ND router advertisements are sent every 200 seconds ND advertised retransmit interval is 1000 milliseconds ND advertised reachable time is 0 milliseconds ND DAD is enabled, number of DAD attempts: 1 ICMP error messages limited to one every 100 milliseconds This has been fixed in 9.3(1) release and hence we recommend this version if you intend to use SLAAC for configuring the address on ASA interfaces. NOTE: There was a defect (CSCuq62164) in the ASA software that caused the ASA to not assign an address if it received a RA message with both the M and A flags set. interface GigabitEthernet 0/0Įnabling stateless autoconfiguration on the interface configures IPv6 addresses based on prefixes received in Router Advertisement messages. You can configure the interface to obtain the address automatically using stateless address autoconfiguration. You can specify more than one IPv6 addresses for the interface using the command. With the IPv6 address command above, you are manually specifying the global IPv6 address for the interface. You can manually assign a global IPv6 address to the interface.

Next we have to assign the global address to the interface. You can verify the link local address by executing the “show ipv6 interface” command. Using the above command you can assign a link local address to the interface manually. Step 1.2.Ĭonfigure a link local address manually. When you enter IPv6 enable, a link local address is automatically generated (this is based on your mac address). There are 2 ways to assign a link local address to the interface Step 1.1.Ĭonfigure the interface to generate a link local address from its MAC address. BASIC CONFIGURATION Step 1 In this step we assign a link local address to the interface. Here is a quick way to configure up your ASA firewall for IPv6 connectivity. As you will see, there are very few commands required to have your ASA firewall join an IPv6 ready network. This document focuses on a basic ASA setup for a native IPv6 network. IPv6 Feature Support on the Cisco ASA FirewallĪSA supports IPv6 and it can be setup very easily and quickly. Updated: Phillip Remaker August 2016 for 9.6(2) DHCP-PD client feature.

Cisco asa firewall