25.1. 自动配置接口IPv6 地址
e="FONT-FAMILY: 宋体">提问 在接口启用IPv6,自动生成IPv6地址
回答
一种是使用autoconfig方式
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address autoconfig
Router1(config-if)#end
Router1#
一种是使用EUI-64方式 来生成IPv6 地址的主机部分,然后组合已定义的网络部分
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address AAAA::/64 eui-64
Router1(config-if)#end
Router1#
注释 ipv6 unicast-routing命令是用来启动路由协议,尽管不用该命令你一样可以配置v6地址,也可以使用v6的Ping等命令,甚至配置静态路由来联通网络,但是还是建议配置此命令。对于autoconfig方式一是会自动生成前缀为FE80::/10的linklocal地址另外会查询DHCP来获得地址。对于EUI方式会根据MAC地址来生成前缀为AAAA::/64Global Unicast地址
25.2. 手动配置接口IPv6 地址
提问 手动给接口配置IPv6地址
回答
配置Unicast地址:
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address AAAA::1/64
Router1(config-if)#exit
Router1(config)#end
Router1#
配置Anycast地址
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address AAFF::1/64 anycast
Router1(config-if)#exit
Router1(config)#end
Router1#
配置 link-local地址
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address FE80::1 link-local
Router1(config-if)#exit
Router1(config)#end
Router1#
注释 配置了unicast地址会自动根据EUI方式生成Linklocal地址。Anycast在root dns遭受攻击中发挥了很大作用,看一个命令输出
Router1#show ipv6 interface FastEthernet0/0
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::20E:84FF:FE24:4E70
Global unicast address(es):
AAAA::1, subnet is AAAA::/64
AAFF::1, subnet is AAFF::/64 [ANY]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
FF02::1:FF24:4E70
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
Hosts use stateless autoconfig for addresses.
Router1#
25.3. 配置IPv6 DHCP服务
提问 在路由器上启用DHCP服务器特性来提供IPv6地址
回答
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 dhcp database flash:/DHCPv6-db
Router1(config)#ipv6 local pool VLAN10-pool AAAA:1::/48 64
Router1(config)#ipv6 local pool VLAN11-pool AAAA:11::/48 64
Router1(config)#ipv6 dhcp pool DHCPv6POOL
Router1(config-dhcp)#prefix-delegation AAAA:1::23F6:33BA/64 00030001000E84244E70
Router1(config-dhcp)#prefix-delegation pool VLAN10-pool
Router1(config-dhcp)#dns-server AAAA:1::19
Router1(config-dhcp)#domain-name oreilly.com
Router1(config-dhcp)#exit
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address AAAA:1::1/64
Router1(config-if)#ipv6 address FE80::1 link-local
Router1(config-if)#ipv6 nd managed-config-flag
Router1(config-if)#ipv6 nd other-config-flag
Router1(config-if)#ipv6 dhcp server DHCPv6POOL rapid-commit preference 1 allow-hint
Router1(config-if)#exit
Router1(config)#end
Router1#
注释 此特性仅限于高端路由器
Router1#show ipv6 dhcp pool DHCPv6POOL
DHCPv6 pool: DHCPv6POOL
Static bindings:
Binding for client 00030001000E84244E70
IA PD: IA ID not specified
Prefix: AAAA:1::23F6:33BA/64
preferred lifetime 604800, valid lifetime 2592000
Prefix pool: VLAN10-pool
preferred lifetime 604800, valid lifetime 2592000
DNS server: AAAA:1::19
Domain name: oreilly.com
Active clients: 0
Router1#
25.4. 配置RIP的IPv6版本
提问 配置支持IPv6路由的RIP
回答
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ipv6 unicast-routing
Router1(config)#ipv6 router rip RIP_PROC
Router1(config-rtr)#exit
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ipv6 address AAAA:5:1/64
Router1(config-if)#ipv6 rip RIP_PROC enable
Router1(config-if)#exit
Router1(config)#interface Serial0/0
Router1(config-if)#ipv6 address AAAA:1:2/64
Router1(config-if)#ipv6 rip RIP_PROC enable
Router1(config-if)#frame-relay map ipv6 AAAA:1:3 206 broadcast
Router1(config-if)#exit
Router1(config)#end
Router1#
注释 ipv6版本的RIP区别在于不需要配置network命令,在路由表中看到的下一跳地址都是linklocal地址:
Router1#show ipv6 route rip
IPv6 Routing Table - 9 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
R AAAA:2::/64 [120/2]
via FE80::2E0:1EFF:FE7F:9E41, FastEthernet0/0
R AAAA:95::/64 [120/2]
via FE80::2E0:1EFF:FE7F:9E41, FastEthernet0/0
R AAAA:99::/64 [120/2]
via FE80::20E:D7FF:FED6:1060, FastEthernet0/0
Router1#
还有一个比较好用的命令
Router1#show ipv6 rip next-hops
RIP process "RIP_PROC", Next Hops
FE80::2E0:1EFF:FE7F:9E41/FastEthernet0/0 [2 paths]
FE80::20E:D7FF:FED6:1060/FastEthernet0/0 [7 paths]
FE80::200:CFF:FE75:C684/FastEthernet0/0 [2 paths]
FE80::2E0:1EFF:FE7F:9E41/Serial0/0 [2 paths]
Router1#
转载地址:http://www.net130.com/MS/Pub/Tech/tech_zh/2007_04_01_87009.htm