SRX and IPv6

[kramshoej]

Great to hear that!

then maybe when you are finished you can go help out IPv6 for SSL VPN SA2500 ;-)

they don't even have a plan for IPv6, as far as the reps I asked.

[MarcTB]

10.2R2.11 has been released. Not tested it yet

[andrewfrazer]

On a SRX-210h-poe running 10.2R2.11

edit interfaces vlan unit 10]

root@tau-srx101# set family ?

Possible completions:

+ apply-groups         Groups from which to inherit configuration data

+ apply-groups-except  Don't inherit configuration data from these groups

> inet                 IPv4 parameters

> mpls                 MPLS protocol parameters

> tcc                  Translational cross-connect parameters

> vpls                 Virtual private LAN service parameters

[edit interfaces vlan unit 10]

No support yet.. What happend Mike?

[mawr]

---

andrewfrazer wrote:

On a SRX-210h-poe running 10.2R2.11

edit interfaces vlan unit 10]

root@tau-srx101# set family ?

Possible completions:

+ apply-groups         Groups from which to inherit configuration data

+ apply-groups-except  Don't inherit configuration data from these groups

> inet                 IPv4 parameters

> mpls                 MPLS protocol parameters

> tcc                  Translational cross-connect parameters

> vpls                 Virtual private LAN service parameters

[edit interfaces vlan unit 10]

No support yet.. What happend Mike?

---

IPv6 is turned off by default.  See this thread for more information.

[andrewfrazer]

read your suggested fix, but it doesnt solve my problem..  please go and see the post i've made in the other thread

[MarcTB]

Their is something in the release notes of R2.11 about IPv6 and vlans.

[andrewfrazer]

So, heres some bizzareness;

You can set a Ipv6 address for a VLAN from the Web UI under 10.2R2.11 and it works just fine, however you can't set it from the CLI..

How bizzare is that!

Regards

[mnwarren]

After reading http://www.juniper.net/techpubs/en_US/junos10.2/information-products/topic-collections/release-notes... and seeing:

• Interfaces—A logical interface can be configured with an IPv4 address, IPv6 address, or both.

  To configure an IPv6 address for a logical interface, use the inet6 statement at the [edit interfaces interface-name unit logical-unit family] hierarchy level. [Junos OS Interfaces Configuration Guide for Security Devices]

I was pretty hopeful that 10.2R3.10 would enable this functionality, but alas, no such luck.

JUNOS Software Release [10.2R3.10]

[edit]
root@vpn1.he# set interfaces st0 unit 0 family ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> inet                 IPv4 parameters
> mpls                 MPLS protocol parameters
> vpls                 Virtual private LAN service parameters

Does anyone from Juniper know when this functionality will be enabled?

[acooley]

Has anyone just tried typing set interface vlan unit 1 family inet6 instead of just using the ? to check to see if it is a valid command? You can't necesarrily rely on the question mark all the time because sometimes commands are hidden for future support or during times of trouble with the feature in the OS.

[VincentM]

When will IPv6 supported in transparent mode (tested on Junos 10.4r1.9)?

> admin@srx3600# set security forwarding-options family inet6 mode flow-based

> admin@srx3600# commit

>

> error: Cannot configure security forwarding-options inet6 flow-based in transparent mode
> error: configuration check-out failed

It's strange because I can configure IPv6 on irb interface (at least from 10.2):

> admin@srx3600# set interfaces irb unit 10 family inet6 address address fdfd:aa8f:5209:0aee::1/64

> admin@srx3600# commit

>

> admin@srx3600#