Cisco IOS Cookbook 中文精简版第二十五章 IPv6

25.1.  自动配置接口ipv6 地址

提问 在接口启用IPv6，自动生成IPv6地址

回答

一种是使用autoconfig方式

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address autoconfig

Router1(config-if)#end

Router1#

一种是使用EUI-64方式 来生成IPv6 地址的主机部分，然后组合已定义的网络部分

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA::/64 eui-64

Router1(config-if)#end

Router1#

注释 ipv6 unicast-routing命令是用来启动路由协议，尽管不用该命令你一样可以配置v6地址，也可以使用v6的Ping等命令，甚至配置静态路由来联通网络，但是还是建议配置此命令。对于autoconfig方式一是会自动生成前缀为FE80::/10的linklocal地址另外会查询DHCP来获得地址。对于EUI方式会根据MAC地址来生成前缀为AAAA::/64Global Unicast地址

25.2.  手动配置接口IPv6 地址

提问 手动给接口配置IPv6地址

回答

配置Unicast地址:

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA::1/64

Router1(config-if)#exit

Router1(config)#end

Router1#

配置Anycast地址

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAFF::1/64 anycast

Router1(config-if)#exit

Router1(config)#end

Router1#

配置 link-local地址

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address FE80::1 link-local

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 配置了unicast地址会自动根据EUI方式生成Linklocal地址。Anycast在root dns遭受攻击中发挥了很大作用，看一个命令输出

Router1#show ipv6 interface FastEthernet0/0

FastEthernet0/0 is up, line PRotocol is up

  IPv6 is enabled, link-local address is FE80::20E:84FF:FE24:4E70

  Global unicast address(es):

    AAAA::1, subnet is AAAA::/64

    AAFF::1, subnet is AAFF::/64 [ANY]

  Joined group address(es):

    FF02::1

    FF02::2

    FF02::1:FF00:1

    FF02::1:FF24:4E70

  MTU is 1500 bytes

  ICMP error messages limited to one every 100 milliseconds

  ICMP redirects are enabled

  ND DAD is enabled, number of DAD attempts: 1

  ND reachable time is 30000 milliseconds

  ND advertised reachable time is 0 milliseconds

  ND advertised retransmit interval is 0 milliseconds

  ND router advertisements are sent every 200 seconds

  ND router advertisements live for 1800 seconds

  Hosts use stateless autoconfig for addresses.

Router1#

25.3.  配置IPv6 DHCP服务

提问 在路由器上启用DHCP服务器特性来提供IPv6地址

回答

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 dhcp database Flash:/DHCPv6-db

Router1(config)#ipv6 local pool VLAN10-pool AAAA:1::/48 64

Router1(config)#ipv6 local pool VLAN11-pool AAAA:11::/48 64

Router1(config)#ipv6 dhcp pool DHCPv6POOL

Router1(config-dhcp)#prefix-delegation AAAA:1::23F6:33BA/64 00030001000E84244E70

Router1(config-dhcp)#prefix-delegation pool VLAN10-pool

Router1(config-dhcp)#dns-server AAAA:1::19

Router1(config-dhcp)#domain-name oreilly.com

Router1(config-dhcp)#exit

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA:1::1/64

Router1(config-if)#ipv6 address FE80::1 link-local

Router1(config-if)#ipv6 nd managed-config-flag

Router1(config-if)#ipv6 nd other-config-flag

Router1(config-if)#ipv6 dhcp server DHCPv6POOL rapid-commit preference 1 allow-hint

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 此特性仅限于高端路由器

Router1#show ipv6 dhcp pool DHCPv6POOL

DHCPv6 pool: DHCPv6POOL

  Static bindings:

    Binding for client 00030001000E84244E70

      IA PD: IA ID not specified

        Prefix: AAAA:1::23F6:33BA/64

                preferred lifetime 604800, valid lifetime 2592000

  Prefix pool: VLAN10-pool

               preferred lifetime 604800, valid lifetime 2592000

  DNS server: AAAA:1::19

  Domain name: oreilly.com

  Active clients: 0

Router1#

25.4.  配置RIP的IPv6版本

提问 配置支持IPv6路由的RIP

回答

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#exit

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA:5:1/64

Router1(config-if)#ipv6 rip RIP_PROC enable

Router1(config-if)#exit

Router1(config)#interface Serial0/0

Router1(config-if)#ipv6 address AAAA:1:2/64

Router1(config-if)#ipv6 rip RIP_PROC enable

Router1(config-if)#frame-relay map ipv6 AAAA:1:3 206 broadcast

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 ipv6版本的RIP区别在于不需要配置network命令，在路由表中看到的下一跳地址都是linklocal地址：

Router1#show ipv6 route rip

IPv6 Routing Table - 9 entries

Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

       U - Per-user Static route

       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary

       O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2

       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2

R   AAAA:2::/64 [120/2]

     via FE80::2E0:1EFF:FE7F:9E41, FastEthernet0/0

R   AAAA:95::/64 [120/2]

     via FE80::2E0:1EFF:FE7F:9E41, FastEthernet0/0

R   AAAA:99::/64 [120/2]

     via FE80::20E:D7FF:FED6:1060, FastEthernet0/0

Router1#

还有一个比较好用的命令

Router1#show ipv6 rip next-hops

RIP process "RIP_PROC", Next Hops

  FE80::2E0:1EFF:FE7F:9E41/FastEthernet0/0 [2 paths]

  FE80::20E:D7FF:FED6:1060/FastEthernet0/0 [7 paths]

  FE80::200:CFF:FE75:C684/FastEthernet0/0 [2 paths]

  FE80::2E0:1EFF:FE7F:9E41/Serial0/0 [2 paths]

Router1#

25.5.  修改RIP的缺省参数

提问 修改诸如定时器，治理距离等RIP参数

回答

修改定时器

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#timers 15 60 5 120

Router1(config-rtr)#exit

Router1(config)#end

Router1#

修改治理距离

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#distance 100

Router1(config-rtr)#exit

Router1(config)#end

Router1#

关闭水平分割

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#no split-horizon

Router1(config-rtr)#exit

Router1(config)#end

Router1#

注释 思科并没有给IPv6版本和v4版本一样的可修改参数

Router1#show ipv6 rip

RIP process "RIP_PROC", port 521, multicast-group FF02::9, pid 125

     Administrative distance is 120. Maximum paths is 16

     Updates every 15 seconds, eXPire after 60

     Holddown lasts 5 seconds, garbage collect after 120

     Split horizon is on; poison reverse is off

     Default routes are not generated

     Periodic updates 755, trigger updates 3

  Interfaces:

    FastEthernet0/0

    Loopback0

  Redistribution:

    None

Router1#

25.6.  RIP中IPv6路由的过滤和度量值的修改

提问 对RIP生成的路由表再加工

回答

地址汇总

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 rip RIP_PROC summary-address AAAA:99::8:0/109

Router1(config-if)#exit

Router1(config)#end

Router1#

宣告缺省路由

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 rip RIP_PROC default-information originate

Router1(config-if)#exit

Router1(config)#end

Router1#

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 rip RIP_PROC default-information only

Router1(config-if)#exit

Router1(config)#end

Router1#

路由过滤

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 prefix-list BLOCK_2E6 seq 5 deny AAAA:2E6::/64 le 128

Router1(config)#ipv6 prefix-list BLOCK_2E6 seq 10 permit ::/0 le 128

Router1(config)#ipv6 prefix-list ALLOW_2222 seq 5 permit AAAA:2222::/64 le 128

Router1(config)#ipv6 prefix-list ALLOW_2222 seq 10 deny ::/0 le 128

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#distribute-list prefix-list BLOCK_2E6 in FastEthernet0/0

Router1(config-rtr)#distribute-list prefix-list ALLOW_2222 out FastEthernet0/0

Router1(config-rtr)#exit

Router1(config)#end

Router1#

修改度量值

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#interface Serial0/0

Router1(config-if)#ipv6 rip RIP_PROC metric-offset 5

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 基本配置方法和IPv4相同，在路由过滤的Prefixlist中V6只能接受prefix list的配置，后面不能跟accesslist作为参数

25.7.  配置OSPF的IPv6版本

提问 配置支持IPv6的OSPF v3

回答

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ip cef

Router1(config)#ipv6 cef

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router ospf 1

Router1(config-rtr)#router-id 1.0.0.1

Router1(config-rtr)#area 0 range AAAA:5::/64

Router1(config-rtr)#exit

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA:5::1/64

Router1(config-if)#ipv6 ospf 1 area 0

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 这里有个比较有意思的router id问题，在v4情况下会自动根据IP地址来选择，但是在纯v6环境下没有v4的地址，所以就必须配置router id，否则ospf不能正常运行

进入讨论组讨论。

25.8.  OSPF中IPv6路由过滤和度量值修改

提问 对OSPF生成的路由表再加工

回答

修改默认代价值

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 router ospf 1

Router1(config-rtr)#auto-cost reference-bandwidth 1000

%OSPFv3: Reference bandwidth is change.

        Please ensure reference bandwidth is consistent across all routers.

Router1(config-rtr)#exit

Router1(config)#end

Router1#

修改特定链路的代价值

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 ospf cost 500

Router1(config)#end

Router1#

路由过滤

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 prefix-list BLOCK_99_E seq 5 deny AAAA:99::E:0/112

Router1(config)#ipv6 prefix-list BLOCK_99_E seq 10 permit ::/0 le 128

Router1(config)#ipv6 router ospf 1

Router1(config-rtr)#distribute-list prefix-list BLOCK_99_E in

Router1(config-rtr)#exit

Router1(config)#end

Router1#

注释 类似于v4的配置

25.9.  路由重分布

提问 不同路由协议之间进行再分布

回答

再分布OSPF到RIP

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#redistribute ospf 1 metric 5

Router1(config-rtr)#exit

Router1(config)#end

Router1#

再分布RIP到OSPF

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#ipv6 router ospf 1

Router1(config-rtr)#redistribute rip RIP_PROC

Router1(config-rtr)#exit

Router1(config)#end

Router1#

OSPF宣告缺省路由

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#ipv6 router ospf 1

Router1(config-rtr)#default-information originate always

Router1(config-rtr)#exit

Router1(config)#end

Router1#

注释 也可以使用routemap等高级方法

25.10.  配置MBGP

提问 在不同的自治域系统使用MBGP来传递IPv6路由信息

回答

单v6环境

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#router bgp 65520

Router1(config-router)#no bgp default ipv4-unicast

Router1(config-router)#neighbor AAAA:5::2 remote-as 65522

Router1(config-router)#neighbor AAAA:5::AA9 remote-as 65521

Router1(config-router)#address-family ipv6

Router1(config-router-af)#neighbor AAAA:5::2 activate

Router1(config-router-af)#neighbor AAAA:5::AA9 activate

Router1(config-router-af)#network AAAA:2222::2/64

Router1(config-router-af)#no synchronization

Router1(config-router-af)#exit-address-family

Router1(config-router)#exit

Router1(config)#end

Router1#

V4和v6混和环境

Router9#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router9(config)#router bgp 65521

Router9(config-router)#no bgp default ipv4-unicast

Router9(config-router)#neighbor AAAA:5::1 remote-as 65520

Router9(config-router)#neighbor 192.168.1.103 remote-as 65525

Router9(config-router)#address-family ipv4

Router9(config-router-af)#redistribute connected

Router9(config-router-af)#neighbor 192.168.1.103 activate

Router9(config-router-af)#no auto-summary

Router9(config-router-af)#no synchronization

Router9(config-router-af)#exit-address-family

Router9(config-router)#address-family ipv6

Router9(config-router-af)#neighbor AAAA:5::1 activate

Router9(config-router-af)#network AAAA:FE::1/64

Router9(config-router-af)#network AAAA:BBBB::1/64

Router9(config-router-af)#no synchronization

Router9(config-router-af)#exit-address-family

Router9(config-router)#exit

Router9(config)#end

Router9#

注释 和V4配置最大的不同是增加了no bgp default ipv4-unicast命令，因为缺省情况BGP只会发布v4的前缀给邻居。查看邻居状态使用show bgp summary，而对于纯v4邻居使用的是show ip bgp summary命令

25.11.  在现有IPv4网络中传递IPv6数据

提问 通过现有的IPv4网络来互联两个IPv6网络

回答

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#interface Loopback1

Router1(config-if)#ip address 10.15.1.11 255.255.255.255

Router1(config-if)#exit

Router1(config)#interface Tunnel1

Router1(config-if)#ipv6 address BBBB:1::1/126

Router1(config-if)#ipv6 rip RIP_PROC enable

Router1(config-if)#tunnel source 10.15.1.11

Router1(config-if)#tunnel destination 172.16.11.9

Router1(config-if)#exit

Router1(config)#end

Router1#

Router9#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router9(config)#interface Loopback1

Router9(config-if)#ip address 172.16.11.9 255.255.255.255

Router9(config-if)#exit

Router9(config)#interface Tunnel1

Router9(config-if)#ipv6 address BBBB:1::2/126

Router9(config-if)#ipv6 rip RIP_PROC enable

Router9(config-if)#tunnel source 172.16.11.9

Router9(config-if)#tunnel destination 10.15.1.11

Router9(config-if)#exit

Router9(config)#end

Router9#

注释 这种GRE隧道的配置相比前面的例子要简单的多，问题也少很多，因为封装前后的协议类型是不同的

25.12.  IPv6和IPv4之间转化

提问 配置路由器成为IPv4和IPv网络之间的网关

回答

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router1(config)#ipv6 access-list ALLOWED-NAT-DEVS

Router1(config-ipv6-acl)# permit ipv6 any any

Router1(config-ipv6-acl)#exit

Router1(config)#ipv6 nat prefix ::FFFF:0.0.0.0/96 v4-mapped ALLOWED-NAT-DEVS

Router1(config)#ipv6 nat v6v4 source AAAA:5::AA9 192.168.56.100

Router1(config)#interface FastEthernet0/0

Router1(config-if)#no ip address

Router1(config-if)#ipv6 address AAAA:5::2012/64

Router1(config-if)#ipv6 nat

Router1(config-if)#exit

Router1(config)#interface Serial0/0

Router1(config-if)#ip address 192.168.55.12 255.255.255.0

Router1(config-if)#ipv6 nat

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 12.2(13)T后路由器可以作为v6和v4之间的协议转化器，对于v6访问v4地址，可以采用"IPv4-Mapped IPv6 Address" 把a.b.c.d翻译为::FFFF:A.B.C.D，而对于v4访问v6地址，只能采用静态映射的方式(ipv6 nat v6v4),这种地址翻译没有配置inside或者outside接口

进入讨论组讨论。

上一篇：Cisco IOS Cookbook 中文精简版第二十四章移动IP

下一篇：Cisco IOS Cookbook 中文精简版第二十七章安全(完)

发表评论 共有条评论 用户名: 密码: 验证码: 匿名发表

学习交流

更多

• 

  索泰发布一款GTX 1070 Mini迷

• 

  AMD新旗舰显卡轻松干翻NVIDIA

索泰发布一款GTX 1070 Mini迷你版本:小机

索泰发布一款GTX 1070 Mini迷你版本:小机箱大爱...

• usb无线网卡怎么用,小编告诉你安装教程09-10
• usb调试在哪,小编告诉你usb调试在哪09-10
• 优盘不显示,小编告诉你优盘不显示怎么办09-10
• 低级格式化,小编告诉你硬盘怎么低级格式化09-10

• 帝国cms分类信息的所在地在的修改09-08
• 将网站地图和友情链接table样式改为div+css09-08
• 用帝国cms实现不规则新闻或信息调用（应大站09-08
• 帝国调用DZ论坛精华帖09-08
• 用灵动标签调用discuz和phpwind的最新贴子09-08

热门图片

更多

• 

  芭蕾舞蹈表演，真实美到极致

• 

  下午茶时间，悠然自得的休憩

• 

  充斥这繁华奢靡气息的城市迪拜风景图片

• 

  从山间到田野再到大海美丽的自然风景图片

• 

  肉食主义者的最爱美食烤肉图片

• 

  夏日甜心草莓美食图片

• 

  人逢知己千杯少，喝酒搞笑图集

• 

  搞笑试卷，学生恶搞答题

猜你喜欢的新闻

• 荣耀总裁赵明乌镇演讲：荣耀首款5G手机V30下
• 搜狐张朝阳：回归媒体是搜狐重新崛起的关键
• 华为轮值董事长郭平：虚拟技术创造现实价值
• 第六届世界互联网大会开幕“to B”端成热门
• 滴滴英文服务上线两周年 用户已超200万
• 华为推出全球至快AI训练集群Atlas900
• 马斯克：特斯拉正组建中国技术团队
• 10年后6G将问世 速度有望比5G快100倍
• WeworkCEO称已开始考虑未来职位 不排除放弃
• 谷歌软件商店模式变革：推出5美元会员 可用数

猜你喜欢的关注

• 菜鸟配置ADSL Modem防火墙
• Windows 2000 实现网络共享连接
• 使用反向代理技术保护Web服务器
• 学校网络机房及网吧轻松维护
• 寻找另一半—快速确定特定端口的使用程序
• Windows 98 巧还原—批处理命令大显身手！
• 菜鸟必读之特殊用途的IP地址介绍
• ADSL Modem之IP端口的设定及应用
• 巧用CCProxy 解决服务器无法上网问题
• 轻松实现ADSL宽带多机共享

新闻热点

荣耀总裁赵明乌镇演讲：荣耀首款5G手机V30下月发布

2019-10-23 09:17:05

搜狐张朝阳：回归媒体是搜狐重新崛起的关键

2019-10-21 09:20:02

华为轮值董事长郭平：虚拟技术创造现实价值

2019-10-21 09:00:12

滴滴英文服务上线两周年 用户已超200万

2019-09-26 08:57:12

华为推出全球至快AI训练集群Atlas900

2019-09-25 08:46:36

马斯克：特斯拉正组建中国技术团队

2019-09-25 08:15:43

疑难解答

• 索泰发布一款GTX 1070 Mini迷你版本:小机箱
• AMD新旗舰显卡轻松干翻NVIDIA 有几个点我们
• i5 6500配什么显卡最佳？i5 6500配1060显卡可
• AMD新一批显卡曝光:更便宜的14nm北极星
• A卡自修改BIOS安装16.12.1 ReLive驱动教程
• 2016笔记本显卡性能哪个好？笔记本显卡天梯图
• 2016显卡性能怎么看好坏 显卡天梯图2016年1
• PS4 Pro显卡解析:显存带宽相当于标准版PS4
• iGame 1050烈焰战神U-2GD5版图赏版:最美非
• EVGA FTW GTX 1080/1070显卡存在严重问题:

图片精选

• 

  寻找另一半—快速确定特定端口的使

• 

  ADSL Modem之IP端口的设定及应用

• 

  基于软交换实现的号码识别类业务技

• 

  软交换呼叫模型的研究与设计

网友关注

• u盘无法识别怎么办,小编告诉你U盘无法识别怎
• usb无线网卡怎么用,小编告诉你安装教程
• usb调试在哪,小编告诉你usb调试在哪
• 优盘不显示,小编告诉你优盘不显示怎么办
• 低级格式化,小编告诉你硬盘怎么低级格式化
• 分区表丢失,小编告诉你分区表丢失如何修复
• 进入bios,小编告诉你戴尔笔记本进入bios设置u
• 怎么刷bios,小编告诉你华硕怎么刷bios
• 读卡器怎么用,小编告诉你如何使用读卡器
• bios升级,小编告诉你华硕主板bios怎么升级