Cisco via Tunnel Broker Configuration Guide

Please note: The configuration supplied on this page is generic, it may not perfectly suit your network or configuration. Using this configuration is your own responsibility, assistance from Internode regarding this configuration may be limited.

Client Configuration:

In order to connect a Cisco device through the tunnel broker, you first need to install the gateway client onto a computer, and configure it as a router.

For client installation guides, click here..

Here are the relevant settings to add to the gateway client in addition to the settings quoted in the client configuration guides, for connecting to a Cisco device:

host_type=router
prefixlen=60
tunnel_mode=v6v4
client_v4=YOUR-EXTERNAL-IPV4-ADDRESS
client_v6=auto
proxy_client=yes

Cisco Configuration:

and here are the releant config snippets to add to your Cisco device:

ipv6 unicast-routing
ipv6 cef
!
interface Tunnel6
description *** IPv6 tunnel to Internode Broker ***
no ip address
ipv6 address IPV6-ADDRESS-FROM-TUNNEL-BROKER
ipv6 enable
tunnel source YOUR-EXTERNAL-IPV4-ADDRESS
tunnel destination 150.101.0.201
tunnel mode ipv6ip
!
interface Vlan1
description *** Your local network interface ***
ip address YOUR-CURRENT-IPV4-ADDRESS-AND-MASK
ip nat inside
ip virtual-reassembly
ipv6 address /64-FROM-/60-FROM-TUNNEL-BROKER eui-64
ipv6 enable
!
ipv6 route ::/0 Tunnel6 

After you have applied these configuration details, you then need to start the client on your computer, ensure it connects, then test from your Cisco device.

Test it

Start by testing from the Cisco then from your computer.

From the Cisco: Start with a sh ipv6 int brief then try to ping some hosts.

#sh ipv6 int brief
------ Some output omitted -----
Vlan1                      [up/up]
    FE80::216:C8FF:EF30:C98C
    2001:44B8:26:30:216:C8FF:EF30:C98C
Tunnel6                   [up/up]
    FE80::CB7A:EA7B
    2001:44B8:61::D

You should see valid ipv6 address on these interfaces. Now try to ping a ipv6 only host.

#ping ipv6 ipv6.google.com
Translating "ipv6.google.com"...domain server (192.231.203.132) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:4860:0:2001::68,
timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 284/284/288 ms

It works... so lets try from the computer. Do you have a IP?

# ifconfig

----- Some output omitted -----

en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   inet6 fe80::21e:52ff:ef72:1b50%en1 prefixlen 64 scopeid 0x5
   inet 10.57.66.2 netmask 0xffffff00 broadcast 10.57.66.255
   inet6 IPV6-ADDRESS prefixlen 64 autoconf
   ether 00:1e:25:72:1b:50 
   media: autoselect status: active
   supported media: autoselect

So you have a valid address let try to ping a host.

$ ping6 ipv6.google.com
PING ipv6.google.com(2001:4860:0:2001::68) 56 data bytes
64 bytes from 2001:4860:0:2001::68: icmp_seq=0 ttl=53 time=288 ms
64 bytes from 2001:4860:0:2001::68: icmp_seq=1 ttl=53 time=283 ms
64 bytes from 2001:4860:0:2001::68: icmp_seq=2 ttl=53 time=317 ms
64 bytes from 2001:4860:0:2001::68: icmp_seq=3 ttl=53 time=283 ms

Okay, it's all working! You're done.