{"id":930,"date":"2012-08-07T22:24:00","date_gmt":"2012-08-07T14:24:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=930"},"modified":"2023-11-07T22:29:42","modified_gmt":"2023-11-07T14:29:42","slug":"cisco-ipv6","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/930","title":{"rendered":"Cisco IPv6"},"content":{"rendered":"\n

\u555f\u7528ipv6 routing\u529f\u80fd
(config)#ipv6 unicast-routing<\/strong>
\u9700\u555f\u7528\u8a72\u529f\u80fd\u624d\u53ef\u8f49\u9001ipv6\u5c01\u5305\u555f\u7528\u4ecb\u9762\u7684ipv6 
(config-if)# ipv6 enable
<\/strong>\u555f\u7528\u5f8clink local unicast\u6703\u81ea\u52d5\u88ab\u7522\u751f <\/p>\n\n\n\n

\u8a2d\u5b9aipv6\u4f4d\u5740
(config-if)# ipv6 address < < address> [eui-64]|autoconfig|dhcp><\/strong>
address \u6307\u5b9a128bit\u4f4d\u7f6e
eui-64 \u5f8c\u534a\u90e864bit\u4f4d\u7f6e\u4f7f\u7528eui-64\u683c\u5f0f
autoconfig \u4f7f\u7528Stateless Auto-configuration
dhcp \u4f7f\u7528Stateful Auto-configuration
ps:
\u8a2d\u5b9a\u5f8clink-local unicast\u6703\u81ea\u52d5\u88ab\u7522\u751f\u624b\u52d5\u6307\u5b9alink local\u4f4d\u5740
(config-if)# ipv6 address < address> link-local  <\/strong><\/p>\n\n\n\n


\u8a2d\u5b9aipv6 anycast\u4f4d\u5740
(config-if)# ipv6 address < address> anycast<\/strong><\/p>\n\n\n\n

\u4f7f\u7528\u8207\u6307\u5b9a\u4ecb\u9762\u76f8\u540c\u7684unicast address
(config-if)# ipv6 unnumbered < int><\/strong><\/p>\n\n\n\n

ps
\u820a\u7248\u8a2d\u5b9a
\u9032\u884cstateless auto-configuration
(config-if)#ipv6 nd prefix < ipv6 address>
\u95dc\u9589stateless auto-configuration
(config-if)#ipv6 nd suppress-ra<\/p>\n\n\n\n

\u975c\u614b\u8def\u7531
(config)#ipv6 route < dst> < outgoing-int |next-hop-ip> [ ad] [ tag < value>] <\/strong>
ps:
\u4f7f\u7528local link\u505a\u70ba\u8def\u7531\u9700\u6307\u5b9aoutgoing int\u548clink-local\u4f4d\u5740 
ps:
outgoing int\u6703\u4f7f\u7528NDP\u63a2\u7d22\u5230\u9054\u9130\u5c45\u7684IPV6\u8def\u5f91 <\/p>\n\n\n\n

……………………………………………<\/p>\n\n\n\n

# show running-config<\/strong>
interface FastEthernet0\/0
\u3000ipv6 address 2000:0:0:4::\/64 eui-64\u3000\/\/\u4f7f\u7528eui-64\u4f4d\u5740
!
interface FastEthernet0\/1
\u3000ipv6 address 2000:0:0:2::2\/64
\u3000<\/p>\n\n\n\n

# show ipv6 interface brief<\/strong>
FastEthernet0\/0 [up\/up]
\u3000FE80::213:19FF:FE7B:5004\u3000\u3000\u3000\u3000\u3000\/\/link local\u4f4d\u5740
\u30002000::4:213:19FF:FE7B:5004
FastEthernet0\/1 [up\/up]
\u3000FE80::213:19FF:FE7B:5005\u3000\u3000\u3000\u3000\u3000\/\/link local\u4f4d\u5740
\u30002000:0:0:2::2
Serial0\/0\/0 [administratively down\/down]
\u3000unassigned
\u3000<\/p>\n\n\n\n

# show ipv6 interface f0\/0<\/strong>
FastEthernet0\/0 is up, line protocol is up
\u3000IPv6 is enabled, link-local address is FE80::213:19FF:FE7B:5004\u3000\/\/link local\u4f4d\u5740
\u3000No Virtual link-local address(es):
\u3000Global unicast address(es):
\u3000\u30002000::4:213:19FF:FE7B:5004, subnet is 2000:0:0:4::\/64 [EUI]\u3000\/\/global unicast\u4f4d\u5740
\u3000Joined group address(es): \/\/multicast \u4f4d\u5740
\u3000\u3000FF02::1\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\/\/\u76f8\u540c\u93c8\u8def\u4e0a\u7684\u6240\u6709ipv6 client\u7bc0\u9ede
\u3000\u3000FF02::2 \/\/\u76f8\u540c\u93c8\u8def\u4e0a\u7684\u6240\u6709ipv6 router\u7bc0\u9ede
\u3000\u3000FF02::1:FF7B:5004 \/\/solicitation node multicast\u4f4d\u5740
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 22807)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.<\/p>\n\n\n\n

# show ipv6 route<\/strong>
IPv6 Routing Table – Default – 7 entries
Codes: C – Connected, L – Local, S – Static, U – Per-user Static route
[omit]
C 2000:0:0:2::\/64 [0\/0] \/\/\u76f4\u9023\u8def\u5f91,\u9023\u63a5\u5b50\u7db2\u8def2000:0:0:2::\/64
\u3000via FastEthernet0\/1, directly connected
L 2000:0:0:2::2\/128 [0\/0]\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\/\/local route,\u5c6c\u65bcroute\u7684unicast address\u4e4b\u4e3b\u6a5f\u8def\u5f91
\u3000via FastEthernet0\/1, receive
C 2000:0:0:4::\/64 [0\/0]\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\/\/\u76f4\u9023\u8def\u5f91,\u9023\u63a5\u5b50\u7db2\u8def2000:0:0:4::\/64
\u3000via FastEthernet0\/0, directly connected
L 2000::4:213:19FF:FE7B:5004\/128 [0\/0]\u3000\u3000\/\/local route,\u5c6c\u65bcroute\u7684unicast address\u4e4b\u4e3b\u6a5f\u8def\u5f91
\u3000via FastEthernet0\/0, receive
L FF00::\/8 [0\/0]
\u3000via Null0, receive<\/p>\n\n\n\n

# show ipv6 route 2000::\/64<\/strong>
Routing entry for 2000::\/64
Known via “static”, distance 1, metric 0   \/\/\u6b64\u70bastatic route,\u7ba1\u7406\u8ddd\u96e2\u70ba1
Backup from “ospf 1 [110]”           \/\/\u5099\u63f4\u8def\u5f91
Route count is 1\/1, share count 0
Routing paths:
\u3000FE80::213:19FF:FE7B:5005, FastEthernet0\/0
\u3000\u3000Last updated 00:11:50 ago <\/p>\n\n\n\n


# show ipv6 neighbors<\/strong>
IPv6 Address Age Link-layer Addr State Interface
2000:0:0:2::3 0 0013.197b.6588 REACH Fa0\/1
FE80::213:19FF:FE7B:6588 0 0013.197b.6588 REACH Fa0\/1
state:REACH\u8868\u793aneighbor\u53ef\u5230\u9054,STALE(default)\u8868\u793aneighbor\u5728\u6700\u5f8c30\u5206\u9418\u5167\u7121\u6cd5\u5230\u9054<\/p>\n\n\n\n


# show ipv6 router<\/strong>
Router FE80::213:19FF:FE7B:6588 on FastEthernet0\/1, last update 0 min
\u3000Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1500
\u3000HomeAgentFlag=0, Preference=Medium
\u3000Reachable time 0 (unspecified), Retransmit time 0 (unspecified)
\u3000Prefix 2000:0:0:2::\/64 onlink autoconfig\u3000\u3000\/\/\u4f7f\u7528Stateless Auto-configuration
\u3000\u3000Valid lifetime 2592000, preferred lifetime 604800<\/p>\n\n\n\n


\u555f\u7528ipv6 debug neighbor discovery\u529f\u80fd
# debug ipv6 nd<\/strong>
ps:
\u95dc\u9589debug\u529f\u80fd #undebug all

\u82e5\u6210\u529fping 2000:0:0:2::3
\u5247debug\u8a0a\u606f\u5982\u4e0b
*Sep 2 17:07:25.807: ICMPv6-ND: DELETE -> INCMP: 2000:0:0:2::3
*Sep 2 17:07:25.807: ICMPv6-ND: Sending NS for 2000:0:0:2::3 on FastEthernet0\/1 \u3000\/\/\u50b3\u9001ns\u8a0a\u606f
*Sep 2 17:07:25.807: ICMPv6-ND: Resolving next hop 2000:0:0:2::3 on interface FastEthernet0\/1
*Sep 2 17:07:25.811: ICMPv6-ND: Received NA for 2000:0:0:2::3 on FastEthernet0\/1 from 2000:0:0:2::3\u3000\/\/\u63a5\u53d7ns\u8a0a\u606f
*Sep 2 17:07:25.811: ICMPv6-ND: Neighbour 2000:0:0:2::3 on FastEthernet0\/1 : LLA 0013.197b.6588 \/\/\u53d6\u5f97\u76ee\u5730mac<\/p>\n\n\n\n

……………………………………..<\/p>\n\n\n\n

\u5efa\u7acb\u9ede\u5c0d\u9ede\u901a\u9053<\/strong>
1\u5efa\u7acb\u4ecb\u9762
r1(#config)# interface loopback < loopback-number>
r1(#config-if)# ip address < r1-ip> < mask>
2\u8a2d\u5b9a\u901a\u9053\u4ecb\u9762
r1(#config-if)# interface tunnel < tunnel-number>
r1(#config-if)# tunnel source loopback < loopback-number>
r1(#config-if)# tunnel destination < r2-ip><\/strong>
r1(#config-if)# tunnel mode < ipv6ip|gre ip><\/strong>
trunnel mode\u9810\u8a2d\u4f7f\u7528gre ip
ps:tunnel\u4ecb\u9762\u4e0a\u8981\u6709ipv6\u4f4d\u5740
ps:ipv6ip\u7684mode\u4e5f\u88ab\u7a31\u70baMCT(manually configure tunnel)<\/p>\n\n\n\n

ex:
\u4f7f\u7528IPv6IP\u901a\u9053
r1\u4e0a\u7684\u8a2d\u5b9a
R1(config)# interface loopback 1
R1(config-if)# ip address 10.1.1.1 255.255.255.255
R1(config-if)# interface tunnel 1
R1(config-if)# tunnel source loopback 1
R1(config-if)# tunnel destination 10.1.1.2
R1(config-if)# tunnel mode ipv6ip
R1(config-if)# ipv6 address 2013::1\/64
r2\u4e0a\u7684\u8a2d\u5b9a
R2(config)# interface loopback 2
R2(config-if)# ip address 10.1.1.2 255.255.255.255
R2(config-if)# interface tunnel 2
R2(config-if)# tunnel source loopback 2
R2(config-if)# tunnel destination 10.1.1.1
R2(config-if)# tunnel mode ipv6ip
R1(config-if)# ipv6 address 2013::2\/64<\/p>\n\n\n\n

# show interfaces tunnel0<\/strong>
Tunnel0 is up, line protocol is up\u3000\/\/ipv4\u9023\u7dda\u5b58\u5728\u901a\u9053\u5169\u7aef\uff0c\u901a\u9053\u5efa\u7acb\u6210\u529f
\u3000Hardware is Tunnel
\u3000\u3000MTU 17920 bytes, BW 100 Kbit\/sec, DLY 50000 usec,
\u3000\u3000reliability 255\/255, txload 1\/255, rxload 1\/255
\u3000\u3000Encapsulation TUNNEL, loopback not set
\u3000\u3000Keepalive not set
\u3000\u3000Tunnel source 10.1.1.1 (Loopback1), destination 10.1.1.2\u3000
\u3000\u3000Tunnel protocol\/transport IPv6\/IP \/\/\u6307\u5b9atunnel mode ipv6ip
\u3000\u3000Tunnel TTL 255
\u3000\u3000Tunnel transport MTU 1480 bytes
\u3000\u3000Tunnel transmit bandwidth 8000 (kbps)
\u3000\u3000Tunnel receive bandwidth 8000 (kbps)<\/p>\n\n\n\n

# show ipv6 interface brief<\/strong>
FastEthernet0\/0 [up\/up]
\u3000FE80::213:19FF:FE7B:5026
\u30002111::1
Loopback1 [up\/up]
\u3000unassigned
Tunnel0 [up\/up]
\u3000FE80::A09:901\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\/\/\u5f8c32bit\u70ba0A09:0901,\u5341\u9032\u4f4d=10.9.9.1
\u30002013::1<\/p>\n\n\n\n

# show ipv6 interface tunnel0<\/strong>
Tunnel0 is up, line protocol is up
\u3000IPv6 is enabled, link-local address is FE80::A09:901\u3000\/\/link-local\u70baFE80::A09:901
\u3000No Virtual link-local address(es):
\u3000Global unicast address(es):\u3000\u3000\u3000
\u3000\u30002013::1, subnet is 2013::\/64
\u3000Joined group address(es):\u3000\u3000\u3000\/\/multicast\u4f4d\u5740
\u3000\u3000FF02::1
\u3000\u3000FF02::2
\u3000\u3000FF02::A
\u3000\u3000FF02::1:FF00:1
\u3000\u3000FF02::1:FF09:901\u3000
\u3000MTU is 1480 bytes
\u3000ICMP error messages limited to one every 100 milliseconds
\u3000ICMP redirects are enabled
\u3000ICMP unreachables are sent
\u3000ND DAD is enabled, number of DAD attempts: 1
\u3000ND reachable time is 30000 milliseconds (using 42194)
\u3000Hosts use stateless autoconfig for addresses.<\/p>\n\n\n\n

…  <\/p>\n\n\n\n


\u5efa\u7acb6to4\u81ea\u52d5\u901a\u9053<\/strong>
1
\u5efa\u7acb\u4ecb\u9762
r1(#config)# interface loopback < loopback-number>
r1(#config-if)# ip address < r1-ip> < mask>
2.1
\u8a2d\u5b9atunnel interface 
r1(#config-if)# interface tunnel < tunnel-number>
r1(#config-if)# tunnel source loopback < loopback-number>
r1(#config-if)# tunnel mode ipv6ip 6to4<\/strong>
2.2
\u555f\u7528tunnel interface\u4e0a\u7684IPv6 
r1(#config-if)# ipv6 address < 6to4 ipv6><\/strong>
6to4 ipv6=2002:[ipv4 32bit][subnet 16bit]::\/64
ipv4\u8868\u793a\u8a72\u4ecb\u9762\u4ee3\u8868\u7684ipv4\u4f4d\u5740
3
\u8a2d\u5b9a\u8def\u7531,\u5c07\u5c01\u5305\u5f80tunnel\u9001\u51fa\u4ee5\u89f8\u767c\u5c01\u88dd\u7a0b\u5e8f
r1(#config)# ipv6 route 2002::\/16 tunnel < tunnel-number>
ps:
\u9700\u8a2d\u5b9a\u8a2d\u5099r1\u4e0a\u5176\u4ed6IPv6\u7684\u4ecb\u9762\uff0c\u9019\u6a23IPv6\u4ecb\u9762\u6240\u9023\u63a5\u7684\u7db2\u6bb5\u624d\u53ef\u8def\u7531\u5230tunnel interface \u3000
ps:
\u9700\u555f\u7528ipv6 unicast-routing
ps:
\u82e5\u8981\u6210\u70ba\u901a\u9053\u4e4b\u6210\u54e1,\u50c5\u9700\u66f4\u6539loopback\u7684ipv4\u53catunnel\u7684ipv6\u53ca\u53ef<\/p>\n\n\n\n

ex:
1
r1(#config)# interface loopback 1
r1(#config-if)# ip address 10.1.1.1 255.255.255.0
2
r1(#config-if)# interface tunnel 0
r1(#config-if)# tunnel source loopback 1
r1(#config-if)# tunnel mode ipv6ip 6to4
r1(#config-if)# ipv6 address 2002:a01:101::\/128
3
r1(#config)# ipv6 route 2002::\/16 tunnel 0

\u3000<\/p>\n\n\n\n


\u5efa\u7acbisatap ipv6\u901a\u9053<\/strong>
1
\u5efa\u7acb\u4ecb\u9762
r1(#config)# interface loopback < loopback-number>
r1(#config-if)# ip address < r1-ip> < mask>
2.1
\u8a2d\u5b9a\u901a\u9053\u4ecb\u9762
r1(#config-if)# interface tunnel < tunnel-number>
r1(#config-if)# tunnel source loopback < loopback-number>
r1(#config-if)# tunnel mode ipv6ip isatap<\/strong>
2.2
\u901a\u9053\u4ecb\u9762\u4f7f\u7528global unicast\u4f4d\u5740
r1(#config-if)# ipv6 address < global unicast> eui-64<\/strong>
\u7cfb\u7d71\u6703\u4f7f\u7528\u7d93\u4fee\u6539\u7684eui64\u898f\u5247\u5efa\u7acb,\u7a0b\u5e8f\u5982\u4e0b
\u30001.\u8def\u7531\u5668\u6703\u5c070000:5efe\u52a0\u5165global unicast\u7684\u7b2c5,6\u6b04
\u30002.ipv4\u4f4d\u5740\u6703\u88ab\u52a0\u5165global unicast\u7684\u7b2c7,8\u6b04
\u8a72\u4ecb\u9762\u4e4blink local\u4f4d\u5740\u4e5f\u6703\u900f\u904e\u7d93\u4fee\u6539\u7684eui64\u5efa\u7acb
3
\u4f9d\u76ee\u5730\u6578\u91cf\u8a2d\u5b9a\u8def\u7531
r1(#config)# ipv6 route < dest1> < nexthop1>
r1(#config)# ipv6 route < dest2> < nexthop2>
[omit]
ps:
\u9700\u555f\u7528ipv6 unicast-routing
ps:
\u82e5\u8981\u6210\u70ba\u901a\u9053\u4e4b\u8a2d\u5099,\u50c5\u9700\u66f4\u6539loopback\u7684ipv4\u53catunnel\u7684ipv6\u53ca\u53ef
\u9664\u6b64\u4e4b\u5916route\u90e8\u4efd\u9700\u4f9d\u73fe\u6cc1\u9032\u884c\u914d\u7f6e,\u5982\u6b65\u9a5f4<\/p>\n\n\n\n

ex:
\u5047\u8a2d\u7d44\u7e54\u4f7f\u75282000:0:1:9::\/64\u505a\u70baisatap\u901a\u9053
\u4e14r1\u9023\u63a52\u500b\u9ede,ipv4\u5206\u5225\u70ba10.9.9.3\u548c10.9.9.4
10.9.9.3\u7684\u8a2d\u5099\u76f4\u90232002:0:1:3::\/64
10.9.9.4\u7684\u8a2d\u5099\u76f4\u90232002:0:1:4::\/64
1
r1(#config)# interface loopback 1
r1(#config-if)# ip address 10.9.9.1 255.255.255.0
2
r1(#config-if)# interface tunnel 0
r1(#config-if)# tunnel source loopback 1
r1(#config-if)# tunnel mode ipv6ip isatap
3
r1(#config-if)# ipv6 address 2000:0:1:9::\/64 eui-64
4
r1(#config)# ipv6 route 2002:0:1:3::\/64 2000:0:1:9:0:5efe:a09:903
r1(#config)# ipv6 route 2002:0:1:4::\/64 2000:0:1:9:0:5efe:a09:904
ps:
\u8a72tunnel\u7684link local\u4f4d\u5740\u70baFE80::5EFE:A09:901<\/p>\n","protected":false},"excerpt":{"rendered":"

\u555f\u7528ipv6 routing\u529f\u80fd(config)#ipv6 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[33],"tags":[],"class_list":["post-930","post","type-post","status-publish","format-standard","hentry","category-cisco-layer3"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=930"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/930\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}