Cisco ASA Series Cli Configuration Manual page 492

Completing Interface Configuration in Transparent Mode
Configuring IPv6 Addressing
This section describes how to configure IPv6 addressing. For more information about IPv6, see the
Addresses" section on page
This section includes the following topics:
•
•
•
Information About IPv6
This section includes information about how to configure IPv6, and includes the following topics:
•
•
•
IPv6 Addressing
You can configure two types of unicast addresses for IPv6:
•
•
At a minimum, you need to configure a link-local address for IPv6 to operate. If you configure a global
address, a link-local addresses is automatically configured on each interface, so you do not also need to
specifically configure a link-local address. If you do not configure a global address, then you need to
configure the link-local address, either automatically or manually.
Note
If you want to only configure the link-local addresses, see the ipv6 enable (to auto-configure) or ipv6
address link-local (to manually configure) command in the command reference.
Modified EUI-64 Interface IDs
RFC 3513: Internet Protocol Version 6 (IPv6) Addressing Architecture requires that the interface
identifier portion of all unicast IPv6 addresses, except those that start with binary value 000, be 64 bits
long and be constructed in Modified EUI-64 format. The ASA can enforce this requirement for hosts
attached to the local link.
When this feature is enabled on an interface, the source addresses of IPv6 packets received on that
interface are verified against the source MAC addresses to ensure that the interface identifiers use the
Modified EUI-64 format. If the IPv6 packets do not use the Modified EUI-64 format for the interface
identifier, the packets are dropped and the following system log message is generated:
Cisco ASA Series CLI Configuration Guide
1-16
1-5.
Information About IPv6, page 1-16
Configuring a Global IPv6 Address, page 1-17
Configuring IPv6 Neighbor Discovery, page 1-18
IPv6 Addressing, page 1-16
Modified EUI-64 Interface IDs, page 1-16
Unsupported Commands, page 1-17
Global—The global address is a public address that you can use on the public network. This address
needs to be configured for each bridge group, and not per-interface. You can also configure a global
IPv6 address for the management interface.
Link-local—The link-local address is a private address that you can only use on the
directly-connected network. Routers do not forward packets using link-local addresses; they are
only for communication on a particular physical network segment. They can be used for address
configuration or for the ND functions such as address resolution and neighbor discovery. Because
the link-local address is only available on a segment, and is tied to the interface MAC address, you
need to configure the link-local address per interface.
Chapter 1 Completing Interface Configuration (Transparent Mode)
"IPv6