一、实验要求
1、俩个局域网基于6to4tunnel可达
2、R1可以访问R3的环回
二、实验拓扑
三、配置信息
先做ipv4的公网,再做左边简单的,最后做ipv6。
[r2]int g 0/0/1
[r2-GigabitEthernet0/0/1]ip address 23.1.1.1 24
[r3]int g0/0/0
[r3-GigabitEthernet0/0/0]ip add 23.1.1.2 24
[r3-GigabitEthernet0/0/0]int l0
[r3-LoopBack0]ip add 3.3.3.3 24
[r3-LoopBack0]int g0/0/1
[r3-GigabitEthernet0/0/1]ip add 34.1.1.1 24
[r4]int g0/0/0
[r4-GigabitEthernet0/0/0]ip add 34.1.1.2 24
[r4]ip route-static 0.0.0.0 0 34.1.1.1
[r2]ip route-static 0.0.0.0 0 23.1.1.2
简单检查一下公网连通性:
公网的ipv4解决了,开始配置左边的v4环境:
[r1]int l0
[r1-LoopBack0]ip add 192.168.1.1 25
[r1-LoopBack0]int l1
[r1-LoopBack1]ip add 192.168.1.129 25
[r1-LoopBack1]int g0/0/1
[r1-GigabitEthernet0/0/1]ip add 192.168.0.1 30
[r2]int l0
[r2-LoopBack0]ip add 192.168.2.1 24
[r2-LoopBack0]int g0/0/0
[r2-GigabitEthernet0/0/0]ip add 192.168.0.2 30
左边的v4可以做静态,rip,为了完整性,R1做一个空接口防环。
[r1]rip 1
[r1-rip-1]version 2
[r1-rip-1]network 192.168.1.0
[r1-rip-1]network 192.168.0.0
[r2]rip 1
[r2-rip-1]version 2
[r2-rip-1]network 192.168.0.0
[r2-rip-1]network 192.168.2.0
R1上的汇总,R2的缺省:
[r1]int g 0/0/1
[r1-GigabitEthernet0/0/1]rip summary-address 192.168.1.0 255.255.255.0
[r2]rip 1
[r2-rip-1]default-route originate
[r1]ip route-static 192.168.1.0 24 NULL 0
私网ipv4解决
[r2]acl 2000
[r2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[r2-acl-basic-2000]int g0/0/1
[r2-GigabitEthernet0/0/1]nat outbound 2000
测试左边ipv4环境:
IP地址的转换:
23.1.1.1
- 2002:1701:0101:: /48
- 2002:1701:0101:0000::/64----2002:1701:0101:FFFF::/64
2002:1701:0101:0000::/64
- 2002:1701:0101:0000::/65
- 2002:1701:0101:0000:8000::/65
进入ipv6的配置信息:
[r1]ipv6
[r1]int LoopBack 0
[r1-LoopBack0]ipv6 enable
[r1-LoopBack0]ipv6 address 2002:1701:101::1 65
[r1-LoopBack0]int l1
[r1-LoopBack1]ipv6 enable
[r1-LoopBack1]ipv6 address 2002:1701:101:0:8000::1 65
[r1-LoopBack1]int g0/0/1
[r1-GigabitEthernet0/0/1]ipv6 enable
[r1-GigabitEthernet0/0/1]ipv6 address 2002:1701:101:1::1 64
[r2]ipv6
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ipv6 enable
[r2-GigabitEthernet0/0/0]ipv6 address 2002:1701:0101:1::2 64
[r2-GigabitEthernet0/0/0]int l0
[r2-LoopBack0]ipv6 enable
[r2-LoopBack0]ipv6 address 2002:1701:0101:2::1 64
接下来搞通内网:
[r1]ripng 1
[r1-ripng-1]int l0
[r1-LoopBack0]ripng 1 enable
[r1-LoopBack0]int l1
[r1-LoopBack1]ripng 1 enable
[r1-LoopBack1]int g0/0/1
[r1-GigabitEthernet0/0/1]ripng 1 enable
[r2]ripng 1
[r2-ripng-1]int l0
[r2-LoopBack0]ripng 1 enable
[r2-LoopBack0]int g0/0/0
[r2-GigabitEthernet0/0/0]ripng 1 enable
[r1]interface g0/0/1
[r1-GigabitEthernet0/0/1]ripng summary-address 2002:1701:0101:0000:: 64
[r1]ipv6 route-static 2002:1701:0101:0000:: 64 n 0
[r2]int Tunnel 0/0/0
[r2-Tunnel0/0/0]ipv6 enable
[r2-Tunnel0/0/0]ipv6 address 2002:1701:0101:3::1 64
[r2-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[r2-Tunnel0/0/0]source 23.1.1.1
[r2]int g0/0/0
[r2-GigabitEthernet0/0/0]ripng default-route only
[r2]ipv6 route-static 2002:: 16 Tunnel 0/0/0
34.1.1.2
- 2002:2201:0102:: /48
- 2002:2201:0102::/49 as1
- 2002:2201:0102:8000::/49 as2
[r4]ipv6
[r4]int l0
[r4-LoopBack0]ipv6 enable
[r4-LoopBack0]ipv6 address 2002:2201:0102::1 64
[r4-LoopBack0]int g0/0/1
[r4-GigabitEthernet0/0/1]ipv6 enable
[r4-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:1::1 64
[r5]ipv6
[r5]int g0/0/0
[r5-GigabitEthernet0/0/0]ipv6 enable
[r5-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:1::2 64
[r5-LoopBack0]ipv6 enable
[r5-LoopBack0]ipv6 address 2002:2201:0102:8000::1 64
[r5-LoopBack0]int g0/0/1
[r5-GigabitEthernet0/0/1]ipv6 enable
[r5-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8001::1 64
[r6]ipv6
[r6]interface g0/0/0
[r6-GigabitEthernet0/0/0]ipv6 enable
[r6-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8001::2 64
[r6-GigabitEthernet0/0/0]int l0
[r6-LoopBack0]ipv6 enable
[r6-LoopBack0]ipv6 address 2002:2201:0102:8002::1 64
[r6-LoopBack0]int g0/0/1
[r6-GigabitEthernet0/0/1]ipv6 enable
[r6-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8003::1 64
[r7]ipv6
[r7]int g0/0/0
[r7-GigabitEthernet0/0/0]ipv6 enable
[r7-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8003::2 64
[r7-GigabitEthernet0/0/0]int l0
[r7-LoopBack0]ipv6 enable
[r7-LoopBack0]ipv6 address 2002:2201:0102:8004::1 64
[r7-LoopBack0]int g0/0/1
[r7-GigabitEthernet0/0/1]ipv6 enable
[r7-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8005::1 64
[r8]ipv6
[r8]int g0/0/0
[r8-GigabitEthernet0/0/0]ipv6 enable
[r8-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8005::2 64
[r8-GigabitEthernet0/0/0]int l0
[r8-LoopBack0]ipv6 enable
[r8-LoopBack0]ipv6 address 2002:2201:0102:8006::1 64
所有的地址已经配置完成:启动ospf协议:
[r5]ospfv3 1
[r5-ospfv3-1]router-id 5.5.5.5
[r5-ospfv3-1]int l0
[r5-LoopBack0]ospfv3 1 area 0
[r5-LoopBack0]int g0/0/1
[r5-GigabitEthernet0/0/1]ospfv3 1 area 0
[r6]ospfv3 1
[r6-ospfv3-1]router-id 6.6.6.6
[r6-ospfv3-1]int l0
[r6-LoopBack0]ospfv3 1 a
[r6-LoopBack0]ospfv3 1 area 0
[r6-LoopBack0]int g0/0/0
[r6-GigabitEthernet0/0/0]ospfv3 1 area 0
[r6-GigabitEthernet0/0/0]int g0/0/1
[r6-GigabitEthernet0/0/1]ospfv3 1 area 0
[r7]ospfv3 1
[r7-ospfv3-1]router-id 7.7.7.7
[r7-ospfv3-1]int l0
[r7-LoopBack0]ospfv3 1 area 0
[r7-LoopBack0]int g0/0/0
[r7-GigabitEthernet0/0/0]ospfv3 1 area 0
[r7-GigabitEthernet0/0/0]int g0/0/1
[r7-GigabitEthernet0/0/1]ospfv3 1 area 0
[r8]ospfv3 1
[r8-ospfv3-1]router-id 8.8.8.8
[r8-ospfv3-1]int l0
[r8-LoopBack0]ospfv3 1 area 0
[r8-LoopBack0]int g0/0/0
[r8-GigabitEthernet0/0/0]ospfv3 1 area 0
做bgp:
[r4]bgp 1
[r4-bgp]router-id 4.4.4.4
[r4-bgp]peer 2002:2201:102:1::2 as-number 2
[r4-bgp]ipv6-family
[r4-bgp-af-ipv6]peer 2002:2201:102:1::2 enable
[r5]bgp 64512
[r5-bgp]router-id 5.5.5.5
[r5-bgp]confederation id 2
[r5-bgp]peer 2002:2201:102:1::1 as-number 1
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]peer 2002:2201:102:1::1 enable
[r5]int l0
[r5-LoopBack0]ipv6 enable
[r5-LoopBack0]ipv6 address 5::5 64
[r6]int l0
[r6-LoopBack0]ipv6 enable
[r6-LoopBack0]ipv6 address 6::6 64
[r7]int l0
[r7-LoopBack0]ipv6 enable
[r7-LoopBack0]ipv6 address 7::7 64
[r8]int l0
[r8-LoopBack0]ipv6 enable
[r8-LoopBack0]ipv6 address 8::8 64
[r5-bgp]bgp 64512
[r5-bgp]peer 6::6 as-number 64512
[r5-bgp]peer 6::6 connect-interface LoopBack 0 5::5---注意这个地方,会有一个bug在思科体系中没有,但是在华为下就会出事,如果没有5::5 就会默认以8000作为源IP
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]peer 6::6 enable
[r6]bgp 64512
[r6-bgp]router-id 6.6.6.6
[r6-bgp]confederation id 2
[r6-bgp]peer 5::5 as-number 64512
[r6-bgp]peer 5::5 connect-interface l 0 6::6
[r6-bgp]peer 7::7 as-number 64512
[r6-bgp]peer 7::7 connect-interface LoopBack 0 6::6
[r6-bgp]ipv6-family
[r6-bgp-af-ipv6]peer 5::5 enable
[r6-bgp-af-ipv6]peer 7::7 enable
[r7]bgp 64512
[r7-bgp]router-id 7.7.7.7
[r7-bgp]confederation id 2
[r7-bgp]confederation peer-as 64513
[r7-bgp]peer 6::6 as-number 64512
[r7-bgp]peer 6::6 connect-interface LoopBack 0 7::7
[r7-bgp]peer 8::8 as-number 64513
[r7-bgp]peer 8::8 connect-interface LoopBack 0 7::7
[r7-bgp]peer 8::8 ebgp-max-hop 2
[r8]bgp 64513
[r8-bgp]router-id 8.8.8.8
[r8-bgp]confederation id 2
[r8-bgp]confederation peer-as 64512
[r8-bgp]peer 7::7 as-number 64512
[r8-bgp]peer 7::7 connect-interface LoopBack 0 8::8
[r8-bgp]peer 7::7 e
[r8-bgp]peer 7::7 ebgp-max-hop 2
[r8-bgp]ipv6-family
[r8-bgp-af-ipv6]peer 7::7 enable
做路由:
[r4]interface Tunnel 0/0/0
[r4-Tunnel0/0/0]ipv6 enable
[r4-Tunnel0/0/0]ipv6 address 2002:2201:0102:2::1 64
[r4-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[r4-Tunnel0/0/0]source 34.1.1.2
[r4]ipv6 route-static 2002:: 6 Tunnel 0/0/0
[r5]ipv6 route-static 2002:2201:0102:8000:: 49 NULL 0
[r5]bgp 64512
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]network 2002:2201:0102:8000:: 49
[r4]bgp 1
[r4-bgp]ipv6-family
[r4-bgp-af-ipv6]network 2002:: 16
[r5]bgp 64512
[r5-bgp]ipv6-family
[r5-bgp-af-ipv6]peer 6::6 next-hop-local
[r6]bgp 64512
[r6-bgp]ipv6-family
[r6-bgp-af-ipv6]peer 7::7 reflect-client
四、测试