ipv6 实验-注解版

博学国际教育培训中心 李金兵 （春秋战国 ） 1 / 13 第 16章 ipv6 实验 注解版 一，配置 IPV6地址 ..........................................................................................................................................1 二，两种方式的 PING .....................................................................................................................................1 三，查看接口信息 ............................................................................................................................................2 四，IPV6接口多址的问 题 快递公司问题件快递公司问题件货款处理关于圆的周长面积重点题型关于解方程组的题及答案关于南海问题 ...............................................................................................................................2 五，EUI-64 地址格式: .....................................................................................................................................3 六，跟据链路本地地址来配置 IPV6 地址 .....................................................................................................5 七，IPV6的邻居状态 ：一个是 stale ;一个是 reach ...................................................................................6 八，Ipv6 的静态路由配置 ...............................................................................................................................7 九，RIPNG ........................................................................................................................................................8 十, OSPFv3 ...................................................................................................................................................10 十一，6 TO 4 的 TUNNEL (使用 GRE 隧道) ............................................................................................ 11 一，配置 IPV6地址 r1(config)#int e1/1 r1(config-if)#ipv6 address 2001:1::1/64 r2(config)#int e1/2 r2(config-if)#ipv6 address 2001:1::2/64 二，两种方式的 PING r1#ping 2001:1::2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::2, timeout is 2 seconds: 批注 [U1]: ROUTE 可以自动识别 IPV6地址 博学国际教育培训中心 李金兵 （春秋战国 ） 2 / 13 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/14/44 ms r1#ping ipv6 2001:1::2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/16/48 ms 三，查看接口信息 r1# sh ipv6 int e1/1 Ethernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::C800:11FF:FEFC:1D Global unicast address(es): 2001:1::1, subnet is 2001:1::/64 Joined group address(es): FF02::1 FF02::1:FF00:1 FF02::1:FFFC:1D MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds 四，IPV6接口多址的问题 在 IPV4里面接口多址时，主地址优先级高。但是 IPV6接口可以有多个地址，且地位平等。 r1(config)#int e1/1 r1(config-if)#ipv6 address 2001:1::3/64 r1#sh run int e1/1 interface Ethernet1/1 ipv6 address 2001:1::1/64 ipv6 address 2001:1::3/64 批注 [U2]: 以 FF02：：1：FF 开头， 后面 24位是单播地址的后 24位。 批注 [U3]: 所有节点的组播地址 批注 [U4]: 单播地址所对应的被请求 的组播地址。 类似于 IPV4 ARP 请求的目标地址。 2001:1::1 FF02::1:FF00:0001 FF02::1:FF00:1 批注 [U5]: 链路地址所对应的被请求 的组播地址. FE80::C800:11FF:FEFC:1D FF02::1:FFFC:1D 批注 [U6]: E1/1接口有了多个 IPV6 地址 博学国际教育培训中心 李金兵 （春秋战国 ） 3 / 13 r1#ping 2001:1::2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/23/88 ms r1#debug ipv6 packet IPv6 unicast packet debugging is on r1#ping 2001:1::2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/26/60 ms r1# *Oct 3 13:25:20.919: IPv6: SAS picked source 2001:1::3 for 2001:1::2 (Ethernet1/1) *Oct 3 13:25:20.919: IPV6: source 2001:1::3 (local) *Oct 3 13:25:20.919: dest 2001:1::2 (Ethernet1/1) *Oct 3 13:25:20.923: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating *Oct 3 13:25:20.923: IPv6: Sending on Ethernet1/1 *Oct 3 13:25:20.979: IPV6: source 2001:1::2 (Ethernet1/1) *Oct 3 13:25:20.979: dest 2001:1::3 *Oct 3 13:25:20.979: traffic class 0, flow 0x0, len 100+14, prot 58, hops 64, forward to ulp 五，EUI-64 地址格式: 作用： 标识 interace id ，相当于一个主机地址 本地链路地址：FE80:Interface ID ; 那这个 interface id 怎么得来的呢？ 批注 [U7]: 此时 R1 PING R2 通了， 但是 R1 上哪个地址是源地址呢？ 批注 [U8]: 开启DEBUG 批注 [U9]: 结论：地址大的那个 博学国际教育培训中心 李金兵 （春秋战国 ） 4 / 13 r1#sh int e1/1 Ethernet1/1 is up, line protocol is up Hardware is AmdP2, address is ca00.11fc.001d (bia ca00.11fc.001d) MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 r1#sh ipv6 interface e1/1 Ethernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::C800:11FF:FEFC:1D Global unicast address(es): 2001:1::1, subnet is 2001:1::/64 2001:1::3, subnet is 2001:1::/64 Joined group address(es): FF02::1 FF02::1:FF00:1 FF02::1:FF00:3 FF02::1:FFFC:1D MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds r1# 批注 [U10]: 接口的MAC地址 批注 [U11]: 本地链路地址： FE80:Interface ID 先把MAC 地址分为两部分，中间加 入 FFFE，然后把第一个 8位的第 7 位变为 1 或 0 博学国际教育培训中心 李金兵 （春秋战国 ） 5 / 13 六，跟据链路本地地址来配置 IPV6 地址 r1(config)#int e1/1 r1(config-if)#ipv6 address fe80::1 link-local r1#sh ipv6 int e1/1 Ethernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::1 Global unicast address(es): 2001:1::1, subnet is 2001:1::/64 2001:1::3, subnet is 2001:1::/64 Joined group address(es): FF02::1 FF02::1:FF00:1 FF02::1:FF00:3 MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds r1# 在接口配置一个 IPV6地址 r1(config)#int e1/1 r1(config-if)#ipv6 address 2001:2::/64 eui-64 r1#sh ipv6 int e1/1 Ethernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::1 Global unicast address(es): 2001:1::1, subnet is 2001:1::/64 2001:1::3, subnet is 2001:1::/64 2001:2::1, subnet is 2001:2::/64 Joined group address(es): FF02::1 FF02::1:FF00:1 FF02::1:FF00:3 MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds 批注 [U12]: L链路本地地址改变了。 批注 [U13]: IPV6地址 博学国际教育培训中心 李金兵 （春秋战国 ） 6 / 13 ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds r1(config)#int e1/1 r1(config-if)#no ipv6 address fe80::1 LInk-local r1#SH ipv6 interface e1/1 Ethernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::C800:11FF:FEFC:1D Global unicast address(es): 2001:1::1, subnet is 2001:1::/64 2001:1::3, subnet is 2001:1::/64 2001:2::C800:11FF:FEFC:1D, subnet is 2001:2::/64 Joined group address(es): FF02::1 FF02::1:FF00:1 FF02::1:FF00:3 FF02::1:FFFC:1D MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds r1# 七，IPV6的邻居状态 ：一个是 stale ;一个是 reach r2#sh ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface 2001:1::1 96 ca00.11fc.001d STALE Et1/2 2001:1::3 1 ca00.11fc.001d STALE Et1/2 FE80::C800:11FF:FEFC:1D 0 ca00.11fc.001d STALE Et1/2 r2#ping 2001:1::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 8/36/88 ms r2#sh ipv6 neighbors 批注 [U14]: 把手动改变的链路本地 删掉 批注 [U15]: ，还原到以前的链路本地 地址了 批注 [U16]: IP地址又变了。 结论： IOS 直接拿算好的EUI-64 直 接套过去。不管这个 EUI-64是怎么 来的。 批注 [U17]: 30S没有通信，变成 腐朽状态 博学国际教育培训中心 李金兵 （春秋战国 ） 7 / 13 IPv6 Address Age Link-layer Addr State Interface 2001:1::1 0 ca00.11fc.001d REACH Et1/2 2001:1::3 1 ca00.11fc.001d STALE Et1/2 FE80::C800:11FF:FEFC:1D 1 ca00.11fc.001d STALE Et1/2 r2# 八，Ipv6 的静态路由配置 r1(config)#ipv6 route 2001:3::/64 2001:1::2 r1#ping 2001:3::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:3::1, timeout is 2 seconds: .... Success rate is 0 percent (0/4) r1(config)#ipv6 unicast-routing r1#ping 2001:3::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:3::1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/19/48 ms r1# 批注 [U18]: 可达状态 批注 [U19]: 配置 IPV6静态路由，格 式同 IPV4 批注 [U20]: 不通。。。。？ 批注 [U21]: 开启 IPV6单播路由转 发。 批注 [U22]: 通了！！！ 博学国际教育培训中心 李金兵 （春秋战国 ） 8 / 13 r1# sh ipv6 route IPv6 Routing Table - 8 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 C 2001:1::/64 [0/0] via ::, Ethernet1/1 L 2001:1::1/128 [0/0] via ::, Ethernet1/1 C 2001:2::/64 [0/0] via ::, Ethernet1/1 S 2001:3::/64 [1/0] via 2001:1::2 L FE80::/10 [0/0] via ::, Null0 L FF00::/8 [0/0] via ::, Null0 r1# 九，RIPNG r1(config)#ipv6 unicast-routing r1(config)#ipv6 router rip cisco r1(config)#int e1/1 r1(config-if)#ipv r1(config-if)#ipv6 rip cisco enable 批注 [U23]: 主机地址 批注 [U24]: 静态路由 批注 [U25]: 必须开启 批注 [U26]: 全局开启 RIP 批注 [U27]: 接口应用 博学国际教育培训中心 李金兵 （春秋战国 ） 9 / 13 r2(config)#ipv6 unicast-routing r1(config)#ipv6 router rip cisco r2(config)#int lo 0 r2(config-if)#ipv6 rip cisco enable r2(config-if)#int e1/2 r2(config-if)#ipv6 rip cisco enable r1#sh ipv6 route IPv6 Routing Table - 8 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 C 2001:1::/64 [0/0] via ::, Ethernet1/1 L 2001:1::1/128 [0/0] via ::, Ethernet1/1 L 2001:1::3/128 [0/0] via ::, Ethernet1/1 C 2001:2::/64 [0/0] via ::, Ethernet1/1 L 2001:2::C800:EFF:FEB0:1D/128 [0/0] via ::, Ethernet1/1 R 2001:3::/64 [120/2] via FE80::C800:EFF:FE84:1E, Ethernet1/1 L FE80::/10 [0/0] via ::, Null0 L FF00::/8 [0/0] via ::, Null0 r1# 批注 [U28]: 全局开启 RIP 批注 [U29]: 接口应用 批注 [U30]: 接口应用 批注 [U31]: 下一跳是 R2 的 LINK-LOCAL 地址 博学国际教育培训中心 李金兵 （春秋战国 ） 10 / 13 十, OSPFv3 R1: interface Ethernet1/1 ipv6 address 2001:1::1/64 ipv6 ospf 1 area 0 R2: interface Ethernet1/2 ipv6 address 2001:1::2/64 ipv6 ospf 1 area 0 interface Loopback0 no ip address ipv6 address 2001:3::1/64 ipv6 ospf 1 area 0 博学国际教育培训中心 李金兵 （春秋战国 ） 11 / 13 十一，6 TO 4 的 TUNNEL (使用GRE 隧道) 思路： R1和 R3 上打一个 TUNNEL 连通对端 配置： r1#sh run hostname r1 ! ipv6 unicast-routing ! interface Loopback0 no ip address ipv6 address 2001:1::1/64 ipv6 rip cisco enable ! interface Tunnel0 no ip address ipv6 address 2001:3::1/64 ipv6 enable ipv6 rip cisco enable tunnel source 12.1.1.1 tunnel destination 23.1.1.2 tunnel mode ipv6ip ! interface Ethernet1/1 ip address 12.1.1.1 255.255.255.0 博学国际教育培训中心 李金兵 （春秋战国 ） 12 / 13 duplex half ! router ospf 1 router-id 1.1.1.1 network 12.1.1.1 0.0.0.0 area 0 ! ipv6 router rip cisco ! end r2#sh run ! hostname r2 ! ipv6 unicast-routing ! interface FastEthernet0/0 ! interface Ethernet1/1 ip address 23.1.1.1 255.255.255.0 ! interface Ethernet1/2 ip address 12.1.1.2 255.255.255.0 ! router ospf 1 router-id 2.2.2.2 network 12.1.1.2 0.0.0.0 area 0 network 23.1.1.1 0.0.0.0 area 0 ! end r3#SH RUN hostname r3 ! ipv6 unicast-routing ! interface Loopback0 no ip address ipv6 address 2001:2::1/64 ipv6 rip cisco enable 博学国际教育培训中心 李金兵 （春秋战国 ） 13 / 13 ! interface Tunnel0 no ip address ipv6 address 2001:3::2/64 ipv6 enable ipv6 rip cisco enable tunnel source 23.1.1.2 tunnel destination 12.1.1.1 tunnel mode ipv6ip ! ! interface Ethernet1/2 ip address 23.1.1.2 255.255.255.0 ! router ospf 1 router-id 3.3.3.3 network 23.1.1.2 0.0.0.0 area 0 ! ipv6 router rip cisco ! end r3# 验证： r3#ping 2001:1::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:1::1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/64/100 ms r1# ping 2001:2::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:2::1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 12/56/108 ms 批注 [U32]: 6to4 通道建立成功！