1 通过隧道传输 ipv6 数据流 ccnp route: implementing ip routing

1

通过隧道传输 IPv6 数据流

CCNP ROUTE: Implementing IP Routing

2© 2011 Cisco Systems, Inc. All rights reserved. www.togogo.net

Tunnels类型▪ 手工创建隧道 :

Manual IPv6 tunnels

GRE IPv6 tunnels

▪ 自动创建隧道 :IPv4 兼容 IPv6 Tunnels (now deprecated)

6to4 tunnels

ISATAP Tunnels


手工隧道配置▪ 创建隧道接口

Router(config)#

interface tunnel number

▪ 创建一个虚拟的 tunnel 接口 . ▪ 在接口模式下 , 配置 tunnel 参数 :

IP address

Tunnel source

Tunnel destination

Tunnel mode (type of tunnel)


Tunnel命令▪ tunnel source interface-type interface-number 将隧道接口的源地址设置为指定接口的地址 .

▪ tunnel destination ip-address 指定隧道接口的目标地址 . ip-address 是一个 IPv4 地址

▪ tunnel mode ipv6ip 设置隧道接口的封装模式 , 使其将IPv6 用作乘客协议 , 将 IPv4 用作封装协议和传输协议


Tunnel 命令▪ 使用这些命令进行隧道的排错 :debug tunnel 显示隧道封装和拆封过程 .

debug ip packet detail 显示穿越路由器的 IP 分组的细节 .


Manual IPv6 Tunnel Example

示例中 , 两个 IPv6 网络被 IPv4 网络分开 .

R1 和 R2 之间运行 IPv4 RIP 以便在环回接口所属的 IPv4 网络之间提供连接线 .

这里的目标是 , 通过只支持 IPv4 的基础设施在 IPv6 孤岛之间提供连接性

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



R1 配置手动隧道 .

R1(config)# interface tunnel 12R1(config-if)#*Aug 16 09:34:46.643: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 12::1/64R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel destination 10.2.2.2R1(config-if)#*Aug 16 09:36:52.051: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to upR1(config-if)# tunnel mode ipv6ipR1(config-if)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



R2 配置手动隧道 .

R2(config)# interface tunnel 12R2(config-if)#*Aug 16 09:38:47.532: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 12::2/64R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel destination 10.1.1.1R2(config-if)#*Aug 16 09:39:24.056: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to upR2(config-if)# tunnel mode ipv6ipR2(config-if)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



核实 tunnel 接口 .

下一步 , 在 tunnel 上配置 RIPng.

R1# show interface tunnel 12Tunnel12 is up, line protocol is up Hardware is Tunnel MTU 1514 bytes,BW 9 Kbit/sec, DLY 500000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source 10.1.1.1 (Loopback101), destination 10.2.2.2 Tunnel protocol/transport IPv6/IP Tunnel TTL 255 Fast tunneling enabled

<output omitted>

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



R1 和 R2 的快速以太口和 tunnel 接口启用 RIPng.

R1(config)# ipv6 unicast-routingR1(config)# interface tunnel 12R1(config-if)# ipv6 rip RIPoTU enableR1(config-if)# interface fa0/0R1(config-if)# ipv6 rip RIPoTU enableR1(config-if)#


S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



RIPng is enabled on the Fast Ethernet interfaces of R3 and R4.

Now end-to-end connectivity should be achieved.

R3(config)# ipv6 unicast-routingR3(config)# interface fa0/0R3(config-if)# ipv6 rip RIPoTU enableR3(config-if)#


S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24



R4# show ipv6 route rip

<output omitted>

R 12::/64 [120/2] via FE80::2, FastEthernet0/0R 13::/64 [120/3] via FE80::2, FastEthernet0/0R4#

R3# ping 24::4Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 24::4, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 16/18/20 msR3#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24


Manual IPv6 Tunnel Summary

▪ Manual tunnels are simple to configure, and are therefore useful for a small number of sites.

▪ However, for large networks manual tunnels are not scalable, from both a configuration and management perspective.

▪ The edge routers on which the tunnels terminate need to be dual stacked, and therefore must be capable of running both protocols and have the capacity to do so.


GRE Tunnels

▪ Generic Routing Encapsulation (GRE) IPv6 tunnels were developed by Cisco, and GRE encapsulation is the default tunneling protocol (configured with the tunnel mode command) on Cisco routers. GRE tunnels and their configurations are very similar to manual tunnels.

GRE tunnels are more flexible in the protocols that they support.

▪ GRE tunnels are used when a permanent connection is needed between two routers, between a host and router, or between remote IPv6 networks.

▪ GRE itself does not provide security features; it is only an encapsulation protocol.Can be made secure with IPsec to provide confidentiality, integrity, and

authentication services for the IPv6 traffic.


GRE Tunnel Example

R1 配置 GRE 隧道 .

R1(config)# interface tunnel 12R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 12::1/64R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel destination 10.2.2.2R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR1(config-if)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24

GRE IPv4 Tunnel


GRE Tunnel Example

R2 配置 GRE 隧道 .

R2(config)# interface tunnel 12R2(config-if)#*Aug 16 09:38:47.532: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 12::2/64R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel destination 10.1.1.1R2(config-if)#*Aug 16 09:39:24.056: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12,changed state to upR2(config-if)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24

GRE IPv4 Tunnel


GRE Tunnel Example

R1 和 R2 的 Fast Ethernet 接口和 tunnel 接口启用 RIPng



S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24

GRE IPv4 Tunnel


GRE Tunnel Example

R3 和 R4 的 Fast Ethernet 也启用 RIPng.

实现 end-to-end 通信 .



S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24

GRE IPv4 Tunnel


GRE Tunnel Example

R4# ping 13::3Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 13::3, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 16/17/20 msR4# trace 13::3Type escape sequence to abort.Tracing the route to 13::31 24::2 0 msec 0 msec 4 msec2 12::1 12 msec 16 msec 16 msec3 13::3 16 msec 16 msec 12 msecR4#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13::1/64

R3

Fa0/0

13::3/64 24::4/64

R4

Fa0/0

24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 10.1.1.1/24 Lo102: 10.1.1.2/24 Lo104: 104::1/64

12::2/6412::1/64

172.16.12.1/24 172.16.12.2/24

GRE IPv4 Tunnel


6to4 Tunnels

▪ 6to4 隧道也称为 6-to-4 隧道 , 是一种自动隧道方法 ▪ 6to4 隧道是 point-to-multipoint, 而不是 point-to-point

的隧道 . ▪ 边缘路由器使用其隧道接口的 IPv6 地址内嵌的 IPv4 地址自

动创建 6to4 隧道 .▪ 通过使用 6to4 隧道 , 可在公司网络中快速部署 IPv6, 无需向

ISP 或注册机构神奇公有 IPv6 地址 .


6to4 Tunnel Example

▪ 边缘 6to4 路由器 A 收到目标地址 (2002:c0a8:1e01::/48 ) 位于范围2002::/16 内的 IPv6 分组后 , 它根据路由选择表知道必须使用隧道来传输它 l.该路由器从下一跳 IPv6 地址的第 3 ～ 6 个字节提取 IPv4 地址 . 在这里为 c0a8:1e01 其点分十进制表示为 192.168.30.1.

▪ 这是目标站点的 6to4 路由器 (Router B) 的 IPv4 地址 .


6to4 Tunnel Example

▪ Router A 将 IPv6 分组封装到 IPv4 分组中 , 并提取的 IPv4 地址(Router B 的 IPv4 地址 ) 作为目标地址 . 分组穿过 IPv4 网络 .

▪ Router B 收到该 IPv4 分组后 , 将其拆封以获得其中的 IPv6 分组 , 并将其转发到最终目的地 .


6to4 局限性▪ 只能使用静态路由或 BGP.

这是因为其他路由协议使用 link-local 地址来建立邻接关系和交换更新 , 而链路本地地址不符合 6to4 隧道的要求 .

▪ 不能在隧道的 IPv4 路径上使用 NAT , 这同样是由于 6to4隧道对地址的要求 .


6to4 Tunnel Example

示例中 , 有两个 IPv6 网络被一个只支持 IPv4 的网络分开 .

这里的目标是 , 通过只支持 IPv4 的基础设施在 IPv6 孤岛之间提供连接性 .

第一步配置 R1 和 R2 让它们能够建立 6to4 隧道 .

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24

Automatic 6to4 Tunnel2002:AC10:6501::/128 2002:AC10:6601::/128

RIPng RIPoTU RIPng RIPoTU


6to4 Tunnel Example

R1 配置 6to4 隧道 .注意 , 这些配置与手工隧道和 GRE 隧道的配置类似 . 差别之一是没有指定隧道的目标地

址 .

R1(config)# interface tunnel 12R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 2002:AC10:6501::/128R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel mode ipv6ip 6to4R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR1(config-if)# exitR1(config)# ipv6 route 2002::/16 tunnel 12R1(config)# ipv6 route 24::/64 2002:AC10:6601::R1(config)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24




6to4 Tunnel Example

R2 配置 6to4 tunnel.

R2(config)# interface tunnel 12R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 2002:AC10:6601::/128R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel mode ipv6ip 6to4R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR2(config-if)# exitR2(config)# ipv6 route 2002::/16 tunnel 12R2(config)# ipv6 route 13::/64 2002:AC10:6501::R2(config)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24




ISATAP Tunnels

▪ An Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) 与 6to4 隧道极其相似 .用于通过 IPv4 网络将 IPv6 网络连接起来在 IPv6 地址中内嵌 IPv4 地址 .

▪ ISATAP 隧道旨在让 IPv6 主机能够通过只支持 IPv4 的接入网连接到支持 IPv6 的中央路由器 .

▪ 设计 ISATAP 旨在在站点内传输 IPv6 分组 ( 因此其名称中包含 “站点内 intra-site” ). 虽然其初衷是用于站点内 , 但也可用于站点间 .

▪ ISATAP 隧道使用 IPv6 地址： 64 位的前缀和 EUI-64 格式的 64 位接口 ID 组成 .


ISATAP Tunnel Example

示例中 , 有两个 IPv6 网络被一个只支持 IPv4 的网络分开 .

这里的目标是 , 通过只支持 IPv4 的基础设施在 IPv6 孤岛之间提供连接性 .

第一步配置 R1 和 R2 让它们能够建立 ISATAP 隧道 .

.

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24

Automatic ISATAP Tunnel12:12::5EFE:AC10:6501 12:12::5EFE:AC10:6601




R1 配置 ISATAP 隧道 .注意 , 这些配置与手工隧道和 GRE 隧道的配置类似 . 差别之一是没有指定隧道的目标地

址 .

R1(config)# interface tunnel 12R1(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR1(config-if)# no ip addressR1(config-if)# ipv6 address 12:12::/64 eui-64R1(config-if)# tunnel source loopback 101R1(config-if)# tunnel mode ipv6ip isatapR1(config-if)# exit%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR2(config)# ipv6 route 24::/64 tunnel12 FE80::5EFE:AC10:6601 R2(config)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24





R2 配置 ISATAP 隧道 .

R2(config)# interface tunnel 12R2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to downR2(config-if)# no ip addressR2(config-if)# ipv6 address 12:12::/64 eui-64R2(config-if)# tunnel source loopback 102R2(config-if)# tunnel mode ipv6ip isatapR2(config-if)# exit%LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel12, changed state to upR2(config)# ipv6 route 24::/64 tunnel12 FE80::5EFE:AC10:6501 R2(config)#

S0/1/0 S0/1/0R1 R2

IPv4 RIP

Fa0/0

13:13::1/64

R3

Fa0/0

13:13::3/64 24:24::4/64

R4

Fa0/0

24:24::2/64

Fa0/0

Lo103: 103::1/64 Lo101: 172.16.101.1 Lo102: 172.16.102.1 Lo104: 104::1/64

172.16.12.1/24 172.16.12.2/24



1 通过隧道传输 ipv6 数据流 ccnp route: implementing ip routing

Documents