TechKnowSurge
Cisco CCNA 1.8 Cisco CCNA 2.1 Cisco CCST Networking 2.3 Cisco CCNA 1.9
VideoNetworkFree

DEMO: IPv6/Dual Stack Configuration, Switch

Dual-stack switch configuration covers enabling both IPv4 and IPv6 on a Cisco switch management interface using VLAN 1 as the target. The process includes activating IPv6 support via SDM templates, assigning a link-local address, and configuring a static global unicast address.

Complete this video to capture a CTF flag worth 1 point.

About this video

Dual-stack operation on a Cisco switch means the device is configured to support both IPv4 and IPv6 simultaneously. Because switch ports are Layer 2 by default and cannot be individually configured as routed IPv6 interfaces, IPv6 addressing is applied to the management interface — in this case, VLAN 1 — which already holds an existing IPv4 address. Before any IPv6 address can be assigned, the switch must be prepared by changing the SDM (Switching Database Manager) template to the dual IPv4-and-IPv6 default profile in global configuration mode, followed by a full device reload to apply the new hardware resource allocation. Once the switch has reloaded with the dual-stack SDM template active, IPv6 is enabled on the VLAN 1 interface using the ipv6 enable command, which automatically generates a link-local address. This link-local address is a prerequisite for all IPv6 communication and will be present regardless of whether a global unicast address is also configured. A static global unicast address — FC00:1::12 with a /64 prefix length — is then manually assigned to the interface. The show ipv6 interface brief command confirms that both the link-local and global unicast addresses are active on the interface, and a successful ping to another device on the network validates that IPv6 connectivity is functional through the management interface.

What you'll learn

What's covered

Dual Stack Switch Config

Aligned to

Cisco CCNA
1.8 Configure and verify IPv6 addressing and prefix
2.1 Configure and verify VLANs (normal range) spanning multiple switches
1.9 Describe IPv6 address types
Cisco CCST Networking
2.3 Identify IPv6 addresses and prefix formats

Key terms

Virtual LAN
VLAN
A logical grouping of network devices that behave as if they are on the same network regardless of physical location.
Switch
A network device that connects devices within a LAN and forwards traffic based on MAC addresses.
IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
Dual Stack
A network configuration that enables a device to operate with both IPv4 and IPv6 addresses simultaneously on the same interface.
SDM Template
SDM
A Switching Database Manager template on Cisco switches that allocates hardware resources to support specific features such as IPv6 routing.
Link-Local Address
An IPv6 address in the FE80::/10 range that is automatically assigned to every IPv6-enabled interface and used only for communication within a single network link. It cannot be routed beyond the local Layer 2 segment and is required for Neighbor Discovery and router communication.
Extended Unique Identifier 64-bit
EUI-64
A method for automatically generating the 64-bit interface identifier portion of an IPv6 address by inserting 0xFFFE into the middle of a device's 48-bit MAC address and flipping the Universal/Local bit. EUI-64 is used by SLAAC and stateless DHCPv6 to create host-specific IPv6 addresses.

Topics

Ipv6 Dual Stack Cisco Switch Network Configuration Vlan Sdm Template Networking

Transcript

We're going to configure this switch to be dual stack. Dual stack means that it has both IPv6 and IPv4 addresses on it.

In this case right here it is a switch port, so we're not going to configure all of our ports to be IPv6 routed ports. They're all switch ports. But what we can configure is the management interface, which at this point in time is VLAN 1.

Looking at the Management Interface

Let's take a look at that first. I'm going to type in show run, and we're going to take a look at interface VLAN 1, because that's where the management interface is at, and we see that there is an IP address associated with it. So what I want to do is associate an IPv6 address to it.

Enabling IPv6 on the Switch

The first thing that I need to do is activate IP version 6 addressing on this device. I'm going to do that in the global configuration mode, and I'm going to type in sdm prefer, and it's going to be ip version 4 — excuse me, it's going to be dual-ipv4-and-ipv6, so it's quite crazy there — and we're going to set that as being the default operation. We hit enter and now it's going to configure it.

I've actually already done this on the switch, otherwise it would pop up with some notification letting us know that it is now configured. Once we've done that, we would need to do a reload on this server, so I type in reload to do a reload on the server. As I mentioned before, I've already gone through this process, so we don't need to do that at this point in time.

Assigning the Address

Next, what I'm going to do is get into the interface to configure it. I'm going to get into the global configuration mode, get into interface VLAN 1, and now I'm in the interface and I can assign an IP version 6 address just like the routed interface.

There are some commands that it can do with this, like ip version 6 enable, in which case it would just create a local link address on this device so then it can communicate on the local network. In fact, let's go ahead and do that. Let's go ahead and type in enable for that to pop up there, and then I'm going to do show ip version 6 interface brief, and we can see that it has created a local link address on VLAN 1. So now it can communicate. Remember, it has to have that local link for IPv6 to operate, so even if we were to just create a regular IPv6 unicast address on this device, which we're going to do in a second, that would show up in that network right there.

Next, what we're going to do is configure an address on here. What we want is somewhere within our range, which is fc00:1::, and 12 is the one I'm going to assign to the switch. And then we're going to put the slash prefix length, which is 64. If I wanted to do an EUI-64 address, then I would just leave the 12 off of here and then type in EUI-64 at the end of this. But I don't want to do an EUI-64, so I am going to want to just assign it to 12, and I hit enter on that.

Verifying

Then I'm going to do show ip version 6 interface brief, hit enter, and now we see both of those are now assigned to this device. If I wanted to try to communicate out, I could ping fc00 colon colon colon one colon colon three. It should be a pingable address. I am not in the — I'm in one of the submenus, so I have to type do at the beginning of that — and successful.

So now we have configured this interface with an IPv6 address on it, and this is mainly, at this point in time, just as a management interface, so I'd be able to get to this device using IPv6.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →