cisco_中IPv6实验.doc

厦门微思网络教育中心Http:/W 电话：（0592）-2212330 2236691IPv6实验部分:一. IPv6静态路由配置实验拓扑:IPv6 route 命令添加静态ipv6路由:Router(config)# ipv6 unicast-routing /全局启用IPV6单播路由功能Router(config)#ipv6 route ipv6-prefix/prefix-length next-hop|interface distance在CISCO IOS软件支持中语法为:Router(config)#ipv6 route ipv6-prefix/prefix-length interface link-local-address distance配置R1和R2:R1使用网络接口S1/0,通过下跳FE80:CE00:2FF:FEA4:0,可到达目的IPV6网络2001:2:2:/48r1(config)#ipv6 route 2001:2:2:/48 serial1/0 FE80:CE00:2FF:FEA4:0r2(config)#ipv6 route 2001:1:1:/48 serial 1/0 FE80:CE00:3FF:FE68:0或:r2(config)#ipv6 route 2001:1:1:/48 2001:A:A:A:1默认路由配置例子:r2(config)#ipv6 route :/0 serial 1/0 FE80:CE00:3FF:FE68:0静态路由配置时要注意:在IPV6规范中,不推荐使用聚合全球单播或本地站点地址作为下一跳地址,一般使用本地链路地址作为下一跳,但在配置本地地址作为一下跳时,在配置中必须指出路由器上相应的网络接口二.配置6to4隧道连接IPv4/6网络6to4机制的特点是：1、 自动隧道机制2、 在站点边缘启用，6to4的路由器通过IPv4网络到达对方。3、 自动前缀分配，所有前缀均使用2002:/16,IPv4的地址转换为16进制附在2002:/16后面.最终表现形式是2002:ipv4-address:/48。4、 没有IPv6路由传播，每个前缀都是基于IPv4地址，因此IPv4的路由域已经足够使用。本实验目的:通过6to4隧道连接2个IPv6网络：实验拓扑如下:R4路由器连接的IPv6网络所属网段为2002:0202:0202:/48(可划分出65535个子网)；R5路由器连接的IPv6网络所属网段为2002:0303:0303:/48(可划分出65535个子网)；这两个IPv6网络之间要通信,可通过穿透IPv4 Internet建立6to4隧道。R1、R2、R3运行OSPFv2来完成整个IPv4网络的可达性；而IPv6网络分别运行OSPFv3来完成各自内部的可达性。以下为每个路由器完整配置:配置R1:hostname r1interface Serial1/0 ip address clock rate 64000interface Serial1/1 ip address clock rate 64000router ospf 1 log-adjacency-changes network 55 area 0end配置R2:ipv6 unicast-routinginterface Tunnel0ipv6 enable tunnel source Loopback0 tunnel mode ipv6ip 6to4!interface Loopback0 ip address !interface Serial1/0 ip address !interface Serial1/1ip ospf 1 area 0 ipv6 enable ipv6 ospf 1 area 0router ospf 1 log-adjacency-changes network 55 area 0ipv6 route 2002:303:303:/48 Tunnel0ipv6 router ospf 1 log-adjacency-changes redistribute static /将静态路由重发布进OSPF，以使网络内部（R4）获得对端路由配置R3:ipv6 unicast-routinginterface Tunnel0ipv6 enable tunnel source Loopback0 tunnel mode ipv6ip 6to4!interface Loopback0 ip address !interface Serial1/0 ip address !interface Serial1/1ipv6 enable ipv6 ospf 1 area 0!router ospf 1 log-adjacency-changes network 55 area 0ipv6 route 2002:202:202:/48 Tunnel0ipv6 router ospf 1 log-adjacency-changes redistribute static /将静态路由重发布进OSPF，以使网络内部（R5）获得对端路由配置R4:ipv6 unicast-routinginterface Loopback0 ip address !interface Ethernet0/0ipv6 address 2002:202:202:4:4/64 ipv6 enable ipv6 ospf 1 area 0 no keepalive!interface Serial1/0ipv6 enable ipv6 ospf 1 area 0ipv6 router ospf 1 router-id 配置R5:ipv6 unicast-routinginterface Loopback0 ip address !interface Ethernet0/0ipv6 address 2002:303:303:5:5/64 ipv6 ospf 1 area 0 no keepalive!interface Serial1/0ipv6 enable ipv6 ospf 1 area 0!ipv6 router ospf 1 router-id 查看R4,R5的路由表:r4#show ipv6 routeIPv6 Routing Table - 5 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2C 2002:202:202:4:/64 0/0 via :, Ethernet0/0L 2002:202:202:4:4/128 0/0 via :, Ethernet0/0OE2 2002:303:303:/48 110/20 via FE80:CE00:FFF:FE88:0, Serial1/0L FE80:/10 0/0 via :, Null0L FF00:/8 0/0 via :, Null0r5#show ipv6 routeIPv6 Routing Table - 5 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2OE2 2002:202:202:/48 110/20 via FE80:CE00:FFF:FE34:0, Serial1/0C 2002:303:303:5:/64 0/0 via :, Ethernet0/0L 2002:303:303:5:5/128 0/0 via :, Ethernet0/0L FE80:/10 0/0 via :, Null0L FF00:/8 0/0 via :, Null0检查R4、R5的路由表，可见均已经有对应网络的路由信息：用PING命令测试网络连通性:r4#ping 2002:303:303:5:5Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2002:303:303:5:5, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 240/410/504 msr4#r5#ping 2002:202:202:4:4Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2002:202:202:4:4, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 280/432/632 msr5#三.RIPng(下一代路由信息协议)实验配置实验拓扑:配置R1:ipv6 unicast-routing /启用ipv6单播路由协议interface Ethernet0/0 ipv6 address 2001:1:1:1:1/64 ipv6 rip cisco enable /在接口启用RIPng no keepaliveinterface Serial1/0 ipv6 address 2001:A:A:A:1/64 ipv6 rip cisco enable /在接口启用RIPng interface Serial1/1 ipv6 address 2001:B:B:B:1/64 ipv6 rip cisco enable /在接口启用RIPngipv6 router rip cisco /定义标识为cisco的的RIPng进程配置R2:ipv6 unicast-routinginterface Ethernet0/0 ipv6 address 2001:2:2:2:2/64 ipv6 rip cisco enable no keepaliveinterface Serial1/0ipv6 address 2001:A:A:A:2/64 ipv6 rip cisco enableipv6 router rip cisco配置R3ipv6 unicast-routing /启用ipv6单播路由协议interface Ethernet0/0 ipv6 address 2001:3:3:1:3/64 ipv6 address 2001:3:3:2:3/64 ipv6 address 2001:3:3:3:3/64 ipv6 address 2001:3:3:4:3/64 ipv6 address 2001:3:3:5:3/64 ipv6 address 2001:3:3:6:3/64 ipv6 rip cisco enableno keepalive!interface Serial1/0 ipv6 address 2001:B:B:B:3/64 ipv6 rip cisco enableipv6 router rip cisco:在R2验证配置:r2#show ipv6 ripRIP process cisco, port 521, multicast-group FF02:9, pid 168 Administrative distance is 120. Maximum paths is 16 Updates every 30 seconds, expire after 180 Holddown lasts 0 seconds, garbage collect after 120 Split horizon is on; poison reverse is off Default routes are not generated Periodic updates 92, trigger updates 16 Interfaces: Ethernet0/0 Serial1/0 Redistribution: Noner2#show ipv6 route IPv6 Routing Table - 14 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2R 2001:1:1:1:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0C 2001:2:2:2:/64 0/0 via :, Ethernet0/0L 2001:2:2:2:2/128 0/0 via :, Ethernet0/0R 2001:3:3:1:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:2:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:3:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:4:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:5:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:6:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0C 2001:A:A:A:/64 0/0 via :, Serial1/0L 2001:A:A:A:2/128 0/0 via :, Serial1/0R 2001:B:B:B:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0L FE80:/10 0/0 via :, Null0L FF00:/8 0/0 via :, Null0r2#show ipv6 route ripIPv6 Routing Table - 14 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2R 2001:1:1:1:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:1:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:2:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:3:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:4:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:5:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:6:/64 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:B:B:B:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0r2#show ipv6 rip database RIP process cisco, local RIB 2001:1:1:1:/64, metric 2, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:1:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:2:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:3:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:4:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:5:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:3:3:6:/64, metric 3, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:A:A:A:/64, metric 2 Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secs 2001:B:B:B:/64, metric 2, installed Serial1/0/FE80:CE00:3FF:FE68:0, expires in 157 secsr2#show ipv6 rip next-hops RIP process cisco, Next Hops FE80:CE00:3FF:FE68:0/Serial1/0 9 pathsr2#在R3上实现聚合路由:r3(config)#int s1/0r3(config-if)#ipv6 rip cisco summary-address 2001:3:3:/48 在R2上查看路由表:(聚合后的路由)r2#show ipv6 route ripIPv6 Routing Table - 9 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2R 2001:1:1:1:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:/48 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:B:B:B:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0在RIPng中分发默认路由:r3(config)#int s1/0r3(config-if)#ipv6 rip cisco default-information originate metric 5 在R1或R2上查看默认路由:r2#show ipv6 route ripIPv6 Routing Table - 10 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2R :/0 120/7 /ipv6里默认路由表示 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:1:1:1:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:3:3:/48 120/3 via FE80:CE00:3FF:FE68:0, Serial1/0R 2001:B:B:B:/64 120/2 via FE80:CE00:3FF:FE68:0, Serial1/0r2#四. 配置OSPFv3配置R1:ipv6 unicast-routinginterface Loopback0 ip address 55!interface Ethernet0/0 ipv6 address 2001:1:1:1:1/64 ipv6 ospf 1 area 0 no sh!interface Serial0/0 ipv6 address 2001:A:A:A:1/64 ipv6 ospf 1 area 0 clock rate 4000000!interface Serial1/0 ipv6 address 2001:B:B:B:1/64 ipv6 ospf 1 area 0 clock rate 4000000 ipv6 router ospf 1 router-id 配置R2:ipv6 unicast-routing!interface Loopback0 ip address 55!interface Ethernet0/0 ipv6 address 2001:2:2:2:2/64 ipv6 ospf 2 area 0 no keepalive!interface Serial0/0 ipv6 address 2001:A:A:A:2/64 ipv6 ospf 2 area 0!ipv6 router ospf 2 router-id 配置R3:ipv6 unicast-routing!interface Loopback0 ip address 55!interface Ethernet0/0 ipv6 address 2001:3:3:3:3/64ipv6 ospf 3 area 1 /设置E0/0接口运行在OSPF区域1 no keepalive!interface Serial0/0 ipv6 address 2001:B:B:B:3/64 ipv6 ospf 3 area 0!ipv6 router ospf 3 router-id 验证R1,R2,R3的邻居状态:R1#show ipv6 ospf neighborNeighbor ID Pri State Dead Time Interface ID Interface 1 FULL/ - 00:00:32 4 Serial1/0 1 FULL/ - 00:00:33 4 Serial0/0R2#sho ipv6 ospf neighborNeighbor ID Pri State Dead Time Interface ID Interface 1 FULL/ - 00:00:28 4 Serial0/0R2#R3#show ipv6 ospf neighborNeighbor ID Pri State Dead Time Interface ID Interface 1 FULL/ - 00:00:34 6 Serial0/0R3#查看各路由表:R1#show ipv6 route ospfIPv6 Routing Table - 10 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2O 2001:2:2:2:/64 110/74 via FE80:250:73FF:FE15:F261, Serial0/0OI 2001:3:3:/48 110/74 via FE80:210:7BFF:FE5B:6C1, Serial1/0R1#R2#show ipv6 route ospfIPv6 Routing Table - 9 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2O 2001:1:1:1:/64 110/74 via FE80:201:42FF:FE9D:2981, Serial0/0OI 2001:3:3:/48 110/138 via FE80:201:42FF:FE9D:2981, Serial0/0O 2001:B:B:B:/64 110/128 via FE80:201:42FF:FE9D:2981, Serial0/0R2#R3#sho ipv6 route ospfIPv6 Routing Table - 11 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2O 2001:1:1:1:/64 110/74 via FE80:201:42FF:FE9D:2981, Serial0/0O 2001:2:2:2:/64 110/138 via FE80:201:42FF:FE9D:2981, Serial0/0O 2001:A:A:A:/64 110/128 via FE80:201:42FF:FE9D:2981, Serial0/0R3#在R3的E0/0上增加一个IPV6地址来验证路由汇总:R3(config)#int e0/0R3(config-if)#ipv6 address 2001:3:3:4:3/64R3(config)#ipv6 router ospf 3R3(config-rtr)#area 1 range 2001:3:3:/48 /汇总R3(config-rtr)#end在R2上查看汇总路由:R2#show ipv6 route ospfIPv6 Routing Table - 9 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2O 2001:1:1:1:/64 110/74 via FE80:201:42FF:FE9D:2981, Serial0/0OI 2001:3:3:/48 110/138 via FE80:201:42FF:FE9D:2981, Serial0/0O 2001:B:B:B:/64 110/128 via FE80:201:42FF:FE9D:2981, Serial0/0R2#五. 配置BGP4+运行在ipv6环境里实验拓扑:配置R1:ipv6 unicast-routinginterface Loopback0 ip address !interface Ethernet0/0 ipv6 address 2001:1:1:1:1/64!interface Serial1/0 ipv6 address 2001:A:A:A:1/64!interface Serial1/1 ipv6 address 2001:B:B:B:1/64router bgp 1 no synchronization bgp router-id neighbor 2001:A:A:A:2 remote-as 2 neighbor 2001:B:B:B:3 remote-as 3 no auto-summary ! address-family ipv6 neighbor 2001:A:A:A:2 activate neighbor 2001:B:B:B:3 activate network 2001:1:1:1:/64 exit-address-family配置R2:ipv6 unicast-routinginterface Loopback0 ip address interface Ethernet0/0 ipv6 address 2001:2:2:2:2/64interface Serial1/0 ipv6 address 2001:A:A:A:2/64router bgp 2 bgp router-id no bgp default ipv4-unicast neighbor 2001:A:A:A:1 remote-as 1 address-family ipv4 neighbor 2001:A:A:A:1 activate no auto-summary no synchronization exit-address-family address-family ipv6 neighbor 2001:A:A:A:1 activate network 2001:2:2:2:/64 exit-address-family配置R3:ipv6 unicast-routinginterface Loopback0 ip address interface Ethernet0/0 ipv6 address 2001:3:3:1:3/64 ipv6 address 2001:3:3:2:3/64 ipv6 address 2001:3:3:3:3/64 ipv6 address 2001:3:3:4:3/64 ipv6 address 2001:3:3:5:3/64 ipv6 address 2001:3:3:6:3/64 no keepaliveinterface Serial1/0 ipv6 address 2001:B:B:B:3/64router bgp 3 no synchronization bgp router-id neighbor 2001:B:B:B:1 remote-as 1 no auto-summary address-family ipv6 neighbor 2001:B:B:B:1 activate network 2001:3:3:/48 exit-address-familyipv6 route 2001:3:3:/48 Null0 要发布2001:3:3:/48 ,2001:3:3:/48必须先存在路由表中,才可以发布验证IPv6 BGP4+可以使用显示IPv6 BGP表的show bgp ipv6命令显示信息ipv6 BGP邻居和统计信息,这个命令相当于IPV4中的show ip bgp 命令.r2#show bgp ipv6 unicast ? X:X:X:X:X/ IPv6 prefix / community Display routes matching the communities community-list Display routes matching the community-list dampening Display detailed information about dampening extcommunity-list Display routes matching the extcommunity-list filter-list Display routes conforming to the filter-list inconsistent-as Display only routes with inconsisten