R1:
interface Loopback0
no ip address
ipv6 address 2001:3FFE::1/128
ipv6 ospf 1 area 0
!
interface FastEthernet0/0
no ip address
ipv6 address 2001:CE01::1/64
ipv6 ospf 1 area 0
ipv6 router ospf 1
router-id 1.1.1.1
R2:
interface Loopback0
no ip address
ipv6 address 2001:3FFE::2/128
ipv6 ospf 1 area 0
!
interface Ethernet0/1
no ip address
ipv6 address 2001:CE01::2/64
ipv6 ospf 1 area 0
interface Ethernet0/0
no ip address
ipv6 address 2001:CE02::1/64
ipv6 ospf 1 area 1
ipv6 router ospf 1
router-id 2.2.2.2
area 1 virtual-link 3.3.3.3 #虚链路配置
R3:
interface Loopback0
no ip address
ipv6 address 2001:3FFE::3/128
ipv6 ospf 1 area 2
interface Ethernet0/0
no ip address
duplex half
ipv6 address 2001:CE02::2/64
ipv6 ospf 1 area 1
ipv6 router ospf 1
router-id 3.3.3.3
area 1 virtual-link 2.2.2.2 #虚链路配置
邻居路由信息:
R1:
R2:
R3:
ospfv3 认证
虚链路认证
R2#sh running-config vie | se in ipv6 router ospf
ipv6 router ospf 1
router-id 2.2.2.2
area 1 virtual-link 3.3.3.3 authentication ipsec spi 256 md5 12345678901234567890ABCDEFABCDEF
R3#sh running-config vie | se in ipv6 router ospf
ipv6 router ospf 1
router-id 3.3.3.3
area 1 virtual-link 2.2.2.2 authentication ipsec spi 256 md5 12345678901234567890ABCDEFABCDEF
验证:
接口认证
R2#sh run vi | se in 0/0
interface Ethernet0/0
no ip address
ipv6 address 2001:CE02::1/64
ipv6 ospf authentication ipsec spi 257 md5 12345678901234567890ABCDEFABCDEF
ipv6 ospf 1 area 1
R3#sh run vi | se in 0/0
interface Ethernet0/0
no ip address
ipv6 address 2001:CE02::2/64
ipv6 ospf authentication ipsec spi 257 md5 12345678901234567890ABCDEFABCDEF
ipv6 ospf 1 area 1
Clear ipv6 ospf process 刷新进程,查看show命令。
(注意:IOS有些版本会导致物理链路和虚链路都down了。导致spi 混乱,造成邻居都建立不起来。
解决办法:
删掉虚链路认证和接口的认证,然后先配置接口的认证,再配置虚链路的认证,就可以了。
IOL:L3_ADVENTERPRISEK9_M_15.4_2T.bin 测试不会出现此问题。
)
区域认证