Hi,

I've recently joined the IPv6 movement and I have some questions.
Keep in mind I'm trying to keep everything in the new environment as IPv6.
I'll replace the first 4 segments of my ipv6 address in this post to 1:2:3:4

Okey so I have a shiny new /64 ipv6 network.
Default Gateway is 1:2:3:4::1
Web Server IP 1:2:3:4::2
Firewall IP 1:2:3:4::3
I can ping out and in.

Now Here is my problem, I don't want a /64.
I'd much rather have two /65 and route 1:2:3:4:8000::0/65 via 1:2:3:4::3
My data center say they won't change my presented network to a /65 and route the other /65 over it.

Do I have any options or do I have to accept I cant have a route-able firewalled ipv6 network segment?

In theory they should've given you a /48

When it comes to IPv6, forget about the number of IPs. What's important is the number of subnets. A /64 is a single subnet. You could break that into smaller chunks, but it's against RFC.

The RFC states that companies should be assigned /48s and not /64s. Tell your provider that you need more than a single subnet.

_________________
www.mellowd.co.uk/ccie/

I stand by the above. In the Netherlands, home users are assigned /48's by some ISP's, so surely a company can have one.

_________________
http://reggle.wordpress.com

If I ask for a /48 surely I'll have the same problem...

why? you'll have 65536 subnets (/64) to use.

_________________
som om sinnet hade svartnat för evigt.

just accept the fact that you can give every cell in your body an ip address and still have room to add your family.
ipv6 is just huge. but we wont be around to pick up the pieces when it runs out

Indeed. A /48 is 65k /64 subnets

_________________
www.mellowd.co.uk/ccie/

But if they are not prepared to setup routes, then ill still have a /48 onlink

Tell them they are getting confused.

Or ask for 2 subnets

Or stick in your own router

_________________
www.mellowd.co.uk/ccie/

If they give you a /48, thats the only thing they'll need to route. Split it up to as many /64s as you need.

_________________
som om sinnet hade svartnat för evigt.

Okey maybe I'm getting confused.

With a /48 wouldn't it look like this?

ISP Router - 1:2:3::1/48 route 1:2:3::0/48 onlink
Firewall (Ext) - 1:2:3::2/48 route default 1:2:3::1
Firewall (Int) - 1:2:3:10::1/64 route 1:2:3:10::0/64 onlink (INT)
Web Server - 1:2:3:10::2/64 route default 1:2:3:10::1

ISP Router can talk to Firewall Ext
Firewall can talk to ISP Router and Web Server
Web Server can send packets out to ISP Router (but no return)
ISP Router can not send packets to Web Server

Indeed you should have a /48. We take the /48 and make /64 subnets for the network. In BGP we advertise:

1:2:3:8000::/49 - use link 1
1:2:3::0/48 - use link 1 AS-prepended. Used incase link 2 fails.
1:2:3::0/48 - use link 2

ISP allows us to advertise 5 IPv6 prefixes to the PEs.

_________________
_______________________________________________________________________
There are 10 types of people in the world. Those who understand binary and those who don't.

Resistance is futile, you will have a /48!

_________________
The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn. Alvin Toffler, "Future Shock" 1970