UnderstandingArubaOSSupported Network Configuration for IPv6 Clients

ArubaOSprovides wired or wireless clients using IPv6 addresses with services such asfirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.functionality, layer-2 authentication, and, with the installation of thePEFNGPolicy Enforcement Firewall. PEF also known as PEFNG provides context-based controls to enforce application-layer security and prioritization. The customers using Aruba mobility controllers can avail PEF features and services by obtaining a PEF license. PEF for VPN users—Customers with PEF for VPN license can apply firewall policies to the user traffic routed to a controller through a VPN tunnel., identity-based security. Amanaged devicedoes not provide routing orNATNetwork Address Translation. NAT is a method of remapping one IP address space into another by modifying network address information in Internet Protocol (IP) datagram packet headers while they are in transit across a traffic routing device.to IPv6 clients (seeUnderstanding IPv6 Exceptions and Best Practices).

Supported Network Configuration

Clients can be wired or wireless and use IPv4 and/or IPv6 addresses. An external IPv6 router is recommended for a complete routing experience (dynamic routing). You can use the WebUI orCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.to display IPv6 client information.

Amanaged devicecan be configured with both IPv4 and IPv6 client addresses on the sameVLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN..

Understanding the Network Connection Sequence for Windows IPv6 Clients

This section describes the network connection sequence for Windows Vista or XP clients that use IPv6 addresses, and the actions performed by the AP and theManaged Device.

1.The IPv6 client sends a Router Solicit message through the AP. The AP passes the Router Solicit message from the IPv6 client through theGREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network.tunnel to themanaged device.

2.Themanaged deviceremoves the802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing.frame and creates an 802.3 frame for the Router Solicit message.

a.Themanaged deviceauthenticates the user, appliesfirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.policies, and bridges the 802.3 frame to the IPv6 router.

b.Themanaged devicecreates entries in the user and session tables.

3.The IPv6 router responds with a Router Advertisement message.

4.Themanaged deviceappliesfirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.policies, then creates an802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing.frame for theRARouter Advertisement. The RA messages are sent by the routers in the network when the hosts send multicast router solicitation to the multicast address of all routers.message. Themanaged devicesends theRARouter Advertisement. The RA messages are sent by the routers in the network when the hosts send multicast router solicitation to the multicast address of all routers.through theGREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network.tunnel to the AP.

5.The IPv6 client sends a Neighbor Solicitation message.

6.The IPv6 router responds with a Neighbor Advertisement message.

7.If theDHCPDynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.需要提供IPv6地址,DHCPv6 process is started.

8.The IPv6 client sends data.