<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div apple-content-edited="true"><br></div><div><div>On 25 Feb 2014, at 6:07 pm, Jeremy Visser <<a href="mailto:jeremy@visser.name">jeremy@visser.name</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On 24/02/14 20:16, Damien Gardner Jnr wrote:<br><blockquote type="cite">If you need help with an 877 config that works with TID (the<br>internode config doesn’t quite work), let me know<br></blockquote><br>Can you post it here? I can't be the only one curious as to the actual line-by-line differences from the Internode config.<br><br>There are only so many ways you can configure DHCPv6-PD on a Cisco…</blockquote><br></div><div>Funny, now that I compare what ended up working with what Internode gave as a config, there’s not a lot of difference.. Looks like two commands was the entire difference. From memory, the ipv6 dhcp-server made no real difference (Clients get their v6 IP from autoconf, not dhcp), the magic thing seemed to be the ‘ipv6 nd ra interval 60’. If it’s not set, the 877 does no router advertisements, and so clients either wouldn’t get an address at all, or would get one but then loose it within a few seconds. </div><div><br></div><div>Also note, If you put IPV6 on a BVI on 12.4, things go horridly wrong. Better to put your IPV4 on the BVI, and IPV6 on the Vlan, and do without v6 on wireless. Or as I did, put it all on the Vlan, and then do your wireless from a second 877, as cisco is happy to pass v6 THROUGH the BVI on the second 877, it just doesn’t do v6 ON the BVI. Note: this only works if you happen to have a spare 877 after having bought one because you got hit with the won’t-reconnect bug in 12.4T5 which appeared after an electrical storm, and thought it was a hardware fault) :-p</div><div><br></div><div>Anyway, the config:</div><div><br></div><div><div style="margin: 0px;">! Enable IPv6</div><div style="margin: 0px;">ipv6 unicast-routing</div><div style="margin: 0px;">ipv6 cef</div><div style="margin: 0px;">ipv6 route ::/0 Dialer0</div><div style="margin: 0px; min-height: 14px;"><br></div><div style="margin: 0px;">! Clients get IP’s via autoconf, but need DHCPv6 for DNS</div><div style="margin: 0px;">ipv6 dhcp pool HOMEV6</div><div style="margin: 0px;"> dns-server 2001:8000:101::1</div><div style="margin: 0px;"> dns-server 2001:8000:101::2</div><div style="margin: 0px;">!</div><div style="margin: 0px; min-height: 14px;"><br></div><div style="margin: 0px;">! IPv6 portions of Dialer0 - note: it doesn’t actually NEED an ipv6 address for internal services to work.</div><div style="margin: 0px;">! But the router can’t talk to the interwebzV6 without it</div><div style="margin: 0px;">interface Dialer0</div><div style="margin: 0px;"> ipv6 address tid-ipv6-prefix ::1/128</div><div style="margin: 0px;"> ipv6 enable</div><div style="margin: 0px;"> ipv6 traffic-filter INTERNET-IN-ACL6 in</div><div style="margin: 0px;"> ipv6 verify unicast reverse-path</div><div style="margin: 0px;"> ipv6 dhcp client pd tid-ipv6-prefix rapid-commit</div><div style="margin: 0px;">!</div><div style="margin: 0px; min-height: 14px;"><br></div><div style="margin: 0px;">! Internal network interface, v6 portions</div><div style="margin: 0px;">interface Vlan1</div><div style="margin: 0px;"> ipv6 address tid-ipv6-prefix ::1:0:0:0:1/64</div><div style="margin: 0px;"> ipv6 enable</div><div style="margin: 0px;"> ipv6 nd ra interval 60</div><div style="margin: 0px;"> ipv6 verify unicast reverse-path</div><div style="margin: 0px;">!</div><div style="margin: 0px; min-height: 14px;"><br></div><div style="margin: 0px;">! DMZ Interface</div><div style="margin: 0px;">interface Vlan101, v6 portions</div><div style="margin: 0px;"> ipv6 address tid-ipv6-prefix ::2:0:0:0:1/64</div><div style="margin: 0px;">!</div><div style="margin: 0px; min-height: 14px;"><br></div><div style="margin: 0px;">! allows to DMZ hosts removed for sanitisation. udp 546 is the dhcp packets to get our PD</div><div style="margin: 0px;">ipv6 access-list INTERNET-IN-ACL6</div><div style="margin: 0px;"> permit tcp any any established</div><div style="margin: 0px;"> permit icmp any any</div><div style="margin: 0px;"> permit udp any any eq 546</div><div style="margin: 0px;"> deny ipv6 any any</div><div style="margin: 0px;">!</div><div style="margin: 0px;"><br></div><div style="margin: 0px;">event manager applet MONITOR-IPV6-DHCP-APP </div><div style="margin: 0px;"> event syslog pattern "DIALER-6-BIND"</div><div style="margin: 0px;"> action 1.0 cli command "enable"</div><div style="margin: 0px;"> action 1.1 cli command "clear ipv6 dhcp client Dialer0"</div><div style="margin: 0px;"> action 2.0 syslog priority debugging msg "Refreshed IPv6 DHCP PD lease (Dialer rebind)"</div><div style="margin: 0px;">!</div></div><br><div><br></div><div>Cheers,</div><div><br></div><div>DG</div><div><br></div><div><br></div><div><span style="orphans: 2; widows: 2;">Damien Gardner Jnr</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;">VK2TDG. Dip EE. GradIEAust</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;"><a href="mailto:rendrag@rendrag.net">rendrag@rendrag.net</a> - </span><a href="http://www.rendrag.net/" style="orphans: 2; widows: 2;">http://www.rendrag.net/</a><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;">--</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;">We rode on the winds of the rising storm,</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;"> We ran to the sounds of thunder.</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;">We danced among the lightning bolts,</span><br style="orphans: 2; widows: 2;"><span style="orphans: 2; widows: 2;"> and tore the world asunder</span></div></body></html>