cisco ipv6 labs.pdf

1© 2004 Cisco Systems, Inc. All rights reserved.IPv6 Lab

IPv6 Lab

Therdtoon Theerasasana - [email protected]

Udom Limmeechokchai – [email protected]

Cisco Systems (Thailand) Ltd.Cisco Systems (Thailand) Ltd.

Version 2

Last Update : 19-May-2005


Agenda

• Lab1 : IPv6 Addressing

• Lab2 : IPv6 Neighbor Discovery

• Lab3 : IPv6 Static Routing

• Lab5 : IPv6 RIPng

• Lab4 : IPv6 Traffic Filter

• Lab6 : IPv6 OSPFv3

• Lab7 : IPv6 BGP

• Lab8 : IPv6 Tunneling


Network Diagram – IPv6 Lab

Ethernet1/0

R1

Ethernet1/0 Ethernet1/0 Ethernet1/0 Ethernet1/0

Ethernet1/0 Ethernet1/0 Ethernet1/0 Ethernet1/0 Ethernet1/0

R2 R3 R4 R5

R6 R7 R8 R9 R10

PC1 PC2 PC3 PC4 PC5

PC6 PC7 PC8 PC9 PC10



Admin


How to access to ALL routers and PCs

• Telnet to a host 64.104.66.147 with TCP port number 100xx,where xx is a router No.

• For example, to access router R5

Telnet 64.104.66.147 10015

• Telnet to a host 64.104.66.147 with TCP port number 1000x,where x is a PC No.

• For example, to access PC PC3

Telnet 64.104.66.147 10003

• Note : If there are more then one group, TCP port will be<group>001x


ALL routers’ and PCs’ BASIC configuration

5555© 2004 Cisco Systems Inc All rights rerr servrr edPv6 Lab

hostname Rx (or PCx)

!

no ip domain-lookup

!

line con 0

no login

exec-timeout 0 0

privilege level 15


Lab 1 : Configuring IPv6 Interfaces (1)

Task : Configuring the IPv6 Ethernet Interface

• On Router, go to configure mode

#configure terminal

• Enable IPv6 Unicast Routing on the router

(config)#ipv6 unicast-routing

• Go to configure the workgroup Ethernet0/0 interface

(config)#interface ethernet0/0

• Enable IPv6 on the interface

(config-if)#ipv6 enable

(config-if)#no shutdown

• Quit the configure mode

(config-if)#end

• Verify that the Ethernet interface is configured

#show ipv6 interface ethernet0/0

• Identify the type of addresses that are configured



Task : Finding the Link-Local Address of a PC

• On PC, go to configure mode

#configure terminal

• Go to configure the PC Ethernet0/0 interface


• Enable IPv6 on the interface

(config-if)#ipv6 enable

(config-if)#ipv6 address autoconfig

(config-if)#no shutdown

• Quit the configure mode

(config-if)#end

• Verify that the Ethernet interface is configured




Task : Verifying IPv6 Link-Local Connectivity

• On the Router, enable console debugging of ICMPand Neighbor Discovery (ND) IPv6 packets

#debug ipv6 icmp

#debug ipv6 nd

• On the Router, ping the local Ethernet interface ofPC specifying the link local address in the pingcommand destination address

#ping fe80::<link local address of PC>

#ping ipv6 fe80::<link local address of PC>

• On the Router, verify the list of IPv6 neighbors

#show ipv6 neighbors



Task : Configuring a Static IPv6 Address with EUI-64

• On the Router, configure a global IPv6 address onthis interface using the /64 prefix of your subnetand the EUI-64 format (see Table1 for your prefix)

#configure terminal


(config-if)#ipv6 address 3ffe:b00:ffff:<group>::/64 eui-64

(config)#end

• Verify the configuration

• On the Router, disable all console debugging

#undebug all



3ffe:b00:ffff:9::/64Workgroup Setup #9

3ffe:b00:ffff:A::/64Workgroup Setup #10









3ffe:b00:ffff:0::/64Backbone (0)

Subnet PrefixWorkgroup Setup Number

Table 1 : Assigned Subnet Prefixes for Global Addresses


Lab 2 : Using Neighbor Discovery (1)

Task: Configuring Router Advertisements for Global Addresses

• Look at the configuration of PC and determine if it has received a global addressalready ?


• Enable the debugging mode for IPv6 Neighbor Discovery (ND)

#debug ipv6 nd

• Go to configuration mode and then to the Ethernet0/0 interface submode

#configure terminal


• Enable RAs by using the ND command with the subnet prefix assigned to your LAN(see Table2). Because infinite lifetime is not desired, use 5 minutes (300 seconds)for lifetime (both preferred and valid)

(config-if)#ipv6 nd prefix 3ffe:b00:ffff:<group>::/64 300 300

• Verify that your PC now has an IPv6 address that was automatically configured withthis subnet prefix. Note that the previously configured link-local address is stillpresent and valid.


• Verify connectivity using the ping command on the Router to the PC using the newassigned address of the PC as the ping destination

#ping <global address of PC>




3ffe:b00:ffff:A::/64Workgroup Setup #10











Table 2 : Assigned Subnet Prefixes for Global Addresses



Task: Configuring Router Advertisements for Site-Local Addresses

• Configure the site-local address of the workgroup Ethernet0/0interface by using the subnet prefix assigned to your LAN for site-local addresses (see Table 3). Use EUI-64 format.

#configure terminal


(config-if)#ipv6 address fec0:0:0:<group>::/64 eui-64

• Enable RAs by using the ND command with subnet prefix assignedto your LAN for site-local addresses (see Table 3). Use 5 minutes(300 seconds) for the lifetime.

(config-if)# ipv6 nd prefix fec0:0:0:<group>::/64 300 300

• Verify that your PC now has an IPv6 address configured with thissubnet prefix.


• Verify connectivity to your PC using the ping command on theRouter to the PC using the new assigned address of the PC as theping destination address

#ping <site-local address of PC>



fec0:0:0:9::/64Workgroup Setup #9

fec0:0:0:A::/64Workgroup Setup #10










Table 3 : Assigned Subnet Prefixes for Site Local Addresses



Task: Configuring a Site-Local network

• Configure the site-local address of the backboneEthernet1/0 interface by using the subnet prefixassigned to the backbone. Use your setup numberfor the host part. (see Table 4 for assignment)

#configure terminal


(config-if)#ipv6 address fec0::<group>/64

• Verify the connectivity by a ping to one of the otherworkgroup routers

#ping <site-local address of another workgroup router>



fec0::9/64Workgroup Setup #9

fec0::A/64Workgroup Setup #10









Site-Local Address for E1/0Workgroup Setup Number

Table 4 : Assigned Site Local Addresses for Backbone Ethernet1/0



Task: Renumbering the Local network

• Configure the new address of workgroup Ethernet0/0 interfaceby using the new global subnet prefix assigned to your LAN (seeTable 5). Use EUI-64 format.

#configure terminal


(config-if)#ipv6 address 3ffe:b00:ffff:100<group>::/64 eui-64

• Enable RAs by using the ND command with the new subnetprefix assigned to your LAN (see Table 5). Use 5 minutes (300seconds) for the lifetime.

(config-if)# ipv6 nd prefix 3ffe:b00:ffff:100<group>::/64 300 300

• Verify that your PC has the new address with the new prefix





3ffe:b00:ffff:100A::/64Workgroup Setup #10










NEW Subnet PrefixWorkgroup Setup Number

Table 5 : NEW Assigned Subnet Prefixes



• Modify the Neighbor Advertisement (NAs) for the3ffe:b00:ffff:<subnet> (the old one) by making the preferredlifetime equal to zero.

#configure terminal


(config-if)# NO ipv6 nd prefix 3ffe:b00:ffff:<group>::/64 300 300

(config-if)# ipv6 nd prefix 3ffe:b00:ffff:<group>::/64 300 0

• Verify that your PC now deprecates the use of the “old” addressprefix and prefers the “new” one.


• Verify the connectivity to the PC by using the ping command onthe router to PC using the new assigned address of PC.

#ping <new global address of PC>


Lab 3 : Static Routing (1)

Task : Configuring IPv6 Static Routing

• Configure a static default route on the router to R10

(config)#ipv6 route ::/0 <R10 IPv6 Address>

• Configure a static route for 3ffe.c00.fff::/64 to R10

(config)#ipv6 route 3ffe:c00:ffff::/64 <R10 IPv6 Address>

• Verify the routing table

#show ipv6 route

• Verify IPv6 connectivity using the ping command onRouter, ping to R10-Loopback Address

#ping 3ffe:c00:ffff::1

#ping 3ffe:d00:ffff::1


Lab 4 : Routing with RIP (1)

Task : Configuring RIP

• Enable the debugging mode for IPv6 Routing and IPv6 RIP

#debug ipv6 routing

#debug ipv6 rip

• Configure a RIP process on the router with table name

(config)#ipv6 router rip lab4

• Enable RIP on each Ethernet interface, using the same table name


(config-if)#ipv6 rip lab4 enable

(config-if)#interface ethernet1/0

(config-if)#ipv6 rip lab4 enable

• Verify that the routing table is updated by entries coming from the otherworkgroup routers

#show ipv6 route

• Verify IPv6 connectivity using the ping command on PC. Use the globalIPv6 address of a PC in another workgroup as the destination addressof the ping command

#ping <global address of PC on another workgroup>


Lab 5 : IPv6 Traffic Filter

Task : Configuring IPv6 Traffic Filter

• Configure an access-list to block IPv6 Site-local sourceaddresses

(config)#ipv6 access-list lab5

(config-ipv6-acl)#deny ipv6 FEC0:0:0:<group>::/64 any

(config-ipv6-acl)#permit ipv6 any any

• Apply an IPv6 traffic filter to the outgoing interface Ethernet1/0


(config-if)#ipv6 traffic-filter lab5 out

• Verify IPv6 Access-list

#show ipv6 access-list


• Verify IPv6 connectivity using the ping command on PC. Use theSite-local IPv6 address of a PC in another workgroup as thedestination address of the ping command

#ping <site-local address of PC on another workgroup>


Lab 6 : Routing with OSPFv3

Task : Configuring OSPFv3

• Enable the debugging mode for IPv6 Routing and IPv6 OSPFv3

#debug ipv6 routing

#debug ipv6 ospf event

• Configure an OSPFv3 process 1 on the router with Router-ID from Table7

(config)#ipv6 router ospf 1

(config-rtr)#router-id 192.168.30.xxx

• Enable OSPFv3 on each Ethernet1/0 - Area 0, Ethernet0/0 - Area = <Group>


(config-if)#ipv6 ospf 1 area <group>

(config-if)#interface ethernet1/0

(config-if)#ipv6 ospf 1 area 0

• Verify that the routing table is updated by entries coming from the other workgroup routers,OSPFv3 Neighbor, OSPFv3 database

#show ipv6 route

#show ipv6 ospf neighbor

#show ipv6 ospf database

• Verify IPv6 connectivity using the ping command on PC. Use the global IPv6 address of a PCin another workgroup as the destination address of the ping command

#ping <global address of PC on another workgroup>


Lab 7 : Routing with BGP (1)

Task : Configuring BGP

• Ask your peer, which is another workgroup (Workgroup 10 -Admin), about its router address and autonomous system (AS)number. (See Table 6 for your own AS number)

• Enable the debugging of BGP,

#debug bgp ipv6

• Define your router as a BGP router with your AS number

(config)#router bgp <your AS number>

• Because IPv4 has not been configured yet and BGP protocoluses the IPv4 address as an identifier, a special command toidentify the router-id is needed. The router-id to use is IPv4address of your router that will be used in the next lab. UseTable 7 to find your router-id. Then identify router BGP router-id.

(config-router)#bgp router-id <your router-id>

• Deactivate the IPv4 default peering

(config-router)#no bgp default ipv4-unicast



65009Workgroup Setup #9










AS NumberWorkgroup Setup Number

Table 6 : Assigned AS Numbers



192.168.30.109Workgroup Setup #9










Router-idWorkgroup Setup Number

Table 7 : Assigned Router-id



• Activate the peering with your neighbor (Workgroup 10 –Admin), using its IP address and AS number. Use the site-localaddress of your neighbor. Announce your global prefix and yoursite-local prefix of your LAN to your neighbor.

(config-router)#neighbor <peer site-local> remote-as <AS number>

(config-router)#address-family ipv6

(config-router-af)#neighbor <peer site-local> activate

(config-router-af)#network <your global network prefix>/64

(config-router-af)#network <your site local prefix>/64

(config-router-af)#exit

• Look at the BGP routing table to determine if you received BGProutes from your neighbor

#show ip bgp ipv6 unicast summary

#show ip bgp ipv6 unicast

#show ipv6 route bgp



Task : Filtering BGP Routes

• Filter the site-local prefix (fec0::/10) so that you do not receivethem

(config)#ipv6 prefix-list lab7 deny fec0::/10 le 128

(config)#ipv6 prefix-list lab7 permit ::/0 le 64

(config)#router bgp <your AS number>

(config-router)#>address-family ipv6

(config-router-af)#neighbor <peer site-local> prefix-list lab7 in

(config-router-af)#exit

• Verify that you do not receive any site-local routes in BGP. Onlythe workgroup IPv6 prefix should be received.

#clear ip bgp ipv6 unicast <AS> in

#show ip bgp ipv6 unicast summary

#show ip bgp ipv6 unicast

#show ipv6 route bgp


Lab 8 : Using Tunnels (1)

Task : Configuring the Tunnel

• First disable both RIPng, OSPFv3, BGP. And remove the site-local address on your Ethernet1/0 interface

(config)#NO ipv6 router rip lab4

(config)#NO ipv6 router ospf 1

(config)#NO router bgp <your AS>


(config-if)#NO ipv6 address fec0::/64

(config-if)#NO ipv6 address 3FFE:B00:FFFF:1000::/64 eui-64

• Using Table 8, configure the IPv4 address of the backboneEthernet1/0 interface


(config-if)#ip address 192.168.30.<group> 255.255.255.0

• Request the IPv4 address of the tunnel endpoint of your neighbor(Workgroup 10 – Admin)



192.168.30.110

192.168.30.109

192.168.30.108

192.168.30.107

192.168.30.106

192.168.30.105

192.168.30.104

192.168.30.103

192.168.30.102

192.168.30.101

192.168.30.100

IPv4 Address

C0A8:1E6E

C0A8:1E6D

C0A8:1E6C

C0A8:1E6B

C0A8:1E6A

C0A8:1E69

C0A8:1E68

C0A8:1E67

C0A8:1E66

C0A8:1E65

C0A8:1E64

IPv4 in Hex

Workgroup Setup #9

Workgroup Setup #10

Workgroup Setup #8

Workgroup Setup #7

Workgroup Setup #6

Workgroup Setup #5

Workgroup Setup #4

Workgroup Setup #3

Workgroup Setup #2

Workgroup Setup #1

Backbone (0)

Workgroup Setup Number

Table 8 : Assigned IPv4 Addresses



• Configure a tunnel interface using tunnel0

(config)#interface tunnel 0

• Use an IPv6 unnumbered address from theEthernet0/0 interface

(config-if)#ipv6 unnumbered ethernet0/0

• Identify the source and destination address of thetunnel, follow by the tunnel mode

(config-if)#tunnel source ethernet1/0

(config-if)#tunnel destination 192.168.30.110

(config-if)#tunnel mode ipv6ip

• Configure a static route for the global address of thesubnet of the other workgroup LAN (workgroup 10) topoint to the tunnel interface

(config)#ipv6 route 3ffe:b00:ffff:100a::/64 Tunnel0



• Verify connectivity using the ping command on therouter to IPv6 address of the tunnel endpoint (which isthe Ethernet0/0 global address)

#ping <global IPv6 address of Ethernet0/0 of your neighbor>

• Verify connectivity by using the ping command formyour PC to the other PC

#ping <global IPv6 address of the other PC>



Task : Configuring a 6to4 Tunnel

• To clean up, disable the tunnel0 interface and erase the globaland site-local addresses in addition to the prefix advertisementson the Ethernet0/0 interface

(config)#NO interface tunnel 0


(config-if)#NO ipv6 address 3ffe:b00:ffff:100<group>::/64 eui-64

(config-if)#NO ipv6 address fec0:0:0:<group>::/64 eui-64

(config-if)#NO ipv6 nd prefix 3ffe:b00:ffff:100<group>::/64 300 300

(config-if)#NO ipv6 nd prefix fec0:0:0:<group>::/64 300 300

• Configure the 6to4 address on the workgroup Ethernet0/0interface using subnet id 0 and eui-64

(config-if)#ipv6 address 2002:<ipv4 encoded in hex>::/64 eui-64



• Configure the 6to4 tunnel on tunnel1 interface usingIPv6 unnumbered command to Ethernet0/0. Add arouter for 2002::/16 pointing to that tunnel interface

(config)#interface tunnel 1

(config-if)#ipv6 unnumbered ethernet0/0

(config-if)#tunnel source ethernet1/0

(config-if)#tunnel mode ipv6ip 6to4

(config)#ipv6 route 2002::/16 tunnel1

• Enable RAs for your LAN by using the ND commandwith the 6to4 subnet prefix assigned to your LAN. Use5 minutes (300 seconds) for the lifetime.

(config-if)#ipv6 nd prefix 2002:<ipv4 encoded in hex>::/64 300300



• Verify that your PC now has an IPv6 address that wasautomatically configured with the 6to4 subnet prefix


• Verify IPv6 connectivity using the ping command onthe PC. Use the 6to4 Ipv6 address of PC in anotherworkgroupas destination address of the pingcommand

#ping <address of the other workgroup PC>

363636© 2004 Cisco Systems, Inc. All rights reserved.IPv6 Lab 36Presentation_ID © 1999, Cisco Systems, Inc. www.cisco.com

Documents

cisco ipv6 labs.pdf