
& U# v% {' g# Y' w5 R
说明:此案例使用两台cisco2500路由器,IOS (tm) 2500 Software (C2500-IS-L), Version 12.2(15)T9,利用ip v4主干加ipv6的6to4 tunnel结合ipv6静态路由,就能实现两个远程ipv6子网的互连互通.
; Q4 S5 {; x8 c2 O% i; f% A* p
/ w x- \& X1 l" Q. `; Y 拓扑说明:使用两台路由器的e0接口互连仿真ipv4的主干,使用loopback0仿真两个远程的ipv6子网,6to4tunnel必须在所有的ipv6子网使用标准的ipv6地址前缀(2002::/16)进行编址. L( M; c6 r) O+ O
& B Q; J1 t) Y. R) E
在两个端点建立tunnel时,必须使用本地路由器的ipv4接口的ip地址结合2002前缀来对本路由器的tunnel接口做编址.例如R1的e0:192.168.1.1,则R1的tunnel接口的ipv6地址一定要包含此地址的16进制格式,即2002:C0A8:101:…,其中C0A8:101即为e0接口ip地址的16进制.
$ v B* G$ y# |# z" Z) I9 b4 ` F! C( e7 h/ Q" |6 ^
配置和测试结果如下:
6 V7 t! K; D4 W' _2 l/ pR1#sh run3 `2 P' l: @5 I: v/ Q
hostname R1: @6 G8 f8 t1 [$ u; `3 y
ipv6 unicast-routing5 o% Y% R8 u1 j$ k' S% Y- ]
interface Loopback0
" [6 f' |+ n5 E* Y' P* ?' i7 Z; x* _ no ip address
" B/ d, Q; ?8 f( x2 `9 E ipv6 address 2002:C0A8:101:1::1/644 G s( J y! P
interface Tunnel04 ]2 a H. {. N4 r+ n
no ip address* M% d" K' Y0 \5 h$ m
no ip redirects0 S6 F. x, }2 |, u
ipv6 address 2002:C0A8:101:13::1/64: ]$ V( o2 x' q6 h' J' p
tunnel source Ethernet0$ b, P8 n5 Z- |" o( w7 q. N
tunnel mode ipv6ip 6to4
& j# H, t- q5 Y8 Q0 T: Tinterface Ethernet0
$ e) l3 \( _6 d( m1 ? ip address 192.168.1.1 255.255.255.0
- c/ p* T# ?- Y( ^ipv6 route 2002::/16 Tunnel0
' j5 F4 f w0 ^
, J. H0 f2 O- o' v" m) X4 rR1#sh ipv6 int brief
; G9 Y, ?- Y) O1 p0 V y/ T' W" cEthernet0 [up/up]
9 R7 K1 `/ t! U unassigned
9 ~' B# c7 h, FLoopback0 [up/up]+ B' t/ D% @3 J5 c
FE80::210:7BFF:FE36:491
! E& K- P9 m$ F2 Q4 B. Q 2002:C0A8:101:1::11 `6 M& J- D9 h& a; S1 @0 F
Tunnel0 [up/up]$ _' x2 I5 {2 q3 W. Y, {8 b# x
FE80::C0A8:101; t" b0 u7 K! Y# T E! P8 L
2002:C0A8:101:13::1
; S( i" ]% B8 ]& a- C( _) p" e/ [$ @Virtual-Access1 [up/up] T: J U2 P' X2 ^* H4 u! ?
unassigned
, x, O7 Z/ b* l/ M! e3 m
5 L2 A' U, t9 p, l6 ~! y! aR1#sh ipv6 route f% c* R2 y8 ^+ w5 `. X
IPv6 Routing Table - 8 entries
. D/ j, v3 g2 u* u; Z% `Codes: C - Connected, L - Local, S - Static, R -
) G( j! c2 O$ ~" t
0 X0 j% a; N$ r; W) b# w1 Y. ]RIP, B - BGP! B9 E, `9 y2 N' {, r8 b$ L
U - Per-user Static route' ?; k# ^) K3 q( L1 H
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS $ ~- g2 e* m( h0 b3 x2 d' m6 D
* l$ D6 c& b* t0 U( Z: Q. X* B
interarea5 v9 t5 q% ?' ]5 L* L5 |
O - OSPF intra, OI - OSPF inter, OE1 - OSPF 5 I% P& [. }+ ^0 ^' q
6 I) Q0 p' K5 d
ext 1, OE2 - OSPF ext 20 h( |: V, {% S( I8 \; z
S 2002::/16 [1/0]
2 |- K E1 R' G5 @2 B5 B5 B via ::, Tunnel03 M. x' c6 ?5 m
C 2002:C0A8:101:1::/64 [0/0]
a \7 h. T S) P6 d. a via ::, Loopback04 V" z1 g3 C2 [: K8 U% P$ K. B
L 2002:C0A8:101:1::1/128 [0/0]
% M# \5 [, t0 U4 Z via ::, Loopback0
2 O- V2 x4 d8 `8 }5 y# nC 2002:C0A8:101:13::/64 [0/0]
/ X6 X9 k ~/ z% c via ::, Tunnel08 c* P# X% d% M, f2 n$ J/ ^' V
L 2002:C0A8:101:13::1/128 [0/0]
9 A5 y+ x R! W) f4 n, G, {" d, a via ::, Tunnel04 K- V: z. {0 s* y) g$ l, x+ T% l
L FE80::/10 [0/0]% v* B5 M+ T( E+ A
via ::, Null0
' q- s. U8 _! N/ Q/ v, F8 G4 EL FF00::/8 [0/0]
0 K9 H. G: R' @' [, O3 ?7 l$ Z1 L8 G via ::, Null0
! U) Z5 ?/ f+ I: P) D& e$ a- ^/ y0 [6 v! |" _. n3 n
& r! M8 H; F; e+ k. [r3#sh run: i( @. X; |6 i" J6 H
hostname r3
3 Y4 p0 \ C) ]. D* d* e9 gipv6 unicast-routing
6 J) _8 |* a& Yinterface Loopback0
' {, t3 J" S @ no ip address* u9 {8 Q7 Z: l% R4 J. f
ipv6 address 2002:C0A8:103:3::3/640 k" \: g; T& b I3 [' ^! n
interface Tunnel04 J8 i" M9 k( e
no ip address
: K1 _9 N. ^0 S5 r/ _0 E4 \ no ip redirects
3 p/ |( j0 }5 X* R8 z ipv6 address 2002:C0A8:103:13::3/648 L5 P0 J6 }5 g4 K2 d
tunnel source Ethernet0
9 s. y: R0 \# \0 Z% Y, z tunnel mode ipv6ip 6to4
/ I. f7 q5 {/ J* g# I9 ~" r' N' a5 }) i
interface Ethernet0$ E/ d1 @9 e* D# T/ x; k" M
ip address 192.168.1.3 255.255.255.03 t7 O1 x9 M7 s+ r
, H- j, I2 ?- M/ ripv6 route 2002::/16 Tunnel0. f2 o y1 a3 h1 U8 z7 U
% ?( Z: e& U5 u
$ \9 E' O# X$ j. {$ F! F+ ^r3#sh ipv6 int brief
% I- g X9 D/ |$ h+ S8 I; C- fEthernet0 [up/up]
! {- h+ j/ C2 E; f! S6 ^ unassigned
3 Y0 Z% M2 G' ~0 x) bLoopback0 [up/up]
+ T, T$ j8 [4 b' ~; s FE80::200:CFF:FE0A:26BC0 |7 E( V/ `1 A5 r
2002:C0A8:103:3::3
# l9 z- s3 }# tSerial0 [administratively
, j- Y* U5 K0 `
1 m4 v1 z0 v: \8 i* F% o' Jdown/down]
- r! |: \' i# {* `/ G, R unassigned
* O% I+ d$ i9 o6 k* P! R; DSerial1 [administratively . U$ @, V3 v8 ~0 p$ x
$ s& P8 }* U* z4 a! }7 N, t3 f+ qdown/down]. b! v5 _- v5 {; k% Q
unassigned0 @7 H ]( f$ a. J% |
Tunnel0 [up/up]
, F" W( Y% B1 ~5 y" U& z% b FE80::C0A8:1030 |" Q1 A' X8 `1 r
2002:C0A8:103:13::34 a8 C. H( w4 Y: g+ \# [
Virtual-Access1 [up/up]
" G6 l* R3 R' `" n! U unassigned
' L" k, G; F9 i( | ir3#sh ipv6 route
9 r' f$ U2 A. s8 D! }IPv6 Routing Table - 7 entries, M& m5 [9 s" L- u0 q
Codes: C - Connected, L - Local, S - Static, R - - @1 A& X6 g; K& m" O/ g
- p5 m1 p# G' l! N" K/ jRIP, B - BGP1 Y1 O. [ \9 r* s
U - Per-user Static route8 b6 h6 x4 R5 \! ~ t$ U: Y+ y
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS : I; _0 l6 a; G7 i4 m
6 i! k/ D3 R+ a, Iinterarea
/ d1 Q% P& [8 ]5 a0 l O - OSPF intra, OI - OSPF inter, OE1 - OSPF : h" S# z5 \8 q4 r/ U/ V2 d
9 x# ^/ k9 P; l& x) S: R, u3 [
ext 1, OE2 - OSPF ext 25 c. G+ D3 c7 G: Y; }4 O
S 2002::/16 [1/0]( i) g" a/ `- C
via ::, Tunnel06 B R6 m4 E6 _- S% } B; j9 m
C 2002:C0A8:103:3::/64 [0/0]
X2 k. j7 W+ O8 G' Q via ::, Loopback0; R; Z% E2 [+ \ B3 w* k+ B
L 2002:C0A8:103:3::3/128 [0/0]! Y% B! j4 |/ n d+ {% b: e+ m
via ::, Loopback0* O) @# `8 [$ I2 Q/ i
C 2002:C0A8:103:13::/64 [0/0]
0 l5 ~* K; n" {- } via ::, Tunnel0) |& _" ^. E: c& ] G d7 u; J8 Z
L 2002:C0A8:103:13::3/128 [0/0]
% \9 p2 P! O a" v+ T2 t- V1 } via ::, Tunnel0
, r+ Q. [- y, Q. R! D& FL FE80::/10 [0/0]
* H, }, M$ G/ h! t# ~ via ::, Null0
, |' w# q. \3 L% D9 d& VL FF00::/8 [0/0]
7 ?, c2 r/ @/ k- X. W$ c via ::, Null0
8 U3 b3 }' \, c4 {1 o, `- |; B* g1 K# a e5 E) X' W: l6 Q
在R1上测试直连的ipv6 tunnel接口:
. }1 a2 Q( L! c- a8 g4 [R1#ping ipv6 2002:c0a8:103:13::3- g; Y; a i2 h0 o6 ~; p
Type escape sequence to abort.
9 Z* \2 n# W; O7 GSending 5, 100-byte ICMP Echos to
1 U' h' M2 t9 F& \- V
3 _# i6 ] `1 A4 e0 F2002:C0A8:103:13::3, timeout is 2 seconds:8 l) u( ^& v% I- \# _! A9 d, [ V; I
!!!!!$ p8 K5 V2 f) v
Success rate is 100 percent (5/5), round-trip 1 x9 k" i* G( C& M8 Q2 u/ l
) N% H; ^ i$ B' S3 {5 u0 A. Wmin/avg/max = 8/10/16 ms
: N6 y o' B: G
& a! q N4 H3 b. A1 ?% C$ {/ p; k, k$ K, s$ c. c
在R1上测试到R3的ipv6 loopback0接口(非直连):
* o% n8 @7 U& M- K/ y7 l; ]R1#ping ipv6 2002:c0a8:103:3::3 1 [$ p- U# X2 H$ Q* ~
Type escape sequence to abort.3 ^! D8 h/ m- {+ \( V
Sending 5, 100-byte ICMP Echos to ! t3 H; v/ W5 {8 I, }
& _5 T; L7 y! B/ T1 w5 n% N
2002:C0A8:103:3::3, timeout is 2 seconds:
. y* f) i/ |* {9 T) o: {( t- B8 `!!!!!# j$ a3 X* C9 ]6 e" d
Success rate is 100 percent (5/5), round-trip
) C( ]6 U$ d: v! h3 j9 v. @7 y7 W3 x5 M+ m) r4 k
min/avg/max = 8/12/16 ms* M& ~" \0 l7 X+ m; K6 R6 p
8 E0 W& R& j, p7 p7 |8 p
|
|