Wireless Access

 View Only

SSID with multiple v6 subnets/VLANs - is it possible?

This thread has been viewed 0 times
  • 1.  SSID with multiple v6 subnets/VLANs - is it possible?

    Posted May 03, 2019 01:59 PM

    I heard at Atmosphere 19' that this is not possible. However, we have a test setup with a subnet with multiple subnets on one SSID. Our test client only sees one RA and it's a unicast to us, not to the usual Multicast address. We found an article from Aruba saying you can combat this with RA-proxy or that's what it sounded like.

     

    "IPv6 RA Proxy

    An IPv6 network deployment typically has one or more upstream routers to delegate IPv6 prefixes through RA

    to clients. When a client connects to the network, it would begin with sending Router Solicitations or DHCP

    IPv6 requests. In case of SLAAC using RA where clients sends Router Solicitations, upstream routers can either

    respond with unicast (L2 or L3) RA or with multicast RA. Whenever a new client joins the network, a unicast or a

    multicast RA is sent to from the router to the client. If it is a multicast packet then existing clients also receive

    the RA, which results in increasing the traffic. Starting from ArubaOS 8.1, this issue is addressed by enabling

    IPv6 proxy RA to snoop incoming unsolicited RA and Router Solicitations packets.

    You can enable IPv6 RA proxy using the CLI and WebUI.

    In the WebUI

    1. In the Managed Network node hierarchy, navigate to the Configuration > Services page and select the

    Firewall tab.

    1. Select Global Settings accordion.
    2. Select IPV6 Proxy RA check box.
    3. Click Submit.
    4. Click Pending Changes.
    5. In the Pending Changes window, select the check box and click Deploy changes.

    In the CLI

    Execute the following command to configure an interval for proxy RA:

    (host) [md] (config) #ipv6 proxy-ra interval

    Execute the following command to enable the proxy RA:

    (host) [md] (config) #ipv6 proxy-ra

    Execute the following command to view the status of the IPv6 proxy RA:

    (host) #show ipv6 ra proxy

    IPv6 RA Proxy status: enabled

    IPv6 RA Proxy interval: 600"

     

    We checked our AOS8 configuration and RA-proxy was enabled. We disabled it and we still didn't see multiple RAs.

     

    Then we found this article date February this year and it says it's not possible.

     

    "02-22-2019 04:48 PM

    Multiple IPv6 VLANs are not supported on the same SSID. The IPv6 VLAN should be assigned to the virtual-ap."

     

     

    What gives? We are confused. Any advice or guidance would be greatly appreciated.