Bootstrap

【新华三】IPv6 过渡技术 - 6to4隧道

在这里插入图片描述

实验要求

实验环境 : HCL

实验需求:
实现双方站点的IPv6网络 可以跨 IPv4 网络进行通信

实现思路

① IPv6网络用OSPFv3来实现互通
② IPv4网络用OSPF来实现互通
③ 使用6 to 4隧道实现Pv6网络 可以跨 IPv4 网络进行通信

隧道可以在原有的IPv6头部,再加上Pv4头部,就可以帮助IPv6跨IPv4网络进行通信了

6 to 4 特点

自动建立隧道,不需要向GRE 或者 IPv6 in IPv4 隧道一样,手动指定隧道目的 !

注意:不支持组播
有一个特定前缀:2002::/16 2002:IPv4:: /48
那这个嵌入的IPv4的地址,就是我出接口的IPv4地址

报文结构(基于IPv6 in IPv4 隧道) :IPv4 — IPv6

详情可以去查看该篇IPv6 in IPv4 隧道实验
链接: IPv6 in IPv4 隧道实验

注意点

① OSPFv3 只能通过接口下宣告,不能使用Network!!!

② IPv6 in IPv4隧道的 IPv6地址格式2002:IPv4:: /48
这个IPv4需要我们,手动将十进制换算成十六进制,所以推荐用计算机来换算会更快一些

IPv4 转 IPv6 格式小技巧

可以用计算器来进行进制转换:
HEX : 十六进制
DEC : 十进制
一个十进制 转换成 两个十六进制

在这里插入图片描述
在这里插入图片描述

配置

在这里插入图片描述

R1

基础配置

<H3C>system-view 
[H3C]sysname R1

[R1]undo info-center enable 
Information center is disabled.

[R1]int g0/0
[R1-GigabitEthernet0/0]ipv6 address 2001:12::1 64
[R1-GigabitEthernet0/0]quit

[R1]int LoopBack 1
[R1-LoopBack1]ipv6 address 2000:1:1::1 64
[R1-LoopBack1]quit

[R1]int LoopBack 2
[R1-LoopBack2]ipv6 address 2000:1:2::1 64
[R1-LoopBack2]quit

[R1]int LoopBack 3
[R1-LoopBack3]ipv6 address 2000:1:3::1 64
[R1-LoopBack3]quit



===================================   查看接口IPv6地址 =================================
[R1]dis ipv6 int brief 
*down: administratively down
(s): spoofing
Interface                                 Physical Protocol IPv6 Address
GigabitEthernet0/0                        up       up       2001:12::1
GigabitEthernet0/1                        down     down     Unassigned
GigabitEthernet0/2                        down     down     Unassigned
GigabitEthernet5/0                        down     down     Unassigned
GigabitEthernet5/1                        down     down     Unassigned
GigabitEthernet6/0                        down     down     Unassigned
GigabitEthernet6/1                        down     down     Unassigned
LoopBack1                                 up       up(s)    2000:1:1::1
LoopBack2                                 up       up(s)    2000:1:2::1
LoopBack3                                 up       up(s)    2000:1:3::1
Serial1/0                                 down     down     Unassigned
Serial2/0                                 down     down     Unassigned
Serial3/0                                 down     down     Unassigned
Serial4/0                                 down     down     Unassigned

OSPFv3 局域网可达

## 进入OSPFv3 进程,设置RID为 1.1.1.1
[R1]ospfv3 1
[R1-ospfv3-1]router-id 1.1.1.1
[R1-ospfv3-1]quit


## 接口下宣告
[R1]int range g0/0 lo1 lo2 lo3
[R1-if-range]ospfv3 1 area 0
[R1-if-range]quit

R2

基础配置

<H3C>system-view 
[H3C]sysname R2

[R2]undo info-center enable 
Information center is disabled.

[R2]int g0/1
[R2-GigabitEthernet0/1]ipv6 address 2001:12::2 64
[R2-GigabitEthernet0/1]quit

[R2]int g0/0
[R2-GigabitEthernet0/0]ip address 172.16.23.2 24
[R2-GigabitEthernet0/0]quit

局域网环境(OSPFv3):IPv6 网络

## 进入OSPFv3 进程中,设置RID为 2.2.2.2
[R2]ospfv3 1
[R2-ospfv3-1]router-id 2.2.2.2
[R2-ospfv3-1]quit

## 接口下宣告
[R2]int g0/1
[R2-GigabitEthernet0/1]ospfv3 1 area 0
[R2-GigabitEthernet0/1]quit

=====================  查看 R2 与R1建立的OSPFv3的邻居关系  ============================
[R2]dispaly ospfv3 peer

               OSPFv3 Process 1 with Router ID 2.2.2.2

 Area: 0.0.0.0        
-------------------------------------------------------------------------
 Router ID       Pri State             Dead-Time InstID Interface
 1.1.1.1         1   Full/DR           00:00:40  0      GE0/1

==============================   查看 R2 学到IPv6 路由条目  ============================
[R2]display ipv6 routing-table 

Destinations : 8        Routes : 8

Destination: ::1/128                                     Protocol  : Direct
NextHop    : ::1                                         Preference: 0
Interface  : InLoop0                                     Cost      : 0

Destination: 2000:1:1::1/128                             Protocol  : O_INTRA
NextHop    : FE80::5C94:E5FF:FEB2:105                    Preference: 10
Interface  : GE0/1                                       Cost      : 1

Destination: 2000:1:2::1/128                             Protocol  : O_INTRA
NextHop    : FE80::5C94:E5FF:FEB2:105                    Preference: 10
Interface  : GE0/1                                       Cost      : 1

Destination: 2000:1:3::1/128                             Protocol  : O_INTRA
NextHop    : FE80::5C94:E5FF:FEB2:105                    Preference: 10
Interface  : GE0/1                                       Cost      : 1

Destination: 2001:12::/64                                Protocol  : Direct
NextHop    : ::                                          Preference: 0
Interface  : GE0/1                                       Cost      : 0

Destination: 2001:12::2/128                              Protocol  : Direct
NextHop    : ::1                                         Preference: 0
Interface  : InLoop0                                     Cost      : 0

Destination: FE80::/10                                   Protocol  : Direct
NextHop    : ::                                          Preference: 0
Interface  : InLoop0                                     Cost      : 0

Destination: FF00::/8                                    Protocol  : Direct
NextHop    : ::                                          Preference: 0
Interface  : NULL0                                       Cost      : 0

6 to 4 隧道

## 目的:IPv4网络内部互通
[R2]ospf 110 router-id 2.2.2.2
[R2-ospf-110]area 0
[R2-ospf-110-area-0.0.0.0]network 172.16.23.0 0.0.0.255 
[R2-ospf-110-area-0.0.0.0]quit
[R2-ospf-110]quit

## 6 to 4 隧道,因为是自动建立
## 目的是为了和所有有需要的设备建立隧道通信
## 所以就不用指定隧道的目的了

## 建立 6to4 隧道

[R2]int tunnel 24 mode ipv6-ipv4 6to4             ## 将Tunnel模式改为 6to4
[R2-Tunnel24]source g0/0                          ## tunnel隧道的源
[R2-Tunnel24]ipv6 address 2002:AC10:1702::2 64    ## IPv6地址设置为规定样式
[R2-Tunnel24]quit

## 因为6to4隧道不支持组播
## 所以我们就写一条静态路由,去往R5的路由
[R2] ipv6 route-static 2000:5:: 32 Tunnel24 2002:AC10:2204::4

## 需要重分发进OSPFv3中,让R1学到R5的网络
[R2]ospfv3 1
[R2-ospfv3-1]import-route static    ## 将静态路由引入OSPFv3,让R1学到对方的路由
[R2-ospfv3-1]quit

==================================   查看到接口状态   ====================================
[R2]display ipv6 int brief 
*down: administratively down
(s): spoofing
Interface                                 Physical Protocol IPv6 Address
GigabitEthernet0/0                        up       up       Unassigned
GigabitEthernet0/1                        up       up       2001:12::2
GigabitEthernet0/2                        down     down     Unassigned
GigabitEthernet5/0                        down     down     Unassigned
GigabitEthernet5/1                        down     down     Unassigned
GigabitEthernet6/0                        down     down     Unassigned
GigabitEthernet6/1                        down     down     Unassigned
Serial1/0                                 down     down     Unassigned
Serial2/0                                 down     down     Unassigned
Serial3/0                                 down     down     Unassigned
Serial4/0                                 down     down     Unassigned
Tunnel24                                  up       up       2002:AC10:1702::2
[R2]

R3

[R3]int g0/0
[R3-GigabitEthernet0/0]ip address 172.16.23.3 24
[R3-GigabitEthernet0/0]quit

[R3]int g0/1
[R3-GigabitEthernet0/1]ip address 172.16.34.3 24
[R3-GigabitEthernet0/1]quit

[R3]ospf 110 router-id 3.3.3.3
[R3-ospf-110]area 0
[R3-ospf-110-area-0.0.0.0]network 172.16.23.0 0.0.0.255 
[R3-ospf-110-area-0.0.0.0]network 172.16.34.0 0.0.0.255 
[R3-ospf-110-area-0.0.0.0]quit
[R3-ospf-110]quit

R4

基础配置

[R4]int g0/0
[R4-GigabitEthernet0/0]ip address 172.16.34.4 24
[R4-GigabitEthernet0/0]quit

[R4]int g0/1
[R4-GigabitEthernet0/1]ipv6 address 2001:45::4 64
[R4-GigabitEthernet0/1]quit

局域网环境(OSPFv3):IPv6 网络

## 进入OSPFv3进程中,设置RID为 4.4.4.4
[R4]ospfv3 1
[R4-ospfv3-1]router-id 4.4.4.4
[R4-ospfv3-1]quit

## 接口下宣告
[R4]int g0/1
[R4-GigabitEthernet0/1]ospfv3 1 area 0
[R4-GigabitEthernet0/1]quit

=================== 查看 R4与R5建立的OSPFv3的邻居关系 ============================
[R4]display ospfv3 peer

               OSPFv3 Process 1 with Router ID 4.4.4.4

 Area: 0.0.0.0        
-------------------------------------------------------------------------
 Router ID       Pri State             Dead-Time InstID Interface
 5.5.5.5         1   Full/DR           00:00:34  0      GE0/1
[R4]

6 to 4 隧道

## 目的:IPv4网络内部互通
[R4]ospf 110 router-id 4.4.4.4
[R4-ospf-110]area 0
[R4-ospf-110-area-0.0.0.0]network 172.16.34.0 0.0.0.255
[R4-ospf-110-area-0.0.0.0]quit
[R4-ospf-110]quit

## 建立6to4 隧道
[R4]int tunnel 24 mode ipv6-ipv4 6to4 
[R4-Tunnel24]source g0/0
[R4-Tunnel24]ipv6 address 2002:AC10:2204::4 64
[R4-Tunnel24]quit

## R4以静态路由方式学到目的网段
[R4] ipv6 route-static 2000:1:: 32 Tunnel24 2002:AC10:1702::2

[R4]ospfv3 1
[R4-ospfv3-1]import-route static 
[R4-ospfv3-1]quit

R5

基础配置

[R5]int g0/0
[R5-GigabitEthernet0/0]ipv6 address 2001:45::5 64
[R5-GigabitEthernet0/0]quit

[R5]int LoopBack 1
[R5-LoopBack1]ipv6 address 2000:5:1::5 64
[R5-LoopBack1]quit
[R5]int LoopBack 2
[R5-LoopBack2]ipv6 address 2000:5:2::5 64
[R5-LoopBack2]quit
[R5]int LoopBack 3
[R5-LoopBack3]ipv6 address 2000:5:3::5 64
[R5-LoopBack3]quit


===================================   查看接口IPv6地址 =================================
[R5]display ipv6 int brief 
*down: administratively down
(s): spoofing
Interface                                 Physical Protocol IPv6 Address
GigabitEthernet0/0                        up       up       2001:45::5
GigabitEthernet0/1                        down     down     Unassigned
GigabitEthernet0/2                        down     down     Unassigned
GigabitEthernet5/0                        down     down     Unassigned
GigabitEthernet5/1                        down     down     Unassigned
GigabitEthernet6/0                        down     down     Unassigned
GigabitEthernet6/1                        down     down     Unassigned
LoopBack1                                 up       up(s)    2000:5:1::5
LoopBack2                                 up       up(s)    2000:5:2::5
LoopBack3                                 up       up(s)    2000:5:3::5
Serial1/0                                 down     down     Unassigned
Serial2/0                                 down     down     Unassigned
Serial3/0                                 down     down     Unassigned
Serial4/0                                 down     down     Unassigned
[R5]

OSPFv3 局域网可达

## 进入OSPFv3 进程中,设置RID为 5.5.5.5
[R5]ospfv3 1
[R5-ospfv3-1]router-id 5.5.5.5
[R5-ospfv3-1]quit

## 接口下宣告
[R5]int range g0/0 lo1 lo2 lo3
[R5-if-range]ospfv3 1 area 0
[R5-if-range]quit

检查

R2的tunnel 接口状态

在这里插入图片描述

R4的tunnel 接口状态

在这里插入图片描述

R1 的路由表

在这里插入图片描述

R5 的路由表

在这里插入图片描述

R1 Ping R5

[R1]ping ipv6 -a 2000:1:1::1 2000:5:1::5
在这里插入图片描述

抓包分析

抓的是 R2的e0/1口
其实这个时候就可以看到,数据包发送的时候
此时就只新增了IPv4报文头这样子就比GRE少了一个封装字段,提高了传输效率

Ping包

在这里插入图片描述
在这里插入图片描述

6to4是如何自动建立隧道?

① 报文的目的地址

当R1的内部想要去Ping R5的内部时
流量到达R2身上,这个时候是需要有目的IP地址的
但是他查看到了我是用6to4隧道,那么就没有去设置隧道目的,那这个时候是怎么传递的呢?

查看R2的路由表,看到我们写的那条静态路由
在这里插入图片描述

该条静态路由的下一跳是2002:AC10:2204::4 ,这下一条里面藏着一个IPv4地址,就是172.16.34.4

接上面的问题
那设备发现这是个6to4隧道,那么就会去路由表找静态路由,然后去提取该IPv4地址,作为我报文的目的地址。

② 那怎么自动建立呢?

其实就是提取我每一条静态路由的IPv4地址,作为我的隧道目的地址,这样子就OK啦
主要就是静态路由中,有下一跳有包含 IPv4 地址,这个就是我的目的地址,所以就可以自动去建立
当需要建立很多条隧道的时候,就不用那么麻烦的一条一条的去建立啦

配置文档

R1

#
 sysname R1
#
ospfv3 1
 router-id 1.1.1.1
#
#
interface LoopBack1
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:1:1::1/64
#
interface LoopBack2
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:1:2::1/64
#
interface LoopBack3
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:1:3::1/64
#
interface GigabitEthernet0/0
 ospfv3 1 area 0.0.0.0
 ipv6 address 2001:12::1/64
#

R2

#
 sysname R2
#
ospf 110 router-id 2.2.2.2
 area 0.0.0.0
  network 172.16.23.0 0.0.0.255
#
ospfv3 1
 router-id 2.2.2.2
 import-route static
#
interface GigabitEthernet0/0
 ip address 172.16.23.2 255.255.255.0
#
interface GigabitEthernet0/1
 ospfv3 1 area 0.0.0.0
 ipv6 address 2001:12::2/64
#
#
interface Tunnel24 mode ipv6-ipv4 6to4
 source GigabitEthernet0/0
 ipv6 address 2002:AC10:1702::2/64
#
# 
ipv6 route-static 2000:5:: 32 Tunnel24 2002:AC10:2204::4
#

R3

#
 sysname R3
#
ospf 110 router-id 3.3.3.3
 area 0.0.0.0
  network 172.16.23.0 0.0.0.255
  network 172.16.34.0 0.0.0.255
#
interface GigabitEthernet0/0
 ip address 172.16.23.3 255.255.255.0
#
interface GigabitEthernet0/1
 ip address 172.16.34.3 255.255.255.0
#

R4

#
 sysname R4
#
ospf 110 router-id 4.4.4.4
 area 0.0.0.0
  network 172.16.34.0 0.0.0.255
#
ospfv3 1
 router-id 4.4.4.4
 import-route static
#
interface GigabitEthernet0/0
 ip address 172.16.34.4 255.255.255.0
#
interface GigabitEthernet0/1
 ospfv3 1 area 0.0.0.0
 ipv6 address 2001:45::4/64
#
interface Tunnel24 mode ipv6-ipv4 6to4
 source GigabitEthernet0/0
 ipv6 address 2002:AC10:2204::4/64
#
 ipv6 route-static 2000:1:: 32 Tunnel24 2002:AC10:1702::2
 #

R5

#
 sysname R5
#
ospfv3 1
 router-id 5.5.5.5
#
interface LoopBack1
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:5:1::5/64
#
interface LoopBack2
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:5:2::5/64
#
interface LoopBack3
 ospfv3 1 area 0.0.0.0
 ipv6 address 2000:5:3::5/64
#
interface GigabitEthernet0/0
 ospfv3 1 area 0.0.0.0
 ipv6 address 2001:45::5/64
#

配置文档没问题的!!!
在这里插入图片描述

;