目  录

1 IPv6基础典型配置指导

1.1 IPv6基础典型配置指导

1.1.1 应用要求

1.1.2 配置思路

1.1.3 适用产品、版本

1.1.4 配置过程和解释

1.1.5 完整配置

1.1.6 配置注意事项

1 IPv6基础典型配置指导

1.1  IPv6基础典型配置指导

IPv6（Internet Protocol Version 6，因特网协议版本6）是网络层协议的第二代标准协议，也被称为IPng（IP Next Generation，下一代因特网），它是IETF（Internet Engineering Task Force，Internet工程任务组）设计的一套规范，是IPv4的升级版本。IPv6和IPv4之间最显著的区别为：IP地址的长度从32比特增加到128比特。

1.1.1  应用要求

网络环境如图1-1所示：

图1-1 IPv6基础配置组网图

l              Host、Switch A和Switch B通过以太网端口直接相连，将以太网端口分别加入相应的VLAN里，在VLAN接口上配置IPv6地址，验证它们之间的互通性。

l              Switch A的VLAN接口2的全球单播地址为3001::1/64，VLAN接口1的全球单播地址为2001::1/64。

l              Switch B的VLAN接口2的全球单播地址为3001::2/64，有可以到Host的路由。

l              Host上安装了IPv6，根据IPv6邻居发现协议自动配置IPv6地址，有可以到Switch B的路由。

1.1.2  配置思路

在Switch A交换机上：

l              使能交换机的IPv6转发功能。

l              手工指定VLAN接口2的全球单播地址。

l              手工指定VLAN接口1的全球单播地址，并允许其发布RA消息。（缺省情况下，所有的接口不会发布RA消息）

在Switch B交换机上：

l              使能交换机的IPv6转发功能。

l              配置VLAN接口2的全球单播地址。

l              配置IPv6静态路由，该路由的目的地址为2001::/64，下一跳地址为3001::1。

在主机上配置：

l              Host上安装IPv6，根据IPv6邻居发现协议自动配置IPv6地址。

1.1.3  适用产品、版本

表1-1 配置适用的产品与软件版本关系

1.1.4  配置过程和解释

(1)        配置Switch A

# 使能交换机的IPv6转发功能。

<SwitchA> system-view

[SwitchA] ipv6

# 手工指定VLAN接口2的全球单播地址。

[SwitchA] interface vlan-interface 2

[SwitchA-Vlan-interface2] ipv6 address 3001::1/64

[SwitchA-Vlan-interface2] quit

# 手工指定VLAN接口1的全球单播地址，并允许其发布RA消息。（缺省情况下，所有的接口不会发布RA消息）

[SwitchA] interface vlan-interface 1

[SwitchA-Vlan-interface1] ipv6 address 2001::1/64

[SwitchA-Vlan-interface1] undo ipv6 nd ra halt

[SwitchA-Vlan-interface1] quit

(2)        配置Switch B

# 使能交换机的IPv6转发功能。

<SwitchB> system-view

[SwitchB] ipv6

# 配置VLAN接口2的全球单播地址。

[SwitchB] interface vlan-interface 2

[SwitchB-Vlan-interface2] ipv6 address 3001::2/64

[SwitchB-Vlan-interface2] quit

# 配置IPv6静态路由，该路由的目的地址为2001::/64，下一跳地址为3001::1。

[SwitchB] ipv6 route-static 2001:: 64 3001::1

(3)        配置Host

Host上安装IPv6，根据IPv6邻居发现协议自动配置IPv6地址。

[SwitchA] display ipv6 neighbors interface GigabitEthernet 1/0/2

                Type: S-Static    D-Dynamic

IPv6 Address                 Link-layer      VID  Interface    State T Age

FE80::215:E9FF:FEA6:7D14      0015-e9a6-7d14  1     GE1/0/2         STALE D 1238

2001::15B:E0EA:3524:E791      0015-e9a6-7d14  1     GE1/0/2         STALE D 1248

通过上面的信息可以知道Host上获得的IPv6全球单播地址为2001::15B:E0EA:3524:E791。

2. 验证配置结果

# 显示Switch A的接口信息，可以看到接口配置的IPv6全球单播地址。

[SwitchA] display ipv6 interface vlan-interface 2 verbose

Vlan-interface2 current state :UP

Line protocol current state :UP

IPv6 is enabled, link-local address is FE80::20F:E2FF:FE00:2

  Global unicast address(es):

    3001::1, subnet is 3001::/64

  Joined group address(es):

    FF02::1:FF00:0

    FF02::1:FF00:1

    FF02::1:FF00:2

    FF02::2

    FF02::1

  MTU is 1500 bytes

  ND DAD is enabled, number of DAD attempts: 1

  ND reachable time is 30000 milliseconds

  ND retransmit interval is 1000 milliseconds

  Hosts use stateless autoconfig for addresses

IPv6 Packet statistics:

  InReceives:                    25829

  InTooShorts:                   0

  InTruncatedPkts:               0

  InHopLimitExceeds:             0

  InBadHeaders:                  0

  InBadOptions:                  0

  ReasmReqds:                    0

  ReasmOKs:                      0

  InFragDrops:                   0

  InFragTimeouts:                0

  OutFragFails:                  0

  InUnknownProtos:               0

  InDelivers:                    47

  OutRequests:                   89

  OutForwDatagrams:              48

  InNoRoutes:                    0

  InTooBigErrors:                0

  OutFragOKs:                    0

  OutFragCreates:                0

  InMcastPkts:                   6

  InMcastNotMembers:             25747

  OutMcastPkts:                  48

  InAddrErrors:                  0

  InDiscards:                    0

  OutDiscards:                   0

[SwitchA] display ipv6 interface vlan-interface 1 verbose

Vlan-interface1 current state :UP

Line protocol current state :UP

IPv6 is enabled, link-local address is FE80::20F:E2FF:FE00:1C0

  Global unicast address(es):

    2001::1, subnet is 2001::/64

  Joined group address(es):

    FF02::1:FF00:0

    FF02::1:FF00:1

    FF02::1:FF00:1C0

    FF02::2

    FF02::1

  MTU is 1500 bytes

  ND DAD is enabled, number of DAD attempts: 1

  ND reachable time is 30000 milliseconds

  ND retransmit interval is 1000 milliseconds

  ND advertised reachable time is 0 milliseconds

  ND advertised retransmit interval is 0 milliseconds

  ND router advertisements are sent every 600 seconds

  ND router advertisements live for 1800 seconds

  Hosts use stateless autoconfig for addresses

IPv6 Packet statistics:

  InReceives:                    272

  InTooShorts:                   0

  InTruncatedPkts:               0

  InHopLimitExceeds:             0

  InBadHeaders:                  0

  InBadOptions:                  0

  ReasmReqds:                    0

  ReasmOKs:                      0

  InFragDrops:                   0

  InFragTimeouts:                0

  OutFragFails:                  0

  InUnknownProtos:               0

  InDelivers:                    159

  OutRequests:                   1012

  OutForwDatagrams:              35

  InNoRoutes:                    0

  InTooBigErrors:                0

  OutFragOKs:                    0

  OutFragCreates:                0

  InMcastPkts:                   79

  InMcastNotMembers:             65

  OutMcastPkts:                  938

  InAddrErrors:                  0

  InDiscards:                    0

  OutDiscards:                   0

# 显示Switch B的接口信息，可以看到接口配置的IPv6全球单播地址。

[SwitchB] display ipv6 interface vlan-interface 2 verbose

Vlan-interface2 current state :UP

Line protocol current state :UP

IPv6 is enabled, link-local address is FE80::20F:E2FF:FE00:1234

  Global unicast address(es):

    3001::2, subnet is 3001::/64

  Joined group address(es):

    FF02::1:FF00:0

    FF02::1:FF00:2

    FF02::1:FF00:1234

    FF02::2

    FF02::1

  MTU is 1500 bytes

  ND DAD is enabled, number of DAD attempts: 1

  ND reachable time is 30000 milliseconds

  ND retransmit interval is 1000 milliseconds

  Hosts use stateless autoconfig for addresses

IPv6 Packet statistics:

  InReceives:                    117

  InTooShorts:                   0

  InTruncatedPkts:               0

  InHopLimitExceeds:             0

  InBadHeaders:                  0

  InBadOptions:                  0

  ReasmReqds:                    0

  ReasmOKs:                      0

  InFragDrops:                   0

  InFragTimeouts:                0

  OutFragFails:                  0

  InUnknownProtos:               0

  InDelivers:                    117

  OutRequests:                   83

  OutForwDatagrams:              0

  InNoRoutes:                    0

  InTooBigErrors:                0

  OutFragOKs:                    0

  OutFragCreates:                0

  InMcastPkts:                   28

  InMcastNotMembers:             0

  OutMcastPkts:                  7

  InAddrErrors:                  0

  InDiscards:                    0

  OutDiscards:                   0

# 在Host上使用Ping测试和Switch A及Switch B的互通性；在Switch B上使用Ping测试和Switch A及Host的互通性。

[SwitchB] ping ipv6 -c 1 3001::1

  PING 3001::1 : 56  data bytes, press CTRL_C to break

    Reply from 3001::1

    bytes=56 Sequence=1 hop limit=64  time = 2 ms

  --- 3001::1 ping statistics ---

    1 packet(s) transmitted

    1 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 2/2/2 ms

[SwitchB] ping ipv6 -c 1 2001::15B:E0EA:3524:E791

  PING 2001::15B:E0EA:3524:E791 : 56  data bytes, press CTRL_C to break

    Reply from 2001::15B:E0EA:3524:E791

    bytes=56 Sequence=1 hop limit=63  time = 3 ms

  --- 2001::15B:E0EA:3524:E791 ping statistics ---

    1 packet(s) transmitted

    1 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 3/3/3 ms

从Host上也可以ping通Switch B和Switch A，证明它们是互通的。

1.1.5  完整配置

l              配置Switch A

#                                                                               

 ipv6

#

vlan 2

#

interface Vlan-interface1

 ipv6 address 2001::1/64

 undo ipv6 nd ra halt

#

interface Vlan-interface2

 ipv6 address 3001::1/64

#

l              配置Switch B

#                                                                               

 ipv6

#

vlan 2

#

interface Vlan-interface2

 ipv6 address 3001::2/64

#

 ipv6 route-static 2001:: 64 3001::1

1.1.6  配置注意事项

在Ping链路本地地址时，需要使用-i参数，来指定链路本地地址的接口。