Hi,
I'm working now with SeND and the configuration doesn't work as expected. I can't see any entry in the following table:
R6#sh ipv6 nd secured certificates
Total number of entries: 0 / 32
Hash id RA certcnt certrcv state
R6#
The comunication is established, I can ping r5 and r6 but I can also ping from any router with cga enabled even those without certificates from r4 (pki server). I suspect it is related with lack of certificates in the above table. I don't post all config as it is identical as in the WB. I copied and pasted to min risk of mistake.
R5#sh crypto pki certificates
Certificate
Status: Available
Certificate Serial Number (hex): 02
Certificate Usage: General Purpose
Issuer:
cn=R4.inelab.local
Subject:
Name: R5.ine.com
hostname=R5.ine.com
Validity Date:
start date: 04:10:53 UTC Apr 30 2014
end date: 04:10:53 UTC Apr 30 2015
Associated Trustpoints: SEND_PKI
CA Certificate
Status: Available
Certificate Serial Number (hex): 01
Certificate Usage: Signature
Issuer:
cn=R4.inelab.local
Subject:
cn=R4.inelab.local
Validity Date:
start date: 04:09:45 UTC Apr 30 2014
end date: 04:09:45 UTC Apr 29 2017
Associated Trustpoints: SEND_PKI
R5#sh ipv6 nd secured certificates
Total number of entries: 0 / 32
Hash id RA certcnt certrcv state
R5#
R5#ping 2001::240B:EB4F:A56F:626B
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001::240B:EB4F:A56F:626B, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/4 ms
R5#sh ipv6 nd secured certificates
Total number of entries: 0 / 32
Hash id RA certcnt certrcv state
--
R6#ping 2001::3CCD:A336:58E9:8DB9
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001::3CCD:A336:58E9:8DB9, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/4 ms
R6#sh crypto pki certificates
Certificate
Status: Available
Certificate Serial Number (hex): 03
Certificate Usage: General Purpose
Issuer:
cn=R4.inelab.local
Subject:
Name: R6.ine.com
hostname=R6.ine.com
cn=R6.inelab.local
Validity Date:
start date: 04:19:40 UTC Apr 30 2014
end date: 04:19:40 UTC Apr 30 2015
Associated Trustpoints: SEND_PKI
CA Certificate
Status: Available
Certificate Serial Number (hex): 01
Certificate Usage: Signature
Issuer:
cn=R4.inelab.local
Subject:
cn=R4.inelab.local
Validity Date:
start date: 04:09:45 UTC Apr 30 2014
end date: 04:09:45 UTC Apr 29 2017
Associated Trustpoints: SEND_PKI
R6#sh ipv6 nd secured certificates
Total number of entries: 0 / 32
Hash id RA certcnt certrcv state
R6#
--
did anyone has similar issue ?