Hirdetés

Új hozzászólás Aktív témák

  • devast

    addikt

    válasz MasterMark #2467 üzenetére

    Az alábbi konfiggal nem kapok ipv6 címet, de ahogy néztem tcpdumpot, semilyen ipv6 dhcp forgalmat látok...
    show dhcpv6-pd log -ban ez van folyamatosan: client6_send: transmit failed: Network is unreachable

    Konfig ide illő része:
    admin@PENTAGON# show interfaces ethernet eth0
    address dhcp
    description eth0
    dhcp-options {
    default-route no-update
    default-route-distance 210
    name-server no-update
    }
    duplex auto
    firewall {
    in {
    name eth0_IN
    }
    local {
    name eth0_LOCAL
    }
    }
    pppoe 0 {
    default-route auto
    description WAN
    dhcpv6-pd {
    pd 0 {
    interface switch0.1 {
    host-address ::1
    no-dns
    prefix-id :0
    service slaac
    }
    prefix-length /64
    }
    rapid-commit enable
    }
    firewall {
    in {
    ipv6-name WANv6_IN
    name WAN_IN
    }
    local {
    ipv6-name WANv6_LOCAL
    name WAN_LOCAL
    }
    }
    mtu 1492
    name-server none
    password *******
    user-id *****************************
    }
    speed auto

    wanv6_local:

    admin@PENTAGON# show firewall ipv6-name WANv6_LOCAL
    default-action drop
    description "WAN inbound traffic to the router"
    enable-default-log
    rule 10 {
    action accept
    description "Allow established/related sessions"
    state {
    established enable
    related enable
    }
    }
    rule 20 {
    action drop
    description "Drop invalid state"
    state {
    invalid enable
    }
    }
    rule 30 {
    action accept
    description "Allow IPv6 icmp"
    protocol ipv6-icmp
    }
    rule 40 {
    action accept
    description "allow dhcpv6"
    destination {
    port 546
    }
    protocol udp
    source {
    port 547
    }
    }

Új hozzászólás Aktív témák