[AusNOG] IPv6 Internode with Juniper SRX110H-VA

Simon Dixon simon at dicko.net.au
Mon Jul 22 17:30:27 EST 2013


If you require prefix delegation to your inside interface add the following line

set interfaces at-1/0/0 unit 0 family inet6 dhcpv6-client
update-router-advertisement interface vlan.0

change vlan.0 to your inside interface full at-1/0/0 config looks as follows.

root at IPv6-DEV# show interfaces at-1/0/0
encapsulation atm-pvc;
atm-options {
    vpi 8;
}
dsl-options {
    operating-mode auto;
}
unit 0 {
    encapsulation atm-ppp-vc-mux;
    vci 8.35;
    ppp-options {
        chap {
            default-chap-secret "xxxx"; ## SECRET-DATA
            local-name "dickotest at zetta.net.au";
            passive;
        }
    }
    family inet {
        negotiate-address;
    }
    family inet6 {
        dhcpv6-client {
            client-type statefull;
            ##
            ## Warning: IA-NA identity association is required for ia-pd
            ##
            client-ia-type ia-pd;
            rapid-commit;
            update-router-advertisement {
                interface vlan.0;
            }
            client-identifier duid-type duid-ll;
        }
    }
}

Just a warning as well after a reboot config may not go active due to
the Warning about IA-NA, so if your running this make sure you have a
console cable handy.  The fix I have been doing is to add ia-na with

set interfaces at-1/0/0 unit 0 family inet6 dhcpv6-client client-ia-type ia-na

commiting the config

and then delete it and recommiting.  Looks like another 12.1 bug to
add to the list of reasons not to use it in a prod environment :(

Simon.



On 21 July 2013 22:32, Michael Dale <mdale at dalegroup.net> wrote:
> Hi Grant,
>
> Full config here:
> http://forums.juniper.net/t5/SRX-Services-Gateway/Branch-SRX-as-a-DHCPv6-prefix-delegation-client/m-p/200175/highlight/true#M25189
>
> I've found a few major bugs; best to read the next page or so. Not sure it
> is going to be 100% stable.
>
> Please do let me know!
>
> I've CCed the list as it might be useful.
>
> Thanks,
> Michael.
>
>

--

Dicko.



More information about the AusNOG mailing list