如何使SSH在ASA 9.1上链接本地地址？

Question

我有一个思科ASA 5510，运行ASA软件版本的9.1(7)16在一个IPv6局域网。

我希望启用SSH访问，但遇到以下警告：

ciscoasa(config)# show ipv6 interface management
  IPv6 is enabled, link-local address is fe80::21d:a2ff:fe59:4b97
    No global unicast address is configured
    Joined group address(es):
      ff02::2
      ff02::1
      ff02::1:ff59:4b97
  ICMP error messages limited to one every 100 milliseconds
  ICMP redirects are enabled
  ND DAD is enabled, number of DAD attempts: 1
  ND reachable time is 30000 milliseconds
  ND advertised reachable time is 0 milliseconds
  ND advertised retransmit interval is 1000 milliseconds
  ND router advertisements are sent every 200 seconds
  ND router advertisements live for 1800 seconds
  Hosts use stateless autoconfig for addresses.
ciscoasa(config)# ssh fe80::/64 management
WARNING! This command will not take effect until interface 'management' has been initialized with at least one global IPv6 address
ciscoasa(config)#

(指向此地址的SSH连接失败，尽管当我配置和测试IPv4地址时，它能够连接)

那么，我的问题是:我需要做什么来允许SSH连接到我的ASA 5510's链接本地IPv6地址？

我不在乎是否必须在“只文档”IPv6范围中设置一个虚拟地址，以使其触发SSH IPv6堆栈，或者静态地分配链接本地地址，或者什么:我只需要能够在这个环境中的其他设备上访问它。

Answer 1

1. 显然，显然需要启用IPv6 ipv6启用接口。
2. 需要在接口上配置静态IPv6地址，此静态地址可以是文档(rfc3849)地址，也可以是静态分配的链接本地地址或公共地址(即使不是可公开的ipv6地址2001:db8::/32 )。