IPv6 - No SLAAC on MS SVIs?

Lurick
Getting noticed

IPv6 - No SLAAC on MS SVIs?

I just recently converted a 9300 over to Cloud Managed mode and setup dual-stack SVIs however after assigning IPv6 addresses to the SVIs I noticed that none of the clients get SLAAC addresses and I can't seem to find anything in the GUI to indicate what I might be missing or why none of the clients are picking up IPv6 addresses. If I statically configure an IPv6 address I can hit the gateway and even get out to the internet but I'm a bit confused since I figured SLAAC would be default behavior by now in 17.15.3 in cloud mode.

6 Replies 6
alemabrahao
Kind of a big deal

I'm pretty sure it's not supported, so in your case consider hybrid mode or traditional IOS XE if SLAAC is critical for your deployment.

Hybrid Operating Mode for Catalyst Cloud-Managed Switches - Overview - Cisco Meraki Documentation

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Lurick
Getting noticed

Well it's definitely supported but for some reason all IPV6 RAs are being blocked. When I check the running config via the cloud CLI it shows under each SVI: 

ipv6 enable
ipv6 nd ra suppress all

 

IPv6 RA Guard used to be an option in the old GUI but now it appears to be missing and I can't figure out how to get it back and I suspect that for some reason it's set to enabled but without the toggle I can't permit it which would get SLAAC working again.

In the interim I've opened a support case, hopefully it's an easy fix 🙂

alemabrahao
Kind of a big deal

I got it, do you have any policy under "RA Guard"?

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Lurick
Getting noticed

Well that's where I found something fun 🙂

Apparently the dashboard is directing me to a URL with DHCP-Servers instead of the OTHER page which has DHCPv6 and RA Guard settings. I managed to stumble upon that going between different networks. Unfortunately that didn't solve it setting to allow all RA but I did add some details to the support case to get more info so I'm hopeful

bperezgo
Meraki Employee
Meraki Employee

Hi @Lurick

 

Here is a list of unsupported IPv6 features on IOS XE 17.15.3: https://documentation.meraki.com/MS/Cloud-Native_IOS_XE/Cloud-Native_IOS_XE_Overview#Unsupported_fea...

 

Cheers,

If you found this post helpful, please give it kudos. If my answer solved your problem, click "accept as solution" so that others can benefit from it.
Lurick
Getting noticed

Thanks! I would expect SLAAC to be on there then based on my experience so far but definitely helpful and does explain the difference in landing pages between networks I've seen 🙂 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
Labels