SRX

 View Only
last person joined: 17 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX IPv6

    Posted 11-08-2022 10:34

    Hello guys. This is my first interaction.

    I have a SRX300. I am need receive IPv6 Prefix via interface pp0 and redistribuite this on bridge lan. As can do it?



    ------------------------------
    Guilherme Rigueti
    ------------------------------


  • 2.  RE: SRX IPv6

     
    Posted 12-01-2022 04:30
    Hello,

    Short: yes! a bit depending on how your Service Provider is handing out "IPv6" allocations (SLAAC / dhcpv6-pd)..

    Pp0 configuration for IPv6:

      family inet6 {
            dhcpv6-client {
                client-type stateful;
                client-ia-type ia-pd;
                client-identifier duid-type duid-ll;
                req-option dns-server;
                retransmission-attempt 9;
                inactive: update-router-advertisement {
                    interface irb.3 {
                        max-advertisement-interval 20;
    } }
                update-server;

    The default-gateway for IPv6 should point to your ISP:

    set routing-options rib inet6.0 static route ::/0 next-hop pp0.0
    

    Of course the IPv6 Routing-engine should be enabled:

    set security forwarding-options family inet6 mode flow-based
    

    And the DHCPv6 service should be allowed on the untrust zone and the interface pp0.0 be

    part of that zone:

    set security zones security-zone untrust interfaces pp0.0
    set security zones security-zone untrust host-inbound-traffic system-
    services dhcpv6
    
    Hope this helps a bit

    ------------------------------
    Marcel ten Berg

    Solution Architect
    Juniper Networks
    ------------------------------



  • 3.  RE: SRX IPv6

    Posted 12-06-2022 20:01

    Hi Marcel. Thanks by reponse.

    I will deploy it this way and follow feedback results.



    ------------------------------
    Guilherme Rigueti
    ------------------------------