Cisco IOS Cookbook 中文精简版第二十五章 IPv6

25.1. 自动配置接口IPv6 地址

e="">提问 在接口启用IPv6，自动生成IPv6地址

回答

一种是使用autoconfig方式

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address autoconfig

Router1(config-if)#end

Router1#

一种是使用EUI-64方式 来生成IPv6 地址的主机部分，然后组合已定义的网络部分

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA::/64 eui-64

Router1(config-if)#end

Router1#

注释 ipv6 unicast-routing命令是用来启动路由协议，尽管不用该命令你一样可以配置v6地址，也可以使用v6的Ping等命令，甚至配置静态路由来联通网络，但是还是建议配置此命令。对于autoconfig方式一是会自动生成前缀为FE80::/10的linklocal地址另外会查询DHCP来获得地址。对于EUI方式会根据MAC地址来生成前缀为AAAA::/64Global Unicast地址

25.2. 手动配置接口IPv6 地址

提问 手动给接口配置IPv6地址

回答

配置Unicast地址:

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA::1/64

Router1(config-if)#exit

Router1(config)#end

Router1#

配置Anycast地址

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAFF::1/64 anycast

Router1(config-if)#exit

Router1(config)#end

Router1#

配置 link-local地址

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address FE80::1 link-local

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 配置了unicast地址会自动根据EUI方式生成Linklocal地址。Anycast在root dns遭受攻击中发挥了很大作用，看一个命令输出

Router1#show ipv6 interface FastEthernet0/0

FastEthernet0/0 is up, line protocol is up

 IPv6 is enabled, link-local address is FE80::20E:84FF:FE24:4E70

 Global unicast address(es):

 Joined group address(es):

 MTU is 1500 bytes

 ICMP error messages limited to one every 100 milliseconds

 ICMP redirects are enabled

 ND DAD is enabled, number of DAD attempts: 1

 ND reachable time is 30000 milliseconds

 ND advertised reachable time is 0 milliseconds

 ND advertised retransmit interval is 0 milliseconds

 ND router advertisements are sent every 200 seconds

 ND router advertisements live for 1800 seconds

 Hosts use stateless autoconfig for addresses.

Router1#

25.3. 配置IPv6 DHCP服务

提问 在路由器上启用DHCP服务器特性来提供IPv6地址

回答

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 dhcp database flash:/DHCPv6-db

Router1(config)#ipv6 local pool VLAN10-pool AAAA:1::/48 64

Router1(config)#ipv6 local pool VLAN11-pool AAAA:11::/48 64

Router1(config)#ipv6 dhcp pool DHCPv6POOL

Router1(config-dhcp)#prefix-delegation AAAA:1::23F6:33BA/64 00030001000E84244E70

Router1(config-dhcp)#prefix-delegation pool VLAN10-pool

Router1(config-dhcp)#dns-server AAAA:1::19

Router1(config-dhcp)#domain-name oreilly.com

Router1(config-dhcp)#exit

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA:1::1/64

Router1(config-if)#ipv6 address FE80::1 link-local

Router1(config-if)#ipv6 nd managed-config-flag

Router1(config-if)#ipv6 nd other-config-flag

Router1(config-if)#ipv6 dhcp server DHCPv6POOL rapid-commit preference 1 allow-hint

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 此特性仅限于高端路由器

Router1#show ipv6 dhcp pool DHCPv6POOL

DHCPv6 pool: DHCPv6POOL

 Static bindings:

 Prefix pool: VLAN10-pool

 DNS server: AAAA:1::19

 Domain name: oreilly.com

 Active clients: 0

Router1#

25.4. 配置RIP的IPv6版本

提问 配置支持IPv6路由的RIP

回答

Router1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router1(config)#ipv6 unicast-routing

Router1(config)#ipv6 router rip RIP_PROC

Router1(config-rtr)#exit

Router1(config)#interface FastEthernet0/0

Router1(config-if)#ipv6 address AAAA:5:1/64

Router1(config-if)#ipv6 rip RIP_PROC enable

Router1(config-if)#exit

Router1(config)#interface Serial0/0

Router1(config-if)#ipv6 address AAAA:1:2/64

Router1(config-if)#ipv6 rip RIP_PROC enable

Router1(config-if)#frame-relay map ipv6 AAAA:1:3 206 broadcast

Router1(config-if)#exit

Router1(config)#end

Router1#

注释 ipv6版本的RIP区别在于不需要配置network命令，在路由表中看到的下一跳地址都是linklocal地址：

Router1#show ipv6 route rip

IPv6 Routing Table - 9 entries

Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

R   AAAA:2::/64 [120/2]

R   AAAA:95::/64 [120/2]

R   AAAA:99::/64 [120/2]

Router1#

还有一个比较好用的命令

Router1#show ipv6 rip next-hops

RIP process "RIP_PROC", Next Hops

 FE80::2E0:1EFF:FE7F:9E41/FastEthernet0/0 [2 paths]

 FE80::20E:D7FF:FED6:1060/FastEthernet0/0 [7 paths]

 FE80::200:CFF:FE75:C684/FastEthernet0/0 [2 paths]

 FE80::2E0:1EFF:FE7F:9E41/Serial0/0 [2 paths]

Router1#

---

  <欢迎投稿>  <论坛讨论>