IPV6过渡技术-6VPE

拓扑设计

拓扑介绍

  如图，上海分公司与北京分公司内部都是使用的IPV6网络，而中间的互联网只可以运行IPV4协议。因为IPV6地址无法在IPV4网络上面跑，所以两边的通信成为了一个新的问题。为了解决这个问题，决定使用6VPE技术进行配置。

数据配置

R1配置

sysname R1 # ipv6 # ip vpn-instance vpn1  ipv6-family   route-distinguisher 1:1   vpn-target 13:13 export-extcommunity   vpn-target 13:13 import-extcommunity # mpls lsr-id 1.1.1.1 mpls # mpls ldp # isis 1  is-level level-2  cost-style wide  network-entity 49.0000.0000.0001.00 # interface Ethernet0/0/0  ip binding vpn-instance vpn1  ipv6 enable  ipv6 address 2000:14::1/64 # interface Ethernet0/0/1  ip address 12.1.1.1 255.255.255.0  isis enable 1  mpls  mpls ldp # interface LoopBack0  ip address 1.1.1.1 255.255.255.255  isis enable 1 #                                         bgp 100  peer 3.3.3.3 as-number 100  peer 3.3.3.3 connect-interface LoopBack0  #  ipv4-family unicast   undo synchronization   peer 3.3.3.3 enable  #  ipv6-family vpnv6   policy vpn-target   peer 3.3.3.3 enable  #  ipv6-family vpn-instance vpn1   import-route direct

R2配置

sysname R2 # mpls lsr-id 2.2.2.2 mpls # mpls ldp # isis 1  is-level level-2  cost-style wide  network-entity 49.0000.0000.0002.00 # interface Ethernet0/0/0  ip address 12.1.1.2 255.255.255.0  isis enable 1  mpls  mpls ldp # interface Ethernet0/0/1  ip address 23.1.1.2 255.255.255.0  isis enable 1  mpls  mpls ldp # interface LoopBack0  ip address 2.2.2.2 255.255.255.255  isis enable 1

R3配置

sysname R3 # ipv6 # ip vpn-instance vpn1  ipv6-family   route-distinguisher 3:3   vpn-target 13:13 export-extcommunity   vpn-target 13:13 import-extcommunity # mpls lsr-id 3.3.3.3 mpls # mpls ldp # isis 1  is-level level-2  cost-style wide  network-entity 49.0000.0000.0003.00 interface Ethernet0/0/0  ip address 23.1.1.3 255.255.255.0  isis enable 1  mpls  mpls ldp # interface Ethernet0/0/1  ip binding vpn-instance vpn1  ipv6 enable  ipv6 address 2000:35::3/64 # interface LoopBack0  ip address 3.3.3.3 255.255.255.255  isis enable 1 #                                         bgp 100  peer 1.1.1.1 as-number 100  peer 1.1.1.1 connect-interface LoopBack0  #  ipv4-family unicast   undo synchronization   peer 1.1.1.1 enable  #  ipv6-family vpnv6   policy vpn-target   peer 1.1.1.1 enable  #  ipv6-family vpn-instance vpn1   import-route direct

R4配置

sysname R4 # ipv6 # interface Ethernet0/0/0  ipv6 enable  ipv6 address 2000:14::4/64 # # ipv6 route-static :: 0 2000:14::1# ospf 1 vpn-instance vpn1  import-route bgp  dn-bit-check disable summary  dn-bit-check disable ase  dn-bit-check disable nssa  area 0.0.0.0

R5配置

sysname R5 # ipv6 # interface Ethernet0/0/0  ipv6 enable  ipv6 address 2000:35::5/64 # ipv6 route-static :: 0 2000:35::3

查看现象

由此可见,VPN可以正常转发数据包

由此看见，是标签带着IPV6报头在IPV4网络中进行传递的。路由器不会读到IPV6的数据包，所以也就不会丢包

转发平面

R4设备发起数据包，进入VPN实例后会加入内层标签与外层标签。此时在IPV4网络中穿越的时候一直是在解析外层标签进行传递。到了R3设备，根据RT值进入相应的VPN实例，最后可将数据包转发给R5.