Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

IPv6 two switch

This thread has been viewed 16 times

  • 1.  IPv6 two switch

    Posted Jul 08, 2021 07:24 AM
    Hi,
    We want to deploy IPv6 (Stateful DHCPv6) in the company.
    Communication from core (SW01) switch is OK (ping router, Internet, ), but we do not know how to configure the second switch.
    Ping from SW02 to SW01 is OK, but ping from SW02 to the router or the Internet does not work.

    Router 2a03:a820:1100:122::1
    Aruba 2930F-48G (SW01 = Core switch) (VLAN120 - 2a03:a820:1100:122::2, VLAN40 - 2a03:a820:1100:104::1)
    Aruba 2540-48G (SW02) (VLAN40 - 2a03:a820:1100:104::2)
    DHCP server 2a03:a820:1100:104::3


    SW01 config (Core switch)

    ipv6 route ::/0 2a03:a820:1100:122::1
    ipv6 unicast-routing

    vlan 40
    name "Company"
    untagged 11-20
    ipv6 enable
    ipv6 address 2a03:a820:1100:104::1/64
    ipv6 nd ra managed-config-flag
    ipv6 nd ra prefix default infinite no-autoconfig
    ipv6 helper-address unicast 2a03:a820:1100:104::3
    exit


    vlan 120
    name "Trunk"
    untagged 23-24
    ipv6 enable
    ipv6 address 2a03:a820:1100:122::2/64
    ipv6 nd ra managed-config-flag
    ipv6 nd ra prefix default infinite no-autoconfig
    exit

    dhcpv6-relay


    SW02 config
    ipv6 route ::/0 2a03:a820:1100:104::1

    vlan 40
    name "Company"
    untagged 3-47,51-52
    ipv6 enable
    ipv6 address 2a03:a820:1100:122::2/64
    exit


    ------------------------------
    Pavel Hanak
    ------------------------------


  • 2.  RE: IPv6 two switch

    Posted Jul 08, 2021 08:22 AM

    Does your router have a route for the 2a03:a820:1100:104::/64 network?

    Would be something like 2a03:a820:1100:104::/64 2a03:a820:1100:122::2

    My guess is your core switch can route to the internet because it is directly connected to the router. And your SW-02 can ping SW-01 because they are directly connected, but your router doesn't have a route to tell it how to get to SW-02 (or VLAN 40 specifically)



    ------------------------------
    Christopher Wickline
    ------------------------------

    Original Message


  • 3.  RE: IPv6 two switch

    Posted Jul 08, 2021 10:04 AM
      |   view attached


    Yes, the router has a static route set, send everything from range 2a03:a820:1100:104::/64 to 2a03:a820:1100:122::2 (core switch).
    I simplified the enclosed config, I have used more VLANs on the switch and I have set - VLAN1 (default) -untagged; VLAN 40, ... - tagged, for the connection between the switches. I enabled ipv6 on VLAN1 and pinged SW02 to the router, but not to the internet.

    Set to SW02 VLAN120 and IP from the range 2a03: a820:1100:122::/64 and set the routing rule on the router 2a03:a820:1100:104::/64 to 2a03:a820:1100:122::x/64 s another metric? Bad idea?



    ------------------------------
    Pavel Hanak
    ------------------------------

    Original Message


  • 4.  RE: IPv6 two switch

    Posted Jul 08, 2021 10:40 AM
    Bad information, ping to router from SW02 enabled setting VLAN120 to SW02.

    ------------------------------
    Pavel Hanak
    ------------------------------

    Original Message


  • 5.  RE: IPv6 two switch

    Posted Jul 08, 2021 11:01 AM
      |   view attached
    So I already have the correct ping to the internet from SW02. I had to add VLAN 120 to SW02. Router without change - only static route on core swtich.
    SW01 config (Core switch)
    ipv6 route ::/0 2a03:a820:1100:122::1
    ipv6 unicast-routing
    vlan 40
    name "Company"
    untagged 11-20
    ipv6 enable
    ipv6 address 2a03:a820:1100:104::1/64
    ipv6 nd ra managed-config-flag
    ipv6 nd ra prefix default infinite no-autoconfig
    ipv6 helper-address unicast 2a03:a820:1100:104::3
    exit

    vlan 120
    name "Trunk"
    untagged 23-24
    ipv6 enable
    ipv6 address 2a03:a820:1100:122::2/64
    ipv6 nd ra managed-config-flag
    ipv6 nd ra prefix default infinite no-autoconfig
    exit
    dhcpv6-relay

    SW02 config
    ipv6 route ::/0 2a03:a820:1100:122::1
    vlan 1
    name "DEFAULT_VLAN"
    no untagged 1,3-47,51-52
    untagged 2,48-50
    tagged 2,48-50
    no ip address
    ipv6 enable
    exit
    vlan 40
    name "Company"
    untagged 3-47,51-52
    tagged 2,48-50
    ipv6 enable
    ipv6 address 2a03:a820:1100:104::2/64
    exit
    vlan 120
    name "Trunk"
    tagged 48-52
    ipv6 address 2a03:a820:1100:122::3/64
    ipv6 enable
    exit

    ------------------------------
    Pavel Hanak
    ------------------------------

    Original Message