IPv6 in the enterprise

[Mark Kamichoff]

On Mon, Apr 18, 2011 at 10:39:56AM -0500, Dale W. Carder wrote:
> We are using HSRP with static addressing (for link-local as well).
> For the version of code that we are on, we couldn't use a global
> address as the HSRP address, but this has not proved to be an issue.
> In addition, it has had the nice side effect of being able to tell
> everyone that the router is always fe80::1, regardless of what network
> you are on.

We're doing the same exact thing with HSRP, and Cisco tells us that GUA
addresses will be supported in the future.

On Juniper gear we use VRRP, and it works as expected with IPv6.  The
link-local address has to be hardcoded, so we went with the same scheme
as we did with HSRP (fe80::1), and additionally have a GUA address
(<prefix>::1) that can be used, too.  The only problem with Junos is
that it throws a warning for every VRRP instance during commit saying
that router advertisements are not configured.  It's annoying, but
doesn't impact anything.

With some certain Foundry/Brocade equipment, VRRP-E for IPv6 is in its
infancy or not supported at all, so as a poor-man's FHRP we tried to
anycast <prefix>::1 but ran into a bug with that.  Surprisingly,
subnet-router anycast still works, so we're using that as the default
gateway for now, although failover will be slow :)

- Mark

-- 
Mark Kamichoff
prox at prolixium.com
http://www.prolixium.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20110418/b54027cc/attachment.bin