关于ipv6穿越ipv4 时,几种方式?
1.双栈:网络设备同时存在IPv4以及ipv6地址
由于在现实网络结构中,不可能存在大量ipv6部署,目前ipv6 部署高校以及部分教育机构
2.点到点部署穿越
3.自动部署vpn
点到点穿越IPv4网络
R1 以及R3环回模拟ipv6网络
R1、R3 模拟公网与私网边界
R2模拟运营商
网络拓扑图如下:
R1基本配置
R1(config)#int lo0
R1(config-if)#ipv6 add 1::1/64
R1(config-if)#int s1/1
R1(config-if)#ip add 12.1.1.1 255.255.255.0
R1(config-if)#no shutdown
%使用缺省指向运营商
R1(config)#ip route 0.00.0.0 0.0.0.0 s1/1
%定义隧道,隧道编号只具有本地意义
R1(config)#int tunnel 1
%定义隧道源地址和目的地址,(物理接口地址)
R1(config-if)#tunnel source 12.1.1.1
R1(config-if)#tunnel destination 23.1.1.2
%定义隧道两端地址
R1(config-if)#ipv6 add 2001::1/64
%定义隧道模式 ipv6头外封装IPv4地址
R1(config-if)#tunnel mode ipv6ip
%定义ipv6 静态缺省路由
R1(config)#ipv6 route ::/0 tunnel 1
%测试
R1(config)#do ping 3::3 sou
R1(config)#do ping 3::3 sou 1::1
R1(config)#do ping 3::3 sou 1::1
R1(config)#do ping 3::3 sou 1::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3::3, timeout is 2 seconds:
Packet sent with a source address of 1::1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/35/48 ms
R1(config)#
R2配置:
R2(config)#
R2(config)#int s1/0
R2(config-if)#ip add 12.1.1.2 255.255.255.0
R2(config-if)#no sh
R2(config-if)#int s1/1
R2(config-if)#ip add 23.1.1.1 255.255.255.0
R2(config-if)#no sh
R2(config-if)#no shutdown
R3 配置:
R3(config)#int lo0
R3(config-if)#ipv6 ad
R3(config-if)#ipv6 add 3::3/64
R3(config-if)#int s1/0
R3(config-if)#ip add 23.1.1.2 255.255.255.0
R3(config-if)#no sh
R3(config-if)#
R3(config)#ip route 0.0.0.0 0.0.0.0 s1/0
R3(config)#do ping 12.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/48/108 ms
R3(config)#int tunnel 2
R3(config-if)#t
*Nov 23 01:51:19.207: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel2, changed state to down
R3(config-if)#tunnel source 23.1.1.2
R3(config-if)#tunnel destination 12.1.1.1
R3(config-if)#ipv6 add 2001::2/64
R3(config-if)#tunnel mode ipv6ip
R3(config-if)#
R3(config)#ip route ::/0 tu
R3(config)#ipv
R3(config)#ipv6 route ::/0 tunnel 2
R3(config)#do ping 1::1 sou 3::3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1::1, timeout is 2 seconds:
Packet sent with a source address of 3::3
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/41/64 ms
R3(config)#do ping 1::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1::1, timeout is 2 seconds:
!!!!!
Success rate is 100 p
动态路由学习:使用eigrp路由协议
R1:
%开启路由器传递ipv6路由功能
R1(config)#ipv6 unicast-routing
%运行ipv6 eigrp 进程号必须保证一致
R1(config)#ipv6 router eigrp 1
%指定eigrp router-id
R1(config-rtr)#eigrp router-id 1.1.1.1
%开启eigrp路由协议 IPv4中eigrp 默认开启的而在ipv6中eigrp 协议默认是关闭的;
R1(config-rtr)#no shutdown
%进入接口,通告路由
R1(config-rtr)#int lo0
R1(config-if)#ipv6 eigrp 1
R1(config)#int tu
R1(config)#int tunnel 1
R1(config-if)#ipv6 eigrp 1
R1(config-if)#
*Nov 23 02:13:39.999: %DUAL-5-NBRCHANGE: IPv6-EIGRP(0) 1: Neighbor FE80::1701:102 (Tunnel1) is up: new adjacency
R1(config-if)#
R3路由器配置:
R3(config)#ipv6 unicast-routing
R3(config)#ipv6 router eigrp 1
R3(config-rtr)#eigrp router-id 3.3.3.3
R3(config-rtr)#no shutdown
R3(config-rtr)#int lo0
R3(config-if)#ipv6 ei
R3(config-if)#ipv6 eigrp 1
R3(config)#int tunnel 2
R3(config-if)#ipv6 eigrp 1
R3(config-if)#do p
*Nov 23 02:13:39.179: %DUAL-5-NBRCHANGE: IPv6-EIGRP(0) 1: Neighbor FE80::C01:101 (Tunnel2) is up: new adjacency
R3(config-if)#do ping 1::1 sou 3::3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1::1, timeout is 2 seconds:
Packet sent with a source address of 3::3
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/64/84 ms
R3(config-if)#