第十天实验作业目录
一、实验要求
R1R2部分ipv4 ipv6双栈
R3部分公网
右边纯ipv6
二、实验步骤
1.搭建拓扑图
2.配置IP地址与环回地址
首先配置公网的ipv4地址,因为要进行6to4tunnel进行计算IPV6地址,所以要先配v4地址。
根据ipv4地址计算出ipv6地址再进行划分
R1两环回:
192.168.1.1 25
192.168.1.129 25
R1-R2:
192.168.3.1 24
192.168.3.2 24
R2环回:192.168.2.1 24
3.首先配置公网部分,使公网网络互通
在R2 R4上分别配置一条指向R3的缺省路由
[R2]ip route-static 0.0.0.0 0 23.1.1.2
[R4]ip route-static 0.0.0.0 0 34.1.1.1
4.先配置R1和R2之间部分局域网到广域网
1.ipv4部分
缺省路由指向2
[R1]ip route-static 0.0.0.0 0 192.168.3.2
静态去R1的环回
[R2]ip route-static 192.168.1.1 24 192.168.3.1
做nat地址转换,使局域网能访问公网
[R2]acl 2000
[R2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[R2-acl-basic-2000]q
[R2]interface Serial 4/0/1
[R2-Serial4/0/1]nat
[R2-Serial4/0/1]nat ou
[R2-Serial4/0/1]nat outbound 2000
2.ipv6部分
要在公网的两端,局域网连接公网的那端,使用ipv4地址计算成ipv6的地址
23.1.1.1
2002:1701:0101:0000::/64----2002:1701:0101:FFFF::/64
R1环回1:2002:1701:0101:0000::1/65
环回2:2002:1701:0101:0000:8000::1/65
R1-R2
2002:1701:0101:1::1/64
2002:1701:0101:1::2/64
R2换回:
2002:1701:0101:2::1/64
使用ripng 使R1-R2之间互通
R1:
[R1]ripng 1
[R1-ripng-1]q
[R1]interface LoopBack 0
[R1-LoopBack0]ripng 1 enable
[R1-LoopBack1]ripng 1 enable
[R1-LoopBack1]q
[R1]interface Serial 4/0/1
[R1-Serial4/0/1]ripng 1 enable
R2:
[R2]ripng 1
[R2-ripng-1]q
[R2]interface LoopBack 0
[R2-LoopBack0]ripng 1 enable
[R2-LoopBack0]q
[R2]interface Serial 4/0/0
[R2-Serial4/0/0]ripng 1 enable
使用ipv6地址通向外网,使用6to4tunnel
[R2]interface Tunnel 0/0/0
[R2-Tunnel0/0/0]ipv6 en
[R2-Tunnel0/0/0]ipv6 enable
[R2-Tunnel0/0/0]ipv6 address 2002:1701:0101:1::2/64
[R2-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[R2-Tunnel0/0/0]source Serial 4/0/1
目标不写,因为目标是通过ipv4地址推算出来
再写一条静态路由,走tunnel口
[R2]ipv6 route-static 2002:: 16 Tunnel 0/0/0
只要走2002网段的都走tunnel口
此时要让R1也学习到R2tunnel: 静态、重发布、在R2上写一条ripng缺省
使用ripng发缺省
[R2]interface Serial 4/0/0
[R2-Serial4/0/0]ripng default-route only
此时可以做一些优化,将R1两条ipv6路由汇总成一条
[R1]interface Serial 4/0/1
[R1-Serial4/0/1]ripng summary-address 2002:1701:101:: 64
5.配置右边公网右边BGP部分
将34.1.1.2计算成ipv6地址
2002::2201:0102::/48
划分成两个,分别给两个AS
AS1: 2002:2201:0102::/49
2002:2201:0102:0000::/64——2002:2201:0102:7FFF::/49
AS2: 2002:2201:0102:8000::/49
2002:2201:0102:8000::/64——2002:2201:0102:FFFF::/64
R4环回:2002:2201:0102:0000::1/64
R4-R5:2002:2201:0102:0001::1/64 2002:2201:0102:0001::2/64
R5环回:2002:2201:0102:8000::1/64
R5-R6:2002:2201:0102:8001::1/64 2002:2201:0102:8001::2/64
R6环回: 2002:2201:0102:8002::1/64
R6-R7: 2002:2201:0102:8003::1/64 2002:2201:0102:8003::2/64
R7的环回: 2002:2201:0102:8004::1/64
R7-R8: 2002:2201:0102:8005::1/64 2002:2201:0102:8005::2/64
R8的环回: 2002:2201:0102:8006::1/64
1.R5R6R7R8之间配置IGP部分----ospfv3
R5:
[R5]ospfv3
[R5-ospfv3-1]router-id 5.5.5.5
[R5-ospfv3-1]q
[R5]interface LoopBack 0
[R5-LoopBack0]ospfv3 1 area 0
[R5-LoopBack0]q
[R5]interface Serial 4/0/1
[R5-Serial4/0/1]ospfv3 1 area 0
2.R4-R5建立EBGP邻居关系 R5R6R7R8建立IBGP邻居关系
R4-R5建立EBGP邻居关系:
[R4]bgp 1
[R4-bgp]router-id 4.4.4.4
[R4-bgp]peer 2002:2201:0102:0001::2 as-number 2
[R4-bgp]ipv6-family
[R4-bgp-af-ipv6]peer 2002:2201:0102:0001::2 enable
[R5]bgp 64512
[R5-bgp]router-id 5.5.5.5
[R5-bgp]confederation id 2
[R5-bgp]peer 2002:2201:0102:0001::1 as-number 1
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]peer 2002:2201:0102:0001::1 enable
可以利用ipv6的多宿主特点,可以在用环回建邻的基础上,给环回再配置个方便点的地址,但在实际生活中,要注意!
R5R6R7R8建立IBGP邻居关系:
R5:
[R5]bgp 64512
[R5-bgp]peer 6::6 as-number 64512
[R5-bgp]peer 6::6 connect-interface LoopBack 0
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]peer 6::6 enable
因为华为设备用环回建立邻居关系时 自动使用第一个环回,所以这时更新源为环回0时,要加上具体哪个环回
[R5-bgp]peer 6::6 connect-interface LoopBack 0 5::5
R6:
[R6]bgp 64512
[R6-bgp]router-id 6.6.6.6
[R6-bgp]confederation id 2
[R6-bgp]peer 5::5 as-number 64512
[R6-bgp]peer 5::5 connect-interface LoopBack 0 6::6
[R6-bgp]peer 7::7 as-number 64512
[R6-bgp]peer 7::7 connect-interface LoopBack 0 6::6
[R6-bgp]ipv6-family
[R6-bgp-af-ipv6]peer 7::7 enable
[R6-bgp-af-ipv6]peer 5::5 enable
R7:
[R7]bgp 64512
[R7-bgp]router-id 7.7.7.7
[R7-bgp]confederation id 2
[R7-bgp]confederation peer-as 64513
[R7-bgp]peer 6::6 as-number 64512
[R7-bgp]ipv6-family
[R7-bgp-af-ipv6]peer 6::6 enable
[R7-bgp]peer 6::6 connect-interface LoopBack 0 7::7
[R7-bgp]peer 8::8 as-number 64513
[R7-bgp]peer 8::8 connect-interface LoopBack 0 7::7
[R7-bgp]ipv6-family
[R7-bgp-af-ipv6]peer 8::8 enable
[R7-bgp]peer 8::8 ebgp-max-hop
R8:
[R8]bgp 64513
[R8-bgp]router-id 8.8.8.8
[R8-bgp]confederation id 2
[R8-bgp]confederation peer-as 64512
[R8-bgp]peer 7::7 as-number 64512
[R8-bgp]peer 7::7 connect-interface LoopBack 0 8::8
[R8-bgp]peer 7::7 ebgp-max-hop
[R8-bgp]ipv6-family
[R8-bgp-af-ipv6]peer 7::7 enable
6.BGP部分做6to4tunnel
1.将路由汇总,做一条空接扣防环路由
[R5]ipv6 route-static 2002:2201:0102:8000:: 49 NULL 0
2.进行宣告
[R5]bgp 64512
[R5-bgp]iopv
[R5-bgp]ip
[R5-bgp]ipv4-family
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]net
[R5-bgp-af-ipv6]network 2002:2201:0102:8000:: 49
[R4]interface Tunnel 0/0/0
[R4-Tunnel0/0/0]ipv6 enable
[R4-Tunnel0/0/0]ipv6 address 2002:2201:0102:0002::1/64
[R4-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[R4-Tunnel0/0/0]source Serial 4/0/0
3.让2002::网段走tunnel口
手写静态
[R4]ipv6 route-static 2002:: 16 Tunnel 0/0/0
4.为了使右边R5R6R7R8学习到2002:: ,在BGP里进行宣告
[R4]bgp 1
[R4-bgp]ipv6-family
[R4-bgp-af-ipv6]network 2002:: 16
5.在R6上查看发现路由条目不优,在R5上修改下一跳地址
修改本地为下一跳地址:
[R5]bgp 64512
[R5-bgp]ipv6-family
[R5-bgp-af-ipv6]peer 6::6 next-hop-local
6.此时R6不会传给R7———IBGP水平分割
将R6配置成为路由反射器,将路由反射给R7,R7与R8是联邦类EBGP关系,所以正常传给R8
[R6]bgp 64512
[R6-bgp]ipv6-family
[R6-bgp-af-ipv6]peer 5::5 reflect-client
7.测试
R1pingR8环回:
R1ping公网: