This lab provides hands-on experience with configuring and implementing IPv6 networking using various IPv6 technologies and features. Students will be given a scenario with an existing IPv4 network and will deploy IPv6 according to requirements, determining where to use dual stack, tunneling, and IPv6 routing protocols without impacting the existing IPv4 infrastructure. The lab covers topics like IPv6 addressing, neighbor discovery, static routing, OSPFv3, EIGRPv6, BGPv6, and more.
H2O.ai CEO/Founder: Sri Ambati Keynote at Wells Fargo Day
IPv6 Lab 1
1.
2. Hands-on Experience with IPv6 Routing and
Services
TS-EN-07-I
Faraz Shamim, Technical Leader
Harold Ritter, Technical Leader
3. This IPv6 basic and advanced lab will provide you an opportunity to configure,
troubleshoot, design and implement IPv6 network using IPv6 technologies and features
such as; IPv6 addressing, IPv6 neighbor discovery, HSRPv6, static routing, OSPFv3,
EIGRPv6 and BGPv6. You will be provided with a scenario made up with an IPv4 network
where you will get the opportunity to configure and implement IPv6 based on the
requirements and needs on the network. For e.g where would you deploy dual stack,
where it make sense to do tunneling and how to deploy an IPv6 routing protocols without
impacting your existing Network infrastructure.
Students MUST have a basic understanding of IPv6 Addressing and Routing Protocols.
Familiarity with Cisco IOS.
Prerequisites: Session Abstract
3
5. Lab Synopsis
You are a network engineer at ABC Inc. You just attended a cool lab session on IPv6 at
Cisco Connect in Toronto and you are extremely enthusiastic about deploying IPv6 in your
network.
Since this is your first time with IPv6, you want to experiment things at your own before
talking to your ISP about IPv6 connectivity. Your goal is to make your own network IPv6
ready before talking to your ISP about IPv6.
You are challenged with multiple task during this exercise. Each task will be called a Lab.
One thing you learned in the lab session on IPv6 at Cisco Connect Toronto is to go with dual
stack as much as possible. In the event you can not use dual stack you will use tunneling
techniques.
IPv4 piece is already up and running in the network and nothing needs to be done on IPv4
side
R1 is connected to IPv6 Internet. For this purpose we have assigned a loopback 1 with an
ipv6 address of 2004:db8::1/128. So if any router can ping this address, it means it can
access IPv6 internet
5
8. Lab 1 IPv6 Unique Local Address
The first thing you would like to do is to make sure your devices are capable
of running IPv6. After you have verified that with your vendor, now you are
ready to deploy IPv6 slowly in your Network.
ABC Site 1 is the simplest site so you want to pick that site first
Site 1 is running static routing in IPv4 and you want to continue using static
routing when you move to IPv6
Your task is to enable IPv6 between R4 and H1. You want to make sure you
do not run into any issues in Site 1 before you move on with site 2
Since this is your first site, you are using a private address FD01:DB8::/32 for
this purpose
8
9. Lab 1 IPv6 Stateless Auto-Configuration (SLAAC)
Your plan is to test the plug and play behaviour of IPv6. So you only assigned
the IPv6 unique local address on R4 interface facing H1 and see if you get an
IPv6 address assigned automatically on H1 from R4 (Refer to Slide 39 for
IPv6 addressing example)
You want to see how EUI-64 method works so you are using that on R4
during the address assignment with /64 mask.
Assign this unique local address on R4 using subnetting as shown in the next
slide
Ping R4’s link local and Unique local IPv6 address from H1
9
12. R4 H1
R4#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5400
No Virtual link-local address(es):
Global unicast address(es):
FD01:DB8:1:41:A8B8:CCFF:FE00:5400, subnet is FD01:DB8:1:41::/64
[EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:5400
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
H1#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5700
No Virtual link-local address(es):
Stateless address autoconfig enabled
Global unicast address(es):
FD01:DB8:1:41:A8BB:CCFF:FE00:5700, subnet is FD01:DB8:1:41::/64
[EUI/CAL/PRE]
valid lifetime 2591861 preferred lifetime 604661
Joined group address(es):
FF02::1
FF02::1:FF00:5700
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
Default router is FE80::A8BB:CCFF:FE00:5400 on Ethernet0/0
Lab 1 IPv6 Unique Local & SLAAC: Verification
12
13. R# Verification commands
H1 H1#ping FE80::A8BB:CCFF:FE00:5400
Output Interface: Ethernet0/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FE00:5400, timeout is 2 seconds:
Packet sent with a source address of FE80::A8BB:CCFF:FE00:5700%Ethernet0/0
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/1 ms
H1#
Note: the last 64 bit address may be different from A8BB:CCFF:FE00:5400, verify with show ipv6 interface on
R4 E0/0
H1 H1#ping FD01:DB8:1:41:A8B8:CCFF:FE00:5400
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FD01:DB8:1:41:A8B8:CCFF:FE00:5400, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/17 ms
H1#
Note: the last 64 bit address may be different from A8BB:CCFF:FE00:5400, verify with show ipv6 interface on
R4 E0/0
Lab 1 IPv6 Unique Local & SLAAC: Verification
13
14. R4 H1
R4#deb ipv6 nd
ICMP Neighbor Discovery events debugging is on
ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5400
ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5400 to FF02::1 on
Ethernet0/0
ICMPv6-ND: MTU = 1500
ICMPv6-ND: prefix = FD01:DB8:1:41::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5400
ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5400 to FF02::1 on
Ethernet0/0
ICMPv6-ND: MTU = 1500
ICMPv6-ND: prefix = FD01:DB8:1:41::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
R4#
H1#deb ipv6 nd
ICMP Neighbor Discovery events debugging is on
ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5400 on
Ethernet0/0
ICMPv6-ND: Prefix : FD01:DB8:1:1::, Length: 64, Vld Lifetime:
2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig
FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5700
FD01:DB8:1:41:A8BB:CCFF:FE00:5700/64 is existing
ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5400 on
Ethernet0/0
ICMPv6-ND: Prefix : FD01:DB8:1:1::, Length: 64, Vld Lifetime:
2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig
FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5700
FD01:DB8:1:41:A8BB:CCFF:FE00:5700/64 is existing
H1#
Lab 1 IPv6 SLAAC: Debugs
14
15. Lab 1 IPv6 Global Unicast Address
After successfully pilot testing in site 1, you now want to enable IPv6 in site 2
You asked from your ISP about IPv6 and they gave you a /48 address
2001:db8:1::/48 from their block
Instead of removing the unique local address from site 1 you decided to keep it
and configured the new global address in site 1 and site 2
This time you want to use manual assignment of last 64 bit so you will not use
EUI-64 bit method for global addressing. You want to make sure this is the
method you follow from now on
For the manual assignment you will use the router number as the last 4 bits out of
64, for e,g. R4 will have ::4 as the last 64 bits
You want to test the multiple IPv6 address assignment on a router so you will
configure two additional IPv6 global addresses on R5 and R6
Assign IPv6 global unicast address on site 1 and site 2 by using subnetting as
shown in the next slide
15
19. R4 Loopback 0
R4#sh ipv6 int lo 0
Loopback0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5900
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:1::4, subnet is 2001:DB8:1:1::4/128
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:4
FF02::1:FF00:5900
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R4#
Lab 1 IPv6 Global Unicast address: Verification
19
20. R4 Ethernet0/0
R4#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5400
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:41::4, subnet is 2001:DB8:1:41::/64
FD01:DB8:1:41:A8BB:CCFF:FE00:5400, subnet is
FD01:DB8:1:41::/64 [EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:4
FF02::1:FF00:5400
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
R4#
Lab 1 IPv6 Global Unicast address: Verification
20
21. R5 Loopback 0
R5#sh ipv6 int lo 0
Loopback0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5A00
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:1::5, subnet is 2001:DB8:1:1::5/128
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:5
FF02::1:FF00:5A00
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R5#
Lab 1 IPv6 Global Unicast address: Verification
21
22. R5 Ethernet0/0
R5#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5A00
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:56::5, subnet is 2001:DB8:1:56::/64
2001:DB8:1:57::5, subnet is 2001:DB8:1:57::/64
2001:DB8:1:58::5, subnet is 2001:DB8:1:58::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:5
FF02::1:FF00:5A00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Lab 1 IPv6 Global Unicast address: Verification
22
23. R6 Loopback 0
R6#sh ipv6 int lo 0
Loopback0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5B00
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:1::6, subnet is 2001:DB8:1:1::6/128
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:6
FF02::1:FF00:5B00
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R6#
Lab 1 IPv6 Global Unicast address: Verification
23
24. R6 Ethernet0/0
R6#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5B00
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:56::6, subnet is 2001:DB8:1:56::/64
2001:DB8:1:57::6, subnet is 2001:DB8:1:57::/64
2001:DB8:1:58::6, subnet is 2001:DB8:1:58::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:6
FF02::1:FF00:5B00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Lab 1 IPv6 Global Unicast address: Verification
24
25. H1 Ethernet0/0
H1#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5700
No Virtual link-local address(es):
Stateless address autoconfig enabled
Global unicast address(es):
2001:DB8:1:41:A8BB:CCFF:FE00:5700, subnet is 2001:DB8:1:41::/64 [EUI/CAL/PRE]
valid lifetime 2591845 preferred lifetime 604645
FD01:DB8:1:41:A8BB:CCFF:FE00:5700, subnet is FD01:DB8:1:41::/64 [EUI/CAL/PRE]
valid lifetime 2591845 preferred lifetime 604645
Joined group address(es):
FF02::1
FF02::1:FF00:5700
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
Default router is FE80::A8BB:CCFF:FE00:5400 on Ethernet0/0
H1#
Lab 1 IPv6 SLAAC: Verification
25
26. H2 Ethernet0/0
H2#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5D00
No Virtual link-local address(es):
Stateless address autoconfig enabled
Global unicast address(es):
2001:DB8:1:56:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:56::/64 [EUI/CAL/PRE]
valid lifetime 2591989 preferred lifetime 604789
2001:DB8:1:57:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:57::/64 [EUI/CAL/PRE]
valid lifetime 2591989 preferred lifetime 604789
2001:DB8:1:58:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:58::/64 [EUI/CAL/PRE]
valid lifetime 2591989 preferred lifetime 604789
Joined group address(es):
FF02::1
FF02::1:FF00:5D00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
Default router is FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0
Lab 1 IPv6 SLAAC: Verification
26
27. R# Verification commands
H2 H2#ping 2001:db8:1:56::5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::5, timeout is 2
seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/14 ms
H2#ping 2001:db8:1:57::5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:57::5, timeout is 2
seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/4/21 ms
H2#ping 2001:db8:1:58::5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:58::5, timeout is 2
seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/4/19 ms
H2#ping 2001:db8:1:56::6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::6, timeout is 2
seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/17 ms
H2#ping 2001:db8:1:57::6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:57::6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/17 ms
H2#ping 2001:db8:1:58::6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:58::6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/14 ms
H2#
Lab 1 IPv6 Global Unicast address: Verification
27
28. R# Verification commands
H1 H1#ping 2001:DB8:1:41::4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:41::4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/3/17 ms
H1#
Lab 1 IPv6 SLAAC: Verification
28
29. R5
R5#deb ipv6 nd
ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5A00
ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5A00 to FF02::1 on Ethernet0/0
ICMPv6-ND: MTU = 1500
ICMPv6-ND: prefix = 2001:DB8:1:56::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
ICMPv6-ND: prefix = 2001:DB8:1:57::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
ICMPv6-ND: prefix = 2001:DB8:1:58::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
R5#
ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5B00 on Ethernet0/0
ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: Prefix : 2001:DB8:1:57::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: Prefix : 2001:DB8:1:58::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
R5#
Lab 1 IPv6 SLAAC: Debugs
29
30. R6
R6#deb ipv6 nd
ICMPv6-ND: Request to send RA for FE80::A8BB:CCFF:FE00:5B00
ICMPv6-ND: Setup RA from FE80::A8BB:CCFF:FE00:5B00 to FF02::1 on Ethernet0/0
ICMPv6-ND: MTU = 1500
ICMPv6-ND: prefix = 2001:DB8:1:56::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
ICMPv6-ND: prefix = 2001:DB8:1:57::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
ICMPv6-ND: prefix = 2001:DB8:1:58::/64 onlink autoconfig
ICMPv6-ND: 2592000/604800 (valid/preferred)
R6#
ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0
ICMPv6-ND: Prefix : 2001:DB8:1:56::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: Prefix : 2001:DB8:1:57::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: Prefix : 2001:DB8:1:58::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
H2#
Lab 1 IPv6 SLAAC: Debugs
30
31. H1
H1#deb ipv6 nd
ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5900 on Ethernet0/0
ICMPv6-ND: Prefix : 2001:DB8:1:41::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig 2001:DB8:1:41::/64 eui-64, 2001:DB8:1:41:A8BB:CCFF:FE00:5C00
2001:DB8:1:41:A8BB:CCFF:FE00:5C00/64 is existing
ICMPv6-ND: Prefix : FD01:DB8:1:41::, Length: 64, Vld Lifetime: 2592000, Prf Lifetime: 604800, PI Flags: C0
ICMPv6-ND: %Ethernet0/0: OK: IPv6 Address Autoconfig FD01:DB8:1:41::/64 eui-64, FD01:DB8:1:41:A8BB:CCFF:FE00:5C00
FD01:DB8:1:41:A8BB:CCFF:FE00:5C00/64 is existing
H1#
Lab 1 IPv6 SLAAC: Debugs
31
34. Lab 2 Neighbor Discovery: RS & RA
You already tested plug and play behaviour of IPv6 in Site 1. Now you want to
play with some of the key elements of Neighbor discovery
In site 1, you want to study RS and RA msgs.
You want to change the RA interval from 200 to 30 seconds on R4
You disable the autoconfigs on H1 E0/0 interface and turn on the ipv6 nd
debugs and enable autoconfigs again to see the RA/RS.
Turn on debug ipv6 nd on R4 and H1
34
36. R4
R4#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5900
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:41::4, subnet is 2001:DB8:1:41::/64
FD01:DB8:1:41:A8BB:CCFF:FE00:5900, subnet is
FD01:DB8:1:41::/64 [EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:4
FF02::1:FF00:5900
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 30 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
R4#
Lab 2 IPv6 Neighbor discovery: Verification
36
37. H1
H1(config-if)#ipv6 enable
*Jan 30 21:25:07.269: ICMPv6-ND: ND Module startup.
*Jan 30 21:25:07.270: ICMPv6-ND: Initialise OL prefix database
*Jan 30 21:25:07.270: ICMPv6-ND: IPv6 Opr Enabled on Null0
*Jan 30 21:25:07.270: ICMPv6-ND: Allocate ND subblock on Null0 [1]
*Jan 30 21:25:07.271: ICMPv6-ND: L2 came up on Null0
*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD request for FE80::1 on Null0
*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD: FE80::1 is unique.
*Jan 30 21:25:07.271: ICMPv6-ND: L3 came up on Null0
*Jan 30 21:25:07.271: ICMPv6-ND: Linklocal FE80::1 on Null0, Up
*Jan 30 21:25:07.271: ICMPv6-ND: IPv6 Opr Enabled on Ethernet0/0
*Jan 30 21:25:07.271: ICMPv6-ND: Allocate ND subblock on Ethernet0/0 [2]
*Jan 30 21:25:07.271: ICMPv6-ND: L2 came up on Ethernet0/0
*Jan 30 21:25:07.271: IPv6-Addrmgr-ND: DAD request for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0
*Jan 30 21:25:07.272: ICMPv6-ND: Sending NS for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0
*Jan 30 21:25:08.272: IPv6-Addrmgr-ND: DAD: FE80::A8BB:CCFF:FE00:5C00 is unique.
*Jan 30 21:25:08.272: ICMPv6-ND: Sending NA for FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0
*Jan 30 21:25:08.272: ICMPv6-ND: L3 came up on Ethernet0/0
*Jan 30 21:25:08.272: ICMPv6-ND: Linklocal FE80::A8BB:CCFF:FE00:5C00 on Ethernet0/0, Up
H1(config-if)#ipv6 address autoconfig
*Jan 30 21:25:20.231: ICMPv6-ND: Sending RS on Ethernet0/0
*Jan 30 21:25:20.251: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5900 on Ethernet0/0
Lab 2 IPv6 Neighbor discovery: Debugs
37
38. Lab 2 Neighbor Discovery: DAD, NS & NA
You want to test the DAD, NS & NA mechanism of IPv6. For that you turned
on IPv6 neighbor discovery debug on R5 & R6
Assign a new address 2001:db8:1:59::5/64 on both R5 and R6 Ethernet
interface
The debug will show the algorithm performed for DAD procedure. This DAD is
the first thing that occurs when any IPv6 address is assigned on an interface
After testing the DAD procedure, remove the IPv6 address of
2001:db8:1:59::5/64 from R5 & R6 Ethernet
Ping R6’s Ethernet address of 2001:db8:1:56::6 from R5 to see how NS and
NA takes place between them
38
40. R4
R6#sh ipv6 int
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5B00
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:1:56::6, subnet is 2001:DB8:1:56::/64
2001:DB8:1:57::6, subnet is 2001:DB8:1:57::/64
2001:DB8:1:58::6, subnet is 2001:DB8:1:58::/64
2001:DB8:1:59::5, subnet is 2001:DB8:1:59::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:5
FF02::1:FF00:6
FF02::1:FF00:5B00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
…
R5#sh ipv6 int e0/0 | i DUP
2001:DB8:1:59::5, subnet is 2001:DB8:1:59::/64 [DUP]
Lab 2 IPv6 Neighbor discovery: Verification
40
41. R6
R6(config-if)#ipv6 address 2001:db8:1:59::5/64
*Jan 30 21:42:17.678: IPv6-Addrmgr-ND: Received prefix PI-flag change notification: prefix 2001:DB8:1:59::/64 onlink (was not-onlink)
*Jan 30 21:42:17.678: IPv6-Addrmgr-ND: DAD request for 2001:DB8:1:59::5 on Ethernet0/0
*Jan 30 21:42:17.679: ICMPv6-ND: Sending NS for 2001:DB8:1:59::5 on Ethernet0/0
*Jan 30 21:42:18.684: IPv6-Addrmgr-ND: DAD: 2001:DB8:1:59::5 is unique.
*Jan 30 21:42:18.684: ICMPv6-ND: Sending NA for 2001:DB8:1:59::5 on Ethernet0/0
*Jan 30 21:43:11.922: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0
R5(config-if)#ipv6 address 2001:db8:1:59::5/64
*Jan 30 21:48:57.826: ICMPv6-ND: 2592000/604800 (valid/preferred)
*Jan 30 21:49:39.078: IPv6-Addrmgr-ND: Received prefix PI-flag change notification: prefix 2001:DB8:1:59::/64 onlink (was not-onlink)
*Jan 30 21:49:39.078: IPv6-Addrmgr-ND: DAD request for 2001:DB8:1:59::5 on Ethernet0/0
*Jan 30 21:49:39.079: ICMPv6-ND: Sending NS for 2001:DB8:1:59::5 on Ethernet0/0
*Jan 30 21:49:39.094: ICMPv6-ND: Received NA for 2001:DB8:1:59::5 on Ethernet0/0 from 2001:DB8:1:59::5
*Jan 30 21:49:39.095: %IPV6_ND-4-DUPLICATE: Duplicate address 2001:DB8:1:59::5 on Ethernet0/0
Lab 2 IPv6 Neighbor discovery: Debugs
41
43. R5
R5#ping 2001:db8:1:56::6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:56::6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/1/5 ms
R5#
*Jan 30 22:15:24.668: ICMPv6-ND: DELETE -> INCMP: 2001:DB8:1:56::6
*Jan 30 22:15:24.668: ICMPv6-ND: Sending NS for 2001:DB8:1:56::6 on Ethernet0/0
*Jan 30 22:15:24.669: ICMPv6-ND: Resolving next hop 2001:DB8:1:56::6 on interface Ethernet0/0
*Jan 30 22:15:24.673: ICMPv6-ND: Received NA for 2001:DB8:1:56::6 on Ethernet0/0 from 2001:DB8:1:56::6
*Jan 30 22:15:24.673: ICMPv6-ND: Neighbour 2001:DB8:1:56::6 on Ethernet0/0 : LLA aabb.cc00.5b00
*Jan 30 22:15:24.673: ICMPv6-ND: INCMP -> REACH: 2001:DB8:1:56::6
R5#
*Jan 30 22:15:29.722: ICMPv6-ND: Received NS for 2001:DB8:1:56::5 on Ethernet0/0 from FE80::A8BB:CCFF:FE00:5B00
*Jan 30 22:15:29.722: ICMPv6-ND: Sending NA for 2001:DB8:1:56::5 on Ethernet0/0
*Jan 30 22:15:29.723: ICMPv6-ND: STALE -> DELAY: FE80::A8BB:CCFF:FE00:5B00
Lab 2 IPv6 Neighbor discovery: Debugs
43
44. Lab 2 Neighbor Discovery: Renumbering
To test the renumbering behavior of IPv6, you want to change the IPv6 address on R5
& R6 to 2001:db8:1:88::/64 from 2001:db8:1:58::/64
First you configure the new IPv6 address of 2001:db8:1:88::/64 on both R5 & R6
Ethernet interface
You also want to set the RA interval to 40 seconds
To deprecate the old address you want to configure preferred lifetime of
2001:db8:1:58::/64 to 0 and valid lifetime to 50 on both R5 & R6. (Note, may have to
shut no shut E0/0 on H2 to rewrite the old valid & prefer lifetime)
You noticed that the old prefix of 2001:db8:1:58::/64 is showing as deprecated on H2.
Note DEP may or may not show up during show command
To get rid of the address completely, you configure the valid lifetime of
2001:db8:1:58::/64 to 0 on both R5 & R6
You noticed on H2 that the old prefix 2001:db8:1:58::/64 disappeared from the cache
To clean up the configs, remove the old IPv6 prefix of 2001:db8:1:58::/64 as well as
IPv6 nd prefix command from the Ethernet interfaces of both R5 and R6 44
46. H2
H2#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5D00
No Virtual link-local address(es):
Stateless address autoconfig enabled
Global unicast address(es):
2001:DB8:1:56:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:56::/64 [EUI/CAL/PRE]
valid lifetime 2591994 preferred lifetime 604794
2001:DB8:1:57:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:57::/64 [EUI/CAL/PRE]
valid lifetime 2591994 preferred lifetime 604794
2001:DB8:1:58:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:58::/64 [EUI/CAL]
valid lifetime 47 preferred lifetime 0
2001:DB8:1:88:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:88::/64 [EUI/CAL/PRE]
valid lifetime 2591994 preferred lifetime 604794
Joined group address(es):
FF02::1
FF02::1:FF00:5D00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
Lab 2 IPv6 Neighbor discovery: Verification
46
49. H2
H2#sh ipv6 int e0/0
Ethernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5D00
No Virtual link-local address(es):
Stateless address autoconfig enabled
Global unicast address(es):
2001:DB8:1:56:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:56::/64 [EUI/CAL/PRE]
valid lifetime 2591986 preferred lifetime 604786
2001:DB8:1:57:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:57::/64 [EUI/CAL/PRE]
valid lifetime 2591986 preferred lifetime 604786
2001:DB8:1:88:A8BB:CCFF:FE00:5D00, subnet is 2001:DB8:1:88::/64 [EUI/CAL/PRE]
valid lifetime 2591986 preferred lifetime 604786
Joined group address(es):
FF02::1
FF02::1:FF00:5D00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
Default router is FE80::A8BB:CCFF:FE00:5B00 on Ethernet0/0
H2#
Lab 2 IPv6 Neighbor discovery: Verification
49
52. Lab 2 Neighbor Discovery: Default Router Selection
In site 2, you want to see how the default router selection behaves in IPv6
You noticed that as soon as you enable IPv6 on H2, it starts sending RS on
the wire, looking for a router.
You also noticed in the debugs that both R5 and R6 are sending RA
messages towards H2. H2 looks at RA and configures the addresses on its
interface facing R5 & R6
After getting the address on H2, you want to make sure that H2 prefers R5 for
sending all the IPv6 traffic outbound
(Refer to slide 34-35 for default router selection example)
52
54. H2
H2#sh ipv6 router
Router FE80::A8BB:CCFF:FE00:5B00 on Ethernet0/0, last update 0 min
Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1500
HomeAgentFlag=0, Preference=Medium
Reachable time 0 (unspecified), Retransmit time 0 (unspecified)
Prefix 2001:DB8:1:56::/64 onlink autoconfig
Valid lifetime 2592000, preferred lifetime 604800
Router FE80::A8BB:CCFF:FE00:5A00 on Ethernet0/0, last update 0 min
Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1500
HomeAgentFlag=0, Preference=High
Reachable time 0 (unspecified), Retransmit time 0 (unspecified)
Prefix 2001:DB8:1:56::/64 onlink autoconfig
Valid lifetime 2592000, preferred lifetime 604800
Lab 2 IPv6 Neighbor discovery: Verification
54
55. H2
H2#sh ipv6 route ::/0
Routing entry for ::/0
Known via "static", distance 2, metric 0
Route count is 1/1, share count 0
Routing paths:
FE80::A8BB:CCFF:FE00:5A00, Ethernet0/0
Last updated 00:04:52 ago
Note, if you do not see a default route, type the following command and make sure you have the entry from R5
H2#sho ipv6 router
Lab 2 IPv6 Neighbor discovery: Verification
55
58. Lab 3 HSRPv6
Site 2 is running HSRP for IPv4 between R5 and R6
You decided to follow the same scheme for IPv6 also and enabled HSRPv6
between R5 and R6
You noticed on H2 that the default route received from the HSRP active router
is a link local address
You turned on the IPv6 neighbor discovery debug on H2 to see if you are
receiving any RA msgs from R5 or R6
Your primary router for HSRP in IPv4 was R5. You want to make sure R6 is a
primary router for IPv6 and when it goes down and comes back up, it should
become primary again
Configure HSRPv6 in autoconfig mode so it selects a virtual link local address
and advertise it as a virtual IPv6 address to hosts
58
59. Lab 3 HSRPv6
Configure HSRP priority & preempt command on R6 so R6 becomes the
primary router even when it goes down and comes back up (See slide 32 for
details)
Turn on deb ipv6 nd on H2 to see what link local is being advertised as a
default
59
61. R5 & R6
R5#sh standby brief
P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Et0/0 0 105 P Active local 10.1.56.6 10.1.56.1
Et0/0 1 100 Standby FE80::A8BB:CCFF:FE00:5B00
local FE80::5:73FF:FEA0:1
R5#
R6#sh standby brief
P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Et0/0 0 100 Standby 10.1.56.5 local 10.1.56.1
Et0/0 1 105 P Active local FE80::A8BB:CCFF:FE00:5A00
FE80::5:73FF:FEA0:1
R6#
Lab 3 HSRPv6: Verification
61
62. R5
R5#sh standby ethernet 0/0 1
Ethernet0/0 - Group 1 (version 2)
State is Standby
4 state changes, last state change 00:08:17
Virtual IP address is FE80::5:73FF:FEA0:1
Active virtual MAC address is 0005.73a0.0001
Local virtual MAC address is 0005.73a0.0001 (v2 IPv6 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.624 secs
Preemption disabled
Active router is FE80::A8BB:CCFF:FE00:5B00, priority 105 (expires in 11.328 sec)
MAC address is aabb.cc00.5b00
Standby router is local
Priority 100 (default 100)
Group name is "hsrp-Et0/0-1" (default)
Lab 3 HSRPv6: Verification
62
63. R6
R6#sh standby ethernet 0/0 1
Ethernet0/0 - Group 1 (version 2)
State is Active
2 state changes, last state change 00:07:58
Virtual IP address is FE80::5:73FF:FEA0:1
Active virtual MAC address is 0005.73a0.0001
Local virtual MAC address is 0005.73a0.0001 (v2 IPv6 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.768 secs
Preemption enabled
Active router is local
Standby router is FE80::A8BB:CCFF:FE00:5A00, priority 100 (expires in 9.216 sec)
Priority 105 (configured 105)
Group name is "hsrp-Et0/0-1" (default)
Lab 3 HSRPv6: Verification
63
64. H2
H2#sh ipv6 route ::/0
Routing entry for ::/0
Known via "static", distance 2, metric 0
Route count is 1/1, share count 0
Routing paths:
FE80::5:73FF:FEA0:1, Ethernet0/0
Last updated 00:14:23 ago
H2#
Lab 3 HSRPv6: Verification
64
68. Lab 4 EIGRPv6
Site 2 is running EIGRP for IPv4 between R5 and R6
You decided to follow the same scheme for IPv6 also and enabled EIGRPv6
between R5 and R6
You noticed that in order to advertise the secondary address on the same
interface in EIGRPv4 you had to turn off split horizon but in EIGRPv6 you do
not have to do anything. This is because split horizon is turned off by default
in EIGRP for IPv6
You also noticed that all the control packets of EIGRP for e.g. hellos are
sourced from link local address
All other functionalities are very much the same as EIGRP for IPv4
The router ID is picked up as the highest loopback address in IPv4
68
75. Lab 5 IPv6 Static Routing: IPv6 Static Default Route
After planning and configuring all the addressing scheme for your Site 1 and
Site 2, you talked with the ISP and request for IPv6 Service.
You found out that your ISP has IPv6 internet connectivity only but they have
not enabled IPv6 internally in their network so no Site to Site is possible at
this moment but they can enable static routing for Site 1 and advertise Site 1
prefix over the IPv6 Internet
The ISP has also asked you to enable IPv6 static default routing on R4
pointing towards the ISP router (R1)
Configure the IPv6 interface addresses on the link between ISP and R4 as
shown on the next slide (::14 is the ISP router and ::15 is R4)
Configure a static default route on R4 using a link local address as a next hop
pointing towards R1
75
78. R4
R4#sh ipv6 route ::/0
Routing entry for ::/0
Known via "static", distance 1, metric 0
Route count is 1/1, share count 0
Routing paths:
FE80::4AFF:FEA2:851, Serial1/0
Last updated 00:02:15 ago
Lab 5 IPv6 Static routing: Verification
78
79. Lab 5 IPv6 Static Routing: IPv6 Static Route
The ISP has configured an IPv6 static routing for the LAN address of
2001:db8:1:41::/64 pointing towards R4
Since ISP is connected to IPv6 Internet, Site 1 should be able to reach any
IPv6 address on the internet
ISP shared their configs and you noticed that they are using global unicast
address as a next hop for the static route 2001:db8:1:41::/64
Configure a static route 2001:db8:1:41::/64 on R1 with next-hop of R4’s global
address on Ethernet interface
Due to the limited lab environment, we will ping 2004:db8::1 from H1 and
upon success we will assume that we are connected to IPv6 Internet
Ping 2004:db8::1 from H1 and see if its successful
79
80. R# Configs
R1 R1(config)#ipv6 route 2001:db8:1:41::/64 2001:db8:14:1::15
R1(config)#end
Lab 5 IPv6 Static routing: Configs
Note, no interface needs to be specified when the next hop is global unicast
address
80
81. R# Verification
R1 R1#sh ipv6 route 2001:db8:1:41::/64
Routing entry for 2001:DB8:1:41::/64
Known via "static", distance 1, metric 0
Route count is 1/1, share count 0
Routing paths:
2001:DB8:14:1::15
Last updated 00:11:42 ago
R1#
H1 H1>ping 2004:db8::1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2004:DB8::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 38/39/44 ms
H1>
Lab 5 IPv6 Static routing: Verification
81
83. Lab 6 IPv6 Manual Tunnels: IPv6oIP4
Site 2 has two connection to the ISP. You talked to the ISP about providing
IPv6 connectivity to Site 2 but you came to know that due to some limitation,
the ISP can not do dual stack on those two connections
ISP gave you the option of a manual tunnel called IPv6 over IPv4 on the link
between ISP and R5
For the tunnel to work, both sides needs to have an IPv4 route of each other
(Note, IPv4 routing is already established so no need to worry about that”
Since there is a directly connected interface between R3 and R5, the tunnel
source and destinations can easily be chosen as the outgoing interface
A new IPv6 address needs to be configured on both side over the tunnel
between R3 and R5 in the range 2001:db8:35:1::16/127 as shown in the next
slide (::16 on R3 side and ::17 on R5 side)
Ping R5 IPv6 tunnel address from R3 and make sure it is successful to
determine that the tunnel is up and running
83
86. R3 Tunnel 0 R5 Tunnel 0
R3#sh ipv6 int tun 0
Tunnel0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A01:2300
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:35:1::16, subnet is 2001:DB8:35:1::16/127
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:16
FF02::1:FF01:2300
MTU is 1480 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R3#
R5#sh ipv6 int tun 0
Tunnel0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A01:2301
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:35:1::17, subnet is 2001:DB8:35:1::16/127
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:17
FF02::1:FF01:2301
MTU is 1480 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R5#
Lab 6 IPv6 Manual Tunnels: Verification
86
87. R3
R3#ping 2001:db8:35:1::17
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:35:1::17, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 39/39/39 ms
R3#
Lab 6 IPv6 Manual Tunnels: Verification
87
88. Lab 6 IPv6 Manual Tunnels: GRE
The link between R3 and R6 has another issue. It can not pass protocol 41 for
some reason
Due to this limitation, IPv6oIPv4 tunnel can not be established between R3
and R6
ISP provided you an option of using GRE tunnel instead between R3 and R6
Since there is a directly connected interface between R3 and R6, the tunnel
source and destinations can easily be chosen as the outgoing interface
A new IPv6 address needs to configured on both side over the tunnel
between R3 and R6 in the range 2001:db8:36:1::16/127 as shown in the
previous slide
Ping R6 IPv6 tunnel address from R3 and make sure it is successful to
determine that the tunnel is up and running
88
89. R# Configs
R6 R6(config-if)#int tun 0
R6(config-if)#tun source s1/0
R6(config-if)#tun destination 10.1.36.0
R6(config-if)#tun mode gre ip
R6(config-if)#ipv6 address 2001:db8:36:1::17/127
R6(config-if)#end
R3 R3(config-if)#int tun 1
R3(config-if)#tun source s2/0
R3(config-if)#tun destination 10.1.36.1
R3(config-if)#tun mode gre ip
R3(config-if)#ipv6 address 2001:db8:36:1::16/127
R3(config-if)#end
Lab 6 IPv6 Manual Tunnels: Configs
89
90. R3 Tunnel 1 R6 Tunnel 0
R3#sh ipv6 int tun 1
Tunnel1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::4AFF:FEA2:853
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:36:1::16, subnet is 2001:DB8:36:1::16/127
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:16
FF02::1:FFA2:853
MTU is 1476 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R3#
R6#sh ipv6 int tun 0
Tunnel0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:5600
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:36:1::17, subnet is 2001:DB8:36:1::16/127
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:17
FF02::1:FF00:5600
MTU is 1476 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND RAs are suppressed (periodic)
Hosts use stateless autoconfig for addresses.
R6#
Lab 6 IPv6 Manual Tunnels: Verification
90
91. R3
R3#ping 2001:db8:36:1::17
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:36:1::17, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 37/38/40 ms
R3#
Lab 6 IPv6 Manual Tunnels: Verification
91
93. Lab 7 OSPFv3
ISP has received a request from ABC Inc that they want IPv6 connectivity
between Site 1 and Site 2. ISP are also making an effort to make their own
network dual stack and enabling IPv6 in their core network
ISP has been running OSPFv2 internally in their core. They have decided to
run OSPFv3 for IPv6
Assign IPv6 address 2001:db8:172:17::2/127 between R2 & R3. ::2 on R2
side and ::3 on R3 side
Assign IPv6 address 2001:db8:172:17::/127 between R1 & R2. :: on R1 side
and ::1 on R2 side
Configure OSPFv3 area 0 between R1 and R2 and area 1 between R2 and
R3 as shown in the next slide
Put Loopbacks of R1 and R2 into area 0
93
94. Lab 7 OSPFv3
ISP has received a request from ABC Inc that they want IPv6 connectivity
Redistribute R2’s loopback into OSPFv3
Ping ipv6 Loopback 0 of R3 from the loopback 0 of R1
Compare the difference between OSPFv2 and OSPFv3 LSAs
94
97. R# Area 0 Configs
R2 R2(config)#int lo 0
R2(config-if)#ipv6 add 2001:db8:172:16::2/128
R2(config-if)#ipv6 ospf 1 area 0
R2(config-if)#int s1/0
R2(config-if)#ipv6 add 2001:db8:172:17::1/127
R2(config-if)#ipv6 ospf 1 area 0
R2(config-if)#end
Lab 7 OSPFv3: Configs
97
98. R# Area 0 Configs
R1 R1(config)#ipv6 unicast-routing
R1(config)#int lo 0
R1(config-if)#ipv6 add 2001:db8:172:16::1/128
R1(config-if)#ipv6 ospf 1 area 0
R1(config)#int s1/0
R1(config-if)#ipv6 add 2001:db8:172:17::/127
R1(config-if)#ipv6 ospf 1 area 0
R1(config-if)#end
Lab 7 OSPFv3: Configs
98
99. R2
R2#sh ipv6 ospf nei
OSPFv3 Router with ID (172.16.1.2) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
172.16.1.1 0 FULL/ - 00:00:31 6 Serial1/0
172.16.1.3 1 FULL/DR 00:00:36 2 Ethernet0/0
R2#
R2#sh ipv6 ospf nei detail | i area
In the area 0 via interface Serial1/0
In the area 1 via interface Ethernet0/0
R2#
R2#sh ipv6 ospf int brie
Interface PID Area Intf ID Cost State Nbrs F/C
Se1/0 1 0 6 64 P2P 1/1
Et0/0 1 1 2 10 BDR 1/1
R2#
Lab 7 OSPFv3: Verification
99
100. R2
R2#sh ipv6 ospf
Routing Process "ospfv3 1" with ID 172.16.1.2
Supports IPv6 Address Family
Event-log enabled, Maximum number of events: 1000,
Mode: cyclic
It is an area border and autonomous system boundary
router
Redistributing External Routes from,
connected
[…]
Number of external LSA 1. Checksum Sum 0x0055EC
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Graceful restart helper support enabled
Reference bandwidth unit is 100 mbps
Area BACKBONE(0)
Number of interfaces in this area is 2
SPF algorithm executed 7 times
Number of LSA 8. Checksum Sum 0x03F283
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Area 1
Number of interfaces in this area is 1
SPF algorithm executed 3 times
Number of LSA 8. Checksum Sum 0x02CAB4
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Lab 7 OSPFv3: Verification
10
0
101. R1
R1#sh ipv6 ospf
Routing Process "ospfv3 1" with ID 172.16.1.1
Supports IPv6 Address Family
Event-log enabled, Maximum number of events: 1000, Mode:
cyclic
Router is not originating router-LSAs with maximum metric
Initial SPF schedule delay 5000 msecs
Minimum hold time between two consecutive SPFs 10000 msecs
Maximum wait time between two consecutive SPFs 10000 msecs
Minimum LSA interval 5 secs
Minimum LSA arrival 1000 msecs
LSA group pacing timer 240 secs
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 1. Checksum Sum 0x0055EC
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Graceful restart helper support enabled
Reference bandwidth unit is 100 mbps
Area BACKBONE(0)
Number of interfaces in this area is 2
SPF algorithm executed 3 times
Number of LSA 8. Checksum Sum 0x03F283
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Lab 7 OSPFv3: Verification
10
1
102. R3
R3#sh ipv6 ospf
Routing Process "ospfv3 1" with ID 172.16.1.3
Supports IPv6 Address Family
Event-log enabled, Maximum number of events: 1000, Mode:
cyclic
Router is not originating router-LSAs with maximum metric
Initial SPF schedule delay 5000 msecs
Minimum hold time between two consecutive SPFs 10000 msecs
Maximum wait time between two consecutive SPFs 10000 msecs
Minimum LSA interval 5 secs
Minimum LSA arrival 1000 msecs
LSA group pacing timer 240 secs
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 1. Checksum Sum 0x0055EC
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Graceful restart helper support enabled
Reference bandwidth unit is 100 mbps
Area 1
Number of interfaces in this area is 1
SPF algorithm executed 3 times
Number of LSA 8. Checksum Sum 0x02CAB4
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Lab 7 OSPFv3: Verification
10
2
103. Area 0
R2#sh ipv6 ospf data
OSPFv3 Router with ID (172.16.1.2) (Process ID 1)
Router Link States (Area 0)
ADV Router Age Seq# Fragment ID Link count Bits
172.16.1.1 968 0x80000002 0 1 None
172.16.1.2 967 0x80000002 0 1 B
Inter Area Prefix Link States (Area 0)
ADV Router Age Seq# Prefix
172.16.1.2 963 0x80000001 2001:DB8:172:17::2/127
Inter Area Router Link States (Area 0)
ADV Router Age Seq# Link ID Dest RtrID
172.16.1.2 814 0x80000001 2886729987 172.16.1.3
Link (Type-8) Link States (Area 0)
ADV Router Age Seq# Link ID Interface
172.16.1.1 967 0x80000002 6 Se1/0
172.16.1.2 964 0x80000002 6 Se1/0
Intra Area Prefix Link States (Area 0)
ADV Router Age Seq# Link ID Ref-lstype Ref-LSID
172.16.1.1 968 0x80000002 0 0x2001 0
172.16.1.2 967 0x80000002 0 0x2001 0
Lab 7 OSPFv3: Verification
10
3
104. R2 (continued..)
Router Link States (Area 1)
ADV Router Age Seq# Fragment ID Link count Bits
172.16.1.2 928 0x80000002 0 1 B
172.16.1.3 820 0x80000003 0 1 E
Net Link States (Area 1)
ADV Router Age Seq# Link ID Rtr count
172.16.1.3 929 0x80000001 2 2
Inter Area Prefix Link States (Area 1)
ADV Router Age Seq# Prefix
172.16.1.2 963 0x80000001 2001:DB8:172:16::1/128
172.16.1.2 963 0x80000001 2001:DB8:172:17::/127
172.16.1.2 963 0x80000001 2001:DB8:172:16::2/128
Link (Type-8) Link States (Area 1)
ADV Router Age Seq# Link ID Interface
172.16.1.2 968 0x80000002 2 Et0/0
172.16.1.3 968 0x80000002 2 Et0/0
Intra Area Prefix Link States (Area 1)
ADV Router Age Seq# Link ID Ref-lstype Ref-LSID
172.16.1.3 929 0x80000001 2048 0x2002 2
Type-5 AS External Link States
ADV Router Age Seq# Prefix
172.16.1.3 819 0x80000001 2001:DB8:35:1::16/127
172.16.1.3 819 0x80000001 2001:DB8:36:1::16/127
172.16.1.3 819 0x80000001 2001:DB8:172:16::3/128
Lab 7 OSPFv3: Verification
10
4
105. R5 & R6
R2#deb ipv6 ospf hello
OSPFv3 hello events debugging is on
19:02:20.240: OSPFv3: Send hello to FF02::5 area 1 on Ethernet0/0 from FE80::A8BB:CCFF:FE00:5200
interface ID 2
19:02:27.100: OSPFv3: Rcv hello from 172.16.1.3 area 1 from Ethernet0/0 FE80::A8BB:CCFF:FE00:5300
interface ID 2
19:02:27.100: OSPFv3: End of hello processing
19:02:28.840: OSPFv3: Send hello to FF02::5 area 0 on Serial1/0 from FE80::A8BB:CCFF:FE00:5200 interface
ID 6
19:02:28.920: OSPFv3: Rcv hello from 172.16.1.1 area 0 from Serial1/0 FE80::4AFF:FEA2:851 interface ID 6
19:02:28.920: OSPFv3: End of hello processing
R2#undeb all
All possible debugging has been turned off
Lab 7 OSPFv3: Debugs
10
5
108. Lab 8 BGPv6: iBGP
ISP is already receiving IPv6 Internet prefixes on R1, Since there is a
requirement of providing IPv6 Internet connectivity to Site 2 as well so ISP
has to extend BGP all the way upto site 2 for IPv6 by enabling iBGP in their
network and eBGP with Site 2. Note, this BGP extension is already present in
IPv4 network
iBGP peering in the ISP network is following IPv4 BGP method which is to
source the update from loopback and peer between loopbacks
ISP is following the similar method that they used in IPv4 BGP which is to
make R2 as an RR for R1 and R3 and run iBGP between R2-R1 and R2-R3
Advertise 2004:db8::1/128 from R1 under address-family ipv6
Redistribute static route for Site 1 into BGP so site 2 can learn about this
prefix
10
8
109. Lab 8 BGPv6: iBGP
Set next-hop-self towards R2 or static routes won’t be installed in AS 109
Enable iBGP between R2-R1 and R2-R3 making R1 and R3 as route-reflector
clients for R2. Note, disable ipv4-unicast default peering so it does not
activate ipv4 peering by default when ipv6 peering is configured
10
9
112. R2
R2#sh bgp ipv6 unicast sum
BGP router identifier 172.16.1.2, local AS number 109
BGP table version is 4, main routing table version 4
1 network entries using 172 bytes of memory
1 path entries using 88 bytes of memory
1/1 BGP path/bestpath attribute entries using 128 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 412 total bytes of memory
BGP activity 7/0 prefixes, 8/1 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
2001:DB8:172:16::1
4 109 100 98 4 0 0 0 1:26:26 2
2001:DB8:172:16::3
4 109 95 98 4 0 0 0 1:24:10 0
R2#
Lab 8 BGPv6: iBGP Verification
11
2
113. R2
R2#sh bgp ipv6 unicast
BGP table version is 4, local router ID is 172.16.1.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, x best-external, f RT-Filter, a additional-path
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i 2004:DB8::1/128
2001:DB8:172:16::1
0 100 0 i
*>i 2001:DB8:1:41::/64
2001:DB8:172:16::1
0 100 0 ?
Lab 8 BGPv6: iBGP Verification
11
3
114. R2
R2#sh bgp ipv6 unicast 2001:db8:1:41::/64
BGP routing table entry for 2001:DB8:1:41::/64, version 29
Paths: (1 available, best #1, table default)
Advertised to update-groups:
2
Refresh Epoch 2
Local, (Received from a RR-client)
2001:DB8:172:16::1 (metric 64) from 2001:DB8:172:16::1 (172.16.1.1)
Origin incomplete, metric 0, localpref 100, valid, internal, best
Lab 8 BGPv6: iBGP Verification
11
4
115. Lab 8 BGPv6: eBGP
ISP is now ready to provided end to end connectivity between site 1 and Site
2 for ABC
You want to use the similar BGP policies and advertisement that you have for
iPv4.
Enable eBGP between R3 and R5 over link local address and R3 and R6
over a global address over the tunnel interfaces. Note, make sure to advertise
Serial2/0 into OSPFv3 or site 2 routes will not get installed in AS 109
Advertise prefixes that are assigned on the Ethernet segment of R5 and R6
and aggregate 2001:db8:1:56::/64 and 2001:db8:1:57::/64 into one block
Make sure that H2 can reach IPv6 Internet. Note, in our case 2004:db8::1
represent IPv6 Internet
Verify that Site 2 can reach Site 1 by pinging H1 from H2.
11
5
118. R3
R3#sh bgp ipv6 unicast sum | e 109
BGP table version is 26, main routing table version 26
3 network entries using 516 bytes of memory
5 path entries using 440 bytes of memory
4/3 BGP path/bestpath attribute entries using 512 bytes of memory
1 BGP rrinfo entries using 24 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1516 total bytes of memory
BGP activity 15/6 prefixes, 31/18 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
2001:DB8:36:1::17
4 1 11 16 26 0 0 00:05:42 2
2001:DB8:172:16::2
FE80::A01:2301%Tunnel0
4 1 11 18 26 0 0 00:05:56 2
Lab 8 BGPv6: eBGP Verification
11
8
119. R3
R3#sh bgp ipv6 unicast
BGP table version is 27, local router ID is 172.16.1.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, x best-external, f RT-Filter, a additional-path
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i 2001:DB8:1:41::/64
2001:DB8:172:16::1
0 100 0 ?
* 2001:DB8:1:56::/63
2001:DB8:36:1::17
0 0 1 i
*> FE80::A01:2301 0 0 1 i
* 2001:DB8:1:88::/64
2001:DB8:36:1::17
0 0 1 i
*> FE80::A01:2301 0 0 1 i
*>i 2004:DB8::1/128 2001:DB8:172:16::1
0 100 0 i
R3#
Lab 8 BGPv6: eBGP Verification
11
9
120. R3
R3#sh bgp ipv6 uni 2001:db8:1:56::/63
BGP routing table entry for 2001:DB8:1:56::/63, version 22
Paths: (2 available, best #2, table default)
Advertised to update-groups:
1 3
Refresh Epoch 1
1, (aggregated by 1 10.1.1.6)
2001:DB8:36:1::17 (FE80::A8BB:CCFF:FE00:5600) from 2001:DB8:36:1::17 (10.1.1.6)
Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate
Refresh Epoch 1
1, (aggregated by 1 10.1.1.5)
FE80::A01:2301 (FE80::A01:2301) from FE80::A01:2301%Tunnel0 (10.1.1.5)
Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate, best
R3#
Lab 8 BGPv6: eBGP Verification
12
0
121. R3
H2#ping [H1 IPv6 Global Unicast Address]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1:41:A8BB:CCFF:FE00:5700, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 119/123/139 ms
H2#
Lab 8 BGPv6: eBGP Verification
12
1