This Remote Access VPN Test Lab Extension describes how to configure IPv6 connectivity for the Corpnet subnet and for remote access VPN clients. You add native IPv6 connectivity to the Corpnet subnet, reconfigure EDGE1 to support IPv6 over remote access connections, and then test end-to-end IPv6 connectivity between CLIENT1 and APP1 on the Corpnet subnet.
Note These instructions are designed for a working remote access VPN test lab that has been configured based on the instructions in the Test Lab Guide: Demonstrate Remote Access VPNs.
If you are running the remote access VPN test lab in a virtual environment, you can create snapshots of the virtual machines (VMs) for all of the test lab computers before performing the following procedures.
Configuring and Demonstrating IPv6 Connectivity over Remote Access VPNs To demonstrate the lack of IPv6 connectivity between CLIENT1 and APP1 with the default remote access VPN test lab:
Although both CLIENT1 and APP1 by default have IPv6 installed and enabled, they are configured with link-local IPv6 addresses (beginning with "fe80"), which only provides connectivity on the same subnet. Since CLIENT1 is on a different subnet than APP1, pinging APP1's link-local address fails.
For IPv6 connectivity between CLIENT1 on the Internet and APP1 over a remote access VPN connection, we must configure the Corpnet subnet for native IPv6 connectivity and configure EDGE1 to act as an IPv6-capable remote access server.
To add native IPv6 connectivity to the Corpnet subnet, do the following:
To add IPv6 connectivity over remote access VPN connections to EDGE1, do the following:
To test IPv6 connectivity over remote access VPN connections to APP1, do the following:
With this new configuration, CLIENT1 can access the resources of APP1 using IPv6 over the remote access VPN connection.
If you are running the remote access VPN test lab in a virtual environment, you can discard the changes made by these procedures by restoring the previously made snapshots of the VMs for all of the computers in the test lab. Alternately, if you would like return to this working remote access VPN configuration with IPv6 enabled, you can create a new set of snapshots before restoring the previously made snapshots.
To manually restore the configuration of the remote access VPN test lab, perform the following procedure.
Restoring the Remote Access VPN Test Lab To restore the remote access VPN test lab to its original configuration:
remote access server problem