SecureStack C2 Configuration Guide 22-1
22
IPv6 Proxy Routing
ThischapterdescribesthecommandsusedtoenableIPv6proxyroutingandthesuggested
proceduretoconfigureamixedC2andC3stacktouseIPv6proxyrouting.
Overview
IPv6proxyroutingallowsamixedC2/C3stacktosupportsomeIPv6routingfunctionality.When
IPv6proxyroutingisenabled,alltheswitchesinthestackcansupportIPv6unicastroutingand
IPv6tunneling.Youcanconfigureport‐basedandVLAN‐basedIPv6routinginterfacesonanyC2
orC3stack
unit.ThereisnochangeinexistingIPv4routingcapabilities.
Sincethisisafunctionthatexistsonlyinamixedstack,itisimplementedonlyintheC2firmware,
release5.01andlater.ForIPv6proxyroutingtoexistinthestack,aC3unitmustrunasthe
managerofthestack.Tofacilitatethis,thestackmanagerpreferenceofC3unitsshouldbesettoa
highervaluethanC2units.IfaC3unitisaddedtoanallC2stack,youmustmovethemanagerto
aC3unittousethisfeature.
MultipleC3units
canexistinthemixedstack.AlltheC3unitsinthemixedstackwill
independentlyperformhardwareIPv6routing/tunneling.ThemanagerC3unitwilltransparently
dothehardwareIPv6routing/tunnelingforalltheC2units.
WhenIPv6proxyroutingisenabled,theC2beingconfiguredforrouting/tunneling (calledthe
proxyclient)isconfiguredtoredirecttheroutedIPV6/Tunnelingpacketstooneofthestacking
portsoftheC3stackmanager(calledtheproxyserver).TheC2isonlyconfigurediftheproxy
featureisalreadyenabledonthestack.ItshouldbenotedthatonlyIPv6packetswitha
destination
MACoftherouterMACofthesystemareredirectedtotheproxyserver.
Ontheproxyserver,allincomingpacketstothestackingportswithadestinationofoneofthe
stackingportswillbeprocessedthroughL2andL3switchinglogic.Ifthedestinationportisnot
one
ofthestackingports(notanIPv6packet),thentheincomingpacketisforwardedbasedon
headerinformation.
Thisfeatureisdisabledbydefault.
InordertousetheOSPF,PIM,DVMRP,orVRRPprotocols,youmusthavepurchasedand
installedtheC2advancedroutinglicense.
For information about... Refer to page...
Overview 22-1
Preparing a Mixed Stack for IPv6 Proxy Routing 22-2
Commands 22-3