设为首页收藏本站language 语言切换
查看: 2630|回复: 1
收起左侧

[考试战报] 使用cisco路由器实现IPV6 tunnel

[复制链接]
发表于 2010-7-1 17:50:23 | 显示全部楼层 |阅读模式

$ I$ @! o* H2 u  说明:此案例使用两台cisco2500路由器,IOS (tm) 2500 Software (C2500-IS-L), Version 12.2(15)T9,利用ip v4主干加ipv6的6to4 tunnel结合ipv6静态路由,就能实现两个远程ipv6子网的互连互通.: T9 Q2 u3 x  P/ I. R3 _

" T) }- z3 x3 Y, B+ Z  拓扑说明:使用两台路由器的e0接口互连仿真ipv4的主干,使用loopback0仿真两个远程的ipv6子网,6to4tunnel必须在所有的ipv6子网使用标准的ipv6地址前缀(2002::/16)进行编址.
/ W% S6 ^) Q4 G. N. L6 X' P8 i! N, K4 T2 l* }
  在两个端点建立tunnel时,必须使用本地路由器的ipv4接口的ip地址结合2002前缀来对本路由器的tunnel接口做编址.例如R1的e0:192.168.1.1,则R1的tunnel接口的ipv6地址一定要包含此地址的16进制格式,即2002:C0A8:101:…,其中C0A8:101即为e0接口ip地址的16进制.
$ H  y7 ~; O0 H8 u6 u" x; \
& G* Z( G( x7 X" X: x- _配置和测试结果如下:
* I7 o& ~' `# KR1#sh run/ C6 G1 a8 @' Z0 R( k9 n: H
hostname R1: {! G# d  ]1 G2 Z! W0 e& F) p
ipv6 unicast-routing. b- u5 u! o- E  a0 W- \
interface Loopback0! h5 n' E9 ?# G% y6 I
  no ip address
. g* o" J! A6 ~( f% u$ A  ipv6 address 2002:C0A8:101:1::1/64
4 z5 g/ W. R" d* R- U5 @: i2 Q' n- Hinterface Tunnel0) f5 d* M+ L% U+ S
  no ip address
$ k8 P# A* r. L8 D  }, @  no ip redirects0 ^) _1 G" A5 `+ y  V
  ipv6 address 2002:C0A8:101:13::1/64( U' D" J8 }) u  ~$ ^
  tunnel source Ethernet0" j6 X7 H$ g" V/ m' q# `# n/ J
  tunnel mode ipv6ip 6to4' n; b  n: j, ]0 N9 W
interface Ethernet0
0 j$ P9 j8 Y# S( v$ ^6 s- p; _  ip address 192.168.1.1 255.255.255.01 [# \- s$ S+ I7 d3 x1 @' ^
ipv6 route 2002::/16 Tunnel0! O! n$ C# C7 }; Q# D1 H
R1#sh ipv6 int brief
+ t; j8 `' [! q# i  ~Ethernet0        [up/up]
# L" b6 N- k( N, X# M5 F  unassigned
  g: m3 H5 Z4 {Loopback0        [up/up]
, {* Q* Y5 @# R& ?, D% b  FE80::210:7BFF:FE36:491; T* t( d  C' d# T' Q1 ~7 }. c
  2002:C0A8:101:1::1
2 q* H  F" d1 j# t2 L9 z% sTunnel0         [up/up]% V6 }* b* _9 u. `$ D: t* n9 T0 }1 C
  FE80::C0A8:101
5 ]) E2 _9 ?) ?1 s  2002:C0A8:101:13::1
! }7 ^8 v+ s/ D0 ~Virtual-Access1     [up/up]
% B2 p0 n) F: A% P, E. r  unassigned
4 H4 ^- I) ]+ C8 i- ZR1#sh ipv6 route3 G+ Y1 B( O: m. x" V* L! ?7 r
IPv6 Routing Table - 8 entries6 N2 X/ @* {& u9 C$ [; }3 `
Codes: C - Connected, L - Local, S - Static, R -
( R' X- [9 V$ ?4 q' a/ l* `. ^% K4 {RIP, B - BGP/ F* `- k. @% W
  U - Per-user Static route+ }9 b; f3 d7 r0 L; I* j
  I1 - ISIS L1, I2 - ISIS L2, IA - ISIS 4 z) v$ L# j" ?2 I* ~. x
interarea
# u2 {. ^* m( `  p  E' \  O - OSPF intra, OI - OSPF inter, OE1 - OSPF ) q& J, X5 N! y+ p; S( E( a- }
ext 1, OE2 - OSPF ext 2$ w0 C. ]. X' v% M" C
S 2002::/16 [1/0]2 _5 c0 m2 d& l
  via ::, Tunnel08 ?/ J4 d8 A5 t0 \3 b3 N8 m
C 2002:C0A8:101:1::/64 [0/0]" ^9 {; l2 l0 Q& ?6 Q7 @1 u/ X; V
  via ::, Loopback0% O7 m9 ^1 N/ }+ r. R; G
L 2002:C0A8:101:1::1/128 [0/0]
% Q1 |. x1 H8 \' U' n4 ^  via ::, Loopback08 @  K% m, j" B3 b7 V( Z
C 2002:C0A8:101:13::/64 [0/0]/ S' A3 I  \4 C- i- w, Z
  via ::, Tunnel0
9 Q: A: S0 s2 g3 E3 e% r/ gL 2002:C0A8:101:13::1/128 [0/0]
  @( r7 a1 f* p9 t  via ::, Tunnel03 P( L3 x' T7 t; z. c2 P, a& k/ v
L FE80::/10 [0/0]  k1 I, x  s# x1 a  k/ e! A
  via ::, Null0' K* M: q& `. e) s. y" h0 Z
L FF00::/8 [0/0]
- F# T  T/ y* `* I: P  via ::, Null0
% @/ j. {9 {) z" |. y! k6 z( {3 d$ j. k, |
r3#sh run& k) U" ~6 K  Y1 ?& v
hostname r3
9 T7 n6 y$ A: P0 hipv6 unicast-routing
; Q6 z: T' b% A+ o/ ~6 C) F) iinterface Loopback0
0 r, ]! I8 ]! L  y, e no ip address2 H# w& e0 L5 p# _& @
 ipv6 address 2002:C0A8:103:3::3/64) j9 }. d/ K% e$ }9 p+ r0 U$ p
interface Tunnel0! A+ m" H) g) A1 F
 no ip address2 i/ }9 t7 S( Z/ l" O# K
 no ip redirects
( ~% D! v: V$ u) j7 y ipv6 address 2002:C0A8:103:13::3/64
. f2 Q. i& A$ h# X( A2 k8 [3 F/ D tunnel source Ethernet04 J' q  t* c" A  b9 q
 tunnel mode ipv6ip 6to4
, ]9 ]; m: z: q8 T- Ointerface Ethernet08 V& s/ {6 F3 t4 Y5 z* p8 {. g# `# u
 ip address 192.168.1.3 255.255.255.0
( Y' }  R8 ^+ Vipv6 route 2002::/16 Tunnel0
' q/ N* L. F1 X5 n9 s! J3 V7 c( y  [( B/ R% ^$ Y2 s' U3 a1 d
r3#sh ipv6 int brief
! S& z: X0 V5 q; D: ~Ethernet0      [up/up]
: O  e& r: i% T" e+ L  unassigned
8 a+ E9 ?1 @) H( i* `1 k/ L) DLoopback0      [up/up]
' K1 `4 ?3 N0 P1 t  V8 V  FE80::200:CFF:FE0A:26BC
9 L% }- p' X; M0 ?: i  2002:C0A8:103:3::3
$ n0 K( ]2 m& K% V9 ?( i: m9 X2 K8 ?& BSerial0       [administratively
0 @. a+ S! j! ldown/down]
& ~/ h  L9 ?" N* t) O8 _5 N  unassigned
1 O/ ]2 |5 V9 i3 ^/ sSerial1       [administratively
: j, D1 V  A- j9 vdown/down]
" A& [, ~7 H. M- C  unassigned0 ~) Y9 T+ C4 J6 @/ P6 s
Tunnel0       [up/up]2 a  \# ^) W3 M( y8 b, t
  FE80::C0A8:103
3 |3 |/ v5 j% B* }# g1 z, N  2002:C0A8:103:13::3# c3 N# q$ c% _% D- K
Virtual-Access1   [up/up]
5 w- D* R# N8 s- y. s  unassigned
. y! O' ]2 j  c2 @& Jr3#sh ipv6 route
& [) ^# k: X1 u1 NIPv6 Routing Table - 7 entries! V4 Z% g9 p3 P
Codes: C - Connected, L - Local, S - Static, R -
. r# Q1 H7 e: ?# H  R  X0 m7 l  FRIP, B - BGP; Y" e3 r; E% G- Q! S9 m+ f, Z% v
  U - Per-user Static route' ]- |  W: @) _- P. y
  I1 - ISIS L1, I2 - ISIS L2, IA - ISIS * P6 t: ?6 `: ~
interarea- `# i0 Z3 j' _7 ~% \
  O - OSPF intra, OI - OSPF inter, OE1 - OSPF
; f0 a+ E5 u8 B# M. ^ext 1, OE2 - OSPF ext 28 [) u2 u$ D# v/ |" M; B7 j
S 2002::/16 [1/0]
* T5 h; s) s* W; [( h- ]  via ::, Tunnel09 g& k2 p1 W8 t$ n4 u/ C  r
C 2002:C0A8:103:3::/64 [0/0]
/ R; T: _+ h. z9 w  via ::, Loopback09 ~5 ~1 \. t) X1 D1 c
L 2002:C0A8:103:3::3/128 [0/0]
- Q  ], E/ [( ~. x  via ::, Loopback0/ ]3 a& Q/ V0 |: a# I
C 2002:C0A8:103:13::/64 [0/0]
/ Y0 r+ b5 g! ?; F% M& y) U+ q1 H  E. k  via ::, Tunnel0  ?( T4 |7 X/ Y4 J5 [, Y$ O8 V
L 2002:C0A8:103:13::3/128 [0/0]
/ b2 h9 \2 ]) C  via ::, Tunnel0
0 L7 ~, z2 m# T! ^+ b8 @L FE80::/10 [0/0]* ~  t- ]' n2 ~* Q& ^- `; |7 S* y
  via ::, Null0
3 Y3 c  i! N: u, mL FF00::/8 [0/0]
6 Z6 V' @: ~/ l- l  via ::, Null0  G* e% S% I. \4 J
在R1上测试直连的ipv6 tunnel接口:! e% K4 N: u4 _4 K# T; z! u
R1#ping ipv6 2002:c0a8:103:13::3
5 V, x  m" Y0 VType escape sequence to abort.
( _( I2 ?# e+ u: O2 B2 WSending 5, 100-byte ICMP Echos to
) t- R* i+ P$ G2 {1 N2002:C0A8:103:13::3, timeout is 2 seconds:: o& z& Y4 J0 ?7 S4 \; x
!!!!!  t. k) a8 q* [2 a. Q4 H) j
Success rate is 100 percent (5/5), round-trip
8 k5 v9 t" U) z. I& nmin/avg/max = 8/10/16 ms3 A3 u0 _4 x# z4 W8 W

1 y' |0 u. n1 l在R1上测试到R3的ipv6 loopback0接口(非直连):2 y* V$ P; V) Y7 F  G( E
R1#ping ipv6 2002:c0a8:103:3::3
9 ?1 [" B, v' E& PType escape sequence to abort.
* y2 K7 ~- b) ?4 YSending 5, 100-byte ICMP Echos to
" y# k  C# [& R5 ?2002:C0A8:103:3::3, timeout is 2 seconds:
$ A1 P+ A; h$ Z! R$ A. W!!!!!$ D% V0 V$ r' I6 t) D& i
Success rate is 100 percent (5/5), round-trip
4 @; b0 ~5 V; K  wmin/avg/max = 8/12/16 ms
4 P/ v( |# L0 ?1 v( k: ?6 n2 \3 f2 _: m$ g2 d: G
                              - Y$ {  D( R, C8 ?' e; f
7 @7 J- K' y  e$ S: i1 H1 j" w
      (亚威科技 转载请注明出处)
: k; Y( l! X8 A
发表于 2010-10-25 18:59:04 | 显示全部楼层
还可以,加油1
沙发 2010-10-25 18:59:04 回复 收起回复
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 论坛注册

本版积分规则

QQ|Archiver|手机版|小黑屋|sitemap|鸿鹄论坛 ( 京ICP备14027439号 )  

GMT+8, 2025-5-16 05:09 , Processed in 0.725905 second(s), 25 queries , Redis On.  

  Powered by Discuz!

  © 2001-2025 HH010.COM

快速回复 返回顶部 返回列表