IPv6 Policy based routing?

Dick Visser visser at terena.org
Fri Apr 19 11:30:07 CEST 2013


Hi guys

I'd like to implement a transparent proxy in my network, and for that
I need Policy Based Routing to work for VLANs on our Cisco 3750X. We
appear to be in good shape:

gatekeeper#sho sdm prefer
 The current template is "desktop IPv4 and IPv6 routing" template.
 The selected template optimizes the resources in  the switch to
support this level of features for
 8 routed interfaces and 1024 VLANs.

  number of unicast mac addresses:                  1.5K
  number of IPv4 IGMP groups + multicast routes:    1K
  number of IPv4 unicast routes:                    2.75K
    number of directly-connected IPv4 hosts:        1.5K
    number of indirect IPv4 routes:                 1.25K
  number of IPv6 multicast groups:                  1K
  number of directly-connected IPv6 addresses:      1.5K
  number of indirect IPv6 unicast routes:           1.25K
  number of IPv4 policy based routing aces:         0.25K
  number of IPv4/MAC qos aces:                      0.5K
  number of IPv4/MAC security aces:                 0.5K
  number of IPv6 policy based routing aces:         0.25K
  number of IPv6 qos aces:                          0.5K
  number of IPv6 security aces:                     0.5K


But if I actually try to use it, it works for IPv4, but no go for IPv6:

gatekeeper#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
gatekeeper(config)#interface vlan 20
gatekeeper(config-if)#ipv6 policy
                           ^
% Invalid input detected at '^' marker.

Turns out the switch doesn't do it at all:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/configuration/guide/swipv6.html#wp1115839

Cisco says it's not supported on any platform.

Since I'll be needed a new switch any way, I might as well look beyond
Cisco. I hear that a Juniper EX4200 might do it. Other might as well.
However, I'd rather buy a new box based on real world experience that
it supports a feature, than based on docs saying it supports it - and
then later finding out that it doesn't because of corner case x, y and
z.

So, are there people here that are succesfully using dual stack Policy
Based Routing on a VLAN, on a similar switch?

Many thanks,



--
Dick Visser
System & Networking Engineer
TERENA Secretariat
Singel 468 D, 1017 AW Amsterdam
The Netherlands



More information about the ipv6-ops mailing list