<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">On Oct 3, 2019, at 12:30 PM, Stephen Satchell <list@satchell.net> wrote:<blockquote type="cite"><div dir="ltr"><span>On 10/3/19 8:22 AM, Fred Baker wrote:</span><br><blockquote type="cite"><span>And on lists like this, I am told that there is no deployment - that</span><br></blockquote><blockquote type="cite"><span>nobody wants it, and anyone that disagrees with that assessment has</span><br></blockquote><blockquote type="cite"><span>lost his or her mind. That all leaves me wondering which of us</span><br></blockquote><blockquote type="cite"><span>doesn't quite have their eye on the ball.</span><br></blockquote><span>For the reasons you provided in your original message, the learning</span><br><span>curve for IPv6 -- EVERYTHING about IPv6, not "just enough to get by" --</span><br><span>is steep and uncertain.</span><br><span></span><br><span>And I think you may be misunderstanding the problem. It's not that</span><br><span>people don't want it. They lack the zen of it, they don't see the four</span><br><span>corners of the thing, something that people took years to learn in IPv4.</span><br><span> (I had a leg up, being involved in the original ARPAnet, so I got to</span><br><span>watch it grow. Still have the 1984 DDN handbooks, too.)</span><br></div></blockquote><br><div>Funny thing. I was quoting the email in this thread just prior to yours. I won’t say there are no issues in IPv6 deployment; there are. However, having done some myself, if you have IPv4-zen, IPv6-zen is pretty easy to come by with a cheat sheet. For example, does your configuration have statements like</div><div><br></div><div>IP address 192.0.2.1 255.255.255.0 ?</div><div><br></div><div>Everywhere you find that, you add a statement like </div><div><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">ipv6 address 2001:db8:AABB:1234::/64 eui-64</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">What I did for the IID (IPv4-speak: “host part”) in a recent project was use the IPv4 address of the interface:</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">IP address 192.0.2.1 255.255.255.0</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">IPv6 address 2001:db8:aabb:1234:192:0:2:1::/128</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">The idea was to give the operator a clue. I also put the VLAN number in as the subnet number. A security geek would be all over me - “too many clues!”. That said, </pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">I found that by typing “IPv6 address command” into google; the first hit was <a href="https://study-ccna.com/how-to-configure-ipv6/">https://study-ccna.com/how-to-configure-ipv6/</a>. Then, noting that Cisco has a bad habit of pulling things out of there air even though there is a defined way to accomplish it, I corrected the prefix to use the defined documentation prefix.</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">It gets a little interesting when you step away from the switch or router to the firewall; they have their own commands. The ASA, for example, really believes in what Cisco calls “zone-based access control” or “context-based access control”. The good news is that if that’s what you’re trying to achieve (it’s common), configuring that for IPv6 is pretty simple.</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">And similarly, BGP and access lists look a lot like their IPv4 counterparts.</pre><pre style="box-sizing: inherit; overflow: auto; font-family: monospace, monospace; font-size: 15px; background-color: rgb(238, 238, 238); line-height: 1.6; margin-bottom: 15px; max-width: 100%; padding: 15px; -webkit-text-size-adjust: 100%;">What’s a little more of a pain is that if you are using other appliance in your network, they may or may not have IPv6 configurability, and there may or may not be a drop-in replacement. That becomes a conversation with your vendors of choice.</pre></div></body></html>