If a host wants to
access an IPv6 network through a switch, make sure that an IPv6 address (a global
unicast address, a site-local address, or a link-local address) is configured
on the switch, and the host and the switch are reachable to each other.
To enable a host to access a public IPv6
network, you need to assign an IPv6 global unicast address to the switch.
l
IPv6 site-local addresses and aggregatable
global unicast addresses can be configured in the following ways:
l
EUI-64 format: When the EUI-64 format is adopted
to form IPv6 addresses, the IPv6 address prefix of an interface is the
configured prefix and the interface identifier is derived from the link-layer
address of the interface.
l
Manual configuration: IPv6 site-local addresses
or aggregatable global unicast addresses are configured manually.
l
IPv6 link-local addresses can be configured in either
of the following ways:
l
Automatic generation: The device automatically
generates a link-local address for an interface according to the link-local
address prefix (FE80::/64) and the link-layer address of the interface.
l
Manual assignment: IPv6 link-local addresses can
be assigned manually.
Figure
1-1 Network diagram for IPv6 basics configuration
l
Host, Switch A and Switch B are directly
connected through Ethernet ports. Add the Ethernet ports into corresponding
VLANs, configure IPv6 addresses for the VLAN interfaces and verify the
connectivity between them.
l
The aggregatable global unicast addresses of
VLAN-interface 2 and VLAN-interface 1 on Switch A are 3001::1/64 and 2001::1/64
respectively.
l
The aggregatable global unicast address of
VLAN-interface 2 on Switch B is 3001::2/64, and a route to Host is available.
l
IPv6 is enabled for Host to automatically get an
IPv6 address through IPv6 NDP.
|
Product series
|
Software version
|
Hardware version
|
|
S3610 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5510 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5500-SI Series Ethernet Switches
|
Release 1207
|
All versions except S5500-20TP-SI
|
|
Release 1301
|
S5500-20TP-SI
|
|
S5500-EI Series Ethernet Switches
|
Release 2102
|
All versions
|
|
S7500E Series Ethernet Switches
|
Release 6100
|
All versions
|
l
The corresponding VLAN interfaces have been
created on the switch.
l
Before enabling IPv6 on an S3610/S5510 series
Ethernet switch, you need to configure the device to operate in the IPv4/IPv6
dual-stack mode by using the switch-mode dual-ipv4-ipv6 command.
Otherwise, IPv6 packets cannot be forwarded on the device even if IPv6 is
enabled. The switch-mode command takes effect after the device is
rebooted.
l
Configure Switch A
# Enable IPv6.
<SwitchA>
system-view
[SwitchA] ipv6
# Specify an aggregatable global unicast
address for VLAN-interface 2.
[SwitchA] interface
vlan-interface 2
[SwitchA-Vlan-interface2]
ipv6 address 3001::1/64
[SwitchA-Vlan-interface2]
quit
# Specify an aggregatable global unicast
address for VLAN-interface 1, and allow it to advertise RA messages (no
interface advertises RA messages by default).
[SwitchA]
interface vlan-interface 1
[SwitchA-Vlan-interface1]
ipv6 address 2001::1/64
[SwitchA-Vlan-interface1]
undo ipv6 nd ra halt
l
Configure Switch B
# Enable IPv6.
<SwitchB>
system-view
[SwitchB] ipv6
# Configure an aggregatable global unicast
address for VLAN-interface 2.
[SwitchB] interface
vlan-interface 2
[SwitchB-Vlan-interface2]
ipv6 address 3001::2/64
[SwitchB-Vlan-interface2]
quit
# Configure an IPv6 static route with
destination IP address 2001::/64 and next hop address 3001::1.
[SwitchB] ipv6
route-static 2001:: 64 3001::1
l
Configure Host
Enable IPv6 for Host to automatically get
an IPv6 address through IPv6 NDP.
[SwitchA]
display ipv6 neighbors interface ethernet 1/0/2
Type: S-Static D-Dynamic
IPv6
Address Link-layer VID Interface State T Age
FE80::215:E9FF:FEA6:7D14
0015-e9a6-7d14 1 Eth1/0/2 STALE D 1238
2001::15B:E0EA:3524:E791
0015-e9a6-7d14 1 Eth1/0/2 STALE D 1248
The above information shows that the IPv6
aggregatable global unicast address that Host obtained is 2001::15B:E0EA:3524:E791.
l
Configuration verification
# Display the IPv6 interface settings on
Switch.
[SwitchA] display
ipv6 interface vlan-interface 2
[SwitchA] display
ipv6 interface vlan-interface 1
[SwitchB] display
ipv6 interface vlan-interface 2
# Ping Switch A and Switch B on Host, and
ping Switch A and Host on Switch B to verify the connectivity between them.
Caution:
When you ping a
link-local address, you should use the –i parameter to specify an
interface for the link-local address.
[SwitchB]
ping ipv6 -c 1 3001::1
PING
3001::1 : 56 data bytes, press CTRL_C to break
Reply
from 3001::1
bytes=56 Sequence=1 hop limit=64 time = 2 ms
---
3001::1 ping statistics ---
1
packet(s) transmitted
1
packet(s) received
0.00%
packet loss
round-trip
min/avg/max = 2/2/2 ms
[SwitchB-Vlan-interface2]
ping ipv6 -c 1 2001::15B:E0EA:3524:E791
PING
2001::15B:E0EA:3524:E791 : 56 data bytes, press CTRL_C to break
Reply
from 2001::15B:E0EA:3524:E791
bytes=56 Sequence=1 hop limit=63 time = 3 ms
--- 2001::15B:E0EA:3524:E791 ping statistics
---
1 packet(s) transmitted
1
packet(s) received
0.00%
packet loss
round-trip min/avg/max = 3/3/3 ms
As shown in the output information, Host can ping Switch B and
Switch A.
l
Configure Switch A
#
ipv6
#
interface
Vlan-interface1
ipv6
address 2001::1/64
undo ipv6
nd ra halt
#
interface
Vlan-interface2
ipv6
address 3001::1/64
#
l
Configure Switch B
#
ipv6
#
interface
Vlan-interface2
ipv6
address 3001::2/64
#
ipv6 route-static
2001:: 64 3001::1
#
l
After an IPv6 site-local address or aggregatable
global unicast address is configured for an interface, a link-local address is
generated automatically. The automatically generated link-local address is the
same as the one generated by using the ipv6 address auto link-local
command.
l
Manual assignment takes precedence over
automatic generation. That is, if you first adopt automatic generation and then
manual assignment, the manually assigned link-local address will overwrite the
automatically generated one. If you first adopt manual assignment and then
automatic generation, the automatically generated link-local address will not
take effect and the link-local address of an interface is still the manually assigned
one. If you delete the manually assigned address, the automatically generated
link-local address is validated.
The IPv6 over IPv4 tunneling mechanism
encapsulates an IPv4 header in IPv6 data packets so that IPv6 packets can pass
an IPv4 network through a tunnel to realize interworking between isolated IPv6
networks.
According to the way the IPv4 address of
the tunnel destination is acquired, tunnels are divided into configured tunnel
and automatic tunnel.
l
If the IPv4 address of the tunnel destination
cannot be acquired from the destination address of the IPv6 packet, it needs to
be configured manually. Such a tunnel is called a configured tunnel.
l
If the IPv4 address is embedded into the IPv6
address, the IPv4 address of the tunnel destination can automatically be
acquired from the destination address of the IPv6 packet. Such a tunnel is
called an automatic tunnel.
According to the way an IPv6 packet is
encapsulated, IPv6 over IPv4 tunnels are divided into the following types:
l
IPv6 manual tunnel
l
Automatic IPv4-compatible IPv6 tunnel
l
6to4 tunnel
l
ISATAP tunnel
Among the above tunnels, the IPv6 manual
tunnel is a configured tunnel, while the automatic IPv4-compatible IPv6 tunnel,
the 6to4 tunnel, and intra-site automatic tunnel address protocol (ISATAP)
tunnel are automatic tunnels.
A manually
configured tunnel is a point-to-point link. One link is a separate tunnel. The
IPv6 manually configured tunnels provide stable connections requiring regular
secure communication between two border routers or between a border router and
a host for access to remote IPv6 networks.
Figure 1-2 Network diagram for an IPv6
manual tunnel
As shown in Figure 1-2,
two IPv6 networks are connected to an IPv4 network through Switch A and Switch
B respectively. Configure an IPv6 manual tunnel between Switch A and Switch B
to make the two IPv6 networks reachable to each other.
|
Product series
|
Software version
|
Hardware version
|
|
S3610 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5510 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5500-EI Series Ethernet Switches
|
Release 2102
|
All versions
|
|
S7500E Series Ethernet Switches
|
Release 6100
|
All versions
|
l
The corresponding VLAN interfaces have been
created on Switch A and Switch B.
l
The IP addresses of VLAN-interface 100 on Switch
A and Switch B have been configured and an IPv4 route is available between the
two interfaces.
l
Before enabling IPv6 on an S3610/S5510 series
Ethernet switch, you need to configure the device to operate in the IPv4/IPv6
dual-stack mode by using the switch-mode dual-ipv4-ipv6 command.
Otherwise, IPv6 packets cannot be forwarded on the device even if IPv6 is
enabled. The switch-mode command takes effect after the device is
rebooted.
l
Configure Switch A
# Enable IPv6.
<SwitchA>
system-view
[SwitchA] ipv6
# Configure an IPv4 address for VLAN-interface
100.
[SwitchA] interface
vlan-interface 100
[SwitchA-Vlan-interface100]
ip address 192.168.100.1 255.255.255.0
[SwitchA-Vlan-interface100]
quit
# Configure an IPv6 address for
VLAN-interface 101.
[SwitchA]
interface vlan-interface 101
[SwitchA-Vlan-interface101]
ipv6 address 3002::1 64
[SwitchA-Vlan-interface101]
quit
# Configure a link aggregation group.
Disable STP on the port before adding it into the link aggregation group.
[SwitchA]
link-aggregation group 1 mode manual
[SwitchA]
link-aggregation group 1 service-type tunnel
[SwitchA] interface
GigabitEthernet 1/0/2
[SwitchA-GigabitEthernet1/0/2]
stp disable
[SwitchA-GigabitEthernet1/0/2]
port link-aggregation group 1
[SwitchA-GigabitEthernet1/0/2]
quit
# Configure a manual IPv6 tunnel.
[SwitchA]
interface tunnel 0
[SwitchA-Tunnel0]
ipv6 address 3001::1/64
[SwitchA-Tunnel0]
source vlan-interface 100
[SwitchA-Tunnel0]
destination 192.168.50.1
[SwitchA-Tunnel0]
tunnel-protocol ipv6-ipv4
# Configure the tunnel to reference link
aggregation group 1 in tunnel interface view.
[SwitchA-Tunnel0]
aggregation-group 1
[SwitchA-Tunnel0]
quit
# Configure a static route to IPv6 Group 2
through tunnel 0 on Switch A.
[SwitchA]
ipv6 route-static 3003:: 64 tunnel 0
l
Configure Switch B
# Enable IPv6.
<SwitchB>
system-view
[SwitchB] ipv6
# Configure an IPv4 address for VLAN-interface
100.
[SwitchB] interface
vlan-interface 100
[SwitchB-Vlan-interface100]
ip address 192.168.50.1 255.255.255.0
[SwitchB-Vlan-interface100]
quit
# Configure an IPv6 address for
VLAN-interface 101.
[SwitchB]
interface vlan-interface 101
[SwitchB-Vlan-interface101]
ipv6 address 3003::1 64
[SwitchB-Vlan-interface101]
quit
# Configure a link aggregation group.
Disable STP on the port before adding it into the link aggregation group.
[SwitchB]
link-aggregation group 1 mode manual
[SwitchB]
link-aggregation group 1 service-type tunnel
[SwitchB]
interface GigabitEthernet 1/0/2
[SwitchB-GigabitEthernet1/0/2]
stp disable
[SwitchB-GigabitEthernet1/0/2]
port link-aggregation group 1
[SwitchB-GigabitEthernet1/0/2]
quit
# Configure an IPv6 manual tunnel.
[SwitchB]
interface tunnel 0
[SwitchB-Tunnel0]
ipv6 address 3001::2/64
[SwitchB-Tunnel0]
source vlan-interface 100
[SwitchB-Tunnel0]
destination 192.168.100.1
[SwitchB-Tunnel0]
tunnel-protocol ipv6-ipv4
# Configure the tunnel to reference link
aggregation group 1 in tunnel interface view.
[SwitchB-Tunnel0]
aggregation-group 1
[SwitchB-Tunnel0] quit
# Configure a static route to IPv6 Group 1
through tunnel 0 on Switch B.
[SwitchB]
ipv6 route-static 3002:: 64 tunnel 0
l
Configuration verification
After the above configurations, display the
status of the tunnel interfaces on Switch A and Switch B, respectively.
[SwitchA] display
ipv6 interface tunnel 0
[SwitchB] display
ipv6 interface tunnel 0
# Ping the IPv6 address of the peer tunnel
interface from Switch A.
[SwitchA] ping
ipv6 3003::1
PING
3003::1 : 56 data bytes, press CTRL_C to break
Reply
from 3003::1
bytes=56 Sequence=1 hop limit=64 time = 1 ms
Reply
from 3003::1
bytes=56 Sequence=2 hop limit=64 time = 1 ms
Reply
from 3003::1
bytes=56 Sequence=3 hop limit=64 time = 1 ms
Reply
from 3003::1
bytes=56 Sequence=4 hop limit=64 time = 1 ms
Reply
from 3003::1
bytes=56 Sequence=5 hop limit=64 time = 1 ms
---
3003::1 ping statistics ---
5
packet(s) transmitted
5
packet(s) received
0.00%
packet loss
round-trip min/avg/max = 1/1/1 ms
l
Configure Switch A
#
ipv6
#
link-aggregation
group 1 mode manual
link-aggregation
group 1 service-type tunnel
#
interface
Vlan-interface100
ip
address 192.168.100.1 255.255.255.0
#
interface
Vlan-interface101
ipv6
address 3002::1/64
#
interface
GigabitEthernet1/0/2
stp
disable
port
link-aggregation group 1
#
interface
Tunnel0
ipv6
address 3001::1/64
source
Vlan-interface100
destination
192.168.50.1
aggregation-group
1
#
ipv6
route-static 3003:: 64 tunnel 0
#
l
Configure SwitchB
#
ipv6
#
link-aggregation
group 1 mode manual
link-aggregation
group 1 service-type tunnel
#
vlan 100
#
interface
Vlan-interface100
ip
address 192.168.100.1 255.255.255.0
#
interface Vlan-interface101
ipv6
address 3003::1/64
#
interface
GigabitEthernet1/0/2
stp
disable
port
link-aggregation group 1
#
interface
Tunnel0
ipv6
address 3001::1/64
source
Vlan-interface100
destination
192.168.50.1
aggregation-group
1
#
ipv6
route-static 3002:: 64 tunnel 0
#
l
The same tunnel type should be configured at
both ends of the tunnel. Otherwise, packet delivery will fail.
l
Before referencing a link aggregation group on
the tunnel interface to receive and send packets, make sure that the
aggregation group has been configured. Otherwise, the tunnel interface will not
be up to communicate.
l
For a distributed device (such as S7500E series),
a tunnel interface number is in the A/B/C format, where A, B, and C represent
the slot number of a card, the slot number of a sub-card, and the tunnel
interface number, respectively.
l
When you create a tunnel interface on a
distributed device (such as S7500E series), the slot of the tunnel interface is
recommended to be that of the source interface, namely, the interface sending
packets. In this way, the forwarding efficiency can be improved.
l
For a distributed device (such as S7500E series),
the tunnel configuration is not removed from the active board upon switchover
or from the standby board upon its removal. If you configure the same tunnel,
the system will display the prompt that the tunnel still exists. To delete the
tunnel interface, use the undo interface tunnel command.
l
If the addresses of the tunnel interfaces at the
two ends of a tunnel are not in the same network segment, a forwarding route
through the tunnel to the peer must be configured so that the encapsulated
packet can be forwarded normally. You need to configure static or dynamic routing
at both ends of the tunnel.
l
When you configure a static route at one tunnel
end, you need to configure a route to the destination IPv6 address of the
packet, instead of the IPv4 address of the tunnel destination, and set the
outbound interface to the tunnel interface at the local end or set the next-hop
to the tunnel interface at the peer end. The similar configuration needs to be
performed at the other tunnel end.
l
When you configure dynamic routing at both
tunnel ends, you need to enable the dynamic routing protocol on the tunnel
interfaces.
1.3 Configuring
Automatic IPv4-Compatible IPv6 Tunnel
An automatic IPv4-compatible IPv6 tunnel is
a point-to-multipoint link. IPv4-compatible IPv6 addresses are adopted at both
ends of such a tunnel. The address format is 0:0:0:0:0:0:a.b.c.d/96, where
a.b.c.d represents an embedded IPv4 address. The tunnel destination is
automatically determined by the embedded IPv4 address, which makes it easy to
create a tunnel for IPv6 over IPv4. However, an automatic IPv4-compatible IPv6
tunnel must use IPv4-compatible IPv6 addresses and it is still dependent on
IPv4 addresses. Therefore, automatic IPv4-compatible IPv6 tunnels have
limitations.
Figure 1-3 Network diagram for an automatic
IPv4-compatible IPv6 tunnel
As shown in Figure 1-3, two IPv6 networks are
connected to an IPv4 network through Switch A and Switch B respectively.
Configure an automatic IPv4-compatible IPv6 tunnel between Switch A and Switch B
to make the two IPv6 networks reachable to each other.
|
Product series
|
Software version
|
Hardware version
|
|
S3610 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5510 Series Ethernet Switches
|
Release 5301
|
All versions
|
l
The corresponding VLAN interfaces have been
created on Switch A and Switch B.
l
The IP addresses of VLAN-interface 100 on Switch
A and Switch B have been configured and an IPv4 route is available between the
two interfaces.
l
Before enabling IPv6 on an S3610/S5510 series
Ethernet switch, you need to configure the device to operate in the IPv4/IPv6
dual-stack mode by using the switch-mode dual-ipv4-ipv6 command.
Otherwise, IPv6 packets cannot be forwarded on the device even if IPv6 is
enabled. The switch-mode command takes effect after the device is
rebooted.
l
Configure Switch A
# Enable IPv6.
<SwitchA>
system-view
[SwitchA] ipv6
# Configure an IPv4 address for VLAN-interface
100.
[SwitchA] interface
vlan-interface 100
[SwitchA-Vlan-interface100]
ip address 192.168.100.1 255.255.255.0
[SwitchA-Vlan-interface100]
quit
# Configure a link aggregation group.
Disable STP on the port before adding it into the link aggregation group.
[SwitchA]
link-aggregation group 1 mode manual
[SwitchA]
link-aggregation group 1 service-type tunnel
[SwitchA]
interface GigabitEthernet 1/0/2
[SwitchA-GigabitEthernet1/0/2]
stp disable
[SwitchA-GigabitEthernet1/0/2]
port link-aggregation group 1
[SwitchA-GigabitEthernet1/0/2]
quit
# Configure an automatic IPv4-compatible
IPv6 tunnel.
[SwitchA]
interface tunnel 0
[SwitchA-Tunnel0]
ipv6 address ::192.168.100.1/96
[SwitchA-Tunnel0]
source vlan-interface 100
[SwitchA-Tunnel0]
tunnel-protocol ipv6-ipv4 auto-tunnel
# Configure the tunnel to reference link
aggregation group 1 in tunnel interface view.
[SwitchA-Tunnel0]
aggregation-group 1
l
Configure Switch B
# Enable IPv6.
<SwitchB>
system-view
[SwitchB] ipv6
# Configure an IPv4 address for VLAN-interface
100.
[SwitchB] interface
vlan-interface 100
[SwitchB-Vlan-interface100]
ip address 192.168.50.1 255.255.255.0
[SwitchB-Vlan-interface100]
quit
# Configure a link aggregation group.
Disable STP on the port before adding it into the link aggregation group.
[SwitchB]
link-aggregation group 1 mode manual
[SwitchB]
link-aggregation group 1 service-type tunnel
[SwitchB]
interface GigabitEthernet 1/0/2
[SwitchB-GigabitEthernet1/0/2]
stp disable
[SwitchB-GigabitEthernet1/0/2]
port link-aggregation group 1
[SwitchB-GigabitEthernet1/0/2]
quit
# Configure an automatic IPv4-compatible
IPv6 tunnel.
[SwitchB]
interface tunnel 0
[SwitchB-Tunnel0]
ipv6 address ::192.168.50.1/96
[SwitchB-Tunnel0]
source vlan-interface 100
[SwitchB-Tunnel0]
tunnel-protocol ipv6-ipv4 auto-tunnel
# Configure the tunnel to reference link
aggregation group 1 in tunnel interface view.
[SwitchB-Tunnel0]
aggregation-group 1
l
Configuration verification
After the above configurations, display the
status of the tunnel interfaces on Switch A and Switch B, respectively.
[SwitchA] display
ipv6 interface tunnel 0
[SwitchB] display
ipv6 interface tunnel 0
# Ping the IPv4-compatible IPv6 address at the
peer end from Switch A.
[SwitchA] ping
ipv6 ::192.168.50.1
PING
::192.168.50.1 : 56 data bytes, press CTRL_C to break
Reply
from ::192.168.50.1
bytes=56 Sequence=1 hop limit=64 time = 1 ms
Reply
from ::192.168.50.1
bytes=56 Sequence=2 hop limit=64 time = 1 ms
Reply
from ::192.168.50.1
bytes=56 Sequence=3 hop limit=64 time = 1 ms
Reply
from ::192.168.50.1
bytes=56 Sequence=4 hop limit=64 time = 1 ms
Reply
from ::192.168.50.1
bytes=56 Sequence=5 hop limit=64 time = 1 ms
---
::192.168.50.1 ping statistics ---
5
packet(s) transmitted
5
packet(s) received
0.00%
packet loss
round-trip min/avg/max = 1/1/1 ms
l
Configure Switch A
#
ipv6
#
link-aggregation
group 1 mode manual
link-aggregation
group 1 service-type tunnel
#
vlan 100
#
interface
Vlan-interface100
ip
address 192.168.100.1 255.255.255.0
#
interface
GigabitEthernet1/0/2
stp
disable
port
link-aggregation group 1
#
interface
Tunnel0
ipv6 address
::192.168.100.1/96
tunnel-protocol
ipv6-ipv4 auto-tunnel
source Vlan-interface100
aggregation-group
1
#
l
Configure SwitchB
#
ipv6
#
link-aggregation
group 1 mode manual
link-aggregation
group 1 service-type tunnel
#
vlan 100
#
interface
Vlan-interface100
ip
address 192.168.50.1 255.255.255.0
#
interface
GigabitEthernet1/0/2
stp
disable
port
link-aggregation group 1
#
interface
Tunnel0
ipv6 address
::192.168.50.1/96
tunnel-protocol
ipv6-ipv4 auto-tunnel
source Vlan-interface100
aggregation-group
1
#
l
The same tunnel type should be configured at
both ends of the tunnel. Otherwise, packet delivery will fail.
l
Before referencing a link aggregation group on
the tunnel interface to receive and send packets, make sure that the
aggregation group has been configured. Otherwise, the tunnel interface will not
be up to communicate.
l
No destination address needs to be configured
for an automatic tunnel.
l
The automatic tunnel interfaces using the same encapsulation
protocol cannot share the same source IP address.
l
For a distributed device (such as S7500E series),
a tunnel interface number is in the A/B/C format, where A, B, and C represent
the slot number of a card, the slot number of a sub-card, and the tunnel
interface number, respectively.
l
When you create a tunnel interface on a
distributed device (such as S7500E series), the slot of the tunnel interface is
recommended to be that of the source interface, namely, the interface sending
packets. In this way, the forwarding efficiency can be improved.
l
For a distributed device (such as S7500E series),
the tunnel configuration is not removed from the active board upon switchover
or from the standby board upon its removal. If you configure the same tunnel,
the system will display the prompt that the tunnel still exists. To delete the
tunnel interface, use the undo interface tunnel command.
l
If the addresses of the tunnel interfaces at the
two ends of a tunnel are not in the same network segment, a forwarding route
through the tunnel to the peer must be configured so that the encapsulated
packet can be forwarded normally.
l
When you configure a static route at one tunnel
end, you need to configure a route to the destination IPv6 address of the
packet, instead of the IPv4 address of the tunnel destination, and set the
outbound interface to the tunnel interface at the local end or set the next-hop
to the tunnel interface at the peer end. The similar configuration needs to be
performed at the other tunnel end.
l
Automatic tunnels do not support dynamic
routing.
An automatic 6to4 tunnel is a
point-to-multipoint tunnel and is used to connect multiple isolated IPv6 networks
over an IPv4 network to remote IPv6 networks. The embedded IPv4 address in an
IPv6 address is used to automatically acquire the destination IPv4 address of
the tunnel.
The automatic 6to4 tunnel adopts 6to4
addresses. The address format is 2002:abcd:efgh:subnet number::interface ID/64,
where 2002 represents the fixed IPv6 address prefix, and abcd:efgh represents
the 32-bit globally unique source IPv4 address of the 6to4 tunnel, in
hexadecimal notation. For example, 1.1.1.1 can be represented by 0101:0101. The
tunnel destination is automatically determined by the embedded IPv4 address,
which makes it easy to create a 6to4 tunnel.
Because the 16-bit subnet number of the
64-bit address prefix in 6to4 addresses can be customized and the first 48 bits
in the address prefix are fixed to a permanent value and the IPv4 address of
the tunnel source or destination, it is possible that IPv6 packets can be
forwarded by the tunnel.
Figure 1-4 Network diagram for an automatic
6to4 tunnel
As shown in Figure 1-4,
two 6to4 networks are connected to an IPv4 network through two 6to4 switches
(Switch A and Switch B) respectively. Configure a 6to4 tunnel to make Host A
and Host B reachable to each other.
To enable communication between 6to4
networks, you need to configure 6to4 addresses for 6to4 switches and hosts in
the 6to4 networks.
l
The IPv4 address of VLAN-interface 100 on Switch
A is 2.1.1.1/24, and the corresponding 6to4 prefix is 2002:0201:0101::/48 after
it is translated to an IPv6 address. Assign interface tunnel 0 to subnet 2002:0201:0101::/64
and VLAN-interface 101 to subnet 2002:0201:0101:1::/64.
l
The IPv4 address of VLAN-interface 100 on Switch
B is 5.1.1.1/24, and the corresponding 6to4 prefix is 2002:0501:0101::/48 after
it is translated to an IPv6 address. Assign interface tunnel 0 to subnet 2002:0501:0101::/64
and VLAN-interface 101 to subnet 2002:0501:0101:1::/64.
|
Product series
|
Software version
|
Hardware version
|
|
S3610 Series Ethernet Switches
|
