HCIP-IPV6实验

HCIP-IPV6实验

实验要求具体如下
1、两个局域网基于6to4tunnel可达
2、R1可以访问R3的环回

一、搭建拓扑

二、配置IPV4私网

AR1

[AR1]int loo 0
[AR1-LoopBack0]ip address 192.168.1.1 25
[AR1-LoopBack0]int loo 1
[AR1-LoopBack1]ip address 192.168.1.129 25
[AR1-LoopBack1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip address 192.168.0.1 30

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip address 192.168.0.2 30

三、配置IPV4公网

AR2

[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip address 23.1.1.1 24

AR3

[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip address 23.1.1.2 24
[AR3-GigabitEthernet0/0/0]int loo 0
[AR3-LoopBack0]ip address 3.3.3.3 24
[AR3-LoopBack0]int g0/0/1
[AR3-GigabitEthernet0/0/1]ip address 34.1.1.1 24

AR4

[AR4]int g0/0/0
[AR4-GigabitEthernet0/0/0]ip address 34.1.1.2 24

四、配置IPV4缺省

AR1 :[AR1]ip route-static 0.0.0.0 0.0.0.0 192.168.0.2

AR2

[AR2]ip route-static 0.0.0.0 0 23.1.1.2
[AR2]ip route-static 192.168.1.0 24 192.168.0.1
[AR2]acl 2000
[AR2-acl-basic-2000]rule permit source 192.168.0.0 0.0.255.255
[AR2-acl-basic-2000]int g0/0/1
[AR2-GigabitEthernet0/0/1]nat outbound 2000

AR4 ：[AR4]ip route-static 0.0.0.0 0 34.1.1.1

• 此时AR1、AR2均可达AR4

五、在AR1、AR2 上配置IPV6地址

AR1

[AR1]ipv6
[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ipv6 enable 
[AR1-GigabitEthernet0/0/1]ipv6 address 2002:1701:0101:0001::1/64
[AR1-GigabitEthernet0/0/1]int loo 0
[AR1-LoopBack0]ipv6 enable 
[AR1-LoopBack0]ipv6 address 2002:1701:0101:0002::1/65
[AR1-LoopBack0]int loo 1
[AR1-LoopBack1]ipv6 enable 
[AR1-LoopBack1]ipv6 address 2002:1701:0101:0002:8000::1/65

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ipv6 enable
[AR2-GigabitEthernet0/0/0]ipv6 address 2002:1701:0101:0001::2/64

六、配置RIPng

AR1

[AR1]ripng 1
[AR1-ripng-1]q
[AR1]int loo 0
[AR1-LoopBack0]ripng 1 enable 
[AR1-LoopBack0]int loo 1
[AR1-LoopBack1]ripng 1 enable
[AR1-LoopBack1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ripng 1 enable

AR2

[AR2]INT LOO 0
[AR2-LoopBack0]RIPNG 1 enable 
[AR2]INT G0/0/0
[AR2-GigabitEthernet0/0/0]R	
[AR2-GigabitEthernet0/0/0]RIPNG 1 enable

在AR1上进行汇总

[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ripng summary-address 2002:1701:0101:0002:: 64

在AR2 上配置6to4 tunnel

AR2

[AR2]int t0/0/0
[AR2-Tunnel0/0/0]ipv6 enable 
[AR2-Tunnel0/0/0]ipv6 address 2002:1701:0101:0003::1/64
[AR2-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[AR2-Tunnel0/0/0]source 23.1.1.1
[AR2-Tunnel0/0/0]q
[AR2]ipv6 route-static 2002:: 16 Tunnel 0/0/0

AR2向AR1做缺省

AR2

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]ripng default-route only 

七、AR4|AR5|AR6|AR7|AR8上配置

1、配置IPV6

AR4

[AR4]ipv6 
[AR4]int lo0 
[AR4-LoopBack0]ipv6 enable 
[AR4-LoopBack0]ipv6 address 2002:2201:0102::1/64
[AR4-LoopBack0]int g0/0/1
[AR4-GigabitEthernet0/0/1]ipv6 enable 
[AR4-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:0001::1/64

AR5

[AR5]ipv6
[AR5]int g0/0/0
[AR5-GigabitEthernet0/0/0]ipv6 enable 
[AR5-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:0001::2/64
[AR5]int lo0
[AR5-LoopBack0]ipv6 enable 
[AR5-LoopBack0]ipv6 address 2002:2201:0102:8000::1/64
[AR5-LoopBack0]int g0/0/1
[AR5-GigabitEthernet0/0/1]ipv6 enable 
[AR5-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8001::1/64

AR6

[AR6]ipv6
[AR6]int g0/0/0
[AR6-GigabitEthernet0/0/0]ipv6 en 
[AR6-GigabitEthernet0/0/0]ipv6 enable 
[AR6-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8001::2/64
[AR6-GigabitEthernet0/0/0]int lo0
[AR6-LoopBack0]ipv6 enable 
[AR6-LoopBack0]ipv6 address 2002:2201:0102:8002::1/64
[AR6-LoopBack0]int g0/0/1
[AR6-GigabitEthernet0/0/1]ipv6 enable
[AR6-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8003::1/64

AR7

[AR7]ipv6
[AR7]int g0/0/0
[AR7-GigabitEthernet0/0/0]ipv6 enable 
[AR7-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8003::2/64
[AR7-GigabitEthernet0/0/0]int lo0
[AR7-LoopBack0]ipv6 enable 
[AR7-LoopBack0]ipv6 address 2002:2201:0102:8004::1/64
[AR7-LoopBack0]int g0/0/1
[AR7-GigabitEthernet0/0/1]ipv6 enable
[AR7-GigabitEthernet0/0/1]ipv6 address 2002:2201:0102:8005::1/64

AR8

[AR8]ipv6
[AR8]int g0/0/0
[AR8-GigabitEthernet0/0/0]ipv6 enable 
[AR8-GigabitEthernet0/0/0]ipv6 address 2002:2201:0102:8005::2/64
[AR8-GigabitEthernet0/0/0]int lo0
[AR8-LoopBack0]ipv6 enable
[AR8-LoopBack0]ipv6 address 2002:2201:0102:8006::1/64

2、配置IGP

AR5

[AR5]ospfv3 
[AR5-ospfv3-1]router-id 5.5.5.5
[AR5-ospfv3-1]int g0/0/1
[AR5-GigabitEthernet0/0/1]ospfv3 1 area 0
[AR5-GigabitEthernet0/0/1]int lo0
[AR5-LoopBack0]ospfv3 1 area 0

AR6

[AR6]ospfv3 
[AR6-ospfv3-1]router-id 6.6.6.6
[AR6-ospfv3-1]int g0/0/0
[AR6-GigabitEthernet0/0/0]ospfv3 1 area 0
[AR6-GigabitEthernet0/0/0]int lo0
[AR6-LoopBack0]ospfv3 1 area 0
[AR6-LoopBack0]int g0/0/1
[AR6-GigabitEthernet0/0/1]ospfv3 1 area 0

AR7

[AR7]ospfv3
[AR7-ospfv3-1]router-id 7.7.7.7 
[AR7-ospfv3-1]int g0/0/0
[AR7-GigabitEthernet0/0/0]ospfv3 1 area 0
[AR7-GigabitEthernet0/0/0]int lo0
[AR7-LoopBack0]ospfv3 1 area 0
[AR7-LoopBack0]int g0/0/01
[AR7-GigabitEthernet0/0/1]ospfv3 1 area 0

AR8

[AR8]ospfv3
[AR8-ospfv3-1]ro 
[AR8-ospfv3-1]router-id 8.8.8.8
[AR8-ospfv3-1]int g0/0/0
[AR8-GigabitEthernet0/0/0]ospfv3 1 area 0
[AR8-GigabitEthernet0/0/0]int lo0
[AR8-LoopBack0]ospfv3 1 area 0

3、配置BGP

AR4

[AR4]bgp 1
[AR4-bgp]router-id 4.4.4.4
[AR4-bgp]peer 2002:2201:102:1::2 as-number 2
[AR4-bgp]ipv6-family  
[AR4-bgp-af-ipv6]peer 2002:2201:102:1::2 enable 

AR5

[AR5]bgp 64512
[AR5-bgp]con 
[AR5-bgp]confederation id 2
[AR5-bgp]router-id 5.5.5.5
[AR5-bgp]peer 2002:2201:102:1::1 as-number 1
[AR5-bgp]ipv6-family 
[AR5-bgp-af-ipv6]peer 2002:2201:102:1::1 enable 
[AR5]int lo0
[AR5-LoopBack0]ipv6 add 5::5/64

AR6

[AR6]int lo0
[AR6-LoopBack0]ipv6 add 6::6/64

AR7

[AR7]int lo0
[AR7-LoopBack0]ipv6 add 7::7/64

AR8

[AR8]int lo0
[AR8-LoopBack0]ipv6 add 8::8/64

在AR5上进行建邻

AR5

[AR5]bgp 64512
[AR5-bgp]peer 6::6 as-number 64512
[AR5-bgp]peer 6::6 connect-interface lo0 5::5
[AR5-bgp]ipv6-family 
[AR5-bgp-af-ipv6]peer 6::6 enable 

AR6

[AR6]bgp 64512
[AR6-bgp]router-id 6.6.6.6 
[AR6-bgp]confederation id 2 
[AR6-bgp]peer 5::5 as-number 64512 
[AR6-bgp]peer 5::5 connect-interface lo0 6::6
[AR6-bgp]peer 7::7 as-number 64512 
[AR6-bgp]peer 7::7 connect-interface lo0 6::6
[AR6-bgp]ipv6-family  
[AR6-bgp-af-ipv6]peer 5::5 enable 
[AR6-bgp-af-ipv6]peer 7::7 enable

AR7

[AR7]bgp 64512
[AR7-bgp]router-id 7.7.7.7
[AR7-bgp]confederation id 2
[AR7-bgp]confederation peer-as 64513
[AR7-bgp]router-id 7.7.7.7 
[AR7-bgp]peer 6::6 as-number 64512
[AR7-bgp]peer 6::6 connect-interface lo0 7::7
[AR7-bgp]peer 8::8 as-number 64513
[AR7-bgp]peer 8::8 connect-interface lo0 7::7
[AR7-bgp]peer 8::8 ebgp-max-hop 2
[AR7-bgp]ipv6-family 
[AR7-bgp-af-ipv6]peer 6::6 enable 
[AR7-bgp-af-ipv6]peer 8::8 enable

AR8

[AR8]bgp 64513
[AR8-bgp]router-id 8.8.8.8
[AR8-bgp]confederation id 2
[AR8-bgp]confederation  peer-as 64512 
[AR8-bgp]peer 7::7 as-number 64512
[AR8-bgp]peer 7::7 connect-interface lo0 8::8
[AR8-bgp]peer 7::7 ebgp-max-hop 2
[AR8-bgp]ipv6-family 
[AR8-bgp-af-ipv6]peer 7::7 enable

4、配置路由

AR4

[AR4]int t0/0/0 
[AR4-Tunnel0/0/0]ipv6 enable 
[AR4-Tunnel0/0/0]ipv6 add 2002:2201:0102:2::1/64 
[AR4-Tunnel0/0/0]tunnel-protocol ipv6-ipv4 6to4
[AR4-Tunnel0/0/0]source 34.1.1.2
[AR4]ipv6 route-static 2002:: 16 Tunnel 0/0/0

AR5

[AR5]ipv6 route-static 2002:2201:0102:8000:: 49 NULL 0	//空接口防环
[AR5-bgp]ipv6-family 
[AR5-bgp-af-ipv6]network 2002:2201:0102:8000:: 49

• 在AS1上宣告使AS2路由出去

AR4

[AR4]bgp 1 
[AR4-bgp]ipv6-family 
[AR4-bgp-af-ipv6]network 2002:: 16

• 在AR5上修改下一跳 解决AR6不优问题

AR5

[AR5-bgp]ipv6-family  
[AR5-bgp-af-ipv6]peer 6::6 next-hop-local 

AR6指定AR7为反射器客户端

AR6:[AR6-bgp-af-ipv6]peer 7::7 reflect-client

• 本实验-完