ipv6-ipv4隧道和bgp全网通小实验

效果图:r1能ping通r11和r8,r8能ping通r11

个人理解:ipv6-ipv4隧道只认前缀,例如:r2隧道的source是其接口g0/0/1,它的ipv4 address是29.1.1.1/24,那么转化过来的ipv6就是2002:1d01:0101::/48,对端的r10只能ping通2002:1d01:0101::/48网段内的ipv6。

同理,r10隧道的source是其接口g0/0/0,ipv4是91.1.1.2/24,ipv6就是2002:5b01:0102::/48,r2只能ping通这个ipv6网段内的

代码:

#做ipv6-ipv4隧道之前要先让r1和r10都能ipv4上ping通isp

#省略了r1-r2-isp-r10的ipv4接口配置

#eNSP软件可能有问题,隧道有时候会突然挂掉,上一秒能ping通下一秒又ping不通,我的故障是r10突然ipv4 ping不通isp,重启isp和r10路由器又能ping通了

[r1]

ospf 1 router-id 1.1.1.1                 #ipv4 ospf-1
 area 0.0.0.0 
  network 0.0.0.0 255.255.255.255 

ipv6                             #要先输这个开启ipv6功能

ospfv3 1
 router-id 1.1.1.1

interface LoopBack0
 ipv6 enable 
 ipv6 address 1::1/64 
 ospfv3 1 area 0.0.0.0        #将环回接口宣告进ospfv3的area 0区域

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101::1/64 
 ospfv3 1 area 0.0.0.0

[r2]

ip route-static 0.0.0.0 0 29.1.1.2    #ipv4做缺省指向isp,r10同理

acl 2000

rule permit source any 

interface GigabitEthernet0/0/1                           
 ip address 29.1.1.1 24                                        
 nat outbound 2000                     #不做这个r1ping不通isp

ospf 1 router-id 2.2.2.2                #ipv4 ospf-1
 default-route-advertise               #ipv4缺省下放给r1
 area 0.0.0.0 
  network 2.2.2.2 0.0.0.0 
  network 12.1.1.2 0.0.0.0 

ipv6

ospfv3 1
 router-id 2.2.2.2
 import-route ospfv3 2             #重发布
 import-route ripng 1                #重发布

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101::2/64 
 ospfv3 1 area 0.0.0.0

interface GigabitEthernet0/0/2
 ipv6 enable 
 ipv6 address 2002:1D01:101:23::1/64 
 ospfv3 1 area 0.0.0.0

interface Tunnel0/0/0

 tunnel-protocol ipv6-ipv4 6to4                #要先写这个改隧道模式
 source GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:3::1/64 
 ospfv3 1 area 0.0.0.0

ipv6 route-static :: 0 23::2             #做缺省下一跳指向右边r3
ipv6 route-static 2002:5B01:102:: 48 Tunnel0/0/0         #做静态掩码比缺省的长,去往r10,r11的下一跳指向隧道tunnel0/0/0

#######

#R3-R8上的ipv6 bgp和ipv4 bgp基本上类似,就是有的指令要在ipv6 family里面输

#######

[r3]

ipv6

ipv6 route-static :: 0 2002:1D01:101:23::1         #缺省指向r2

ospfv3 2
 router-id 3.3.3.3
 import-route ospfv3 1        #重发布
 default-route-advertise        #下放缺省

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:23::2/64 
 ospfv3 2 area 0.0.0.0

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:34::1/64 
 ospfv3 2 area 0.0.0.0

interface LoopBack0
 ipv6 enable 
 ipv6 address 3::3/64 
 ospfv3 2 area 0.0.0.0

bgp 64512
 router-id 3.3.3.3
 confederation id 100
 peer 4::4 as-number 64512 
 peer 4::4 connect-interface LoopBack0
 ipv6-family
  import-route direct
  import-route ospfv3 2
  peer 4::4 enable
  peer 4::4 next-hop-local

[r4]

ipv6

ospfv3 2
 router-id 4.4.4.4

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:34::2/64 
 ospfv3 2 area 0.0.0.0

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:45::1/64 
 ospfv3 2 area 0.0.0.0

interface LoopBack0
 ipv6 enable 
 ipv6 address 4::4/64 
 ospfv3 2 area 0.0.0.0

bgp 64512
 router-id 4.4.4.4
 confederation id 100
 peer 3::3 as-number 64512 
 peer 3::3 connect-interface LoopBack0
 peer 5::5 as-number 64512 
 peer 5::5 connect-interface LoopBack0
 ipv6-family 
  peer 3::3 enable
  peer 3::3 reflect-client
  peer 5::5 enable
  peer 5::5 reflect-client

[r5]

ipv6

ospfv3 2
 router-id 5.5.5.5

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:45::2/64 
 ospfv3 2 area 0.0.0.0

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:56::1/64 
 ospfv3 2 area 0.0.0.0

interface LoopBack0
 ipv6 enable 
 ipv6 address 5::5/64 
 ospfv3 2 area 0.0.0.0

bgp 64512
 router-id 5.5.5.5
 confederation id 100
 confederation peer-as 64513
 peer 4::4 as-number 64512 
 peer 4::4 connect-interface LoopBack0
 peer 6::6 as-number 64513 
 peer 6::6 ebgp-max-hop 255 
 peer 6::6 connect-interface LoopBack0
 ipv6-family 
  import-route direct
  peer 4::4 enable
  peer 4::4 next-hop-local 
  peer 6::6 enable

[r6]

ipv6

ospfv3 2
 router-id 6.6.6.6

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:56::2/64 
 ospfv3 2 area 0.0.0.0

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:67::1/64 

bgp 64513
 router-id 6.6.6.6
 confederation id 100
 confederation peer-as 64512
 peer 5::5 as-number 64512 
 peer 5::5 ebgp-max-hop 255 
 peer 5::5 connect-interface LoopBack0
 peer 2002:1D01:101:67::2 as-number 101 
 ipv6-family 
  import-route direct                        #重发布共享直连链路
  import-route ospfv3 2                   #重发布共享ospfv3 2
  peer 5::5 enable
  peer 2002:1D01:101:67::2 enable

[r7]

ipv6

ripng 2

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:67::2/64 

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:1D01:101:78::1/64 
 ripng 2 enable
 ripng default-route originate         #下放缺省给r8

interface LoopBack0
 ipv6 enable 
 ipv6 address 7::7/64 
 ripng 2 enable

bgp 101
 router-id 7.7.7.7
 peer 8::8 as-number 101 
 peer 8::8 connect-interface LoopBack0
 peer 2002:1D01:101:67::1 as-number 100 
 ipv6-family
  network 7::7 128                 #宣告7的环回出去
  network 8:: 64
  network 8::8 128 
  import-route direct                #重发布直连链路出去
  import-route ripng 2                #重发布ripng 2出去
  peer 8::8 enable
  peer 8::8 next-hop-local 
  peer 2002:1D01:101:67::1 enable

[r8]

ipv6

ripng 2

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:1D01:101:78::2/64 
 ripng 2 enable

interface LoopBack0
 ipv6 enable 
 ipv6 address 8::8/64 
 ripng 2 enable

bgp 101
 router-id 8.8.8.8
 peer 7::7 as-number 101 
 peer 7::7 connect-interface LoopBack0
 ipv6-family 
  peer 7::7 enable

#isp只配了接口ipv4指令

[r10]

ipv6

ipv6 route-static :: 0 Tunnel0/0/0

ripng 1

interface GigabitEthernet0/0/1
 ipv6 enable 
 ipv6 address 2002:5B01:102::1/64 
 ripng 1 enable
 ripng default-route originate         #下放缺省给r11

interface LoopBack0
 ipv6 enable 
 ipv6 address 2002:5B01:102:1::1/64 
 ripng 1 enable

interface Tunnel0/0/0

 tunnel-protocol ipv6-ipv4 6to4
 source GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:5B01:102:3::1/64 
 ripng 1 enable

[r11]

ipv6

ripng 1

interface GigabitEthernet0/0/0
 ipv6 enable 
 ipv6 address 2002:5B01:102::2/64 
 ripng 1 enable

interface LoopBack0
 ipv6 enable 
 ipv6 address 2002:5B01:102:2::1/64 
 ripng 1 enable

#建议先通上路隧道,再通右路bgp