实验要求
R1可以访问R3的环回路由
两个局域网基于6to4tunnel可达
实验手绘图
构建网络拓扑图
配置公网区域IPV4地址
R2：0/0/1接口属于公网区域
R3：
R4：0/0/0接口属于公网区域
为了让公网R2和R3和R4能够互相访问，我们在R2上配置一条静态路由指向R3
R4同理也配置一条静态路由指向R3
完成之后公网就可以ping通了
配置私网
R1：
R2：
在R1上配置一条静态路由指向R2
在R2上也配置一条汇总静态路由指向R1
在R1上配置一条指向空接口的路由防止路由环路
在R2上配置nat出口
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[R2-acl-basic-2000]int g0/0/1
[R2-GigabitEthernet0/0/1]nat outbound 2000
[R2-GigabitEthernet0/0/1]
这样R1可以访问R3的环回路由
左边配置IPV6地址，由于使用6to4tunnel接口，所以IPV6地址由IPV4转换而来
23.1.1.1算出来的IPV6地址为：2002:1701:0101::/48
借16位2002:1701:0101:0000::/64 -- 2002:1701:0101:FFFF::/64
从这段从取三个出来作为左边私网的IP地址
R1的两个环回
2002:1701:0101:0000:0000::/65 IPV6为：2002:1701:0101:0000:0000::1/65
2002:1701:0101:0000:8000::/65 IPV6为：2002:1701:0101:0000:8000::1/65
R1-R2网段
2002:1701:0101:1::/64 R1的IPV6为：2002:1701:0101:0001::1/64
2002:1701:0101:1::/64 R2的IPV6为：2002:1701:0101:0001::2/64
R2的环回
IPV6为：2002:1701:0101:0002::1/64
查看R1的IPV6接口配置
查看R2的IPV6接口配置
R2的配置命令
[R2]ipv6
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ipv6 enable
[R2-GigabitEthernet0/0/0]ipv6 add 2002:1701:0101:1::2 64
[R2-GigabitEthernet0/0/0]int lo0
[R2-LoopBack0]ipv6 enable
[R2-LoopBack0]ipv6 add 2002:1701:0101:2::1 64
[R2-LoopBack0]
ripng宣告R1的环回
[R1]ripng 1
[R1-ripng-1]q
[R1]int lo0
[R1-LoopBack0]ripng 1 enable
[R1-LoopBack0]int lo1
[R1-LoopBack1]ripng 1 enable
[R1-LoopBack1]int g0/0/1
[R1-GigabitEthernet0/0/1]ripng 1 enable
ripng宣告R2的环回
[R2]ripng 1
[R2-ripng-1]int lo0
[R2-LoopBack0]ripng 1 enable
[R2-LoopBack0]int g0/0/0
[R2-GigabitEthernet0/0/0]ripng 1 enable
[R2-GigabitEthernet0/0/0]
查看R1上通过ripng学到的路由
查看R2上通过ripng学到的路由 为两条环回
汇总为一条
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ripng summary-address 2002:1701:101:: 64
[R1-GigabitEthernet0/0/1]
配置Tunnel口
[R2]
[R2]interface t
[R2]interface Tunnel 0/0/0
[R2-Tunnel0/0/0]ipv6 enable
[R2-Tunnel0/0/0]ipv6 address 2002:1701:101:3::1 64
[R2-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[R2-Tunnel0/0/0]source 23.1.1.1
[R2]ipv6 route-static 2002:: 16 Tunnel 0/0/0 所有该网段路由都走tunnel接口
[R2]
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ripng default-route ?
only Advertises IPv6 default route only
originate Originate default route
[R2-GigabitEthernet0/0/0]ripng default-route only
[R2-GigabitEthernet0/0/0]
only代表所有经过0/0/0接口的路由都走缺省
之前到R2的环回路由为
而现在我们可以看到R1到R2的所有路由都是缺省
右边配置IPV6地址，由于使用6to4tunnel接口，所以IPV6地址由IPV4转换而来
34.1.1.2算出来的IPV6地址为：2002:2201:0102::/48
2002:2201:0102::/49 AS1
范围：2002:2201:0102:0000:/64 -- 2002:2201:0102:7FFF:/64
2002:2201:0102:8000::/49 AS2
范围：2002:2201:0102:8000::/64 -- 2002:2201:0102:FFFF::/64
将R4的所有接口划分到AS1，其它的划分到AS2
配置IPV6地址
R4的IPV6地址：
[R4]ipv6
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]ipv6 enable
[R4-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:1::1 64
[R4-GigabitEthernet0/0/1]int lo0
[R4-LoopBack0]ipv6 enable
[R4-LoopBack0]ipv6 address 2002:2201:0102::1 64
[R4-LoopBack0]
R5的IPV6地址：
[R5]ipv6
[R5]int g0/0/0
[R5-GigabitEthernet0/0/0]ipv6 enable
[R5-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:1::2 64
[R5-GigabitEthernet0/0/0]
[R5-GigabitEthernet0/0/0]int lo0
[R5-LoopBack0]ipv6 enable
[R5-LoopBack0]ipv6 address 2002:2201:0102:8000::1 64
[R5-LoopBack0]int g0/0/1
[R5-GigabitEthernet0/0/1]ipv6 enable
[R5-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8001::1 64
[R5-GigabitEthernet0/0/1]
R6的IPV6地址：
[R6]ipv6
[R6]int g0/0/0
[R6-GigabitEthernet0/0/0]ipv6 enable
[R6-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8001::2 64
[R6-GigabitEthernet0/0/0]int lo0
[R6-LoopBack0]ipv6 enable
[R6-LoopBack0]ipv6 address 2002:2201:0102:8002::1 64
[R6-LoopBack0]int g0/0/1
[R6-GigabitEthernet0/0/1]ipv6 enable
[R6-GigabitEthernet0/0/1]ipv6 add 2002:2201:0102:8003::1 64
[R6-GigabitEthernet0/0/1]
R7的IPV6地址：
[R7]ipv6
[R7]int g0/0/0
[R7-GigabitEthernet0/0/0]ipv6 enable
[R7-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8003::2 64
[R7-GigabitEthernet0/0/0]int lo0
[R7-LoopBack0]ipv6 enable
[R7-LoopBack0]ipv6 address 2002:2201:0102:8004::1 64
[R7-LoopBack0]int g0/0/1
[R7-GigabitEthernet0/0/1]ipv6 enable
[R7-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8005::1 64
[R7-GigabitEthernet0/0/1]
R8的IPV6地址：
[R8]ipv6
[R8]int g0/0/0
[R8-GigabitEthernet0/0/0]ipv6 enable
[R8-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8005::2 64
[R8-GigabitEthernet0/0/0]int lo0
[R8-LoopBack0]ipv6 enable
[R8-LoopBack0]ipv6 address 2002:2201:0102:8006::1 64
[R8-LoopBack0]
在R5/6/7/8上配置OSPFV3协议
[R5]ospfv3 1
[R5-ospfv3-1]router-id 5.5.5.5
[R5-ospfv3-1]int lo0
[R5-LoopBack0]ospfv3 1 area 0
[R5-LoopBack0]int g0/0/1
[R5-GigabitEthernet0/0/1]ospfv3 1 area 0
[R5-GigabitEthernet0/0/1]
[R6]ospfv3 1
[R6-ospfv3-1]router-id 6.6.6.6
[R6-ospfv3-1]int g0/0/0
[R6-GigabitEthernet0/0/0]ospfv3 1 area 0
[R6-GigabitEthernet0/0/0]int lo0
[R6-LoopBack0]ospfv3 1 area 0
[R6-LoopBack0]int g0/0/1
[R6-GigabitEthernet0/0/1]ospfv3 1 area 0
[R7]ospfv3 1
[R7-ospfv3-1]router-id 7.7.7.7
[R7-ospfv3-1]int g0/0/0
[R7-GigabitEthernet0/0/0]ospfv3 1 area 0
[R7-GigabitEthernet0/0/0]int lo0
[R7-LoopBack0]ospfv3 1 area 0
[R7-LoopBack0]int g0/0/1
[R7-GigabitEthernet0/0/1]ospfv3 1 area 0
[R7-GigabitEthernet0/0/1]
[R8]ospfv3 1
[R8-ospfv3-1]router-id 8.8.8.8
[R8-ospfv3-1]int g0/0/0
[R8-GigabitEthernet0/0/0]ospfv3 1 area 0
[R8-GigabitEthernet0/0/0]int lo0
[R8-LoopBack0]ospfv3 1 area 0
[R8-LoopBack0]
查看邻居表邻居关系建立成功
查看R5上通过OSPFV3学到的路由
配置bgp协议
R4：
[R4]bgp 1
[R4-bgp]router-id 4.4.4.4
[R4-bgp]peer 2002:2201:102:1::2 as-number 2
[R4-bgp]ipv6
[R4-bgp]ipv6-family
[R4-bgp-af-ipv6]peer 2002:2201:102:1::2 enable
[R4-bgp-af-ipv6]
R5：
[R5]bgp 64512
[R5-bgp]router-id 5.5.5.5
[R5-bgp]confederation id 2
[R5-bgp]peer 2002:2201:102:1::1 as-number 1
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]peer 2002:2201:102:1::1 enable
[R5-bgp-af-ipv6]
这样配置bgp协议ipv6地址太过繁琐
我们将R5、R6、R7、R8的环回接口上再配置一个简单的ipv6的地址用于建立bgp邻居
并且不用重新宣告这些新的ipv6地址，因为 ospfv3会跑通。
R5：
[R5]bgp 64512
[R5-bgp]peer 1::6 as-number 64512
[R5-bgp]peer 1::6 connect-interface lo0 1::5
[R5-bgp]q
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]peer 1::6 enable
[R5-bgp-af-ipv6]
Feb 8 2023 20:54:27-08:00 R5 %%01BGP/3/STATE_CHG_UPDOWN(l)[1]:The status of the
peer 1::6 changed from OPENCONFIRM to ESTABLISHED. (InstanceName=Public, StateC
hangeReason=Up)
R6：
[R6]bgp 64512
[R6-bgp]router-id 6.6.6.6
[R6-bgp]confederation id 2
[R6-bgp]peer 1::5 as-number 64512
[R6-bgp]peer 1::5 connect-interface lo0 1::6
[R6-bgp]peer 1::7 as-number 64512
[R6-bgp]peer 1::7 connect-interface lo0 1::6
[R6-bgp]ipv6-family
[R6-bgp-af-ipv6]peer 1::5 enable
[R6-bgp-af-ipv6]peer 1::7 enable
[R6-bgp-af-ipv6]
Feb 8 2023 20:54:27-08:00 R6 %%01BGP/3/STATE_CHG_UPDOWN(l)[0]:The status of the
peer 1::5 changed from OPENCONFIRM to ESTABLISHED. (InstanceName=Public, StateC
hangeReason=Up)
[R6-bgp-af-ipv6]
Feb 8 2023 20:56:40-08:00 R6 %%01BGP/3/STATE_CHG_UPDOWN(l)[1]:The status of the
peer 1::7 changed from OPENCONFIRM to ESTABLISHED. (InstanceName=Public, StateC
hangeReason=Up)
R7：
[R7]bgp 64512
[R7-bgp]router-id 7.7.7.7
[R7-bgp]confederation id 2
[R7-bgp]confederation peer-as 64513
[R7-bgp]peer 1::6 as-number 64512
[R7-bgp]peer 1::6 connect-interface lo0 1::7
[R7-bgp]peer 1::8 as-number 64513
[R7-bgp]peer 1::8 connect-interface lo0 1::7
[R7-bgp]peer 1::8 ebgp-max-hop 2
[R7-bgp]ipv6-family
[R7-bgp-af-ipv6]peer 1::6 enable
[R7-bgp-af-ipv6]peer 1::8 enable
[R7-bgp-af-ipv6]
Feb 8 2023 20:56:40-08:00 R7 %%01BGP/3/STATE_CHG_UPDOWN(l)[0]:The status of the
peer 1::6 changed from OPENCONFIRM to ESTABLISHED. (InstanceName=Public, StateC
hangeReason=Up)
R8：
[R8]bgp 64513
[R8-bgp]router-id 8.8.8.8
[R8-bgp]confederation id 2
[R8-bgp]confederation peer-as 64512
[R8-bgp]peer 1::7 as-number 64512
[R8-bgp]peer 1::7 connect-interface lo0 1::8
[R8-bgp]peer 1::7 ebgp-max-hop 2
[R8-bgp]ipv6-family
[R8-bgp-af-ipv6]peer 1::7 enable
[R8-bgp-af-ipv6]
查看邻居建立情况：
右边AS2能够去左边
为了使右边能穿过R3的v4区域，在R4上写一个tunnel接口
[R4]interface Tunnel 0/0/0
[R4-Tunnel0/0/0]ipv6 enable
[R4-Tunnel0/0/0]ipv6 address 2002:2201:0102:2::1 64
[R4-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[R4-Tunnel0/0/0]source 34.1.1.2
[R4-Tunnel0/0/0]
通过2002:: 16这条路由从Tunnel 0/0/0 到达R2
[R4]ipv6 route-static 2002:: 16 Tunnel 0/0/0
左边能够到右边的AS2
向R4宣告右边的所有路由的汇总路由，让R4能够学到到达右边的路由，并且提前将该汇总路由指向NULL 0 避免路由环路
[R5]ipv6 route-static 2002:2201:0102:8000:: 49 NULL 0
[R5]bgp 64512
[R5-bgp]ipv6
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]network 2002:2201:0102:8000:: 49
[R5-bgp-af-ipv6]
R4成功学到该路由
这时候，R4就哪里都可以到达了。
AS2区域想要到达左边，需要R4去在bgp中宣告2002:: 16这条路由
[R4]bgp 1
[R4-bgp]ipv6-family
[R4-bgp-af-ipv6]network 2002:: 16
[R4-bgp-af-ipv6]
R5成功收到该路由
R6上该路由不优
更改下一跳
[R5-bgp-af-ipv6]peer 1::6 next-hop-local
R6成功优了
由于IBGP水平分割的原因，在R7上也不优，需要在R6上添加反射器，使R6成为R7的反射器客户端将该路由反射给R7
R7也成功获取路由
R8也成功获取
全部配置完成
我们用R1pingR8的环回地址
成功
本次实验完成！
379
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
