Network setup:

IOS XE 16.x --> Cisco 3560G layer 3 switch --> clients

The IOS XE device does PPPoE dialing to our ISP and runs some VPNs to other sites. The 3560G does inter-VLAN routing and have a default route to the IOS XE device.

The ISP recently enabled IPv6 and a /56 can be acquired via PPPoE PD. Here is my setup:

interface Dialer0
 ip address negotiated
 ip nat outside
 encapsulation ppp
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 ipv6 address dhcp rapid-commit
 ipv6 address autoconfig
 ipv6 enable
 ipv6 dhcp client pd pppoe-isp
 ipv6 dhcp client request vendor

And we use our own IPv6 prefix in the VPNs. Announcing our own prefixes to the ISP is not an option. Now I want the clients to have native IPv6 access to the Internet, is there any way to achieve this?

My first thought is to allocate a fixed IPv6 prefix to the clients, then use NAT66 (NPTv6) to change the prefixes depending on which interface they are going out, but IOS XE doesn't support NAT66 when the outside prefix is not fixed. Another workaround is to use a script to dynamically change the config on the L3 switch, but this seems to be a bit dirty.

  • 1
    You can use IPv6 Prefix delegation to divide the /56 among your VLANs, and hosts can have multiple IPv6 addresses on their interfaces. Cisco has documents on how to delegate IPv6 prefixes. – Ron Maupin Jul 26 '19 at 15:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.