the dhcp server configured
under 'system services dhcp'</div><div><br></div><div>Not sure why that
has anything todo with DHCPv6 client for ppp connections.</div><div><br></div><div>I
did remove the dhcp server to test with but I never received an IP from
internode, I suspect this is a JunOS issue as my SSG5 ( <a href="http://michaeldale.com.au/archive/2010/01/17/native-ipv6-over-pppoe-with-internode-and-a-juniper-ssg5/" target="_blank">http://michaeldale.com.au/archive/2010/01/17/native-ipv6-over-pppoe-with-internode-and-a-juniper-ssg5/</a>
) could do IPv6 with Internode fine.</div><br><div>
<div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<span><div style="margin:0px;font-size:15px;font-family:'Helvetica Neue Light';color:rgb(30,73,125)"><div style="margin:0px;font-size:12px"><span style="letter-spacing:0px">Michael.</span></div></div></span></div>
<span style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
</span></div>
<br><div><div>On 20/07/2013, at 1:49 PM, Brad Peczka <<a href="mailto:brad@bradpeczka.com" target="_blank">brad@bradpeczka.com</a>> wrote:</div><br><blockquote type="cite">It's worth
mentioning that, this far, the 12.1X train has been less than
satisfactory - memory leaks galore cause it to reload on a bi-weekly
basis. It almost reminds me of some of the early Cisco 12.4T trains!<br><br>Hopefully
the latest one is getting better, but I wouldn't hold your breath.<br><br>Cheers,<br>-Brad.<br>________________________________________<br>From:
AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>]
On Behalf Of Reuben Farrelly [<a href="mailto:reuben-ausnog@reub.net" target="_blank">reuben-ausnog@reub.net</a>]<br>Sent:
Saturday, 20 July 2013 11:18 AM<br>To: Jonathan Thorpe<br>Cc: <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>Subject:
Re: [AusNOG] IPv6 Internode with Juniper SRX110H-VA<br><br>The latest
release (12.1X45-D10) of JunOS for the SRX which came out on<br>Monday
now officially supports, amongst other things:<br><br>- IPv6 Support on
ADSL, G.SHDSL and VDSL2 Interfaces<br>- DHCPv6 client<br>- Dynamic DNS<br><br>Release
notes at:<br><br><a href="http://www.juniper.net/techpubs/en_US/junos12.1x45/information-products/topic-collections/release-notes/12.1x45/junos-release-notes-12.1X45.pdf" target="_blank">http://www.juniper.net/techpubs/en_US/junos12.1x45/information-products/topic-collections/release-notes/12.1x45/junos-release-notes-12.1X45.pdf</a><br>
<br>Haven't
tried running it up yet, but this is a very good start.<br><br>Reuben<br><br>On
1/07/2013 1:37 PM, Jonathan Thorpe wrote:<br><blockquote type="cite">You
may find this useful (or perhaps not):<br><br><a href="http://forums.juniper.net/t5/SRX-Services-Gateway/Branch-SRX-as-a-DHCPv6-prefix-delegation-client/td-p/99340/page/3" target="_blank">http://forums.juniper.net/t5/SRX-Services-Gateway/Branch-SRX-as-a-DHCPv6-prefix-delegation-client/td-p/99340/page/3</a><br>
<br>*From:*Jonathan
Thorpe<br>*Sent:* Monday, 1 July 2013 1:35 PM<br>*To:* 'Skeeve
Stevens'; <a href="mailto:ausnog@lists.ausnog.net" target="_blank"><ausnog@lists.ausnog.net></a><br>*Subject:* RE: [AusNOG]
IPv6 Internode with Juniper SRX110H-VA<br><br>Hi Skeeve,<br><br>Isn’t
there an issue with prefix delegation on JunOS that prevents this<br>from
working?<br><br>Kind Regards,<br><br>Jonathan<br></blockquote><br>_______________________________________________<br>AusNOG
mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
_______________________________________________<br>AusNOG
mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div><br></div>_______________________________________________<br>AusNOG
mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div><br></div>
<pre>_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
</div>
</blockquote></div><br></div></div></blockquote></div><br></div></div></blockquote></div><br></div></div></div></div><br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br></div></body></html>