设为首页收藏本站language 语言切换
查看: 2252|回复: 1
收起左侧

[考试战报] 使用cisco路由器实现IPV6 tunnel

[复制链接]
发表于 2010-7-1 17:50:23 | 显示全部楼层 |阅读模式

( v6 d' ~3 s" L9 X. J  q( o4 c  说明:此案例使用两台cisco2500路由器,IOS (tm) 2500 Software (C2500-IS-L), Version 12.2(15)T9,利用ip v4主干加ipv6的6to4 tunnel结合ipv6静态路由,就能实现两个远程ipv6子网的互连互通.
! ~% s9 ]8 _$ k# d/ X/ K1 W$ ?  t
8 z; B+ e% P5 I3 y5 Z  拓扑说明:使用两台路由器的e0接口互连仿真ipv4的主干,使用loopback0仿真两个远程的ipv6子网,6to4tunnel必须在所有的ipv6子网使用标准的ipv6地址前缀(2002::/16)进行编址.
  f  n: I7 R2 a" K' N8 v
2 S" f! U9 e* |% i  在两个端点建立tunnel时,必须使用本地路由器的ipv4接口的ip地址结合2002前缀来对本路由器的tunnel接口做编址.例如R1的e0:192.168.1.1,则R1的tunnel接口的ipv6地址一定要包含此地址的16进制格式,即2002:C0A8:101:…,其中C0A8:101即为e0接口ip地址的16进制.
- b$ p+ `, W8 c2 ^" ~9 T9 {8 q- q& K) V
配置和测试结果如下:
' B, D4 c7 x/ oR1#sh run
& l9 x) z1 H1 j/ d6 w) B% G$ b2 nhostname R1
/ B) w, V, }' ^0 M& yipv6 unicast-routing
/ J$ U2 `) [0 a3 Vinterface Loopback0
6 G0 v! W& e$ c; k  no ip address3 V: }  E2 D% M4 |5 y- W; G7 E  Z
  ipv6 address 2002:C0A8:101:1::1/64, l! L8 g  ?' r* d
interface Tunnel0
' Q- y/ N! f/ I2 ~" M( r& E; O  no ip address8 f, N' K  u2 u7 I# J' P
  no ip redirects
$ z1 \7 C( B# c, }  ipv6 address 2002:C0A8:101:13::1/64& R$ Y% S0 A2 o" z
  tunnel source Ethernet0
7 C% X- }9 Z# \* R  tunnel mode ipv6ip 6to4  Y1 A0 k( c! [$ t/ F% |- q* K
interface Ethernet0
* a. N* C# H8 W% Z' b/ S3 N6 U) B: H  ip address 192.168.1.1 255.255.255.09 @2 X! f" i9 d4 N
ipv6 route 2002::/16 Tunnel0* ^$ n7 O6 M5 k
R1#sh ipv6 int brief  b/ \% Q1 ^4 K" f$ }7 M3 ^- s! |
Ethernet0        [up/up]- D, X2 {+ |! i. K
  unassigned1 q9 @. h9 E$ x" ?2 j# g* y
Loopback0        [up/up]; v* p% }% q! r# @* f0 G7 d2 }
  FE80::210:7BFF:FE36:4912 c! t2 s$ t) ]& g! `) B2 k
  2002:C0A8:101:1::1
) k" a- d) C4 p/ ~% |' ATunnel0         [up/up]2 ]& M0 V0 w1 J! f( j
  FE80::C0A8:101
) L( ^. T/ s5 @$ t: \9 q- d$ v3 p  2002:C0A8:101:13::1
$ C2 s0 v2 @" oVirtual-Access1     [up/up]0 X& V0 n0 l" V7 F" \4 d! G+ [
  unassigned
2 f4 @! M' ~5 O5 XR1#sh ipv6 route
  {) s* h+ i) Q1 }. z& zIPv6 Routing Table - 8 entries
  h7 n& L9 @% PCodes: C - Connected, L - Local, S - Static, R -
& o  E! c  v2 u2 ]5 W( ^8 `: mRIP, B - BGP
6 I6 `, T( z1 s5 H4 n9 G; s  U - Per-user Static route
. k9 z4 M; }* X$ ^# A  I1 - ISIS L1, I2 - ISIS L2, IA - ISIS
8 R3 \1 c, I5 v* }6 f! V% Ainterarea
5 e, r' \: Y3 d' b( K  O - OSPF intra, OI - OSPF inter, OE1 - OSPF
( o# n) _/ ~' e- o, k* Xext 1, OE2 - OSPF ext 2! H$ p( ^# _; v) Q* G4 R  V
S 2002::/16 [1/0]) |% f- K+ A, M# x( q
  via ::, Tunnel0
2 f9 H4 |6 i. x) C& B( s' k3 F) ]C 2002:C0A8:101:1::/64 [0/0]
: N: v: g8 o, u& t. X' g; T  via ::, Loopback0
% A! t4 t5 s2 W5 L& V+ H) E$ cL 2002:C0A8:101:1::1/128 [0/0]1 W1 h2 ~; M, V# N- I; c4 Y+ w! J* Z
  via ::, Loopback0% o: @( y* ?% @* I. Z: G7 W3 e
C 2002:C0A8:101:13::/64 [0/0]
2 |% _- V$ s, C. d3 R/ X' g6 e, m- u* p  via ::, Tunnel0  I9 S6 ~& K- B, g! f
L 2002:C0A8:101:13::1/128 [0/0]3 C1 E. k& T) M* o- Y1 d) B
  via ::, Tunnel02 l8 Y4 ]! N2 f& ?+ q& U
L FE80::/10 [0/0]& h0 H# e1 r  t7 T) i0 q' Q
  via ::, Null0
# F6 T' F/ t/ w0 @/ V3 BL FF00::/8 [0/0]
8 S) c0 C* ^1 x# B; t  via ::, Null0  {: T& Q/ T: l! Y8 ~6 i

9 a' Y% @* w) ]6 z9 {9 [; ]r3#sh run
' h. [: g6 F5 z3 m$ |hostname r36 M' W. z- d/ C! m4 W
ipv6 unicast-routing
* H! z$ e) O5 t9 Qinterface Loopback0
+ e0 d$ Y) V0 b( B0 T no ip address
# \! G' {$ G( u" ]2 m2 n ipv6 address 2002:C0A8:103:3::3/646 y! f% b3 N1 ?0 ?/ @, h/ b
interface Tunnel05 s9 {7 ]: L* N; o2 J
 no ip address2 Q7 C5 x% p2 f
 no ip redirects) N3 `( h8 ]5 L$ J6 s
 ipv6 address 2002:C0A8:103:13::3/64' R4 B: i; p4 T6 _( M" Z- m
 tunnel source Ethernet0
6 U6 u! d4 C) |- C/ ~ tunnel mode ipv6ip 6to4# Y- |' a2 s; ]- D  A1 Q
interface Ethernet0
# m: s) c) L) P# E% S  O; p$ R  C ip address 192.168.1.3 255.255.255.0( a  |) v6 B, \
ipv6 route 2002::/16 Tunnel0
& t" f6 Z" A% E- q; K: J
; q: O. m& X5 x# D, p8 Sr3#sh ipv6 int brief
# h7 L! s& S( vEthernet0      [up/up]
# F  `  c3 n  b1 p) W( K  unassigned" a) G: \3 A( [4 p: d
Loopback0      [up/up]
1 k- y6 r5 \$ M( |( S' n7 t$ R3 ~  FE80::200:CFF:FE0A:26BC
7 p0 E6 W# Q4 y) X8 N$ R( K  k! e  2002:C0A8:103:3::3
) v9 q, Q' u1 c  h0 q5 TSerial0       [administratively9 {4 g  l, w5 x( V( ?$ G9 C5 g$ N0 F
down/down]
/ Z2 G' f. h% V' d4 B  unassigned
/ |7 Q8 f; R9 ~$ m5 j6 B9 g. xSerial1       [administratively 0 f8 U1 p, H! F9 n& k% B5 f/ L# v
down/down]3 J* J( i, z. {4 d' k
  unassigned1 `" R6 E( b% B% |1 c; ]- J7 D
Tunnel0       [up/up]
! F5 \" G( t: G/ x! K  FE80::C0A8:103- F/ M9 D" O# G
  2002:C0A8:103:13::3: y& ~1 y$ |) _# _) d: b
Virtual-Access1   [up/up]' M4 I. A5 @  Y" V( e( ?
  unassigned2 \5 S3 |: S+ |- l9 ?4 L( M
r3#sh ipv6 route2 F2 |. A- }. o& V/ I& \
IPv6 Routing Table - 7 entries
5 J9 I# p! b& w4 f' y7 |/ g- mCodes: C - Connected, L - Local, S - Static, R -
8 }; W: |) t1 s* hRIP, B - BGP
( N$ R* P1 E" M' f4 r1 [  U - Per-user Static route2 M" w4 _7 ^/ n: r( T" c
  I1 - ISIS L1, I2 - ISIS L2, IA - ISIS
' z3 R8 N& Y) X  Z7 ^interarea
3 i1 F9 ?- m1 l2 a, A( M  M$ l7 p  O - OSPF intra, OI - OSPF inter, OE1 - OSPF   d8 V5 u7 s, F/ b
ext 1, OE2 - OSPF ext 2) F0 b: q9 h+ Y6 z0 I5 _* A/ S
S 2002::/16 [1/0]5 e7 s/ b# T5 Z- J7 Y% h
  via ::, Tunnel0
" X' E: e; f! u0 GC 2002:C0A8:103:3::/64 [0/0]. N  w2 k' A  Z
  via ::, Loopback0
4 c2 S) U, ], C( J) AL 2002:C0A8:103:3::3/128 [0/0]* a7 ?2 Z; G, q/ Y, f  ]
  via ::, Loopback0
' d* f$ S5 D4 b  pC 2002:C0A8:103:13::/64 [0/0]6 m* {9 j2 i" N; x7 K0 |
  via ::, Tunnel03 y# I, K1 |. i; b/ c! F+ Q
L 2002:C0A8:103:13::3/128 [0/0]. @# N: h; D2 D' g& n8 T
  via ::, Tunnel0
9 b5 A( R) {, ?3 T4 iL FE80::/10 [0/0]
* ~# |4 ~6 C) v6 l( J& G  via ::, Null0
  B4 n2 m5 B4 T# N  C2 V" {% C) \9 wL FF00::/8 [0/0]
5 {4 @  n% P9 @5 B' p5 K  via ::, Null0
0 x% o4 m" e2 f' S在R1上测试直连的ipv6 tunnel接口:9 C1 C) R4 V8 V) I! p
R1#ping ipv6 2002:c0a8:103:13::3/ y. P) V  \8 w+ L* ~" G( x
Type escape sequence to abort.2 ?0 W1 V) ]7 C2 r& C
Sending 5, 100-byte ICMP Echos to
1 i% U' ~! U; f# H6 y. F3 b2002:C0A8:103:13::3, timeout is 2 seconds:
9 i! E: N/ i5 c+ p" z. O% I!!!!!
( ]5 O4 }" k0 HSuccess rate is 100 percent (5/5), round-trip / S  T# N9 N8 q5 J0 A) G% }
min/avg/max = 8/10/16 ms
7 ]2 N, @0 F7 b& S7 }- A
. f# B" B6 a% m在R1上测试到R3的ipv6 loopback0接口(非直连):/ W+ ~7 {# ^/ D% g: F& D* m+ R
R1#ping ipv6 2002:c0a8:103:3::3 " ^+ O/ c: Y2 h2 c  \3 D4 J/ A7 }
Type escape sequence to abort.8 u% n& @2 Q" b# \, s. [: D
Sending 5, 100-byte ICMP Echos to
+ x- v9 e  h0 m2 I" F2002:C0A8:103:3::3, timeout is 2 seconds:) j, u0 D% @; H9 U8 Q
!!!!!
! H# m! [' v: }+ t* w1 a5 c4 _Success rate is 100 percent (5/5), round-trip - b' Y" A9 T/ p
min/avg/max = 8/12/16 ms, a4 Q+ b8 E; ]+ ]; Y5 t
1 `  `" F) a$ r* P4 N, b+ f+ F. O8 Q
                              
. n% [" m9 ?# B( x! n$ W" c. I: ]+ V- k
      (亚威科技 转载请注明出处)
1 |+ X7 p" i1 ?5 g& f
发表于 2010-10-25 18:59:04 | 显示全部楼层
还可以,加油1
沙发 2010-10-25 18:59:04 回复 收起回复
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-2-3 00:54 , Processed in 0.097148 second(s), 13 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表