1. Trang chủ
  2. » Giáo Dục - Đào Tạo

ipv6 hands on lab hritter kho tài liệu bách khoa

180 55 0

Đang tải... (xem toàn văn)

Tài liệu hạn chế xem trước, để xem đầy đủ mời bạn chọn Tải xuống

THÔNG TIN TÀI LIỆU

Thông tin cơ bản

Định dạng
Số trang 180
Dung lượng 2,36 MB

Các công cụ chuyển đổi và chỉnh sửa cho tài liệu này

Nội dung

Prerequisites: Session Abstract This IPv6 basic and advanced lab will provide you an opportunity to configure, troubleshoot, design and implement IPv6 network using IPv6 technologies and

Trang 1

Toronto, Canada

May 30, 2013

IPv6 Hands-on Lab

Faraz Shamim, Technical Leader

Harold Ritter, Technical Leader

Trang 2

Prerequisites: Session Abstract

This IPv6 basic and advanced lab will provide you an opportunity to configure, troubleshoot, design and implement IPv6 network using IPv6 technologies and features such as; IPv6

addressing, IPv6 neighbor discovery, HSRPv6, static routing, OSPFv3, EIGRPv6 and

BGPv6 You will be provided with a scenario made up with an IPv4 network where you will get the opportunity to configure and implement IPv6 based on the requirements and needs

on the network For e.g where would you deploy dual stack, where it make sense to do

tunneling and how to deploy an IPv6 routing protocols without impacting your existing

Network infrastructure

 Familiarity with Cisco IOS

Trang 3

Agenda

 Lab1 : IPv6 Addressing & Stateless Address Auto Configuration (SLAAC)

 Lab2 : IPv6 Neighbor Discovery

 Lab3 : IPv6 Static Routing

Trang 4

Lab Synopsis

 You are a network engineer at ABC Inc You just attended a cool lab session on IPv6 at Cisco Connect in Toronto and you are extremely enthusiastic about deploying IPv6 in your network

 Since this is your first time with IPv6, you want to experiment things at your own before talking to your ISP about IPv6 connectivity Your goal is to make your own network IPv6 ready before talking to your ISP about IPv6

 You are challenged with multiple task during this exercise Each task will be called a Lab

 One thing you learned in the lab session on IPv6 at Cisco Connect Toronto is to go with dual stack as much as possible In the event you can not use dual stack you will use

Trang 5

Lab Topology

Trang 7

Lab 1 IPv6 Unique Local Address

running IPv6 After you have verified that with your vendor, now you are ready

to deploy IPv6 slowly in your Network

routing when you move to IPv6

not run into any issues in Site 1 before you move on with site 2

this purpose

Trang 8

Lab 1 IPv6 Stateless Auto-Configuration (SLAAC)

the IPv6 unique local address on R4 interface facing H1 and see if you get an IPv6 address assigned automatically on H1 from R4 (Refer to Slide 39 for IPv6 addressing example)

the address assignment with /64 mask

Assign this unique local address on R4 using subnetting as shown in the next slide

Ping R4’s link local and Unique local IPv6 address from H1

Trang 9

Lab 1: IPv6 Addressing & SLAAC

Trang 10

R# Configs

R4 R4(config)# ipv6 unicast-routing

R4(config)#interface e0/0 R4(config-if)#ipv6 address fd01:db8:1:41::/64 EUI-64 R4(config-if)#end

H1 H1(config)#interface e0/0

H1(config-if)#ipv6 enable H1(config-if)# ipv6 address autoconfig H1(config-if)#end

Lab 1 IPv6 Unique Local & SLAAC: Configs

Trang 11

R4 H1

R4#sh ipv6 int e0/0

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5400

No Virtual link-local address(es):

Global unicast address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

ND advertised reachable time is 0 (unspecified)

ND advertised retransmit interval is 0 (unspecified)

ND router advertisements are sent every 200 seconds

ND router advertisements live for 1800 seconds

ND advertised default router preference is Medium

Hosts use stateless autoconfig for addresses

H1#sh ipv6 int e0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5700

No Virtual link-local address(es):

Stateless address autoconfig enabled Global unicast address(es): FD01:DB8:1:41:A8BB:CCFF:FE00:5700, subnet is FD01:DB8:1:41::/64 [EUI/CAL/PRE]

valid lifetime 2591861 preferred lifetime 604661 Joined group address(es):

FF02::1 FF02::1:FF00:5700

MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000) Default router is FE80::A8BB:CCFF:FE00:5400 on Ethernet0/0

Lab 1 IPv6 Unique Local & SLAAC: Verification

Trang 12

R# Verification commands

Output Interface: Ethernet0/0

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FE00:5400, timeout is 2 seconds:

Packet sent with a source address of FE80::A8BB:CCFF:FE00:5700%Ethernet0/0

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to FD01:DB8:1:41:A8B8:CCFF:FE00:5400, timeout is 2 seconds:

Trang 13

R4 H1

R4#deb ipv6 nd

ICMP Neighbor Discovery events debugging is on

ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5400

ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5400 to FF02::1 on

Ethernet0/0

ICMPv6-ND: MTU = 1500

ICMPv6-ND: prefix = FD01:DB8:1:41::/64 onlink autoconfig

ICMPv6-ND: 2592000/604800 (valid/preferred)

ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5400

ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5400 to FF02::1 on

ICMPv6-ND: Prefix : FD01:DB8:1:1::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5700 FD01:DB8:1:41:A8BB:CCFF:FE00:5700/64 is existing

ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5400 on Ethernet0/0

ICMPv6-ND: Prefix : FD01:DB8:1:1::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5700 FD01:DB8:1:41:A8BB:CCFF:FE00:5700/64 is existing

H1#

Lab 1 IPv6 SLAAC: Debugs

Trang 14

Lab 1 IPv6 Global Unicast Address

2001:db8:1::/48 from their block

and configured the new global address in site 1 and site 2

EUI-64 bit method for global addressing You want to make sure this is the

method you follow from now on

of 64, for e,g R4 will have ::4 as the last 64 bits

configure two additional IPv6 global addresses on R5 and R6

Assign IPv6 global unicast address on site 1 and site 2 by using subnetting as shown in the next slide

Trang 15

Lab 1b: IPv6 Global Unicast address & SLAAC

Trang 16

R# Configs

R4 R4(config)# ipv6 unicast-routing

R4(config)#interface loop0 R4(config-if)#ipv6 address 2001:db8:1:1::4/128 R4(config)#interface e0/0

R4(config-if)#ipv6 address 2001:db8:1:41::4/64 R4(config-if)#end

R5 R5(config)# ipv6 unicast-routing

R5(config)#interface loop0 R5(config-if)#ipv6 address 2001:db8:1:1::5/128 R5(config)#interface e0/0

R5(config-if)#ipv6 address 2001:db8:1:56::5/64 R5(config-if)#ipv6 address 2001:db8:1:57::5/64 R5(config-if)#ipv6 address 2001:db8:1:58::5/64 R5(config-if)#end

Lab 1 IPv6 Global Unicast address & SLAAC: Configs

Trang 17

R# Configs

R6 R4(config)# ipv6 unicast-routing

R6(config)#interface loop0 R6(config-if)#ipv6 address 2001:db8:1:1::6/128 R6(config)#interface e0/0

R6(config-if)#ipv6 address 2001:db8:1:56::6/64 R6(config-if)#ipv6 address 2001:db8:1:57::6/64 R6(config-if)#ipv6 address 2001:db8:1:58::6/64 R6(config-if)#end

H2 H2(config)#interface e0/0

H2(config-if)#ipv6 enable H2(config-if)# ipv6 address autoconfig

H2(config-if)#end

Lab 1 IPv6 Global Unicast address & SLAAC: Configs

Trang 18

R4 Loopback 0 R4 Ethernet0/0

R4#sh ipv6 int lo 0

Loopback0 is up, line protocol is up

IPv6 is enabled, link-local address is

FE80::A8BB:CCFF:FE00:5900

No Virtual link-local address(es):

Global unicast address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is not supported

ND reachable time is 30000 milliseconds (using 30000)

ND RAs are suppressed (periodic)

Hosts use stateless autoconfig for addresses

R4#

R4#sh ipv6 int e0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5400

No Virtual link-local address(es):

Global unicast address(es):

2001:DB8:1:41::4, subnet is 2001:DB8:1:41::/64 FD01:DB8:1:41:A8BB:CCFF:FE00:5400, subnet is FD01:DB8:1:41::/64 [EUI]

Joined group address(es):

FF02::1 FF02::2 FF02::1:FF00:4 FF02::1:FF00:5400

MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

ND advertised reachable time is 0 (unspecified)

ND advertised retransmit interval is 0 (unspecified)

ND router advertisements are sent every 200 seconds

ND router advertisements live for 1800 seconds

ND advertised default router preference is Medium Hosts use stateless autoconfig for addresses

R4#

Lab 1 IPv6 Global Unicast address: Verification

Trang 19

R5 Loopback 0 R5 Ethernet0/0

R5#sh ipv6 int lo 0

Loopback0 is up, line protocol is up

IPv6 is enabled, link-local address is

FE80::A8BB:CCFF:FE00:5A00

No Virtual link-local address(es):

Global unicast address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is not supported

ND reachable time is 30000 milliseconds (using 30000)

ND RAs are suppressed (periodic)

Hosts use stateless autoconfig for addresses

R5#

R5#sh ipv6 int e0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5A00

No Virtual link-local address(es):

Global unicast address(es):

2001:DB8:1:56::5, subnet is 2001:DB8:1:56::/64 2001:DB8:1:57::5, subnet is 2001:DB8:1:57::/64 2001:DB8:1:58::5, subnet is 2001:DB8:1:58::/64

Joined group address(es):

FF02::1 FF02::2 FF02::1:FF00:5 FF02::1:FF00:5A00

MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

ND advertised reachable time is 0 (unspecified)

ND advertised retransmit interval is 0 (unspecified)

ND router advertisements are sent every 200 seconds

ND router advertisements live for 1800 seconds

ND advertised default router preference is Medium Hosts use stateless autoconfig for addresses

Lab 1 IPv6 Global Unicast address: Verification

Trang 20

R6 Loopback 0 R6 Ethernet0/0

R6#sh ipv6 int lo 0

Loopback0 is up, line protocol is up

IPv6 is enabled, link-local address is

FE80::A8BB:CCFF:FE00:5B00

No Virtual link-local address(es):

Global unicast address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is not supported

ND reachable time is 30000 milliseconds (using 30000)

ND RAs are suppressed (periodic)

Hosts use stateless autoconfig for addresses

R6#

R6#sh ipv6 int e0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5B00

No Virtual link-local address(es):

Global unicast address(es):

2001:DB8:1:56::6, subnet is 2001:DB8:1:56::/64 2001:DB8:1:57::6, subnet is 2001:DB8:1:57::/64 2001:DB8:1:58::6, subnet is 2001:DB8:1:58::/64

Joined group address(es):

FF02::1 FF02::2 FF02::1:FF00:6 FF02::1:FF00:5B00

MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

ND advertised reachable time is 0 (unspecified)

ND advertised retransmit interval is 0 (unspecified)

ND router advertisements are sent every 200 seconds

ND router advertisements live for 1800 seconds

ND advertised default router preference is Medium Hosts use stateless autoconfig for addresses

Lab 1 IPv6 Global Unicast address: Verification

Trang 21

H1 Ethernet0/0 H2 Ethernet0/0

H1#sh ipv6 int e0/0

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5700

No Virtual link-local address(es):

Stateless address autoconfig enabled

Global unicast address(es):

valid lifetime 2591845 preferred lifetime 604645

Joined group address(es):

FF02::1

FF02::1:FF00:5700

MTU is 1500 bytes

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

Default router is FE80::A8BB:CCFF:FE00:5400 on Ethernet0/0

H1#

H2#sh ipv6 int e0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5D00

No Virtual link-local address(es):

Stateless address autoconfig enabled Global unicast address(es):

2001:DB8:1:56:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:56::/64 [EUI/CAL/PRE]

valid lifetime 2591989 preferred lifetime 604789 2001:DB8:1:57:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:57::/64 [EUI/CAL/PRE]

valid lifetime 2591989 preferred lifetime 604789 2001:DB8:1:58:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:58::/64 [EUI/CAL/PRE]

valid lifetime 2591989 preferred lifetime 604789 Joined group address(es):

FF02::1 FF02::1:FF00:5D00

MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000) Default router is FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0 H2#

Lab 1 IPv6 SLAAC: Verification

Trang 22

R# Verification commands

H2 H2#ping 2001:db8:1:56::5

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::5, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/14 ms

H2#ping 2001:db8:1:57::5

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:57::5, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/4/21 ms

H2#ping 2001:db8:1:58::5

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:58::5, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/4/19 ms

H2#ping 2001:db8:1:56::6

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/17 ms

H2#ping 2001:db8:1:57::6

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:57::6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/17 ms

H2#ping 2001:db8:1:58::6

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:58::6, timeout is 2 seconds:

Trang 23

R# Verification commands

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:41::4, timeout is 2 seconds:

Trang 24

R5 & R6

R5#deb ipv6 nd

ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5A00

ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5A00 to FF02::1 on

ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5B00 on Ethernet0/0

ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf

ICMPv6-ND: MTU = 1500 ICMPv6-ND: prefix = 2001:DB8:1:56::/64 onlink autoconfig

ICMPv6-ND: 2592000/604800 (valid/preferred) ICMPv6-ND: prefix = 2001:DB8:1:57::/64 onlink autoconfig

ICMPv6-ND: 2592000/604800 (valid/preferred) ICMPv6-ND: prefix = 2001:DB8:1:58::/64 onlink autoconfig

ICMPv6-ND: 2592000/604800 (valid/preferred)

R6#

ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0 ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: Prefix : 2001:DB8:1:57::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: Prefix : 2001:DB8:1:58::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

H2#

Lab 1 IPv6 SLAAC: Debugs

Trang 25

H2 & H1

H2#deb ipv6 nd

ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5B00 on Ethernet0/0

ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:56::/64 eui-64, 2001:DB8:1:56:A8BB:CCFF:FE00:5D00 2001:DB8:1:56:A8BB:CCFF:FE00:5D00/64 is existing

ICMPv6-ND: Prefix : 2001:DB8:1:57::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:57::/64 eui-64, 2001:DB8:1:57:A8BB:CCFF:FE00:5D00 2001:DB8:1:57:A8BB:CCFF:FE00:5D00/64 is existing

H2#

ICMPv6-ND: Prefix : 2001:DB8:1:58::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:58::/64 eui-64, 2001:DB8:1:58:A8BB:CCFF:FE00:5D00 2001:DB8:1:58:A8BB:CCFF:FE00:5D00/64 is existing

H2#

H1#deb ipv6 nd

ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5900 on Ethernet0/0

ICMPv6-ND: Prefix : 2001:DB8:1:41::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:41::/64 eui-64, 2001:DB8:1:41:A8BB:CCFF:FE00:5C00 2001:DB8:1:41:A8BB:CCFF:FE00:5C00/64 is existing

ICMPv6-ND: Prefix : FD01:DB8:1:41::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5C00 FD01:DB8:1:41:A8BB:CCFF:FE00:5C00/64 is existing

H1#

Lab 1 IPv6 SLAAC: Debugs

Trang 26

Lab 2 : IPv6 Neighbor

Discovery

Trang 27

Lab 2 Neighbor Discovery: RS & RA

play with some of the key elements of Neighbor discovery

debugs and enable autoconfigs again to see the RA/RS

Turn on debug ipv6 nd on R4 and H1

Trang 28

H1(config-if)# ipv6 enable

H1(config-if)# ipv6 address autoconfig H1(config-if)#end

Lab 2 IPv6 Neighbor discovery: Configs

Trang 29

R4

R4#sh ipv6 int e0/0

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5900

No Virtual link-local address(es):

Global unicast address(es):

2001:DB8:1:41::4, subnet is 2001:DB8:1:41::/64

FD01:DB8:1:41:A8BB:CCFF:FE00:5900, subnet is FD01:DB8:1:41::/64 [EUI]

Joined group address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds (using 30000)

ND advertised reachable time is 0 (unspecified)

ND advertised retransmit interval is 0 (unspecified)

ND router advertisements are sent every 30 seconds

ND router advertisements live for 1800 seconds

ND advertised default router preference is Medium

Hosts use stateless autoconfig for addresses

R4#

Lab 2 IPv6 Neighbor discovery: Verification

Trang 30

H1

H1(config-if)#ipv6 enable

*Jan 30 21:25:07.269: ICMPv6-ND: ND Module startup

*Jan 30 21:25:07.270: ICMPv6-ND: Initialise OL prefix database

*Jan 30 21:25:07.270: ICMPv6-ND: IPv6 Opr Enabled on Null0

*Jan 30 21:25:07.270: ICMPv6-ND: Allocate ND subblock on Null0 [1]

*Jan 30 21:25:07.271: ICMPv6-ND: L2 came up on Null0

*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD request for FE80::1 on Null0

*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD: FE80::1 is unique

*Jan 30 21:25:07.271: ICMPv6-ND: L3 came up on Null0

*Jan 30 21:25:07.271: ICMPv6-ND: Linklocal FE80::1 on Null0, Up

*Jan 30 21:25:07.271: ICMPv6-ND: IPv6 Opr Enabled on Ethernet0/0

*Jan 30 21:25:07.271: ICMPv6-ND: Allocate ND subblock on Ethernet0/0 [2]

*Jan 30 21:25:07.271: ICMPv6-ND: L2 came up on Ethernet0/0

*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD request for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0

*Jan 30 21:25:07.272: ICMPv6-ND: Sending NS for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0

*Jan 30 21:25:08.272: IPv6-Addrmgr-ND: DAD: FE80::A8BB:CCFF:FE00:5C00 is unique

*Jan 30 21:25:08.272: ICMPv6-ND: Sending NA for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0

*Jan 30 21:25:08.272: ICMPv6-ND: L3 came up on Ethernet0/0

*Jan 30 21:25:08.272: ICMPv6-ND: Linklocal FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0, Up

H1(config-if)#ipv6 address autoconfig

*Jan 30 21:25:20.231: ICMPv6-ND: Sending RS on Ethernet0/0

*Jan 30 21:25:20.251: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5900 on Ethernet0/0

Lab 2 IPv6 Neighbor discovery: Debugs

Trang 31

Lab 2 Neighbor Discovery: DAD, NS & NA

IPv6 neighbor discovery debug on R5 & R6

Assign a new address 2001:db8:1:59::5/64 on both R5 and R6 Ethernet

interface

The debug will show the algorithm performed for DAD procedure This DAD is the first thing that occurs when any IPv6 address is assigned on an interface

After testing the DAD procedure, remove the IPv6 address of

2001:db8:1:59::5/64 from R5 & R6 Ethernet

Ping R6’s Ethernet address of 2001:db8:1:56::6 from R5 to see how NS and NA takes place between them

Trang 33

R4

R6#sh ipv6 int

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5B00

No Virtual link-local address(es):

Global unicast address(es):

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

Trang 34

R6

R6(config-if)#ipv6 address 2001:db8:1:59::5/64

*Jan 30 21:42:17.678: IPv6-Addrmgr-ND: Received prefix PI-flag change notification: prefix 2001:DB8:1:59::/64 onlink (was not-onlink)

*Jan 30 21:42:17.678: IPv6-Addrmgr-ND: DAD request for 2001:DB8:1:59::5 on Ethernet0/0

*Jan 30 21:42:17.679: ICMPv6-ND: Sending NS for 2001:DB8:1:59::5 on Ethernet0/0

*Jan 30 21:42:18.684: IPv6-Addrmgr-ND: DAD: 2001:DB8:1:59::5 is unique

*Jan 30 21:42:18.684: ICMPv6-ND: Sending NA for 2001:DB8:1:59::5 on Ethernet0/0

*Jan 30 21:43:11.922: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0

R5(config-if)#ipv6 address 2001:db8:1:59::5/64

*Jan 30 21:48:57.826: ICMPv6-ND: 2592000/604800 (valid/preferred)

*Jan 30 21:49:39.078: IPv6-Addrmgr-ND: Received prefix PI-flag change notification: prefix 2001:DB8:1:59::/64 onlink (was not-onlink)

*Jan 30 21:49:39.078: IPv6-Addrmgr-ND: DAD request for 2001:DB8:1:59::5 on Ethernet0/0

*Jan 30 21:49:39.079: ICMPv6-ND: Sending NS for 2001:DB8:1:59::5 on Ethernet0/0

*Jan 30 21:49:39.094: ICMPv6-ND: Received NA for 2001:DB8:1:59::5 on Ethernet0/0 from 2001:DB8:1:59::5

*Jan 30 21:49:39.095: %IPV6_ND-4-DUPLICATE: Duplicate address 2001:DB8:1:59::5 on Ethernet0/0

Lab 2 IPv6 Neighbor discovery: Debugs

Trang 35

R# Configs

R5 R5(config)#int e0/0

R5(config-if)# no ipv6 address 2001:db8:1:59::5/64

R6 R6(config)#int e0/0

R6(config-if)# no ipv6 address 2001:db8:1:59::5/64

Lab 2 IPv6 Neighbor discovery: Configs

Trang 36

R5

R5#ping 2001:db8:1:56::6

Type escape sequence to abort

Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/1/5 ms

R5#

*Jan 30 22:15:24.668: ICMPv6-ND: DELETE -> INCMP: 2001:DB8:1:56::6

*Jan 30 22:15:24.668: ICMPv6-ND: Sending NS for 2001:DB8:1:56::6 on Ethernet0/0

*Jan 30 22:15:24.669: ICMPv6-ND: Resolving next hop 2001:DB8:1:56::6 on interface Ethernet0/0

*Jan 30 22:15:24.673: ICMPv6-ND: Received NA for 2001:DB8:1:56::6 on Ethernet0/0 from 2001:DB8:1:56::6

*Jan 30 22:15:24.673: ICMPv6-ND: Neighbour 2001:DB8:1:56::6 on Ethernet0/0 : LLA aabb.cc00.5b00

*Jan 30 22:15:24.673: ICMPv6-ND: INCMP -> REACH: 2001:DB8:1:56::6

R5#

*Jan 30 22:15:29.722: ICMPv6-ND: Received NS for 2001:DB8:1:56::5 on Ethernet0/0 from FE80::A8BB:CCFF:FE00:5B00

*Jan 30 22:15:29.722: ICMPv6-ND: Sending NA for 2001:DB8:1:56::5 on Ethernet0/0

*Jan 30 22:15:29.723: ICMPv6-ND: STALE -> DELAY: FE80::A8BB:CCFF:FE00:5B00

Lab 2 IPv6 Neighbor discovery: Debugs

Trang 37

Lab 2 Neighbor Discovery: Renumbering

 To test the renumbering behavior of IPv6, you want to change the IPv6 address on R5 & R6 to 2001:db8:1: 8 8::/64 from 2001:db8:1: 5 8::/64

 First you configure the new IPv6 address of 2001:db8:1: 8 8::/64 on both R5 & R6 Ethernet interface

 You also want to set the RA interval to 40 seconds

 To deprecate the old address you want to configure preferred lifetime of 2001:db8:1: 5 8::/64

to 0 and valid lifetime to 50 on both R5 & R6 (Note, may have to shut no shut E0/0 on H2

to rewrite the old valid & prefer lifetime)

 You noticed that the old prefix of 2001:db8:1: 5 8::/64 is showing as deprecated on H2 Note

DEP may or may not show up during show command

 To get rid of the address completely, you configure the valid lifetime of 2001:db8:1: 5 8::/64

to 0 on both R5 & R6

 You noticed on H2 that the old prefix 2001:db8:1: 5 8::/64 disappeared from the cache

To clean up the configs, remove the old IPv6 prefix of 2001:db8:1: 5 8::/64 as well as I Pv6

nd prefix command from the Ethernet interfaces of both R5 and R6

Trang 38

R# Configs

R5 R5(config)#interface e0/0

R5(config-if)# ipv6 nd ra interval 40

R5(config-if)# ipv6 address 2001:db8:1:88::5/64

R5(config-if)# ipv6 nd prefix 2001:db8:1:58::/64 50 0

R5(config-if)#end R6 R6(config)#interface e0/0

R6(config-if)# ipv6 nd ra interval 40

R6(config-if)# ipv6 address 2001:db8:1:88::6/64

R6(config-if)# ipv6 nd prefix 2001:db8:1:58::/64 50 0

R6(config-if)#end

Lab 2 IPv6 Neighbor discovery: Configs

Trang 39

H2

H2#sh ipv6 int e0/0

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5D00

No Virtual link-local address(es):

Stateless address autoconfig enabled

Global unicast address(es):

2001:DB8:1:56:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:56::/64 [EUI/CAL/PRE]

valid lifetime 2591994 preferred lifetime 604794

2001:DB8:1:57:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:57::/64 [EUI/CAL/PRE]

valid lifetime 2591994 preferred lifetime 604794

2001:DB8:1:58:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:58::/64 [EUI/CAL]

valid lifetime 47 preferred lifetime 0

2001:DB8:1:88:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:88::/64 [EUI/CAL/PRE]

valid lifetime 2591994 preferred lifetime 604794

Joined group address(es):

FF02::1

FF02::1:FF00:5D00

MTU is 1500 bytes

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ICMP unreachables are sent

Lab 2 IPv6 Neighbor discovery: Verification

Trang 40

H2

H2#deb ipv6 nd

*Jan 31 04:26:01.476: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0

*Jan 31 04:26:01.476: ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

*Jan 31 04:26:01.476: ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:56::/64 eui-64, 2001:DB8:1:56:A8BB:CCFF:FE00:5D00 2001:DB8:1:56:A8BB:CCFF:FE00:5D00/64 is existing

*Jan 31 04:26:01.476: ICMPv6-ND: Prefix : 2001:DB8:1:57::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

*Jan 31 04:26:01.476: ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:57::/64 eui-64, 2001:DB8:1:57:A8BB:CCFF:FE00:5D00 2001:DB8:1:57:A8BB:CCFF:FE00:5D00/64 is existing

*Jan 31 04:26:01.476: ICMPv6-ND: Prefix : 2001:DB8:1:58::, Length: 64, Vld Lifetime: 50, Prf Lifetime: 0, PI Flags: C0

*Jan 31 04:26:01.476: ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:58::/64 eui-64, 2001:DB8:1:58:A8BB:CCFF:FE00:5D00 2001:DB8:1:58:A8BB:CCFF:FE00:5D00/64 is existing

*Jan 31 04:26:01.476: ICMPv6-ND: Prefix : 2001:DB8:1:88::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0

*Jan 31 04:26:01.476: ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:88::/64 eui-64, 2001:DB8:1:88:A8BB:CCFF:FE00:5D00 2001:DB8:1:88:A8BB:CCFF:FE00:5D00/64 is existing

Lab 2 IPv6 Neighbor discovery: Debugs

Ngày đăng: 08/11/2019, 20:55

TỪ KHÓA LIÊN QUAN

🧩 Sản phẩm bạn có thể quan tâm