[f-nsp] Enabling ipv6 on J-BxGMR4

Thu Feb 16 18:17:50 EST 2012

No problem... I'm here to help.

On Thu, Feb 16, 2012 at 4:14 PM, Baity, Josh <Josh.Baity at bhsu.edu> wrote:
> Nope...running the routing image.
>
> SSH at SW_Lib0(config)#ipv6 access-list TEST
> Maximum number of IPv6 Access Lists are already configured!
>
> Can't create an ipv6 ACL...but I'm running 7.3 and you appear to be running 7.3.0a...and now that I look at the release notes for 7.3.0a...i see that IPv6 ingress ACL support is now present.
>
> <sheepishly crawling back into cave>
>
> Thanks Matt!
> __________
> Josh Baity
> Network & Computer Services
> Black Hills State University
>
>
> |-----Original Message-----
> |From: Matt Kassawara [mailto:mkassawara at gmail.com]
> |Sent: Thursday, February 16, 2012 4:09 PM
> |To: Diederik Schouten
> |Cc: Baity, Josh; foundry-nsp at puck.nether.net
> |Subject: Re: [f-nsp] Enabling ipv6 on J-BxGMR4
> |
> |I can configure IPv6 access lists on a FCX running the 7.3.0a routing image
> |without an advanced license.  Are you running the switching image?
> |
> |  Copyright (c) 1996-2011 Brocade Communications Systems, Inc.
> |    UNIT 1: compiled on Dec 02 2011 at 11:46:03 labeled as FCXR07300a
> |                (6803305 bytes) from Primary FCXR07300a.bin
> |        SW: Version 07.3.00aT7f3
> |  Boot-Monitor Image size = 369491, Version:07.3.01T7f5 (grz07301)
> |
> |SSH at i2-net-acc-1(config)#ipv6 access-list test SSH at i2-net-acc-1(config-ipv6-
> |access-list test)#permit ipv6 any any SSH at i2-net-acc-1(config-ipv6-access-list
> |test)#exit SSH at i2-net-acc-1(config)#int e 1/1/20
> |SSH at i2-net-acc-1(config-if-e1000-1/1/20)#ipv6 traffic-filter test in SSH at i2-
> |net-acc-1(config-if-e1000-1/1/20)#exit
> |SSH at i2-net-acc-1(config)#show run int e 1/1/20 interface ethernet 1/1/20
> | ipv6 enable
> | ipv6 traffic-filter test in
> |!
> |
> |
> |On Thu, Feb 16, 2012 at 3:34 PM, Diederik Schouten <dschout at high5.net>
> |wrote:
> |>
> |> This is not really a licensing issue... Brocade can tell you what is and what is
> |not supported when.
> |>
> |>
> |> I'm quite sure that hardware/software related limitations are know to
> |Brocade System and Support Engineers.
> |> Have you opened a case with support to get this confirmed?
> |>
> |> Or did you check the manual?
> |>
> |>
> |> FastIron 7.3 Configuration Guide
> |> Chapter 19
> |> "Configuring IPv6 Access Control Lists (ACLs)"
> |>
> |> Table 134 "Supported IPv6 ACL features"
> |>
> |> FCX
> |> there's a note:
> |> "1. IPv6 ACLs are not supported on base Layer 3 software images on the FSX
> |and FCX platforms"
> |>
> |>
> |> I have to agree that the manuals seem a bit chaotic at times, but when in
> |doubt get it checked by a Brocade SE or by Brocade Support.
> |>
> |> Greetings,
> |>
> |>   Diederik
> |>
> |>
> |>
> |>
> |> On 16 Feb 2012, at 10:48 , Baity, Josh wrote:
> |>
> |>> We've recently discovered that there seems to be a glaring issue with IPv6
> |and licensing on the FCX platform....and that is IPv6 ACL's. It appears that you
> |can enable IPv6, route IPv6, and run IPv6...but you can't apply sanity
> |filters/acl's w/the base L3 image. I've tried creating a simple v6 acl to mimic ra-
> |guard and found that v6 ACL's aren't supported on the L3 base image. I'm
> |running 7.3...have you found differently?
> |>>
> |>> __________
> |>> Josh Baity
> |>> Network & Computer Services
> |>> Black Hills State University
> |>>
> |>>
> |>> |-----Original Message-----
> |>> |From: foundry-nsp-bounces at puck.nether.net [mailto:foundry-nsp-
> |>> |bounces at puck.nether.net] On Behalf Of Matt Kassawara
> |>> |Sent: Thursday, February 16, 2012 2:26 PM
> |>> |To: Jethro R Binks
> |>> |Cc: foundry-nsp at puck.nether.net
> |>> |Subject: Re: [f-nsp] Enabling ipv6 on J-BxGMR4
> |>> |
> |>> |I'm not aware of any special licenses to enable IPv6 on the FCX and
> |>> |most other Brocade IP products, at least in recent history.  Please
> |>> |elaborate on your issue with the FCX.
> |>> |
> |>> |On Thu, Feb 16, 2012 at 1:50 PM, Jethro R Binks
> |>> |<jethro.binks at strath.ac.uk>
> |>> |wrote:
> |>> |> On Thu, 16 Feb 2012, Nick Gray wrote:
> |>> |>
> |>> |>> That is indeed unfortunate as all of our equipment is purchased
> |>> |>> from third parties. Seems that is the way they get you with those
> |contracts.
> |>> |>> Its surprising ipv6 isn't supported by default. Alas, I will wait
> |>> |>> for a kind soul to provide personal help.
> |>> |>
> |>> |> Foundry/Brocade's attitude to ipv6 has never been good over all
> |>> |> the years in my experience.
> |>> |>
> |>> |> Even now, if I want "advanced features" like IPv6 on modern kit
> |>> |> like the F-CX, I have to pay an additional premium which on the
> |>> |> last quote I had nearly doubled the cost of the switch.  I sent a
> |>> |> very long ranty email to my Brocade contact about how disgraceful
> |>> |> it was and so on and so forth, and said he was free to pass on my
> |>> |> comments to whoever.  I didn't really expect a response, and I wasn't
> |disappointed.
> |>> |>
> |>> |> Even these days I'm not quite sure what the situation is with
> |>> |> various models we were told were "ready for IPv6" years ago, but
> |>> |> turns out they need upgrades/premium code, did it in software not
> |>> |> hardware, blah
> |>> |blah.
> |>> |>
> |>> |> Jethro.
> |>> |>
> |>> |> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
> |>> |> Jethro R Binks, Network Manager,
> |>> |> Information Services Directorate, University Of Strathclyde,
> |>> |> Glasgow, UK
> |>> |>
> |>> |> The University of Strathclyde is a charitable body, registered in
> |>> |> Scotland, number SC015263.
> |>> |> _______________________________________________
> |>> |> foundry-nsp mailing list
> |>> |> foundry-nsp at puck.nether.net
> |>> |> http://puck.nether.net/mailman/listinfo/foundry-nsp
> |>> |
> |>> |_______________________________________________
> |>> |foundry-nsp mailing list
> |>> |foundry-nsp at puck.nether.net
> |>> |http://puck.nether.net/mailman/listinfo/foundry-nsp
> |>>
> |>> _______________________________________________
> |>> foundry-nsp mailing list
> |>> foundry-nsp at puck.nether.net
> |>> http://puck.nether.net/mailman/listinfo/foundry-nsp
> |>
> |>
> |> _______________________________________________
> |> foundry-nsp mailing list
> |> foundry-nsp at puck.nether.net
> |> http://puck.nether.net/mailman/listinfo/foundry-nsp