**基于IPv6静态路由的公司与分部互联**
1.项目背景
某公司有北京总部、广州分部和上海分部3个办公地点,各分部与总部之间使用路由器互联。北京、上海、广州的路由器分别为R1、R2、R3,路由器,全网使IPv6进行组网,需配置静态路由,使所有计算机能够互相访问。项目拓扑如图1所示,具体要求如下:
(1) 路由器之间通过VPN互联;
(2) 公司总分之间通过静态路由互联;
(3) 测试计算机和路由器的IP和接口信息如拓扑所示。
图1 网络拓扑图
2.项目规划设计
北京总部使用2010::0/64网段,上海分部使用2020::0/64网段,广州分部使用2030::0/64网段,R1与R2之间为2001::0/64网段,R1与R3之间为2002::0/64网段,R2与R3之间为2003::0/64网段。路由器配置相应的静态路由,使所有计算机均能互访。
配置步骤如下:
(1) 配置路由器接口
(2) 配置静态路由
(3) 配置各计算机的IP地址
具体规划如下表:
表1 IP地址规划表
设备 | 接口 | IP****地址 |
---|---|---|
R1 | G0/0/0 | 2010::1/64 |
R1 | G0/0/1 | 2001::1/64 |
R1 | G0/0/2 | 2002::1/64 |
R2 | G0/0/0 | 2020::1/64 |
R2 | G0/0/1 | 2001::2/64 |
R2 | G0/0/2 | 2003::1/64 |
R3 | G0/0/0 | 2030::1/64 |
R3 | G0/0/1 | 2003::2/64 |
R3 | G0/0/2 | 2002::2/64 |
PC1 | E0/0/1 | 2010::10/64 |
PC2 | E0/0/1 | 2020::10/64 |
PC3 | E0/0/1 | 2030::10/64 |
表2 端口规划表
本端设备 | 接口 | 端口IP地址 | 对端设备 |
---|---|---|---|
R1 | G0/0/0 | 2010::1/64 | PC1 |
R1 | G0/0/1 | 2001::1/64 | R2 |
R1 | G0/0/2 | 2002::1/64 | R3 |
R2 | G0/0/0 | 2020::1/64 | PC2 |
R2 | G0/0/1 | 2001::2/64 | R1 |
R2 | G0/0/2 | 2003::1/64 | R3 |
R3 | G0/0/0 | 2030::1/64 | PC3 |
R3 | G0/0/1 | 2003::2/64 | R2 |
R3 | G0/0/2 | 2002::2/64 | R1 |
PC1 | E0/0/1 | 2010::1/64 | R1 |
PC2 | E0/0/1 | 2020::1/64 | R2 |
PC3 | E0/0/1 | 2030::1/64 | R3 |
表3 路由规划表
路由器 | 目的网段 | 下一跳地址/接口 |
---|---|---|
R1 | 2020::/64 | 2001::2 |
R1 | 2030::/64 | 2002::2 |
R2 | 2010::/64 | 2001::1 |
R2 | 2030::/64 | 2003::2 |
R3 | 2010::/64 | 2002::1 |
R3 | 2020::/64 | 2003::1 |
3.项目实施
*(1)配置路由器接口*
在路由器系统视图模式下全局开启IPv6功能。在R1上的接口下使用ipv6 enable命令开启IPv6功能。
R1的配置
[Huawei]system-view
[Huawei]sysname R1
[R1]ipv6
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ipv6 enable
[R1-GigabitEthernet0/0/0]ipv6 address 2010::1/64
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ipv6 enable
[R1-GigabitEthernet0/0/1]ipv6 address 2001::1/64
[R1]interface GigabitEthernet 0/0/2
[R1-GigabitEthernet0/0/2]ipv6 enable
[R1-GigabitEthernet0/0/2]ipv6 address 2002::1/64
‚ R2的配置
[Huawei]system-view
[Huawei]sysname R2
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ipv6 enable
[R2-GigabitEthernet0/0/0]ipv6 address 2020::1/64
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ipv6 enable
[R2-GigabitEthernet0/0/1]ipv6 address 2001::2/64
[R2]interface GigabitEthernet 0/0/2
[R2-GigabitEthernet0/0/2]ipv6 enable
[R2-GigabitEthernet0/0/2]ipv6 address 2003::1/64
ƒ R3的配置
[Huawei]system-view
[Huawei]sysname R3
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]ipv6 enable
[R3-GigabitEthernet0/0/0]ipv6 address 2030::1/64
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]ipv6 enable
[R3-GigabitEthernet0/0/1]ipv6 address 2003::2/64
[R3]interface GigabitEthernet 0/0/2
[R3-GigabitEthernet0/0/2]ipv6 enable
[R3-GigabitEthernet0/0/2]ipv6 address 2002::2/64
*(2)配置静态路由*
在R1上配置目的网段为主机PC2所在网段的静态路由,即目的IP地址为2020::,掩码为64位。对于R1而言,要发送数据到主机PC2,则必须先发送给R2,所以R2即为R1的一下跳路由,R2与R1所在的直连链路上的物理接口的IP地址即为下一跳IP地址,即2001::2。
[R1]ipv6 route-static 2020:: 64 2001::2
配置配置目的网段为PC3所在网段的静态路由
[R1]ipv6 route-static 2030:: 64 2002::2
采取同样方式在R2上配置目的网段为PC1、PC3所在网段的静态路由
[R2]ipv6 route-static 2010:: 64 2001::1
[R2]ipv6 route-static 2030:: 64 2003::2
采取同样方式在R3上配置目的网段为PC1、PC2所在网段的静态路由
[R3]ipv6 route-static 2010:: 64 2002::1
[R3]ipv6 route-static 2020:: 64 2003::1
*(3)配置各计算机的IP地址*
*4.项目验证*
1验证路由器上端口的配置信息
在路由器上使用display ipv6 interface brief命令,查看配置信息。
R1的配置
[R1]display ipv6 interface brief
*down: administratively down(l): loopback(s): spoofingInterface Physical Protocol GigabitEthernet0/0/0 up up [IPv6 Address] 2010::1GigabitEthernet0/0/1 up up [IPv6 Address] 2001::1GigabitEthernet0/0/2 up up [IPv6 Address] 2002::1
‚ R2的配置
[R2]display ipv6 interface brief
*down: administratively down(l): loopback(s): spoofingInterface Physical Protocol GigabitEthernet0/0/0 up up [IPv6 Address] 2020::1GigabitEthernet0/0/1 up up [IPv6 Address] 2001::2GigabitEthernet0/0/2 up up [IPv6 Address] 2003::1
ƒ R3的配置
[R3]display ipv6 interface brief
*down: administratively down(l): loopback(s): spoofingInterface Physical Protocol GigabitEthernet0/0/0 up up [IPv6 Address] 2030::1GigabitEthernet0/0/1 up up [IPv6 Address] 2003::2GigabitEthernet0/0/2 up up [IPv6 Address] 2002::2
*(2)测试各计算机的互通性*
通过Ping命令,测试各计算机内部通信息的情况。
使用PC1 Ping PC2的计算机:
PC>ping 2020::10
Ping 2020::10: 32 data bytes, Press Ctrl_C to break
From 2020::10: bytes=32 seq=1 hop limit=253 time=16 ms
From 2020::10: bytes=32 seq=2 hop limit=253 time=16 ms
From 2020::10: bytes=32 seq=3 hop limit=253 time=31 ms
From 2020::10: bytes=32 seq=4 hop limit=253 time=16 ms
From 2020::10: bytes=32 seq=5 hop limit=253 time=15 ms
--- 2020::10 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 15/18/31 ms
使用PC1 Ping PC3的计算机:
PC>ping 2030::10
Ping 2030::10: 32 data bytes, Press Ctrl_C to break
From 2030::10: bytes=32 seq=1 hop limit=253 time=15 ms
From 2030::10: bytes=32 seq=2 hop limit=253 time=16 ms
From 2030::10: bytes=32 seq=3 hop limit=253 time=31 ms
From 2030::10: bytes=32 seq=4 hop limit=253 time=16 ms
From 2030::10: bytes=32 seq=5 hop limit=253 time=31 ms
--- 2030::10 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 15/21/31 ms
可以观察到,各计算机可以互相通
可以观察到,各计算机可以互相通