Page 131 / 216 Scroll up to view Page 126 - 130
131
set ip6 dhcp-server information-only off
set ip6 dhcp-server preference 255
set ip6 dhcp-server authoritative on
set ip6 dhcp-server rapid-commit on
set ip6 dhcp-server unicast off
set ip6 dhcp-server leasequery off
set ip6 dhcp-server pd-enable on
set ip6 dhcp-server default-lease-time 2592000
set ip6 dhcp-server preferred-lifetime 604800
set ip6 dhcp-server T1 302400
set ip6 dhcp-server T2 483840
set ip6 dhcp-server info-refresh-time 86400
set ip6 dns primary-address ""
set ip6 dns secondary-address ""
Default IPv6 security configuration values:
set security spi ip6 src-mcast-drop off
set security spi ip6 invalid-mcast-scope-drop on
set security spi ip6 forbidden-addr-drop on
set security spi ip6 deprecated-ext-hdr-drop on
set security spi ip6 src-addr-from-lan-unassigned-drop on
set security spi ip6 lan-assigned-src-addr-from-wan-drop on
set security spi ip6 ula-drop on
set security spi ip6 ignore-dns-from-wan on
set security spi ip6 ignore-dhcp-from-wan on
set security spi ip6 esp-hdr-drop on
set security spi ip6 ah-hdr-drop on
set security spi ip6 allow-inbound off
set security spi ip4 invalid-addr-drop on
set security spi ip4 private-addr-drop off
set security spi flood-limit enable off
set security ip6 firewall-level low
set security ip6 enable on
ip6 gateway conn
set ip6 gateway enable [ on | off ]
Enables or disables IPv6 default gateway.
set ip6 gateway conn
value
Sets the
default Gateway
to point to an associated link specified by the
conn-oid
value. Normally, this would be
the WAN connection.
set ip6 gateway address
ipv6_address
Specifies the IPv6 address of a host on a local or remote network in standard IPv6 format.
ip6 conn
set ip6 conn name
name
enable [ on | off ]
Enables/disables the IPv6 connection named
name
.
Page 132 / 216
Administrator’s Handbook
132
set ip6 conn name
name
type [ static | autoconf | rd | dp | aiccu ]
Type of connection. See below for connection types.
set ip6 conn name
name
mtu
octets
Specified MTU of connection.
set ip6 conn name
name
side [ lan | wan ]
Specified whether the connection is LAN side or WAN side.
set ip6 conn name
name
mcast-fwding [ off | on ]
Turns IPv6 multicast forwarding for this connection off or on. The default is
off
. (not yet implemented)
set ip6 conn name
name
old-prefix-purge-timer
The time in seconds for which old, invalid prefixes are advertised with a lifetime of zero. The intent is to “flush out”
global prefixes on attached IPv6 hosts which suddenly become invalid.
Static Connections
ip6 conn (type = static):
Statically configured IPv6 connection.
set ip6 conn name
name
static link-oid
link_name
Sets the connection named name to point to an associated link specified by the link-oid
link_name
.
set ip6 conn name
name
static ipaddr
ipv6_address
Specifies a static IPv6 address.
set ip6 conn name
name
static prefix-length
value
Specifies the prefix length of the connection's static IPv6 address. Default is
64
.
6rd Connections
ip6 conn (type = rd, side = wan).
This WAN connection type is a 6rd tunnel over an IPv4 conn in accordance
with RFC 5569.
set ip6 conn name
name
6rd-tunnel type [ cpe | gateway ]
The 6rd connection can operate in “cpe” or “gateway” mode as configured by the type parameter. “cpe” mode is
used when operating as a CPE; “gateway” mode is used when operating as a “6rd relay” as per RFC 5569.
set ip6 conn name
name
6rd-tunnel ipv4-conn-oid
ipv4_name
Sets the 6rd connection named
name
to tunnel over an associated IPv4 connection named
ipv4_name
.
Page 133 / 216
133
set ip6 conn name
name
6rd-tunnel use-dhcp-values [ off | on ]
If this parameter is on, 6rd-provisioned parameters are obtained via the underlying DHCPv4 client associated with
IPv4 connection named ipv4-name. See “draft-ietf-softwire-ipv6-6rd-10” for DHCP format description.
ip6 conn (type = rd, 6rd-tunnel use-dhcp-values = off).
set ip6 conn name
name
6rd-tunnel prefix
IPv6_address
6rd domain prefix.
set ip6 conn name
name
6rd-tunnel prefix-length
value
[ 1 - 63 ]
6rd domain prefix length.
set ip6 conn name
name
6rd-tunnel ipv4-common-bits
value
[ 0 - 31 ]
The number of bits common to all IPv4 addresses within the 6rd domain. The top-most bits of the IPv4 address
will be “subtracted” from the 6rd address. If the whole 32-bit IPv4 address is contained in the 6rd IPv6 address,
this value is set to zero. Default is 0, meaning all 42 bits of the IPv4 address are embedded in the 6rd prefix.
set ip6 conn name
name
6rd-tunnel relay-ipv4-addr
IPv4_address
The IPv4 anycast address of the 6rd border gateway.
set ip6 conn name
name
6rd-tunnel ipv4-tx-tos-mode [ off | use-ipv6 ]
off
means the TOS field in the IPv4 header is set to zero for transmitted 6rd packets.
use-ipv6
means the the TOS
field in the IPv4 header is set to the DS field of the 6rd-encapsulated IPv6 packet.
set ip6 conn name
name
6rd-tunnel ipv4-tx-to-br [ off | on ]
off
means each packet set to a destination IPv6 address within the originating 6rd domain is sent directly to the
6rd endpoint.
on
means that all packets are transmitted to the 6rd border gateway.
AICCU (SixXS tunnel broker) Connections
ip6 conn (type = aiccu, side = wan).
This connection type enables an IPv6 connection to the IPv6 internet
over an IPv4/NAT/UDP tunnel to a tunnel endpoint administered by tunnel broker SIXXS (www.sixxs.net).
You set up an account with SIXXS, and subsequently get assigned a tunnel and a subnet (usually a /48 subnet).
set ip6 conn name
name
aiccu username
username
SIXXS username.
set ip6 conn name
name
aiccu password
password
SIXXS password.
Page 134 / 216
Administrator’s Handbook
134
Delegated Prefix Connections
ip6 conn (type = dp, side = lan).
A conn of type “delegated prefix” obtains its global prefix information from
one or more prefix from another IPv6 conn (typically a WAN conn), if available. In order for a “dp” connection to
become fully operational, its underlying link must be up AND the IPv6 connection which delegates the prefix must
have created one or more prefixes from which to draw the “dp” connection's global prefix.
set ip6 conn name
name
dp link-oid
link_name
set ip6 conn name
name
dp conn-oid
ipv6_conn_name
Sets the dp connection named name to obtain its prefix from IPv6 connection named
ipv6_conn_name
.
set ip6 conn name
name
dp subnet-length
value
[ 0 - 16 ]
The length of the subnet portion of the delegated prefix. Default is
0
.
set ip6 conn name
name
dp subnet-id
value
[ 0 - 65535 ]
If a subnet length is specified, the value that would occupy the of the subnet portion of the conn's IPv6 prefix.
Default is
0
.
set ip6 conn name
name
dp stay-up [ off | on ]
If the delegated prefix parameter
stay-up
is set to
on
, the global prefix assigned from the conn delegating the pre-
fix remains active in the event that the conn delegating the prefix goes down, and the prefix becomes invalid. This
enables local LAN-side hosts to continue to use the global prefix uninterrupted. If parameter
stay-up
is set to
off
,
the connection's delegated prefix becomes invalid when the connection named
ipv6-conn-name
delegating the
prefix goes down.
Router Advertisement and DHCPv6 Server
ip6 conn (side = lan).
Router Advertisements and the DHCPv6 server are available on LAN-side conns as the
means to provide clients with stateful or stateless IPv6 prefixes and addresses, as well as addition client parame-
ters such as MTU size and IPv6-addressable DNS servers.
set ip6 conn name
name
radv enable [ off | on ]
on
means radv is enabled for this conn.
set ip6 conn name
name
radv min-rtr-adv-interval
seconds
[ 3 - 1350 ]
The minimum time allowed between sending unsolicited multicast router advertisements from the link, in seconds.
set ip6 conn name
name
radv max-rtr-adv-interval
seconds
[ 4 - 1800 ]
The maximum time allowed between sending unsolicited multicast router advertisements from the interface, in
seconds.
set ip6 conn name
name
dhcp-server
enable [ off | on ]
on
means the DHCPv6 server is enabled for this conn.
Page 135 / 216
135
set ip6 conn name
name
dhcp-server
addr-count
value
[ 0 - 256 ]
The number of IPv6 addresses available to serve to DHCPv6 stateful clients. If the
addr-count
parameter is set to
zero, the DHCPv6 server operates in “stateless” mode.
set ip6 conn name
name
dhcp-server
start-addr-offset
value
[ 0 - 65536 ]
If the
addr-count
parameter is greater than zero, the start address is an offset from the base address of the prefix
which is assigned to the LAN conn.
set ip6 conn name
name
dhcp-server
lease-time
seconds
[ 180 - 8553600 ]
DHCPv6 lease time.
set ip6 conn name name dhcp-server
dns-server optional IPv6 address
IPv6 address of advertised DNS server (optiona).
IPv6 DHCP Server
set ip6 dhcp-server enable [ on | off ]
Globally enables or disables DHCPv6 servers on all IPv6 LAN conns. The default is
on
.
set ip6 dhcp-server information-only [ off | on ]
When set to
on
DHCPv6 servers on all IPv6 LAN conns operate in stateless “information-only” mode. The default
is
off
.
set ip6 dhcp-server preference 255
Sets the preference option, as defined in RFC1315, sec. 22.8. The preference option in the server’s Advertise
message may assist a DHCPv6 client in selecting from more than one server on the LAN.
set ip6 dhcp-server authoritative [ on | off ]
If a client requests an IP address on a given network segment that the server knows is not valid for that segment,
and
authoritative
is set to
on
, the server will respond with a DHCPNAK message, causing the client to forget its
IP address and try to get a new one. If
authoritative
is set to
off
, the server will ignore the client’s request. The
default is
on
.
set ip6 dhcp-server rapid-commit [ on | off ]
Enables or disables the rapid commit option per rfc3315 sec 22.14. (http://tools.ietf.org/html/rfc3315#section-
22.14) The default is
on
.
set ip6 dhcp-server unicast [ off | on ]
Enables or disables server unicast option per rfc3315 sec 22.12. (http://tools.ietf.org/html/rfc3315#section-22.12)
The default is
off
.
set ip6 dhcp-server leasequery [ off | on ]
Enables or disables DHCPv6 Leasequery option per rfc5007. (http://tools.ietf.org/rfc/rfc5007.txt) The default is
off
.

Rate

4 / 5 based on 3 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top