No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

When IPv4/IPv6 Dual Stack and SLAAC Are Configured on an S12712, IPv6 STAs Cannot Ping the IPv6 Global Unicast Address of the Gateway

Publication Date:  2019-04-07 Views:  143 Downloads:  0

Issue Description

IPv4/IPv6 dual stack is deployed on an S12712 running V200R011C10SPC600. The IP source guard (IPSG) function is enabled for the wireless IPv4 network using the ip source check user-bind enable command. The stateless address autoconfiguration (SLAAC) function is configured for the wireless IPv6 network. However, IPv6 STAs cannot ping the IPv6 global unicast address of the gateway.

The IPv6 configuration on the switch's interface is as follows:

interface Vlanif963

ipv6 enable

ip address 10.124.0.254 255.255.255.0    

ipv6 address 2001:DA8:4015:3C2::1/64

undo ipv6 nd ra halt

ospfv3 1 area 0.0.0.124

The IPSG configuration for the wireless IPv4 network is as follows:

vap-profile name test

service-vlan vlan-id 963

ssid-profile test

ip source check user-bind enable

arp anti-attack check user-bind enable  

anti-attack broadcast-flood disable

learn-client-address dhcp-strict

Handling Process

After IPSG is enabled for the wireless IPv4 network, the switch generates the bindings of source IP addresses, source MAC addresses, VLANs, and inbound interfaces, and checks validity of IPv4 addresses in the received packets against these bindings.

The switch cannot generate IPSG binding entries for IPv6 addresses of STAs. Therefore, the switch discards IPv6 packets sent from STAs. As a result, the IPv6 STAs cannot ping the IPv6 global unicast address of the gateway.

After IPSG is disabled for the wireless IPv4 network, IPv6 STAs can ping the IPv6 global unicast address of the gateway.

Root Cause

After IPSG is configured for the wireless IPv4 network, the switch cannot generate IPSG binding entries for IPv6 addresses of STAs. Therefore, the switch discards IPv6 packets sent from STAs. As a result, the IPv6 STAs cannot ping the IPv6 global unicast address of the gateway.

Solution

Disable the IPSG function for the wireless IPv4 network.

The configuration commands are as follows:

vap-profile name test

undo ip source check user-bind enable

This bug has been fixed on S12712 switches running V200R012.

END