[IPv6] Enabling IPv6 on Juniper SRX series Issue
Posted by admin on February 25th, 2010
Enabling IPv6 on Juniper SRX series needs a bit extra configuration.
After standard IPv6 Address configured & with rib inet6.0 in routing-option, you have to add
“security forwarding-options family inet6 mode packet-based” at the global configuration to have IPv6 routable.
rib inet6.0 {
static {
route 0::/0 next-hop 2001:df0:48::1;
}
}
SELF PING
=================================================================
admin@SRX# run ping 2001:df0:48::50
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::50
16 bytes from 2001:df0:48::50, icmp_seq=0 hlim=64 time=0.888 ms
16 bytes from 2001:df0:48::50, icmp_seq=1 hlim=64 time=0.368 ms
NEIGHBOR PING
=================================================================
— 2001:df0:48::50 ping6 statistics —
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/std-dev = 0.368/0.628/0.888/0.260 ms
[edit]
admin@SRX# run ping 2001:df0:48::1
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::1
^C
— 2001:df0:48::1 ping6 statistics —
3 packets transmitted, 0 packets received, 100% packet loss
[edit]
admin@SRX# run ping 2001:df0:48::2
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::2
^C
— 2001:df0:48::2 ping6 statistics —
2 packets transmitted, 0 packets received, 100% packet loss
[edit]
admin@SRX# run ping 2001:df0:48::3
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::3
^C
— 2001:df0:48::3 ping6 statistics —
2 packets transmitted, 0 packets received, 100% packet loss
[edit]
admin@SRX# run ping 2001:df0:48::16
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::16
^C
— 2001:df0:48::16 ping6 statistics —
6 packets transmitted, 0 packets received, 100% packet loss
[edit]
SOLUTION :
==========================================================================
admin@SRX# set security forwarding-options family inet6 mode packet-based
[edit]
admin@SRX# commit
RESULTS :
==========================================================================
admin@SRX# run ping 2001:df0:48::1
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::1
16 bytes from 2001:df0:48::1, icmp_seq=0 hlim=64 time=3.234 ms
16 bytes from 2001:df0:48::1, icmp_seq=1 hlim=64 time=2.008 ms
16 bytes from 2001:df0:48::1, icmp_seq=2 hlim=64 time=1.936 ms
16 bytes from 2001:df0:48::1, icmp_seq=3 hlim=64 time=2.076 ms
16 bytes from 2001:df0:48::1, icmp_seq=4 hlim=64 time=1.907 ms
^C
— 2001:df0:48::1 ping6 statistics —
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/std-dev = 1.907/2.232/3.234/0.504 ms
[edit]
admin@SRX# run ping 2001:df0:48::7
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::7
16 bytes from 2001:df0:48::7, icmp_seq=0 hlim=64 time=8.249 ms
16 bytes from 2001:df0:48::7, icmp_seq=1 hlim=64 time=6.981 ms
^C
— 2001:df0:48::7 ping6 statistics —
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/std-dev = 6.981/7.615/8.249/0.634 ms
[edit]
admin@SRX# run ping 2001:df0:48::6
PING6(56=40+8+8 bytes) 2001:df0:48::50 –> 2001:df0:48::6
16 bytes from 2001:df0:48::6, icmp_seq=0 hlim=64 time=8.891 ms
16 bytes from 2001:df0:48::6, icmp_seq=1 hlim=64 time=8.015 ms
16 bytes from 2001:df0:48::6, icmp_seq=2 hlim=64 time=1.645 ms
16 bytes from 2001:df0:48::6, icmp_seq=3 hlim=64 time=1.552 ms
^C
— 2001:df0:48::6 ping6 statistics —
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/std-dev = 1.552/5.026/8.891/3.441 ms
a. rahman isnaini r.sutan “feat” Kiki Pramono.