Network setup:
IOS XE 16.x --> Cisco 3560G layer 3 switch --> clients
The IOS XE device does PPPoE dialing to our ISP and runs some VPNs to other sites. The 3560G does inter-VLAN routing and have a default route to the IOS XE device.
The ISP recently enabled IPv6 and a /56 can be acquired via PPPoE PD. Here is my setup:
interface Dialer0
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ipv6 address dhcp rapid-commit
ipv6 address autoconfig
ipv6 enable
ipv6 dhcp client pd pppoe-isp
ipv6 dhcp client request vendor
And we use our own IPv6 prefix in the VPNs. Announcing our own prefixes to the ISP is not an option. Now I want the clients to have native IPv6 access to the Internet, is there any way to achieve this?
My first thought is to allocate a fixed IPv6 prefix to the clients, then use NAT66 (NPTv6) to change the prefixes depending on which interface they are going out, but IOS XE doesn't support NAT66 when the outside prefix is not fixed. Another workaround is to use a script to dynamically change the config on the L3 switch, but this seems to be a bit dirty.
/56
among your VLANs, and hosts can have multiple IPv6 addresses on their interfaces. Cisco has documents on how to delegate IPv6 prefixes. – Ron Maupin♦ Jul 26 at 15:12