IPv6 Static Routes - Arvutiteaduse Instituut

2y ago
40 Views
2 Downloads
1.70 MB
85 Pages
Last View : 16d ago
Last Download : 3m ago
Upload by : Maleah Dent
Transcription

IPv6 Static RoutesOverview

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public2

IPv6 Static RoutesStatic routes are manually configured and define an explicitpath between two networking devices.Configuring an IPv6 static route is very similar to IPv4except that the command is now ipv6 route.The following must be configured before entering a staticIPv6 route: ipv6 unicast-routing IPv6 enabled on at least one interface An IPv6 address on that interface.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public3

Complete IPv6 Static Route SyntaxRouter(config)#ipv6 route [vrf vrf-name] ipv6-prefix/prefix-length{ipv6-address interface-type interface-number [ipv6-address]}[nexthop-vrf [vrf-name1 default]][administrative-distance] [administrative-multicast-distance unicast multicast] [next-hop-address] [tag tag]The syntax of the IPv6 command contains more parametersthan the IPv4 version.The following command parameters are not required toconfigure directly attached, fully specified, floating anddefault static routes. Refer to cisco.com for more information on these parameters.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public4

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public5

Directly Attached IPv6 Static RouteRouter(config)#ipv6 route ipv6-prefix/prefix-length{ipv6-address interface-type interface-number [ipv6-address]}[administrative-distance]A directly attached IPv6 static route is created whenspecifying only outgoing interface.The ipv6-prefix/prefix-length parameteridentifies the destination IPv6 network and its prefix length.The interface-type interface-numberparameter specifies the interface through which thedestination network can be reached.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public6

Directly Attached IPv6 Static Route Example2001:1::1/64Lo100: 10::10:1/64R12001:1::2/64S0/0/0S0/0/0R2Lo102: 13::13:1/64Lo101: 11::11:1/64R1# config tR1(config)# ipv6 route 13::/64 s0/0/0R1(config)# exitR1# show ipv6 route staticIPv6 Routing Table – 9 entriesCodes: C – Connected, L – Local, S – Static, R – RIP, B – BGPU – Per-user Static routeI1 – ISIS L1, I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summaryO – OSPF intra, OI – OSPF inter, OE1 – OSPF ext 1, OE2 – OSPF ext 2ON1 – OSPF NSSA ext 1, ON2 – OSPF NSSA ext 2S13::/64 [1/0]via ::, Serial0/0/0R1#A directly attached static route to the 13::13:1/64 network is configuredon router R1.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public7

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public8

Fully Specified IPv6 Static RouteRouter(config)#ipv6 route ipv6-prefix/prefix-length{ipv6-address interface-type interface-number [ipv6-address]}[administrative-distance]A fully specified static route is created when specifying: The outgoing interface And the next hop IP address.This method avoids a recursive lookup.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public9

Fully Specified IPv6 Static Route Example2001:1::1/64Lo100: 10::10:1/64R12001:1::2/64S0/0/0S0/0/0R2Lo102: 13::13:1/64Lo101: 11::11:1/64R1# config tR1(config)# ipv6 route 13::/64 s0/0/0 2001:1::2R1(config)# exitR1# show ipv6 route staticIPv6 Routing Table - Default - 8 entriesCodes: C - Connected, L - Local, S - Static, U - Per-user Static routeB - BGP, M - MIPv6, R - RIP, I1 - ISIS L1I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRPEX - EIGRP externalO - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2S13::/64 [1/0]via 2001:1::2, Serial0/0/0R1#A fully specified static route to the 13::13:1/64 network is configured onrouter R1.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public10

Note: Recursive IPv6 Static RouteRouter(config)#ipv6 route ipv6-prefix/prefix-length{ipv6-address interface-type interface-number [ipv6-address]}[administrative-distance]A recursive static route is configured when specifying thenext hop IP address of the neighbor. This makes the router perform a second route lookup to resolve theoutgoing interface to the specified next hop address.Typically, recursive static routes should be avoided.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public11

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public12

Floating IPv6 Static RouteRouter(config)#ipv6 route ipv6-prefix/prefix-length{ipv6-address interface-type interface-number [ipv6-address]}[administrative-distance]A floating static route is usually configured when there aremultiple paths to a destination network and a standbybackup route is required to support IGP discovered routes. It will only be added to the routing table if the IGP entry is deleted.The administrative-distance parameter specifiesthe value of the route, which should be higher than the IGPin the routing table. The default value is 1, which is why static routes have precedenceover any other type of route except connected routes.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public13

Floating IPv6 Static Route Example2001:1::1/64Lo100: 10::10:1/64R12001:1::2/64S0/0/0S0/0/0R2Lo102: 13::13:1/64Lo101: 11::11:1/64R1# config tR1(config)# ipv6 route 13::/64 130R1(config)# exitR1#For example, R1 is configured with a floating static route specifying anadministrative distance of 130 to the R2 LAN. If an IGP already has an entry in the IPv6 routing table to this LAN, then the static routewould only appear in the routing table if the IGP entry was removed.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public14

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public15

Default IPv6 Static RouteRouter(config)#ipv6 route ::/0{ipv6-address interface-type interface-number [ipv6-address]}[administrative-distance]IPv6 also has a default static route similar to the IPv4 quadzero (0.0.0.0) static default route.Instead, the IPv6 command uses the ::/0 notation tospecify all networks.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public16

Default IPv6 Static Route Example2001:1::1/64Lo100: 10::10:1/64R12001:1::2/64S0/0/0S0/0/0R2Lo102: 13::13:1/64Lo101: 11::11:1/64R2# config tR2(config)# ipv6 route ::/0 s0/0/0R2(config)# exitR2# show ipv6 route staticIPv6 Routing Table – 9 entriesCodes: C – Connected, L – Local, S – Static, R – RIP, B – BGPU – Per-user Static routeI1 – ISIS L1, I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summaryO – OSPF intra, OI – OSPF inter, OE1 – OSPF ext 1, OE2 – OSPF ext 2ON1 – OSPF NSSA ext 1, ON2 – OSPF NSSA ext 2S::/0 [1/0]via ::, Serial0/0/0R2#For example, a default static route as specified by the “::/0” entry isconfigured on router R2 to reach all other networks connected to R1.Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public17

Overview of IPv6 Static Routes 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public18

Transitioning IPv4 toIPv6 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public1

IPv6 Co-existence SolutionsDual-StackIPv4IPv6Enterprise Co-existence strategyTunnelingServicesIPv4 over IPv6IPv6 over IPv4Connect Islands of IPv6 or IPv4TranslationServicesIPv6IPv4Government AgenciesInternational SitesRemoteWorkersInternet consumersConnect to the IPv6 community 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public2

Dual Stack 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public3

Dual-Stack TechniquesHosts and network devices run both IPv4 and IPv6 at thesame time. This technique is useful as a temporary transition, but it addsoverhead and uses many resources.Cisco IOS Software is IPv6 ready. As soon as IPv4 and IPv6 configurations are complete, the interface isdual stacked and it forwards both IPv4 and IPv6 traffic.Drawback of dual stacking includes: The additional resources required to keep and process dual routingtables, routing protocol topology tables, etc. The higher administrative overhead, troubleshooting, and monitoring,is more complex. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public4

Dual-Stack :2/64R2R1(config)# interface fa0/0R1(config-if)# ip address 10.10.10.1 255.255.255.0R1(config-if)# ipv6 address 2001:12::1/64R1(config-if)# ZR1#The FastEthernet 0/0 interface of R1 is dual stacked. It is configured with an IPv4 and an IPv6 address. Also notice that for each protocol, the addresses on R1 and R2 are onthe same network. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public5

Dual-Stack :2/64R2R1# show ip interface fa0/0FastEthernet0/0 is up, line protocol is upInternet address is 10.10.10.1/24Broadcast address is 255.255.255.255Address determined by setup commandMTU is 1500 bytesHelper address is not setDirected broadcast forwarding is disabledOutgoing access list is not setInbound access list is not setProxy ARP is enabledLocal Proxy ARP is disabledSecurity level is defaultSplit horizon is enabledICMP redirects are always sentICMP unreachables are always present output omitted The output confirms that the Fa0/0 interface is operational and uses theIPv4 address. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public6

Dual-Stack :2/64R2R1# show ipv6 interface fa0/0FastEthernet0/0 is up, line protocol is upIPv6 is enabled, link-local address is FE80::219:56FF:FE2C:9F60Global unicast address(es):2001:12::1, subnet is 2001:12::/64Joined group 2C:9F60MTU is 1500 bytesICMP error messages limited to one every 100 millisecondsICMP redirects are enabledND DAD is enabled, number of DAD attempts: 1ND reachable time is 30000 milliseconds output omitted The output confirms that the Fa0/0 interface is operational and alsouses the IPv6 address. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public7

Tunneling 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public8

Tunneling TechniquesIsolated IPv6 networks are connected over an IPv4infrastructure using tunnels.The edge devices are the only ones that need to be dualstacked.Scalability may be an issue if many tunnels need to becreated. Tunnels can be either manually or automatically configured,depending on the scale required and administrative overheadtolerated. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public9

Tunneling TechniquesFor IPv6, tunneling is an integration method in which anIPv6 packet is encapsulated within IPv4.This enables the connection of IPv6 islands without theneed to convert the intermediary network to IPv6. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public10

Tunneling TechniquesIn this example, the tunnel between sites is using: IPv4 as the transport protocol (the protocol over which the tunnel iscreated). IPv6 is the passenger protocol (the protocol encapsulated in the tunneland carried through the tunnel). GRE is used to create the tunnel, and is known as the tunnelingprotocol. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public11

Types of TunnelsTunnels can be created manually using: Manual IPv6 tunnels GRE IPv6 tunnels (not covered in this presentation)Tunnels can also be created automatically using: IPv4-Compatible IPv6 Tunnels (now deprecated) 6to4 tunnels ISATAP Tunnels 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public12

Manual Tunnels 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public13

Manual Tunnel ConfigurationCreate a tunnel interface.Router(config)#interface tunnel numberCreates a tunnel interface which is virtual.Once in interface configuration mode, configure the tunnelparameters including: IP addressTunnel sourceTunnel destinationTunnel mode (type of tunnel) 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public14

Tunnel Configuration CommandsCommandDescriptiontunnel source interfacetype interface-numberAn interface configuration command that setsthe source address for a tunnel interface asthe address of the specified interfacetunnel destination ipaddressAn interface configuration command thatspecifies the destination address for a tunnelinterface. In this case the ip-addressparameter is an IPv4 addresstunnel mode ipv6ipAn interface configuration command that setsthe encapsulation mode for the tunnelinterface to use IPv6 as the passengerprotocol, and IPv4 as both the encapsulationand transport protocol. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public15

Tunnel Troubleshooting CommandsCommandDescriptiondebug tunnelEXEC command that enables the display ofthe tunnel encapsulation and decapsulationprocess.debug ip packet detailEXEC command that enables the display ofdetails about IP packets traversing the router. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public16

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0R3Tu1212::1/6413::1/64Tu12 v4 # interface tunnel 12R1(config-if)#*Aug 16 09:34:46.643: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 12::1/64R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel destination 10.1.1.2R1(config-if)#*Aug 16 09:36:52.051: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to upR1(config-if)# tunnel mode ipv6ipR1(config-if)#R1 is configured with the manual tunnel configuration. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public17

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0R3Tu1212::1/6413::1/64Tu12 v4 # interface tunnel 12R2(config-if)#*Aug 16 09:38:47.532: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 12::2/64R2(config-if)# tunnel source loopback 101R2(config-if)# tunnel destination 10.1.1.1R2(config-if)#*Aug 16 09:39:24.056: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to upR2(config-if)# tunnel mode ipv6ipR2(config-if)#R2 is configured with the manual tunnel configuration. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public18

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0R3Tu1212::1/6413::1/64Tu12 v4 RIPS0/1/0172.16.12.2/2424::4/64Fa0/0R2R4R1# show interface tunnel 12Tunnel12 is up, line protocol is upHardware is TunnelMTU 1514 bytes,BW 9 Kbit/sec, DLY 500000 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation TUNNEL, loopback not setKeepalive not setTunnel source 10.1.1.1 (Loopback101), destination 10.1.1.2Tunnel protocol/transport IPv6/IPTunnel TTL 255Fast tunneling enabled output omitted The tunnel interface is examined.Next, RIPng will be configured to cross the tunnel. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public19

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0R3Tu1212::1/6413::1/64Tu12 v4 # ipv6 unicast-routingR1(config)# interface tunnel 12R1(config-if)# ipv6 rip RIPoTU enableR1(config-if)# interface fa0/0R1(config-if)# ipv6 rip RIPoTU enableR1(config-if)#R2(config)# ipv6 unicast-routingR2(config)# interface tunnel 12R2(config-if)# ipv6 rip RIPoTU enableR2(config-if)# interface fa0/0R2(config-if)# ipv6 rip RIPoTU enableR2(config-if)#RIPng is enabled on the tunnel interfaces and on the FastEthernetinterfaces of R1 and R2. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public20

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0R3Tu1212::1/6413::1/64Tu12 v4 # ipv6 unicast-routingR3(config)# interface fa0/0R3(config-if)# ipv6 rip RIPoTU enableR3(config-if)#R4(config)# ipv6 unicast-routingR4(config)# interface fa0/0R4(config-if)# ipv6 rip RIPoTU enableR4(config-if)#RIPng is enabled on the FastEthernet interfaces of R3 and R4.Now end-to-end connectivity should be achieved. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public21

Manual IPv6 Tunnel ExampleLo102: 10.1.1.2/24Lo101: 10.1.1.1/2413::3/64Fa0/0Tu1212::1/6413::1/64Tu12 IPv4 RIPS0/1/0172.16.12.2/2424::4/64Fa0/0R2R4R4# show ipv6 route rip output omitted RR12::/64 [120/2]via FE80::2, FastEthernet0/013::/64 [120/3]via FE80::2, FastEthernet0/0R4#R3# ping 24::4Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 24::4, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max 16/18/20 msR3# 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public22

Manual IPv6 Tunnel SummaryManual tunnels are simple to configure, and are thereforeuseful for a small number of sites.However, for large networks manual tunnels are notscalable, from both a configuration and managementperspective.The edge routers on which the tunnels terminate need to bedual stacked, and therefore must be capable of runningboth protocols and have the capacity to do so. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public23

6to4 Tunnels 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public24

6to4 Tunnels6to4 tunnels, also known as a 6-to-4 tunnel, is an automatictunneling method.6to4 tunnels are point-to-multipoint, rather than the point-topoint tunnels.The 6to4 tunnels are built automatically by the edge routers,based on embedded IPv4 address within the IPv6addresses of the tunnel interfaces on the edge routers.6to4 tunnels enable the fast deployment of IPv6 in acorporate network without the need for public IPv6addresses from ISPs or registries. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public25

6to4 Tunnel ExampleWhen Router A receives an IPv6 packet with a destination address inthe range of 2002::/16 (the address 2002:c0a8:1e01::/48 in the example), itdetermines that the packet must traverse the tunnel. The router extracts the IPv4 address embedded in the third to sixth octets,inclusively, in the IPv6 next-hop address. In this example, these octets are c0a8:1e01 which is therefore 192.168.30.1.This IPv4 address is the IPv4 address of the 6to4 router at thedestination site, Router B. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public26

6to4 Tunnel ExampleRouter A encapsulates the IPv6 packet in an IPv4 packetwith Router B’s extracted IPv4 address as the destinationaddress. The packet passes through the IPv4 network.Router B, decapsulates the IPv6 packet from the receivedIPv4 packet and forwards the IPv6 packet to its finaldestination. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public27

6to4 LimitationsOnly static routes or BGP are supported. This is because the other routing protocols use link-local addresses toform adjacencies and exchange updates and these do not conform tothe address requirements for 6to4 tunnels. The example presented here will use static routes.NAT cannot be used along the IPv4 path of the tunnel,again because of the 6to4 address requirements. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public28

6to4 Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic 6to4 TunnelTu122002:AC10:6501::/12813:13::1/64Lo102: /0Fa0/0R1S0/1/0172.16.12.1/24IPv4 RIPS0/1/0172.16.12.2/2424:24::4/64Fa0/0R2R4In this example, there are two IPv6 networks separated by an IPv4network.The objective of this example is to again provide full connectivitybetween the IPv6 islands over the IPv4-only infrastructure.The first step is to configure routers R1 and R2 so that they canestablish the 6to4 tunnel between them. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public29

6to4 Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic 6to4 /12813:13::1/64Lo102: .1/24IPv4 ig)# interface tunnel 12R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 2002:AC10:6501::/128R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel mode ipv6ip 6to4R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR1(config-if)# exitR1 is configured with the 6to4 tunnel.Notice that the configuration is similar to the manual tunnel configurationsexcept that the tunnel destination is not specified. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public30

6to4 Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic 6to4 /12813:13::1/64Lo102: .1/24IPv4 ig)# ipv6 route 2002::/16 tunnel 12R1(config)# ipv6 route 24::/64 2002:AC10:6601::R1(config)#R1 is configured with static routes. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public31

6to4 Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic 6to4 /12813:13::1/64Lo102: .1/24IPv4 ig)# interface tunnel 12R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 2002:AC10:6601::/128R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel mode ipv6ip 6to4R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR2(config-if)# exitR2 is configured with the 6to4 tunnel. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public32

6to4 Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic 6to4 /12813:13::1/64Lo102: .1/24IPv4 ig)# ipv6 route 2002::/16 tunnel 12R2(config)# ipv6 route 13::/64 2002:AC10:6501::R2(config)#R2 is configured with static routes. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public33

ISATAP Tunnels 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public34

ISATAP TunnelsAn Intra-Site Automatic Tunnel Addressing Protocol(ISATAP) tunnel is very similar to a 6to4 IPv6 tunnel. It is used to connect IPv6 domains over an IPv4 network. It embeds an IPv4 address within the IPv6 address.The goal of ISATAP is to provide connectivity for IPv6 hoststo a centralized IPv6-capable router, over an IPv4-onlyaccess network.ISATAP was designed to transport IPv6 packets within asite (hence the “intra-site” part of its name). It can still be used between sites, but its purpose is within sites.ISATAP tunnels use IPv6 addresses consisting of a 64-bitprefix concatenated to a 64-bit interface ID in EUI-64format. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public35

ISATAP Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic ISATAP TunnelTu1212:12::5EFE:AC10:650113:13::1/64Lo102: 0/0Fa0/0R1S0/1/0172.16.12.1/24IPv4 RIPS0/1/0172.16.12.2/2424:24::4/64Fa0/0R2R4In this example, there are two IPv6 networks separated by an IPv4network.The objective of this example is to again provide full connectivitybetween the IPv6 islands over the IPv4-only infrastructure.The first step is to configure routers R1 and R2 so that they canestablish the ISATAP tunnel between them. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public36

ISATAP Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic ISATAP TunnelTu1212:12::5EFE:AC10:650113:13::1/64Lo102: 0/0Fa0/0R1S0/1/0172.16.12.1/24IPv4 ig)# interface tunnel 12R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 12:12::/64 eui-64R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel mode ipv6ip isatapR1(config-if)# exit%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR1(config)# ipv6 route 24::/64 tunnel12 FE80::5EFE:AC10:6601R1(config)#R1 is configured with the ISATAP tunnel and a static route.Notice that the configuration is similar to the manual and GRE tunnelconfigurations except that the tunnel destination is not specified. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public37

ISATAP Tunnel ExampleLo101: 172.16.101.113:13::3/64Fa0/0R3Automatic ISATAP TunnelTu1212:12::5EFE:AC10:650113:13::1/64Lo102: 0/0Fa0/0R1S0/1/0172.16.12.1/24IPv4 ig)# interface tunnel 12R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 12:12::/64 eui-64R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel mode ipv6ip isatapR2(config-if)# exit%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR2(config)# ipv6 route 13::/64 tunnel12 FE80::5EFE:AC10:6501R2(config)#R2 is configured with the ISATAP tunnel and a static route. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public38

TranslationUsing NAT-PT 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public39

NAT-PTNAT-PT is a transition technique, but is not a replacement for dual stackor tunneling. It can be used in situations where direct communication between IPv6-onlyand IPv4-only networks is desired. It would not be appropriate in situations where connectivity between two IPv6networks is required, because two points of translation would be necessary,which would not be efficient or effective.With NAT-PT, all configuration and translation is performed on the NATPT router. The other devices in the network are not aware of the existence of the otherprotocol’s network, nor that translations are occurring.Note: NAT-PT has been moved to historical status with RFC 4966. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public40

SummaryThis presentation covered transition mechanisms to aid in the transition from IPv4 to IPv6.Dual Stack A device or network on which two protocol stacks have been enabled at the same time operates indual-stack mode. The primary advantage of dual-stack is that it does not require tunneling within the campus network.Dual-stack runs the two protocols as “ships-in-the-night”.Tunneling A manually configured tunnel is equivalent to a permanent link between two IPv6 domains over anIPv4 backbone. An automatic 6to4 tunnel allows isolated IPv6 domains to be connected over an IPv4 network toremote IPv6 networks. The key difference between automatic 6to4 tunnels and manually configuredtunnels is that the tunnel is not point-to-point; it is point-to-multipoint. ISATAP tunneling mechanism is similar to other automatic tunneling mechanisms, such as IPv6 6to4tunneling; however, ISATAP is designed for transporting IPv6 packets within a site, not betweensites.NAT-PT NAT-PT is designed to be deployed to allow direct communication between IPv6-only networks andIPv4-only networks. One of the benefits of NAT-PT is that no changes are required to existing hosts, because all theNAT-PT configurations are performed at the NAT-PT router. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public41

ResourcesCisco /index.htmlCisco IOS IPv6 Configuration iguration/guide/12 4/ipv6 12 4 book.htmlDual-Stack ral/iosswrel/ps6537/ps6553/at a glance c45-625859.pdfImplementing Tunneling for guration/guide/ip6-tunnel.htmlRFC 4966http://www.apps.ietf.org/rfc/rfc4966.html 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public42

2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public43

Appendix A:TranslationUsing NAT-PT 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public44

NAT-PTThe NAT-PT router translates source and destinationaddresses and other packet header fields in both directions: From the IPv4 network to the IPv6 network From the IPv6 network to the IPv4 network.For this reason, this router is dual stacked and must havetwo sets of translation entries for this bidirectionaltranslation. 2007 – 2010, Cisco Systems, Inc. All rights reserved.Cisco Public45

NAT-PT OperationA DNS is required in NAT-PTarchitectures. A

Static routes are manually configured and define an explicit . Configuring an IPv6 static route is very similar to IPv4 except that the command is now ipv6 route. The following must be configured before entering a static . IPv6 also has a default static route similar to the IPv4 quad zero (0.0.0.0) static default route. Instead, the IPv6 .

Related Documents:

ipv6 hello-interval eigrp 10 1. ipv6 hold-time eigrp 10 3. ipv6 authentication mode eigrp 10 md5. ipv6 authentication keychain - eigrp 10 eigrp. interface Vlan4. description Data VLAN for Access: ipv6 address 2001:DB8:CAFE:4::2/64. ipv6 nd prefix 2001:DB8:CAFE:4::/64 no-advertise. ipv6 nd managed-config-flag. ipv6 dhcp relay destination 2001 .

CO 2 To study IPv6 addressing schemes. . Overview of IPv6, IPv6 & TCP/IP stack,IPv6 protocol architecture, IPv6 address basics, address notation, unicast address, multicast address , IPv6 headers, Routing table problem, static & . Introduction to Global Data Flow Analysis, Source Language issues, Storage Organization, Static

Legacy Applications ported to run over IPv6 – Usable also where there is IPv6 infrastructure New Applications developed for use over IPv4, IPv6 or coupled IPv4/IPv6 infrastructure – Requires transition tools of course New Applications developed for use over IPv4, IPv6 or coupled; uses potential of IPv6, runs over IPv4

Structure of IPv6 Protocol IPv4 and IPv6 Header Comparison IPv6 Extension Headers IPv6 Addressing Addressing Format Types of IPv6 addresses. 3 ICMPv6 and Neighbor Discovery Router Solicitation & Advertisement Neighbor Solicitation & Advertisement Duplicate Address Detection Multicast in IPv6 DHCP & DNS for IPv

7 IPv6 Technology IPv6 Benefits A summary of the Benefits of IPv6 are as follows: Scalability IPv6 has 128-bit address space, which is 4 times wider in bits in compared to IPv4's 32-bit address space. Security IPv6 includes security in the basic specification. IPv6 includes a Flow

2 Mobile Broadband IPv6 Service, MENOG 7 Qtel IPv6 Overview 2 Qtel IPv6 Mobile Broadband Background Building an IPv6 Mobile Broadband Service Lessons Learnt Next Steps IPv6 Mobile Broadband 1 May, 2010 1 Jul, 2010 1 Sep, 2010 1 Nov, 2010 Project Timeline IPv6 Connection to ISP Established 8 Jul, 2010

This document provides IPv6 address planning guidance for public administrations. It is intended to provide a framework that public administrations can use to learn the key differences between IPv6 and IPv4 addressing, design an IPv6 address structure, obtain IPv6 address space, deploy IPv6 addresses and manage IPv6 addresses.

argue that classical social theory is primarily a theory of modernity and that the classical tradition of modern social theory raised fundamental questions concerning the nature, structure, and historical trajectories of modern societies. By putting modern societies in broad historical perspective, by emphasizing the linkages between their differentiated social institutions, and by expressing .