基于【IPv6】静态路由和默认路由的配置
基于IPv6静态路由和默认路由的配置
北湖ssl适用于网站、小程序/APP、API接口等需要进行数据传输应用场景,ssl证书未来市场广阔!成为创新互联的ssl证书销售渠道,可以享受市场价格4-6折优惠!如果有意向欢迎电话联系或者加微信:18982081108(备注:SSL证书合作)期待与您的合作!
实验环境:
实验背景:在路由器R1上配置3个环回接口IPv6地址,分别模拟三个不同的IPv6前缀,作为IPV6目标网络,然后,在路由器R2上为三个IPv6前缀配置静态路由,并检测其连通性,最后使用IPv6的默认路由替代静态路由条目。
第一步:为路由器R1和R2完成基础配置,包括启动IPv6和地址配置,并激活相关的接口,配置如下:
R1上的配置:
R1(config)#ipv6 unicast-routing //启动IPv6的路由功能,否则静态路由无法完成//
R1(config)#int f0/0 //进入f0/0接口
R1(config-if)#ipv6 add 2001:10::1/64 //为该接口配置IPv6地址
R1(config-if)#no sh
R1(config)#interface lo1
R1(config-if)#ipv6 add 2001:2::1/64
R1(config-if)#ex
R1(config)#int lo2
R1(config-if)#ipv6 add 2001:3::1/64
R1(config-if)#ex
R1(config)#int lo3
R1(config-if)#ipv6 add 2001:4::1/64
R1(config-if)#ex
R2上的配置:
R2(config)#ipv6 unicast-routing
R2(config)#int f0/0
R2(config-if)#ipv6 add 2001:10::2/64
R2(config-if)#no sh
第二步:在路由器R2上ping R1上的环回IPv6地址,结果为ping不通,因为在路由器R2上没有到目标地址的路由,关于这一技术知识点与IPv4的环境相同,要配置IPv6静态和默认路由功能类似于IPv4,但是书写形式还存在一定的区别,而默认路由是一种特殊的静态路由。
IPv6静态路由的格式:
ipv6 route 【目标IPv6前缀】 【出站接口】 【下一跳IPv6地址】
目标IPv6前缀:指示目标IPv6网络,这与IPv4的目标子网的意义相同。
出站接口:当前路由器转发数据包的出站接口,如果使用了邻接路由器的IPv6本地链路地址来作为下一跳地址,那么在静态路由的语法中必须包含出站接口关键字。
下一跳IPv6地址:要到达目标网络所要经历的下一跳路由器的IPv6地址,这与IPv4的环境相同。注意:根据RFC2461规定,路由器必须能够确定下一跳路由器的本地链路地址,所以,在配置IPv6静态路由时,下一跳地址建议配置为邻接路由器本地链路IPv6地址,在本次实验中,可以在R1上使用show ipv6 interface f0/0来查看:
R1#sho ipv6 int f0/0
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::C800:1AFF:FE74:8
No Virtual link-local address(es):
Global unicast address(es):
2001:10::1, subnet is 2001:10::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
FF02::1:FF74:8
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 19434)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
在R2上配置静态路由:
R2(config)#ipv6 route 2001:2::/64 f0/0 FE80::C800:1AFF:FE74:8
R2(config)#ipv6 route 2001:3::/64 f0/0 FE80::C800:1AFF:FE74:8
R2(config)#ipv6 route 2001:4::/64 f0/0 FE80::C800:1AFF:FE74:8
配置完成后,查看自己的路由表(show ipv6 route),可以看到被添加的三条静态路由,然后再次测试与目标网段进行通讯。
R2#sho ipv6 route
IPv6 Routing Table - Default - 6 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
S 2001:2::/64 [1/0]
via FE80::C800:1AFF:FE74:8, FastEthernet0/0 //被添加的
S 2001:3::/64 [1/0] 静态路由//
via FE80::C800:1AFF:FE74:8, FastEthernet0/0
S 2001:4::/64 [1/0]
via FE80::C800:1AFF:FE74:8, FastEthernet0/0
C 2001:10::/64 [0/0]
via FastEthernet0/0, directly connected
L 2001:10::2/128 [0/0]
via FastEthernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
R2#ping 2001:2::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:2::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/28/48 ms
R2#ping 2001:3::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:3::1, timeout is 2 seconds:
!.!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 24/36/48 ms
R2#ping 2001:4::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:4::1, timeout is 2 seconds:
!!!!!
接下来把刚刚配置的静态路由条目删掉(直接在命令前面加no,就OK了),下面做默认路由。
R2(config)#no ipv6 route 2001:2::/64 f0/0 FE80::C800:1AFF:FE74:8
R2(config)#no ipv6 route 2001:3::/64 f0/0 FE80::C800:1AFF:FE74:8
R2(config)#no ipv6 route 2001:4::/64 f0/0 FE80::C800:1AFF:FE74:8
再次查看路由表,这时路由表中应该没有静态路由条目,测试连通性也是不行的。
R2#sho ipv route
IPv6 Routing Table - Default - 3 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
C 2001:10::/64 [0/0]
via FastEthernet0/0, directly connected
L 2001:10::2/128 [0/0]
via FastEthernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
R2#ping 2001:2::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:2::1, timeout is 2 seconds:
% No valid route for destination
Success rate is 0 percent (0/1)
在R2上配置默认路由:
(查看路由表中,有没有默认路由条目,如果有则测试连通性,一步到位,就OKl)
R2(config)#ipv6 route ::/0 f0/0 FE80::C800:1AFF:FE74:8
R2(config)#end
*Jun 9 09:26:01.619: %SYS-5-CONFIG_I: Configured from console by console
R2#sho ipv6 route
IPv6 Routing Table - Default - 4 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
S ::/0 [1/0]
via FE80::C800:1AFF:FE74:8, FastEthernet0/0 //被添加的默认路由//
C 2001:10::/64 [0/0]
via FastEthernet0/0, directly connected
L 2001:10::2/128 [0/0]
via FastEthernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
R2#ping 2001:2::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:2::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/29/44 ms
以上就是今天的实验了;其实原则上还是跟IPv4基本相似,没有太大的差别,就是命令上有所改动,
只要有IPv4的基础,理解IPv6就很容易了
好了,今天就到这里啦!
当前标题:基于【IPv6】静态路由和默认路由的配置
网站链接:http://scyanting.com/article/jpopjg.html