IPv6_2013_presentación_realizada

7/22/2019 IPv6_2013_presentacin_realizada

1/186

2013 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, U.S./Canada

IPv6 Addressing: LearnOr I was hoping to retire before I had to learn

Rick GrazianiJob title

Cabrillo College


2/186

IPv6 Address Notation, Structureand Subnetting


3/186


IPv6 addresses are 128-bit addresses represented in:

Eight 16-bit segments or hextets (not a formal term)

Hexadecimal (non-case sensitive) between 0000 and FF

Separated by colons

One Hex digit = 4 bits

2001:0DB8:AAAA:1111:0000:0000:0000:0100/64

2001 : 0DB8 : AAAA : 1111 : 0000 : 0000 : 0000 : 0100

16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits


4/186


How many addresses does 128 bits give us?

340 undecillion addesses or

340 trillion trillion trillion addresses or

IPv6 could provide each and every square micrometer of the earwith 5,000 unique addresses. Micrometer = 0.001 mm or 0.00003

or.

A string of soccer balls would wrap around our universe 200 billi

in other words

I wont be presenting at a Cisco Academy Conference on IPv7.

2001:0DB8:AAAA:1111:0000:0000:0000:0100/64

2001 : 0DB8 : AAAA : 1111 : 0000 : 0000 : 0000 : 0100

16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bit


5/186


Two rules for reducing the size of written IPv6 addresses.

The first rule is: Leading zeroes in any 16-bit segment do not have to

3ffe : 0404 : 0001 : 1000 : 0000 : 0000 : 0ef0 : bc00

3ffe : 404 : 1 : 1000 : 0 : 0 : ef0 : bc00

3ffe : 0000 : 010d : 000a : 00dd : c000 : e000 : 00013ffe : 0 : 10d : a : dd : c000 : e000 : 1

ff02 : 0000 : 0000 : 0000 : 0000 : 0000 : 0000 : 0500

ff02 : 0 : 0 : 0 : 0 : 0 : 0 : 500


6/186


The second rule can reduce this address even further:

Any single, contiguous string of one or more 16-bit segment

consisting of all zeroes can be represented with a double co

ff02 : 0000 : 0000 : 0000 : 0000 : 0000 : 0000 : 0500

ff02 : : 500

ff02::500

Second Rule


7/186


Only a single contiguous string of all-zero segments can berepresented with a double colon.

Both of these are correct

2001 : 0d02 : 0000 : 0000 : 0014 : 0000 : 0000 : 0095

2001 : d02 :: 14 : 0 : 0 : 95

OR

2001 : d02 : 0 : 0 : 14 :: 95


8/186


Using the double colon more than once in an IPv6 address

ambiguity because of the ambiguity in the number of 0s.

2001:d02::14::95

2001:0d02:0000:0000:0014:0000:0000:0095

2001:0d02:0000:0000:0000:0014:0000:0095

2001:0d02:0000:0014:0000:0000:0000:0095


9/186 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, U.S./Canada

IPv4, the prefixthe network portion of the addresscan b

by a dotted decimal netmask or bitcount.

255.255.255.0 or /24

IPv6 prefixes are always identified by bitcount (prefix length

Prefix length notation:

3ffe:1944:100:a::/64

16 32 48 64 bits


10/186

IPv6 Address Types



IPv6 Addressing

IPv6 Address Types: Starting with GlUnicast

MulticastUnicast

Assigned Solicited Node

Global Unicast UnspecifiedLoopbackLink-Local Unique Loc

FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7

Note: There are no broadcast addresses in IPv6



Interface IDSubnet IDGlobal Routing Prefix

Structure of a Global Unicast Addressn bits m bits 128-n-m bits

001 Range 2000::/3 to 3FFF::/3

IANAs allocation of IPv6 addresections

Global unicast addresses

are similar to IPv4addresses.

Routable

Unique



Global Routing Prefix Sizes


/48 /64/32/23

*RIR

*ISP Prefix

*Site Prefix

Subnet Prefix

* This is a minimum allocation. The prefix-length may be less if it can be ju

/56

Possible Home Site Prefix



Global Unicast Addresses and the 3-1-4 rule

IPv4 Unicast Address

32 bits

Network portion Host portionSubnet portion

/?

IPv6 Global Unicast Address

128 bits

Global Routing Prefix Interface IDFixed Subnet

ID

/64

* 16-bit Subnet ID gives us 65,536 subnets. (Yes, you can use the all 0s

* 64-bit Interface ID gives us 18 quintillion (18,446,744,073,709,551,616)




Global Unicast Addresses and the 3-1-4 rule

2001 : 0DB8 : AAAA : 1111 : 0000 : 0000 : 0000 : 0100

16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits

3 1 4

/48 /64



4 specific subnets to be used inside Company1:

2340:1111:AAAA:0000::/64

2340:1111:AAAA:0001::/64

2340:1111:AAAA:0002::/64

2340:1111:AAAA:000A::/64

Note: A valid abbreviation is to remove the 3 leading 0s from thshown quartet.

2340:1111:AAAA:1::/64



Int

Subnet IDGlobal Routing Prefix

Subnetting into the Interface ID

Prefix

64 bits48 bits 1

/48 /11

2001 : 0DB8 : AAAA : 0000 : 0000 : 0000 : 0000 : 00002001 : 0DB8 : AAAA : 0000 : 0000 : 0000 : 00012001 : 0DB8 : AAAA : 0000 : 0000 : 0000 : 0002

thru2001 : 0DB8 : AAAA : FFFF : FFFF : FFFF : FFFE

2001 : 0DB8 : AAAA :FFFF : FFFF : FFFF : FFF

Global Routing Prefix Subnet-ID



ubnetting on a nibble boundary


Subnet Prefix/68

60 bits48 bits 20 bits

/48 /68

Subnetting on a nibble (4 bit) boundary makes it easier to list the

/64, /68, /72, etc.

2001:0DB8:AAAA:0000:0000::/68

2001:0DB8:AAAA:0000:1000::/68

2001:0DB8:AAAA:0000:2000::/68 through

2001:0DB8:AAAA:FFFF:F000::/68



ubnetting within a nibble


Subnet Prefix/70

58 bits48 bits 22 bits

/48 /70

2001:0DB8:AAAA:0000:0000::/70 0000

2001:0DB8:AAAA:0000:0400::/70 0100

2001:0DB8:AAAA:0000:0800::/70 1000

2001:0DB8:AAAA:0000:0C00::/70 1100

Four Bits: Thare part o

whereas thebelong to

bits



Global Unicast

Static Global Unicast Addresses

Dynamic

IPv6

Unnumbered

Stateless

Autoconfiguration

DH

Static EUI-64

Manual

IPv6 Address


21/186


Ricks CNetwork To

PC-1

PC-2

PC-3

R2

R3R1

Ser 0/0/0.1

Ser 0/0/0.2

Ser 0/0/0.2

Ser 0/0

Ser 0/0/1.1

Ser 0/0/1.2

Ser 0/0/.1

Ser 0/0/1.1

Fa 0/0 Fa 0/0

Fa 0/0

2001:0DB8:CAFE:0002::/64

Ricks Cafe2001:0DB8:CAFE::/48

2001:0DB8:CAFE:0001::/64 2001:0DB8:CAFE:0003::/64

2001:0DB8:CAFE:A001::/64 2001:0DB8:CAFE:A002::/64

2001:0DB8:CAFE:A003::/642001:0DB8:FEED:0

Link to ISP

200


22/186


R1# conf t

R1(config)# interface fastethernet 0/0

R1(config-if)# ipv6 address 2001:0db8:cafe:0001::1/64

R1(config-if)# no shutdown

R1(config-if)# exit

R1(config)#

onfiguring a Static Global Unicast Address

Exactly the same as an IPv4 address only different.

No space between IPv6 address and Prefix-length.

IOS commands for IPv6 are very similar to their IPv4 cou

All 0s and all 1s are valid IPv6 host IPv6 addresses.

No


23/186


show running-config command on router R

R1# show running-config

interface FastEthernet0/0

no ip address

duplex auto

speed auto

ipv6 address 2001:DB8:CAFE:1::1/64!


24/186


show ipv6 interface brief command on rout

R1# show ipv6 interface brief

FastEthernet0/0 [up/up]

FE80::203:6BFF:FEE9:D480

2001:DB8:CAFE:1::1

R1#Global unicast address

Link-local unicast addres

Link-local address automatically created when (befor

global unicast address is.

We will discuss link-local addresses next.


25/186


show ipv6 interface fastethernet 0/0 commR1# show ipv6 interface fastethernet 0/0FastEthernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::203:6BFF:FE

Global unicast address(es):2001:DB8:CAFE:1::1, subnet is 2001:DB8:CAFE:1:

Joined group address(es):FF02::1FF02::2

FF02::1:FF00:1

FF02::1:FFC2:828DMTU is 1500 bytes

R1#


26/186


PC-1: Static Global Unicast Address


27/186


PC1> ipconfigWindows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :

IPv6 Address. . . . . . . . . . . : 2001:db8:cafe:1::1

Link-local IPv6 Address . . . . . : fe80::50a5:8a35:a5b

Default Gateway . . . . . . . . . : 2001:db8:cafe:1::1

PC-1: Static Global Unicast Address


28/186


Global Unicast

Dynamic

IPv6UnnumberedIPv6 Address

StatelessAutoconfiguration D

StaticEUI-64

Modified EUI-64 Format: Creates a 64-bit Interface ID fraddress

Manual


29/186



R1(config-if)# ipv6 address 2001:0db8:cafe:0001::/64

eui-64 Use eui-64 interface identifier


30/186


R1# show interface fastethernet 0/0

FastEthernet0/0 is up, line protocol is up

Hardware is AmdFE, address is 0003.6be9.d480 (bia 0003.6be9.d480

Ethernet MAC address

R1s MAC Address forFastEthernet 0/0

Hexadecimal

OUI24 bits

Device Identifier24 bits

00 03 6B E9 D4 80

Binary 0000 0000 0000 0011 0110 1011 1110 1001 1101 0100 1000 0000


31/186


Hexadecimal

OUI24 bits

Device Identif24 bits

Binary

tep 1: Split the MAC address

Binary

tep 2: Insert FFFE

Binary

tep 3: Flip the U/L bit

Binary

dified EUI-64 Interface ID in Hexadecimal Notation

1111 1111 1111 1110

1111 1111 1111 1110

02 03 6B E9 FF FE

00 03 6B E9 D4

0000 0000 0000 0011 0110 1011 1110 1001

1110 1001

1110 1001 1

0000 0000 0000 0011 0110 1011

0000 0010 0000 0011 0110 1011

Modified EUI-64 Format


32/186


R1s FastEthernet 0/0 48 bit MAC Address: 0003.6be9.d480

0 0 0 3 . 6 b e 9 . D 0000 0000 0000 0011 . 0110 1011 1110 1001 . 0111 01

0000 0000 0000 0011 . 0110 1011 1110 1001 . 011

0000 0000 0000 0011 . 0110 1011 11111111 11111110 1110 1001 . 0110000 0010 0000 0011 . 0110 1011 11111111 11111110 1110 1001 . 0110 2 0 3 . 6 b F F F E e 9 . D

1

Interface ID (Eformat)

Subnet Prefix (Manuallyconfigured)

Global unicast address: 2001:0DB8:AAAA:0001:0203:6BFF:FEE9:D480


R1(config-if)# ipv6 address 2001:0db8:aaaa:0001::/64 eui-64

23


33/186



R1(config-if)# ipv6 address 2001:0db8:aaaa:0001::/64 eui-64

R1# show ipv6 interface fastethernet 0/0


IPv6 is enabled, link-local address is FE80::203:6BFF:FEE9:D480

Global unicast address(es):

2001:DB8:CAFE:1:203:6BFF:FEE9:D480,

subnet is 2001:DB8:CAFE:1::/64

Address using EU


34/186

Dynamic Global Unicast Addresses


35/186


Global Unicast

Manual


StatelessAutoconfiguratio

n

DHC

StaticEUI-64

Dynamic


36/186


ipv6 unicast-routing

2

RouterA

DHCP

NDP Router Solicitation Neinformation from the route

1

The route

Advertisem

determine

host gets

address c

ipv6 unica

command

router to s

Advertise

NDP Router AdvertisementIm everything you need

(Prefix, Prefix-length, DefaultGateway)

Or

Here is my information butyou need to get other

information such as DNSaddresses from a DHCPv6

server.

Or

I cant help you. Ask aDHCPv6 server for all our


37/186


NDP Router Advertisement

Prefix: 2001:DB8:AAAA:1::

Prefix-length: /64

To: FF02::1 (All-hostsmulticast)

From: FE80::1 (Link-local

address)

NDP RouterSolicitation


12

3

MAC

Prefix: 2001:DB8:AAAA:1EUI-64 Interface ID: 02-19-D2-FF-F

Global Unicast Address2001:DB8:AAAA:1:0219:D2FF

Prefix-length: /64Default Gateway: FE80::

PC1> ipconfig

IPv6 Address. . . . . . : 2001:DB8:AAAA:1:0219:D2FF:FE8C:E04C

Default Gateway . . . . :fe80::1

RouterA


38/186




IPv6 Address. . . . . . . . . : 2001:DB8:AAAA:1:0219:D2F

Link-local IPv6 Address . . . : fe80::50a5:8a35:a5bb:66e

Default Gateway . . . . . . . : fe80::1

Windows Link-local address

Windows operating systems, Windows XP and Server 2003 u

Windows Vista and newer do not use EUI-64; hosts create a raInterface ID.

The %value following the link-local address is a Windows Zone ID and not part of IP


39/186


NDP Router Advertisement

Here is my informationbut you need to get otherinformation such as DNS

addresses from a DHCPv6server.

Or

I cant help you. Ask aDHCPv6 server for all your

information.

NDP RouterSolicitation


1

2

3

RouterA

4 DHCPv6 Ad

Im a DH

DHCPv6 Solicit MessageI need a DHCPv6

Server.

5 DHCPv6 Request MessageI need addressing

information.

6DHCPv6

Here is y

other

Stateless Addressing

DHCPv6 Addressi


40/186


Global Unicast

Manual



n

DH

Static EUI-64 Statef

Dynamic


41/186



1

RouterA

2 DHCPv6 Ad

Im a DH

DHCPv6 Solicit MessageI need a DHCPv6

Server.

3 DHCPv6 Request MessageI need addressing

information.

4DHCPv6

Here is y

other

DHCPv6 Addressi

Stateful DHCPv6


42/186

Link-local Unicast Address


43/186


IPv6 Addressing

Link-Local Unicast

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7


44/186

2013 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, U.S./Canada 44

Range:

FE80::/10FEBF::/10

Interface ID

/64

1111 1110 10xx xxxx

FE80::/10

Remaining 54 bits10 bits 64 bits

EUI-64, Random or Manual Co

Link-local unicast


45/186


Used to communicate with other devices on the link.

Are NOT routable off the link.

An IPv6 device must have at least a link-local address Used by:

Hosts to communicate to the IPv6 network befoglobal unicast address.

Used as the default gateway address by h

Adjacent routers to exchange routing upd

Interface ID

/64

1111 1110 10xx xxxx

FE80::/10

Remaining 54 bits10 bits 64 bits

EUI-64, Random or Manual Co

Link-local unicast


46/186


Global Unicast:01:0DB8:CAFE:1::0100

2001:0DB8:CAFE:A001::/64

2001:0DB8:CAFE:1::/64

Fa0/0

Ser 0/0/0

.1

Ser 0/0/Global Unicast:

2001:0DB8:CAFE:1::1/64

Link-local addreautomatically c(before) the glo

address is. FE80 + 64-bit In

EUI-6

Randoml

Link-local addre

be created stati

Link-local address: ?

Link-local address: ?

PC-1

R1


47/186


show ipv6 interface brief command on routR1# show ipv6 interface briefFastEthernet0/0 [up/up]

FE80::203:6BFF:FEE9:D4802001:DB8:CAFE:1::1

Serial0/0/0 [up/up]FE80::203:6BFF:FEE9:D480

2001:DB8:CAFE:A001::1Serial0/0/1 [up/up]

FE80::203:6BFF:FEE9:D4802001:DB8:CAFE:A003::1R1#

Link-local address automatically created when (befoglobal unicast address.

By default, IOS will use modified EUI-64 format.

Global unicast addres

Link-local unicast add


48/186


Hexadecimal

R1s MAC Address forFastEthernet 0/0

OUI (Organization UniqueIdentifier)

24 bitsDevice Identifier

24 bits

00 03 6B E9 D4 80

Binary 0000 0000 0000 0011 0110 1011 1110 1001 1101 0100 1000 0000

Modified EUI-64 Format: Creates a 64-bit Interface ID fraddress


49/186


Hexadecimal

OUI24 bits

Device Identif24 bits

Binary

tep 1: Split the MAC address

Binary

tep 2: Insert FFFE

Binary

tep 3: Flip the U/L bit

Binary

dified EUI-64 Interface ID in Hexadecimal Notation

1111 1111 1111 1110

1111 1111 1111 1110

02 03 6B E9 FF FE

00 03 6B E9 D4

0000 0000 0000 0011 0110 1011 1110 1001

1110 1001

1110 1001 1

0000 0000 0000 0011 0110 1011

0000 0010 0000 0011 0110 1011

Modified EUI-64 Format


50/186


R1# show interface fastethernet 0/0


Hardware is AmdFE, address is 0003.6be9.d480 (bia 0003.6be9.d480





2001:DB8:AAAA:1::1, subnet is 2001:DB8:AAAA:1::/64

Link-local address using EUI-64 f

Ethernet MAC address


51/186


Global Unicast:01:0DB8:CAFE:1::0100

2001:0DB8:CAFE:A001::/64

2001:0DB8:CAFE:1::/64

Fa0/0

Ser 0/0/0

.1

Ser 0/0/Global Unicast:

2001:0DB8:CAFE:1::1/64

Dynamic link-local addresidentif

Routers use link-loca

Exchanging r

Default gateway

Static link-local addreremember and

Link-local addresses onlythe lin

PC-1

R1

FE80::203:6BFF:FEE9:D480(EUI-64)

FE80::50A5:8A35:A5BB:66E1

FE80::1(Static)


52/186


R1(config)# interface fastethernet 0/0R1(config-if)# ipv6 address fe80::1 ?

link-local Use link-local address


R1(config-if)# ipv6 address fe80::1 link-localR1(config-if)# exit

R1(config)# interface serial 0/0/0R1(config-if)# ipv6 address fe80::1 link-local

R1(config-if)# exitR1#

R1# show ipv6 interface brief

FastEthernet0/0 [up/up]FE80::1

2001:DB8:CAFE:1::1Serial0/0/0 [up/up]

FE80::12001:DB8:CAFE:A001::1

R1#

Same link-local unicast address (best

Static Lin


53/186


R1# ping fe80::2

Output Interface: ser 0/0/0

% Invalid interface. Use full interface name without spaces (e.g. Serial0

Output Interface: serial0/0/0

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to FE80::2, timeout is 2 secs:

!!!!!

Must include exit-in

Fa0/0

Global Unicast:2001:0DB8:CAFE:1::1/64

FE80::12001:0DB8:CAFE:A001::/64

Ser 0/0/0

.1

Ser 0/0/R1

FE80::1 FE80::

Ping Link-local Address


54/186


ipv6 enable commandRouter(config)# interface fastethernet 0/1

Router(config-if)# ipv6 enableRouter(config-if)# end

Router# show ipv6 interface briefFastEthernet0/1 [up/up]

FE80::20C:30FF:FE10:92E1Router#

Link-local addresses are automatically created whenever

unicast address is configured.

The ipv6 enable command will:

Create a link-local address when there is no globaaddress

Maintain the link-local address even when the globaddress is removed.

Link-local unicast a


55/186


R1# show running-config

!

interface FastEthernet0/0

no ip addressipv6 address FE80::1 link-local

ipv6 address 2001:DB8:CAFE:1::1/64

!

interface Serial0/0/0

no ip addressipv6 address FE80::1 link-local

ipv6 address 2001:DB8:CAFE:A001::1/64

!

Wi d Li k l l dd


56/186




Connection-specific DNS Suffix . :

IPv6 Address. . . . . . . . . . . : 2001:db8:cafe:1::1

Link-local IPv6 Address . . . . . : fe80::50a5:8a35:a5b

Default Gateway . . . . . . . . . : 2001:db8:cafe:1::1

Windows Link-local address

Windows operating systems, Windows XP and Server 2003 u

Windows Vista and newer do not use EUI-64 create a randoInterface ID.

The %value following the link-local address is a Windows Zone ID and not part of IP


57/186

O h U i Add


58/186


IPv6 Addressing

Other Unicast Addresses

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7


59/186

Multicast Addresses

M lti t Add


60/186


IPv6 Addressing

Multicast Addresses

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7


61/186


Group IDFlag1111 1111

FF00::/8

8 bits 112bits4 bits 4 bits

Scope

Flag

0 Permanent, well-known multicast address assigned by IANA

1 Non-permanently-assigned, dynamically" assigned multicast add

Scope (partial list)

0 Reserved1 Interface-Local scope

2 Link-Local scope

5 Site-Local scope

8 Organization-Local scope

M lti t Add


62/186


IPv6 Addressing

Multicast Addresses

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7


63/186







Joined group address(es):

FF02::1

FF02::2

FF02::1:FF00:1

FF02::1:FFE9:D480

All-nodes on this link

All-routers on this link: IPv6 routing

Solicited-node multicast addreUnicast Addres

Solicited-node multicast addrAddress

Member of these Multicast Groups

FF022 means link-local scope

What is Solicited node?


64/186


Enabling IPv6 Routing

R1(config)# ipv6 unicast-routing

A routers interfaces can be enabled (get an IPv6 addr

IPv6 like any other device on the network.

For the router to act as an IPv6 router it must be en

the ipv6-unicast routing command.

This enables the router to:

Send Router Advertisement messages

Enable the forwarding of IPv6 packets.

Participate in IPv6 routing protocols (RIPng, EIGROSPFv3)

M lti t Add


65/186


IPv6 Addressing

Multicast Addresses

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7

S li it d d lti t dd f PC2


66/186


Solicited-node multicast addresses for PC2

NIC: I will listen for mIP: I listen for my IP addr

Link-loca

Global Unicast Address:Link-local Unicast Address:

MAC Unicast Address:

2001:0DB8:AAAA:0001:0000:000FE80::1111:2222:3333:4

00-19-D2-8C-E0-4C

PC-2

Devices list for their unicast addresses.

Devices also listen for their multicast addresses

MACIP: Global or Link-local

S li it d d lti t dd f PC2


67/186


Solicited-node multicast addresses for PC2

NIC: I will also listen for maddress

IP: I will also listen for maddresses (Global an

Global Unicast Address:Solicited Node (Global):

Link-local Unicast Address:Solicited Node (Link-local):

MAC Unicast Address:Solicited Node (MAC):

2001:0DB8:AAAA:0001:0000:000FF02::1:FF00:200

FE80::1111:2222:3333:4FF02::1:FF33:4444

00-19-D2-8C-E0-4C33-33-FF-00-02-0033-33-FF-33-44-44

PC-2Broadcasts


68/186


Solicited-node multicast address

Interface ID

FF02

24 bits

0000 0000 0000 0000 0001 FF

Global Routing Prefix Subnet

ID

104 bits 24 bits

Unicast/Anycast Address

Solicited-Node Multicast AddressCopy

104 bits

FF02:0:0:0:0:1:FF00::/104

Devices create a solicited node multicast address unicast (and anycast) addresses including:

Global Unicast Address

Link-local Address


69/186


Used as a destination address when dont know the unicast addre

Address Resolution (ARP) and Duplicate Address Detection (Gratu

Same intent as a broadcast but more efficient.

Devices process packets with their solicited node multicast address as the destinatMAC.

Solicited-node multicast address

Interface ID

FF02

24 bits

0000 0000 0000 0000 0001 FF

Global Routing Prefix Subnet

ID

104 bits 24 bits

Unicast/Anycast Address

Solicited-Node Multicast AddressCopy

104 bits

FF02:0:0:0:0:1:FF00::/104


70/186








FF02::1

FF02::2

FF02::1:FF00:1

FF02::1:FFE9:D480

Solicited-node multicast addreUnicast Addres

Solicited-node multicast addrAddress

Member of these Multicast Groups


71/186


Router(config)# interface fastethenet 0/0

Router(config-if)# ipv6 address 2001:db8:cafe:1::/64 eu

Router# show ipv6 interface fastethernet 0/0


IPv6 is enabled, link-local address is FE80::21B:CFF:FECNo Virtual link-local address(es):


2001:DB8:CAFE:1:21B:CFF:FEC2:82D8, subnet is 2001:DB8:CA


FF02::1

FF02::2

FF02::1:FFC2:82D8

If the Global and Link-local unicast addresses used EUIbits would be the same and there would only be one s

address.

Solicited-node multicast addresLink-local unicast add


72/186


Interface ID

FF02 0000 0000 0000 0000 0001 FF

Global Routing Prefix104 bits 24 b

PC2s Global Unicast Address

PC2s IPv6 Solicited-Node Multicast AddressCo

PC2s IPv6 Global Unicast Address: 2001:0DB8:AAAA:0001::0200 PC2s IPv6 Solicited-node multicast address: FF02::1:FF00:0200

PC2s mapped solicited-node Ethernet multicast address : 33-33-FF-00-0

Subnet ID

2001:0DB8:AAAA 0001 0000:0000:00 00:0

00:0

FF-00-0

Copy

33-33Solicited-node Multicast addressmapped to Ethernet destination MAC

address


73/186


At Layer 2 ana lot o

Global Unicast Address:Solicited Node (Global):

MAC Unicast Address:Solicited Node (MAC):

2001:0DB8:AAAA:0001:0000:000FF02::1:FF00:200

33-33-FF-00-02-00

Why Solicited Node Addresses?

Broadcasts are sent to all devices.

Devices must process all broadcast at least to layer 3.

Solicited Node Multicasts are only processed by those devices withthe matching last 24 bits (usually one device).

If I know the IPv6 address but not the MAC address I can send it to asolicited node addresses instead of a broadcast to everyone

Address Resolution


74/186


PC-1

NDP Neighbor Solicitation MessageDestination: Solicited-node Multicast

Whoever has 2001:0DB8:AAAA:1::0200 sendme your Ethernet MAC address

dd ess eso ut o

PC2001:0DB8:AAAA:1::0200FF02::1:FF00:2002001:0DB8:AAAA:1::0100

MAC: 00-19-D2-8C-E0-4C33-33-FF-00-02-00

NIC: Thats onode MA

IPv6: Thats onode a

Source MAC

00-12-34-56-78-9A

Ethernet ICMPv

2002

Destination IPv6

FF02::1FF00:200

Source IPv6

2002:0DB8:AAAA:0001::0100

Dest. MAC

33-33-FF-00-02-00

IPv6 Header

Possible that multiple devices may have the same last 24IPv6 address but only those devices would have to proc

tar et.

se of solicited-node multicasts with addressing resolution a


75/186


PC-B


Before I use this address is anyone else onthis link using this link-local address:

FE80::50A5:8A35:A5BB:66E1?

PC-1

Duplicate Address Detection (DAD)


Who ever has the IPv6 address

2001:0DB8:AAAA:0001::0200 please send me yoEthernet MAC address

Address Resolution

IPv6 Address Types


76/186


IPv6 Addressing

IPv6 Address Types

MulticastUnicast



FF00::/8 FF02::1:FF00:0000/104

::/128::1/1282000::/33FFF::/3

FE80::/10FEBF::/10

FC00::/7FDFF::/7

Note: There are no broadcast addresses in IPv6



77/186


Global Unicast


IPv6Unnumbered


n

Static EUI-64

Manual

IPv6 Address

Dynamic

DH


78/186

Questions?

Web site: www.cabrillo.edu/~rgrazianiUsername = cisco

Password = perlman

Email: [email protected]

Equipping Todays Ins


79/186


Equipping Today s Insfor Tomorrows S

Cisco Ne

What I need to know about IPv6 to teach CCRouting Protocols

Rick GrazianiCS/CIS InstructorCabrillo College

Academy Confe


80/186


IPv6 Static Routes


81/186


Router(config)# ipv6 unicast-routing

A routers interfaces can be enabled (configured with

address) for IPv6 like any other device on the net For the router to act as an IPv6 router it must be ena

the ipv6-unicast routing command

This enables the router to: Send ICMPv6 Router Advertisement messages

Enable the forwarding of IPv6 packets

Configure static routing and participate in IPv6 routing protocols (EIGOSPFv3)

Similar to old ip routing command for IPv4 which is edefault


82/186


Router(config)#ipv6 route ipv6-prefix/ipv6-prefix-l{ipv6-address | exit-inter

Static Route with a next hop IPv6 address:

Router(config)# ipv6 route 2001:db8:acad:2::/64 2001:

Note: Static routes using only an exit interface on point-to-poin

common, however the use of the default CEF forwarding mec

this practice unnecessary

For reasons, beyond the scope of this presentation, there are a

using a static route with a next-hop address

Prefix Prefix-length

N


83/186


Static Route with an exit interface (unnecessary with CEF enable

R1(config)# ipv6 route 2001:db8:acad:2::/64 g0/0

A fully specified static route includes an exit interface and the neaddress (unnecessary with CEF enabled except when using a ne

local address):

R1(config)# ipv6 route 2001:db8:acad:2::/64 g0/0 2001:db8

A floating static route, administrative distance greater than prima

R1(config)# ipv6 route 2001:db8:acad:2::/64 2001:db8:feed

R1(config)# ipv6 route 2001:db8:acad:2::/64 2001:db8:feed

A summary route:


84/186



85/186


R1(config)# interface gigabitethernet 0/0R1(config-if)# ipv6 address 2001:db8:acad:1::1R1(config-if)# ipv6 address fe80::1 link-loca

R1(config-if)# exitR1(config)# interface serial 0/0/0

R1(config-if)# ipv6 address 2001:db8:acad:4::1R1(config-if)# ipv6 address fe80::1 link-loca

R1(config-if)# exit

Ugly EUI-64 Interface ID is used by d


86/186


R1# show ipv6 interface briefGigabitEthernet0/0 [up/up]

FE80::12001:DB8:ACAD:1::1

Serial0/0/0 [up/up]FE80::1

2001:DB8:ACAD:4::1R1#

Same Link-local addressinterfaces


87/186


R1#show ipv6 route

C 2001:DB8:ACAD:1::/64 [0/0]via GigabitEthernet0/0, directly connected

L 2001:DB8:ACAD:1::1/128 [0/0]via GigabitEthernet0/0, receive

C 2001:DB8:ACAD:4::/64 [0/0]via Serial0/0/0, directly connected

L 2001:DB8:ACAD:4::1/128 [0/0]via Serial0/0/0, receiveL FF00::/8 [0/0]

via Null0, receiveR1#

Connected r

any interfac

unicast addmore than li

Link-local ad

not included

table becaus

routable off


88/186


R1#show ipv6 route

C 2001:DB8:ACAD:1::/64 [0/0]via GigabitEthernet0/0, directly connected

L 2001:DB8:ACAD:1::1/128 [0/0]via GigabitEthernet0/0, receive

C 2001:DB8:ACAD:4::/64 [0/0]via Serial0/0/0, directly connected

L 2001:DB8:ACAD:4::1/128 [0/0]via Serial0/0/0, receiveL FF00::/8 [0/0]

via Null0, receiveR1#

The local rou

routes (host r

routers IPv6 address

Allow the rou

efficiently pro

directed to th

rather than fo

Multicast packetsNot routed


89/186


R1(config)#ipv6 route 2001:DB8:ACAD:2::/64 2001:DB8:ACAD:4R1(config)#ipv6 route 2001:DB8:ACAD:5::/64 2001:DB8:ACAD:4R1(config)#ipv6 route 2001:DB8:ACAD:3::/64 2001:DB8:ACAD:4

R1(config)#


90/186


R1#show ipv6 route staticIPv6 Routing Table - default - 8 entries

Codes: C - Connected, L - Local, S - Static,


91/186


R1(config)# ipv6 route ::/0 2001:db8:acad:4::2R1(config)# end

R1# show ipv6 routeS ::/0 [1/0]

via 2001:DB8:ACAD:4::2


92/186


R1(config)# ipv6 route 2001:db8:acad:2::/64 fe80::2

% Interface has to be specified for a link-local nexthopR1(config)# ipv6 route 2001:db8:acad:2::/64 s0/0/0 fe80::2

R1(config)# endR1# show ipv6 route

S 2001:DB8:ACAD:2::/64 [1/0]via FE80::2, Serial0/0/0

R2R1

S0/0/0

:1

2001:

IPv6 link-local addresses

2001:DB8:ACAD:1::/64

FE80::1

G0/0

:1

2001:DB8:ACAD:4::/64

S0/0/1

:1

G0/0

:1FE80::1 FE80::2 FE80

FE80::2 can be on any link!Where are you?


93/186


Dynamic Routing Protocols


94/186


Distance Vector Routing

Protocols

Link State Routing

Protocols

Path V

RIPv2 EIGRP OSPFv2 IS-IS BGP

RIPng EIGRP for

IPv6

OSPFv3 IS-IS for IPv6 BGP-

IPv

IPv4

IPv6

Distance Vector Link State Path V

Interior Gateway Protocols

ExteriPr

Most IPv6 routing protocol commands are identical to their IPv4 counJust need to substitute ipv6 for ip


95/186


v4 v

Yes, I dodrive a

v6!

In case you are

wondering.


96/186


EIGRP for IPv6

EIGRP forIPv4 IPv4EIGRP for

IPv4EIGRP forIPv4 EIGRP fIPv4


97/186


R1

NeighborTable

IPv4 Network

IPv6 Network

TopologyTable

RoutingTable

NeighborTable

TopoloTabl

NeighborTable

EIGRP forIPv6 IPv6

TopologyTable

RoutingTable

EIGRP forIPv6

NeighborTable

EIGRP forIPv6

TopoloTable

EIGRP foIPv6

EIGRP for IPv4 EIGRP for IPv

Advertised routes IPv4 networks IPv6 prefixes


98/186


Advertised routes IPv4 networks IPv6 prefixes

Distance vector Yes Yes

Convergence technology DUAL DUAL

Metric Default: Bandwidth & delay

Optional: Reliability and load

Default: Bandw

Optional: Relia

Transport protocol RTP RTP

Update messages Partial & bounded updates Partial & boun

Neighbor discovery Hello packets Hello packets

Source address;

destination addresses

IPv4 address;

224.0.0.10 IPv4 multicast

IPv6 link-local

FF02::10 IPv6

Authentication Plain text and MD5* MD5*

Router ID 32-bit router ID 32-bit router ID

EIGRP forIPv6 IPv6EIGRP for

IPv6EIGRP forIPv6 EIGRP foIPv6


99/186


R1

IPv6 Network

NeighborTable

TopologyTable

RoutingTable

NeighborTable

TopoloTable

2001:DB8:CAFE:2::/64

G0/0Link-local


100/186


R3

S0/0/0

:2

S0/0/1:2

R1

G0/0:1

S0/0/0:1

2001:DB8:CAFE:A001::/64

IS

S0/1/0:1R2

S0/0/1:1

S0/0/1:2

G0/0:1

2001:DB8:CAFE:3::/642001:DB8:CAFE:1::/64

G0/0:1

S0/0/1:1 S0/0/0:2

2001:DB8:CAFE:A003::/64

2001:DB8:CAFE:A0

2001:DB8:FEED:1::/64

Link-localaddresses

FE80::1

addressesFE80::2

Link-lo

addresFE80


101/186


R1(config)# ipv6 router eigrp 2% IPv6 routing not enabled

R1(config)# ipv6 unicast-routingR1(config)# ipv6 router eigrp 2

R1(config-rtr)# eigrp router-id 1.0.0R1(config-rtr)# no shutdown

R1(config-rtr)#

EIGRP for IPv6 was made available in Cisco IOS, Release 12.4(6)T

Enables IPv6 ro

Must be sam

EIGRP uses a 32-bit Router ID for both IPv4 and IPv6 (eigrp not a

The eigrp router-id command takes precedence over any loopbainterface IPv4 addresses

If there are no active IPv4 interfaces, then the eigrp router-id comm

Router ID should be a unique otherwise, routing inconsistencies c

This is specific to EIGR


102/186


R1(config)#interface g0/0R1(config-if)#ipv6 eigrp 2

R1(config-if)#exitR1(config)#interface s 0/0/0R1(config-if)#ipv6 eigrp 2


R1(config-if)#

No network commands needed!


103/186


R2(config)#ipv6 unicast-routingR2(config)#ipv6 router eigrp 2

R2(config-rtr)#eigrp router-id 2.0.0.0R2(config-rtr)#no shutdown

R2(config-rtr)#R2(config)#interface g 0/0R2(config-if)#ipv6 eigrp 2


R2(config-if)#exit%DUAL-5-NBRCHANGE: EIGRP-IPv6 2: Neighbor FE80::1 (Serial0/0/0) is

adjacencyR2(config)#interface s 0/0/1

R2(config-if)#ipv6 eigrp 2R2(config-if)#


104/186


R1#show ipv6 eigrp neighborsEIGRP-IPv6 Neighbors for AS(2)

H Address Interface Hold Uptime SRTT (sec) (ms) 1 Link-local address: Se0/0/1 13 00:37:17 45

FE80::30 Link-local address: Se0/0/0 14 00:53:16 32

FE80::2R1#

Similar information as EIGRP for IPv6

Link-local addresses are used to form adjacencies and source messages

R1#show ipv6 protocols


105/186


R1#show ipv6 protocolsIPv6 Routing Protocol is "eigrp 2"

EIGRP-IPv6 Protocol for AS(2)Metric weight K1=1, K2=0, K3=1, K4=0, K5=0

NSF-aware route hold timer is 240Router-ID: 1.0.0.0Topology : 0 (base)

Distance: internal 90 external 170Maximum path: 16

Maximum hopcount 100Maximum metric variance 1

Interfaces:GigabitEthernet0/0

Serial0/0/0Serial0/0/1R1#

Routing protocol and (AS Number

EIGRP Router ID

Same EIGRP AdDistanc

Interfaces enabled for this EIGRP

Same K

comp


106/186


R1#show ipv6 route eigrp

D 2001:DB8:CAFE:2::/64 [90/3524096]via FE80::3, Serial0/0/1

D 2001:DB8:CAFE:3::/64 [90/2170112]via FE80::3, Serial0/0/1

D 2001:DB8:CAFE:A002::/64 [90/3523840]via FE80::3, Serial0/0/1

R1#

Link-local addresses are used as next hop addresses


107/186


Note 1: There is no automatic summarization in IPv6 (no classful netwNote 2: EIGRP for IPv4 automatic summarization is disabled by default beginnin

Release 15.0(1)M and 12.2(33)

2001:DB8:ACAD::/48

2001:DB8:ACAD::/48

2001:DB8:ACA


108/186


2001:DB8:ACAD::/48

R3(config)# interface serial 0/0/0R3(config-if)# ipv6 summary-address eigrp 2 2001:db8

R3(config-if)# exitR3(config)# interface serial 0/0/1

R3(config-if)# ipv6 summary-address eigrp 2 2001:db8R3(config-if)# endR3# show ipv6 route

D 2001:DB8:ACAD::/48 [5/128256]via Null0, directly connected

Similar command as EIGRP for IPv4

Similar to EIGRP for IPv4summary route to null0 as

mechanis

R1# show ipv6 route | include 2001:DB8:ACAD:D 2001:DB8:ACAD::/48 [90/2297856]R1#


109/186


2001:DB8:ACA

2001:DB8:ACAD::/48R1

2001:DB8:FEED:1::/642001 DB8 CAFE /48


110/186


ISP

S0/1/0:1

R2

R1R3

2001:DB8:CAFE::/48

Default Route

R2(config)# ipv6 route ::/0 2001:DB8:FEED:1::2R2(config)# ipv6 router eigrp 2

R2(config-rtr)# redistribute static

S0/0/1:2

R1# show ipv6 routeEX ::/0 [170/3523840]via FE80::3, Serial0/0/1

EX = EIGRP External


111/186


R1(config)# interface serial 0/0/0R1(config-if)# ipv6 bandwidth-percent eigrp 2 50R1(config-if)# ipv6 hello-interval eigrp 2 60R1(config-if)# ipv6 hold-time eigrp 2 180

R1(config-if)#

Bandwidth utilization, Hello and Hold Timers remain the same

Just add v6!

R1(config)# interface serial 0/0/0R1(config-if)# ipv6 authentication mode eigrp 2 md5

R1(config-if)# ipv6 authentication key-chain eigrp 2 EIGRPV

Same with MD5 Authentication (only IPv6 releshown)


112/186


OSPFv3

Single Area and Multi-Area

OSPFv2 IPv4OSPFv2OSPfv2 OSPFv


113/186


R1

NeighborTable

IPv4 Network

IPv6 Network

LSDB RoutingTable

NeighborTable

LSDB

NeighborTable

OSPFv3 IPv6

LSDB RoutingTable

OSPFv3

NeighborTable

OSPFv3

LSDB

OSPFv3

OSPFv2 OSPFAdvertises IPv4 networks IPv6 prefixes


114/186


Link-State Yes Yes

Routing Algorithm SPF SPF

Metric Cost Cost

Source address IPv4 source address IPv6 link-local add

Destination address

224.0.0.5 All-OSPF-routers

224.0.0.6 All-DR-routers

IPv4 unicast address

FF02::5 All-OSP

FF02::6 All-DR-r

IPv6 link-local a

Authentication Plain text and MD5* IPSec

Areas Yes Yes

Packet types Same Hello, DBD, LSR, LSU and LSAck packets

Neighbor discovery Yes, Hello Packets Yes, Hello Packet

DR and BDR Multi-access networks Multi-access netw

Router ID 32-bit router ID 32-bit router ID

OSPFv3 IPv6OSPFv3 OSPFv3 OSPFv


115/186


R1

IPv6 Network

NeighborTable

LSDB RoutingTable

NeighborTable

LSDB

2001:DB8:CAFE:2::/64

G0/0 2001:DB8:FEED:1::/64Link-localaddresses


116/186


R3

S0/0/0

:2

S0/0/1:2

R1

G0/0:1

S0/0/0:1

2001:DB8:CAFE:A001::/64

IS

S0/1/0:1R2

S0/0/1:1

S0/0/1:2

G0/0:1

2001:DB8:CAFE:3::/642001:DB8:CAFE:1::/64

G0/0:1

S0/0/1:1 S0/0/0

:22001:DB8:CAFE:A003::/64

2001:DB8:CAFE:A0

2001:DB8:FEED:1::/64

Link-localaddresses

FE80::1

addressesFE80::2

Link-lo

addresFE80

R1(config)#ipv6 router ospf 10


117/186


R1(config)#ipv6 router ospf 10R1(config-rtr)#

*Mar 29 11:21:53.739: %OSPFv3-4-NORTRID: Process OSPFv3-1-IPv6 courouter-id, please configure manually

R1(config-rtr)#R1(config-rtr)#router-id 1.1.1.1

R1(config-rtr)#auto-cost reference-bandwidth 1000% OSPFv3-1-IPv6: Reference bandwidth is changed.Please ensure reference bandwidth is consistent ac

all routers.R1(config-rtr)#end

R1#

32-bit Router ID simila

Must modify reference bandwidth because we ha

links, otherwise Fastethernet and faster would h

There is no no shutdown

Reference Default


118/186


Interface Type

e e e ce

Bandwidth

in bps

e au t

Bandwidth

in bps

Gigabit Ethernet

1 Gbps1,000,000,000 1,000,000,000

Fast Ethernet

100 Mbps1,000,000,000 100,000,000

Ethernet

10 Mbps1,000,000,000 10,000,000

Serial1.544 Mbps

1,000,000,000 1,544,000

Serial

128 kbps1,000,000,000 128,000

Serial

64 kbps

1,000,000,000 64,000

R1(config)# interface GigabitEthernet 0/0


119/186


R1(config)# interface GigabitEthernet 0/0R1(config-if)# ipv6 ospf 10 area 0

R1(config-if)# exitR1(config)#interface Serial0/0/0

R1(config-if)# ipv6 ospf 10 area 0R1(config-if)# exit

R1(config)#interface Serial0/0/1R1(config-if)# ipv6 ospf 10 area 0

R1(config-if)# endR1#

R1#show ipv6 ospf interfaces briefInterface PID Area Intf ID Cost Sta

Se0/0/1 10 0 7 15625 Se0/0/0 10 0 6 647 Gi0/0 10 0 3 1

R1#

No network comma

R2(config)# router ospf 10


120/186


R2(config)# router ospf 10R2(config-rtr)# router-id 2.2.2.2

R1(config-rtr)# auto-cost reference-bandwidth 1000R2(config-rtr)# exit

R2(config)# interface GigabitEthernet 0/0R2(config-if)# ipv6 ospf 10 area 0

R2(config-if)# exitR2(config)# interface Serial0/0/0R2(config-if)# ipv6 ospf 10 area 0

R2(config-if)# exitR2(config)# interface Serial0/0/1R2(config-if)# ipv6 ospf 10 area 0

R2(config-if)#

R1#show ipv6 ospf neighbor


121/186


R1#show ipv6 ospf neighbor

OSPFv3 Router with ID (1.1.1.1) (Proce

Neighbor ID Pri State Dead Time Interface ID3.3.3.3 0 FULL/ - 00:00:39 6 2.2.2.2 0 FULL/ - 00:00:36 6

R1#

Neighbors 32-bit Router IDs

R1 #show ipv6 protocols


122/186


R1 #show ipv6 protocolsIPv6 Routing Protocol is "connected"

IPv6 Routing Protocol is "ND"IPv6 Routing Protocol is "ospf 10"

Router ID 1.1.1.1Number of areas: 1 normal, 0 stub, 0 nssa

Interfaces (Area 0):Serial0/0/1Serial0/0/0

GigabitEthernet0/0Redistribution:

NoneR1#

Routing protocol a

OSPFv3 Router ID

Interfaces enabled for O

R1# show ipv6 route ospf


123/186


R1# show ipv6 route ospf

O 2001:DB8:CAFE:2::/64 [110/657]via FE80::2, Serial0/0/0

O 2001:DB8:CAFE:3::/64 [110/1304]via FE80::2, Serial0/0/0

O 2001:DB8:CAFE:A002::/64 [110/1294]via FE80::2, Serial0/0/0

R1#

Link-local addresses are used as next hop addresses


124/186


R1(config)# interface serial 0/0/0R1(config-if)# ipv6 ospf hello-interval 5

R1(config-if)# ipv6 ospf dead-interval eigrp 20

R1(config-if)#*Apr 10 15:03:51.175: %OSPFv3-5-ADJCHG: Process 10, Nbr 2.2.2.2 on SFULL to DOWN, Neighbor Down: Dead timer expired

R1(config-if)#

Hello and Dead Timers remain the same

Just add v6!

R1(config)# interface serial 0/0/0R1(config-if)# ipv6 ospf priority 10R1(config-if)# ipv6 ospf cost 65

Changing interface priority (DR/BDR

2001:DB8:FEED:1::/642001:DB8:CAFE::/48


125/186


ISP

S0/1/0:1

R2

R1R3

2001:DB8:CAFE::/48

Default Route

R2(config)# ipv6 route ::/0 2001:DB8:FEED:1::2R2(config)# ipv6 router ospf 10R2(config-rtr)# default-information originate

S0/0/1:2

R1# show ipv6 routeOE2 ::/0 [110/1], tag 10

via FE80::2, Serial0/0/0


126/186


Multi-Area OSPFv3


127/186


Multi-Area OSPF is new (optional) to CCNA

We dont have time to cover multi-area OSPFexcept for the commands associated with

OSPFv3

But here is a quick overview of the concepts

OSPF is good.0 SPF is not good!


128/186


R1 R2

My routing table istoo big and I am

running low onmemory

Im receiving too

many LSAs

My SPF algorithm is running tooften for me to route properly


129/186


Area 1

My routing table

is smaller as itdoes not haveexternal routes

(default).

Im now only

receiving LSAs fromarea 0 and area 1

I now only need

algorithm whchange in are

R1R2

Area 0 Area 51

I do not need to

rerun my SPFalgorithm if there

is a change inanother area.


130/186


L

Only R2 and routers in area51 exchange router LSAs

and run the SPF algorithm

R1 R2

Area 1 Area 0 Area 51

2001:DB8:CAFE:2::/64

G0/0Area 0


131/186


R3

S0/0/0:2

S0/0/1:2

R1

G0/0:1

S0/0/0:1

2001:DB8:CAFE:A001::/64

R2S0/0/1

:1

G0/0:1

2001:DB8:CAFE:3::/642001:DB8:CAFE:1::/64

:1

2001:DB8:CAFE

FE80::1

FE80::2

FE80::3

Area 1 Ar

2001:DB8:CAFE:2::/64

G0/01

Area 0


132/186


R3

S0/0/0:2

S0/0/1:2

R1

G0/0:1

S0/0/0:1

2001:DB8:CAFE:A001::/64

R2S0/0/1

:1

G0/0:1

2001:DB8:CAFE:3::/642001:DB8:CAFE:1::/64

:1

2001:DB8:CAFE

FE80::1

FE80::2

FE80::3

Area 1 Ar

R2(config)# router ospf 10R2(config-rtr)# router-id 2.2.2.2

R2(config-rtr)# exitR2(config)# interface GigabitEthernet 0/0

R2(config-if)# ipv6 ospf 10 area 0R2(config-if)# exit

R2(config)# interface Serial0/0/0

R2(config-if)# ipv6 ospf 10 area 0R2(config-if)# exitR2(config)# interface Serial0/0/1R2(config-if)# ipv6 ospf 10 area 0

No changes

All interfaces in

2001:DB8:CAFE:2::/64

G0/01

Area 0

R1(config)# ipv6 router ospf 10R1(config-rtr)# router-id 1.1.1.1R1(config-rtr)# exit

R1(config)# interface Serial 0/0/0An ABR (Area Border


133/186


R3

S0/0/0:2

S0/0/1 :2

R1

G0/0:1

S0/0/0 :1

2001:DB8:CAFE:A001::/64

R2S0/0/1

:1

G0/0:1

2001:DB8:CAFE:3::/642001:DB8:CAFE:1::/64

:1

2001:DB8:CAFE

FE80::1

FE80::2

FE80::3

Area 1 Ar

R1(config)# interface Serial 0/0/0R1(config-if)# ipv6 ospf 10 area 0

R1(config-if)# exitR1(config)# interface GigabitEthernet 0/0

R1(config-if)# ipv6 ospf 10 area 1R1(config-if)#

interfaces in more tha

Area 0


134/186


IPv6 Access Control Lists

IPv4 ACLs


135/186


IPv4 ACLs Standard

Numbered Named

Extended Numbered

Named

IPv6 ACLs Named only

Similar features to ExtACLs

IPv6 ACLs are very similar to IPv4 ACLs but with three sdifferences

1. Applying an IPv6 ACL to an interface: ip access-group is used in IPv4

ipv6 traffic-filter is used to apply an IPv6 ACL to a2. No Wildcard Masks

Prefix-lengths are used instead of wildcard ma3. Two additional default statements (besides implicit deny an

I know your IPv6address but I need

I havaddre

permit icmp any any nd-napermit icmp any any nd-ns


136/186


1

2

ICMPv6 Neighbor Solicitation message

ICMPv6 Neighbor Advertisement message

address but I needyour MAC address

addrelooking

my M

Two default statements allow the router to participate in the IPv6 equival

IPv6 uses ICMPv6 Neighbor Discovery (ND) messages to accomplish name adencapsulated in IPv6 packets

ARP does not use IPv4

IPv6 ACLs need to implicitly permit ND packets to be sent and received on

2001:D


137/186


R1(config)# ipv6 access-list NO-R3-LAN-ACCESSR1(config-ipv6-acl)# deny ipv6 2001:db8:cafe:30::/64 any

R1(config-ipv6-acl)# permit ipv6 any anyR1(config-ipv6-acl)# exit

R1(config)# interface s0/0/0R1(config-if)# ipv6 traffic-filter NO-R3-LAN-ACCESS in

R1(config-if)#

Deny all IPv6 packets from the 2001:DB8:CAFE:30::/64 coming into Ser

Permit all other IPv6 packets

R1IPv6

NETWORKS0/0/0G0/0

2001:D


138/186


R1(config)#ipv6 access-list NO-FTP-TO-11R1(config-ipv6-acl)#deny tcp any 2001:db8:cafe:11::/

R1(config-ipv6-acl)#deny tcp any 2001:db8:cafe:11::/64R1(config-ipv6-acl)#permit ipv6 any any

R1(config-ipv6-acl)#exitR1(config)#interface g0/0

R1(config-if)#ipv6 traffic-filter NO-FTP-TO-11R1(config-if)#

Deny FTP traffic from Gig0/0 to 2001:DB8:CAFE:11::/64

R1IPv6

NETWORKS0/0/0G0/0


139/186


Quick review of IPv6

IPv6 Static Routes

EIGRP for IPv6

OSPFv3

Multi-Area OSPFv3

IPv6 Access Control Lists

Equipping Todays Infor Tomorrows


140/186


for Tomorrow s

Cisco Networ

IPv6 Transition Mechanisms

Jude LamourProfessor

DeVry University

Academy Confe


141/186


Introduction

Background

IPv6 Deployment Mechanisms

Dual Stack

Tunneling

Translation

Summary


142/186


RFC1918 Private IP Addressing

10.0.0.0 /8

172.16.0.0 /12

192.168.0.0 /16

NAT/PAT

VLSM and CIDR

RFC3021 - /31 subnet mask

Security


143/186

2013 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, U.S./CanadaOctober

232 = 4.4 x 109 IPv4 Addresses

2128 = 3.4 x 1038 IPv6 Addresses

Thats 6.7 x 1019 addresses per cm2of earths surface including t

Thats roughly 15 billion IPv4 Internets


144/186


Transition to IPv6

Requires careful planning

Transition mechanisms

Expertise is a must

End goal is to deploy native IPv6 everywhere Cannot be done in isolation of current IPv4 installed bas


145/186


Strategy must yield low implementation and operational

Strategy must not degrade current network services

Change only the minimum amount necessary

Design must support continual maintenance, administrat

diagnosis, provisioning, and measurement


146/186


Dual Stack Transition


147/186


Introduction

Plan

Implement

Verify

Summary

H t d t b th IP 4 d IP 6 t l t k


148/186


Hosts and routers run both IPv4 and IPv6 protocol stack

Hosts and routers can communicate using native IPv4 and IPv6

Access to network applications using either IPv4 or IPv6 protocol sta Focus in this presentation is mainly on the router

A quick look at how dual stack works on host computers


149/186



150/186


Steps to Complete Dual

Stack Configuration

Comment

Step 1. Configure IPv4 addresses on routers anConfigure IPv4 IGP on routers

Step 2. Test IPv4 connectivity

Step 3. Configure IPv6 addresses on routers anConfigure IPv6 IGP on routers

Step 4. Test IPv6 connectivity


151/186



152/186


Traceroute

Ping

Show ipv6 interface brief

Show ipv6 route

Show ip route

Show running-config


153/186


Ensure IGP for IPv4 is working

Configure IPv6 addresses on required interfaces

Configure IPv6 IGP on all required layer 3 devices

Test IPv6 connectivity

Require complete administrative control over all infrastructure device

Dual stack can be labor intensive

Dual stack is very reliable when configured properly

Access to computing resources may be impacted by services such a


154/186


Manual Tunnel Transition


155/186


Introduction

How Does Manual Work?

Plan

Implement

Verify

Summary


156/186


Manual tunnel is a static tunneling mechanism defined in R

Primarily used to connect IPv6 nodes over a dominant IPv

network

Manually setup tunnels

Point-to-point IPv6 tunnel mechanism

Manual tunnel regards the IPv4 network as a link layer for

prefixes

Focus in this presentation is on the router, not a single hos

scalability issues in the latter case


157/186



158/186


Tunnel source is manually configured

Tunnel destination is manually configured

Capable of running IGP routing protocols

Tunnel endpoints share common prefix address

Any new tunnel created requires configuration on all route

need to participate in the tunneling

Can be labor intensive if new tunnels are required often

Steps to Complete Manual IOS Commands Comment


159/186


Steps to Complete Manual

Tunnel Configuration

IOS Commands Comment

Step 1. Interface loopback 0ip address 192.168.1.2 255.255.255.255

Configure the loopbac

sure it is reachable fro

the IPv4 IGP

Step 2. Interface tunnel 0tunnel source loopback 0

tunnel destination 192.168.1.1

ipv6 address 2005:1:1:1::1/64

tunnel mode ipv6ip

ipv6 eigrp 10

Configure the tunnel i

prefix address, tunnel

destination, and selec

Step 3.

Ipv6 unicast-routing

Ipv6 router eigrp 10

eigrp router-id 2.2.2.2

no shutdown

Enable IPv6 routing a

protocol, if you wish

Step 4. Interface FastEthernet 0/1ipv6 address 2005:1:1:10::1/64

ipv6 eigrp 10

Configure IPv6 addre

using an unique prefix


160/186



161/186


Traceroute

Ping

Show ipv6 interface brief

Show ipv6 route

Show running-config


162/186


Do not forget to configure the source IPv4 tunnel address

Do not forget to configure the destination IPv4 tunnel address

Do not forget to configure the IPv6 interface addresses

Do not forget to configure the IPv6 IGP

Make sure the source IPv4 tunnel address matches the remote rout

destination IPv4 tunnel endpoint

Do not forget to specify the tunnel mode or you will be activating GR

Avoid using a physical interface to ensure tunnel reliability

Note that tunnel numbers have local significance only


163/186


6to4 Transition


164/186


Introduction

How Does 6to4 Work?

Plan

Implement

Verify

Summary


165/186


6to4 is a dynamic tunneling protocol defined in RFC3056

Point-to-multipoint IPv6 tunnel mechanism

Facilitate communication of IPv6 sites over native IPv4 backbone witunnel setup

Capable of supporting global unicast IPv6 addresses

Each router is capable of deriving an interim globally unique IPv6 ad

Flexible solution - additional IPv6 sites can be added to the network new configuration

Focus in this presentation is on the router, not a single host due to s

issues in the latter case


166/186



167/186


Non global addresses uses the reserved 2002::/16 prefix

Incoming IPv6 address has the destination IPv4 address embedded

Use the second and third quartets in the IPv6 address as the hex of address

Allocate unique /64 prefix for each subnet

Configure the tunnel interface with IPv6 address derived from the ab

prefix

Configure a static route for destination 2002::/16 and point to the tun

hop address


168/186



169/186


Steps to Complete

6to4 Tunnel

Configuration


Step 1.IPv4 Address: 192.168.2.2

Identify the IPv4 address that will source IPv4 address

Step 2. C0A8:0202 orC0A8:202

Convert the IPv4 address into hex

Step 3. 2002::/16 Write down the original reserved I

Step 4. 2002:C0A8:202::/48 Merge reserved IPv6 prefix for 6tovalues of the IPv4 addresses in st

IPv6 prefix

S C l IOS C d C


170/186


Steps to Complete

6to4 Tunnel

Configuration for R2


Step 1.Interface loopback 2

ip address 192.168.2.2 255.255.255.255 Configure the loopbasure it is reachable f

the IPv4 IGP


ipv6 address 2002:C0A8:202::/128

tunnel mode ipv6ip 6to4

Configure the tunnel

prefix address, tunne

the tunnel mode

Step 3. Interface FastEthernet 0/1ipv6 address 2002:C0A8:202:1:1/64

Configure IPv6 addre

using the IPv6 prefix

address

Step 4. Ipv6 unicast-routingIpv6 route 2002::/16 Tunnel 2

Enable IPv6 routing

route to all unknown

addresses to the tun

St t C l t IOS C d C t


171/186


Steps to Complete

6to4 Tunnel

Configuration


Step 1.IPv4 Address: 192.168.3.3

Identify the IPv4 address that source IPv4 address

Step 2. C0A8:0303 orC0A8:303

Convert the IPv4 address into

Step 3. 2002::/16 Write down the original reserv

Step 4. 2002:C0A8:303::/48 Merge reserved IPv6 prefix forvalues of the IPv4 addresses i

the IPv6 prefix

St t C l t IOS C d C t


172/186


Steps to Complete

6to4 Tunnel

Configuration for R3


Step 1.Interface loopback 3

ip address 192.168.3.3 255.255.255.255 Configure the loopback intit is reachable from remote

IGP


ipv6 address 2002:C0A8:303::/128

tunnel mode ipv6ip 6to4

Configure the tunnel interf

address, tunnel source, an

mode

Step 3. Interface FastEthernet 0/1ipv6 address 2002:C0A8:303:1:1/64

Configure IPv6 address on

the IPv6 prefix derived for

Step 4. Ipv6 unicast-routingIpv6 route 2002::/16 Tunnel 3

Enable IPv6 routing and co

to all unknown IPv6 2002:

tunnel id

T


173/186

2013 Cisco Systems, Inc. All

Documents

IPv6_2013_presentación_realizada