
! Enable IPv6 ipv6 cef ipv6 unicast-routing ! Enable IPv6 and Prefix Delegation on the WAN interface interface Dialer0 ipv6 address autoconfig default ipv6 enable ipv6 dhcp client pd NODE-PD rapid-commit ipv6 route ::/0 Dialer0 ! Enable IPv6 and Prefix Delegation on the LAN interface interface Vlan1 ipv6 address NODE-PD ::1/64 ipv6 enable
Firefox users can add the "ShowIP" extension:
https://addons.mozilla.org/en-US/firefox/addon/590?id=590
Here is a starting point for basic IPv6 Cisco IOS firewall:
ipv6 inspect name STD6 udp ipv6 inspect name STD6 ftp ipv6 inspect name STD6 icmp ipv6 access-list INTERNET-IN-ACL6 permit icmp any any permit tcp any any established permit udp any any eq 546 deny ipv6 any any ipv6 access-list DENY-ACL6 permit icmp any any permit tcp any any established deny ipv6 any any interface Dialer0 ipv6 verify unicast reverse-path ipv6 inspect STD6 out ipv6 traffic-filter INTERNET-IN-ACL6 in interface Vlan1 ipv6 verify unicast reverse-path ipv6 inspect STD6 out ipv6 traffic-filter DENY-ACL6 out
There is currently a bug (CSCtb10776) with IPv6 CBAC on Cisco which breaks TCP Window Scaling. Hence the "tcp" inspect module has been omitted and substituted with "permit tcp any any established".
At least IOS 12.4(22)T3 is required to support IPv6 via a wireless Dot11Radio interface
Cisco does not currently support IPv6 via BVI interfaces. If you use separate routed interfaces (Eg, Vlan1 and Dot11Radio0.1) for your LAN and WLAN interfaces it will work.
Cisco IOS currently fails to immediately renew the DHCPv6 PD lease after PPP renegotiates. You can manually force DHCPv6 to renew the lease by running "clear ipv6 dhcp client Dialer0". Alternatively the router should renew the DHCPv6 release in less than an hour.