Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com
I did this in the past without troubles. http://www.gossamer-threads.com/lists/nsp/ipv6/27525 Should give you some help. - Jared -- snip -- ! vpdn enable ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! interface Virtual-Template1 ip unnumbered FastEthernet2/0 ipv6 unnumbered FastEthernet2/0 ipv6 enable ipv6 nd reachable-time 30 no ipv6 nd suppress-ra peer default ip address pool DIAL-IN peer default ipv6 pool DIAL-IN6 ppp encrypt mppe 128 ppp authentication ms-chap ppp ipcp dns 129.250.35.250 129.250.35.251 ! ip local pool DIAL-IN 10.10.15.72 10.10.15.79 ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64 -- snip -- On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
ok, that's using RA but i want to do a routed interface so give the PPTP host a static ip and route through it thank you ----- Original Message ----- From: "Jared Mauch" <jared@puck.nether.net> To: "Meftah Tayeb" <tayeb.meftah@gmail.com> Cc: <nanog@nanog.org> Sent: Thursday, September 15, 2011 6:36 PM Subject: Re: IPV6 over a PPTP Link I did this in the past without troubles. http://www.gossamer-threads.com/lists/nsp/ipv6/27525 Should give you some help. - Jared -- snip -- ! vpdn enable ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! interface Virtual-Template1 ip unnumbered FastEthernet2/0 ipv6 unnumbered FastEthernet2/0 ipv6 enable ipv6 nd reachable-time 30 no ipv6 nd suppress-ra peer default ip address pool DIAL-IN peer default ipv6 pool DIAL-IN6 ppp encrypt mppe 128 ppp authentication ms-chap ppp ipcp dns 129.250.35.250 129.250.35.251 ! ip local pool DIAL-IN 10.10.15.72 10.10.15.79 ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64 -- snip -- On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com __________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com
So, in order to do that, I recommend you do the backend authentication via RADIUS to handle this provisioning and routing. Cisco has documentation on the AV pairs that are necessary to send in the RADIUS response that goes to your PPTP device. Make sure that you are using something with a beefy enough CPU to perform this as PPTP/IPv6 may be in the "slow-path" depending on the device. You want as much to be offloaded to the hardware as feasible. - Jared On Sep 15, 2011, at 1:38 PM, Meftah Tayeb wrote:
ok, that's using RA but i want to do a routed interface so give the PPTP host a static ip and route through it thank you
----- Original Message ----- From: "Jared Mauch" <jared@puck.nether.net> To: "Meftah Tayeb" <tayeb.meftah@gmail.com> Cc: <nanog@nanog.org> Sent: Thursday, September 15, 2011 6:36 PM Subject: Re: IPV6 over a PPTP Link
I did this in the past without troubles.
http://www.gossamer-threads.com/lists/nsp/ipv6/27525
Should give you some help.
- Jared
-- snip -- ! vpdn enable ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! interface Virtual-Template1 ip unnumbered FastEthernet2/0 ipv6 unnumbered FastEthernet2/0 ipv6 enable ipv6 nd reachable-time 30 no ipv6 nd suppress-ra peer default ip address pool DIAL-IN peer default ipv6 pool DIAL-IN6 ppp encrypt mppe 128 ppp authentication ms-chap ppp ipcp dns 129.250.35.250 129.250.35.251 ! ip local pool DIAL-IN 10.10.15.72 10.10.15.79 ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64 -- snip --
On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
great suggestion i didn't want to use it for a high load of users, just for 2 linked routers but anyway, i did it through a 6in4 tunnel over PPTP Thank you ----- Original Message ----- From: "Jared Mauch" <jared@puck.nether.net> To: "Meftah Tayeb" <tayeb.meftah@gmail.com> Cc: <nanog@nanog.org> Sent: Thursday, September 15, 2011 9:27 PM Subject: Re: IPV6 over a PPTP Link So, in order to do that, I recommend you do the backend authentication via RADIUS to handle this provisioning and routing. Cisco has documentation on the AV pairs that are necessary to send in the RADIUS response that goes to your PPTP device. Make sure that you are using something with a beefy enough CPU to perform this as PPTP/IPv6 may be in the "slow-path" depending on the device. You want as much to be offloaded to the hardware as feasible. - Jared On Sep 15, 2011, at 1:38 PM, Meftah Tayeb wrote:
ok, that's using RA but i want to do a routed interface so give the PPTP host a static ip and route through it thank you
----- Original Message ----- From: "Jared Mauch" <jared@puck.nether.net> To: "Meftah Tayeb" <tayeb.meftah@gmail.com> Cc: <nanog@nanog.org> Sent: Thursday, September 15, 2011 6:36 PM Subject: Re: IPV6 over a PPTP Link
I did this in the past without troubles.
http://www.gossamer-threads.com/lists/nsp/ipv6/27525
Should give you some help.
- Jared
-- snip -- ! vpdn enable ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! interface Virtual-Template1 ip unnumbered FastEthernet2/0 ipv6 unnumbered FastEthernet2/0 ipv6 enable ipv6 nd reachable-time 30 no ipv6 nd suppress-ra peer default ip address pool DIAL-IN peer default ipv6 pool DIAL-IN6 ppp encrypt mppe 128 ppp authentication ms-chap ppp ipcp dns 129.250.35.250 129.250.35.251 ! ip local pool DIAL-IN 10.10.15.72 10.10.15.79 ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64 -- snip --
On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6466 (20110915) __________ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com __________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6466 (20110915) __________ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com
On Thu, Sep 15, 2011 at 09:18:26PM +0200, Meftah Tayeb wrote:
great suggestion i didn't want to use it for a high load of users, just for 2 linked routers but anyway, i did it through a 6in4 tunnel over PPTP
If that's your goal, you should just use GRE or IPIP if the IPs are static on each end. You may be able to create the local user on the device if one end is a dynamic IP, but I don't have experience there with PPTP on IOS. -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
Am 15.09.2011 18:24, schrieb Meftah Tayeb:
can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ?
These slides were presented on various conferences showing native v6 via L2TP. While you asked for PPTP, I thought to point to the link anyway, maybe the slides are useful. http://www.blogg.ch/uploads/Native-IPv6-via-xdsl-how-to-tweak-your-LNS_v0.41... Fredy Künzler Init7 / AS13030
Maybe you can try,i am not sure it will work or not, i don't have the lab to test the script at this moment. aaa attribute list IPV6 attribute type addrv6 "DHCPv6POOL" protocol ipv6 ! username ipv6 privilege 0 password ipv6 username ipv6 aaa attribute list IPV6 ! Terry 发件人： Jared Mauch 发送时间： 2011-09-16 00:36:58 收件人： Meftah Tayeb 抄送： nanog 主题： Re: IPV6 over a PPTP Link I did this in the past without troubles. http://www.gossamer-threads.com/lists/nsp/ipv6/27525 Should give you some help. - Jared -- snip -- ! vpdn enable ! vpdn-group 1 ! Default PPTP VPDN group accept-dialin protocol pptp virtual-template 1 ! interface Virtual-Template1 ip unnumbered FastEthernet2/0 ipv6 unnumbered FastEthernet2/0 ipv6 enable ipv6 nd reachable-time 30 no ipv6 nd suppress-ra peer default ip address pool DIAL-IN peer default ipv6 pool DIAL-IN6 ppp encrypt mppe 128 ppp authentication ms-chap ppp ipcp dns 129.250.35.250 129.250.35.251 ! ip local pool DIAL-IN 10.10.15.72 10.10.15.79 ipv6 local pool DIAL-IN6 3ffe:3ffe:0:7080::/62 64 -- snip -- On Sep 15, 2011, at 12:24 PM, Meftah Tayeb wrote:
Hello, can i ofer ipv6 addresses through a PPTP connection using cisco ? if yes, how please ? Thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746
__________ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6465 (20110915) __________
Le message a été vérifié par ESET NOD32 Antivirus.
participants (4)
-
Fredy Kuenzler -
gdxnfx -
Jared Mauch -
Meftah Tayeb