Huawei Routing & Switching
Elite Training-IPv6
www.huawei.com
HUAWEI TECHNOLOGIES CO., LTD.
Foreword
I. IPv6, also called IP Next Generation (IPng), is the second-generation
network layer protocol.
II. The IPv6 protocol optimizes the IPv4 protocol.
III. IPv4 addresses are exhausted. Evolving to IPv6 is an irreversible
trend.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 2
Objectives
Understand IPv6 principles.
Master IPv6 configuration commands.
Strengthen IPv6 exam skills.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 3
Principles Commands Troubleshooting Cases Suggestions
Contents
IPv6 Principles
IPv6 Configuration Commands
IPv6 Exam Preparation
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 4
Principles Commands Suggestions
IPv6 Principles
IPv6 Principles
IPv6 Basics
IPv6 Implementation
IPv6 Routing
IPv6 Multicast
IPv6 Transition
IPv6 Configuration Commands
IPv6 Exam Preparation
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 5
Principles Commands Suggestions
IPv6 Description
IPv6 Principles
IPv6 Basics
• IPv6 Characteristics
• IP Address Expression
• IPv6 Address Structure
• IPv6 Address Classification
• IPv6 Packet Format
IPv6 Implementation
IPv6 Routing
IPv6 Multicast
IPv6 Transition
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 6
Principles Commands Suggestions
IPv6 Characteristics
IPv6 Characteristics
Huge address space
Simple packet structure
Autoconfiguration and readdressing
Hierarchical network structure
End-to-end security support
Quality of Service (QoS) support
Mobility
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 7
Principles Commands Suggestions
IPv6 Address Expression
IPv6 Address Format
An IPv6 address is 128 bits long. It is written as eight groups of four
hexadecimal digits, where each group is separated by a colon (:).
2031:0000:130F:0000:0000:09C0:876A:130B
IPv6 Address Compressed Format
Any zeros at the beginning of a group can be omitted.
• 2031:0:130F:0:0:9C0:876A:130B
A double colon (::) can be used in an IPv6 address when two or more
consecutive groups contain all zeros.
• 2031:0:130F::9C0:876A:130B
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 8
Principles Commands Suggestions
IPv6 Address Structure
An IPv6 address has two parts:
Network prefix: corresponds to the network ID of an IPv4 address.
Interface identifier (interface ID): corresponds to the host ID of an IPv4 address.
The interface ID can be generated in the following ways:
Manually configured.
Automatically generated through the system software.
Generated in IEEE 64-bit Extended Unique Identifier (EUI-64) format.
24 bits 24 bits
cccccc0gcccccccc cccccccc dddddddd dddddddddddddddd
24 bits 16 bits 24 bits
cccccc0gcccccccc cccccccc 11111111 11111110 dddddddd dddddddddddddddd
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 9
Principles Commands Suggestions
IPv6 Address Classification
IPv6 Address Types
IPv6 unicast address
• Identifies an interface. Packets sent to an IPv6 unicast address are delivered
to the interface identified by the unicast address.
IPv6 multicast address
• Identifies a group of interfaces. Packets sent to an IPv6 multicast address
are delivered to all the interfaces identified by the multicast address.
IPv6 anycast address
• Identifies a group of interfaces. Packets sent to an anycast address are
delivered to the nearest interface that is identified by the anycast address,
depending on the routing protocols.
• IPv6 anycast and unicast addresses use the same address space.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 10
IPv6 Address Classification—
Principles Commands Suggestions
Global Unicast Address
Global Unicast Address
Similar to an IPv4 public address.
Consists of a global routing prefix, subnet ID, and interface ID.
Provider Site Host
M bit N bit 128-M-N bit
Global routing prefix Subnet ID Interface ID
001
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 11
IPv6 Address Classification— Principles Commands Suggestions
Link-Local Address
Link-Local Address
Link-local addresses are used only for communication between nodes on the same
local link.
A link-local address uses a link-local prefix FE80::/10.
A link-local address does not have a global scope and is non-routable. Packets
with a destination link-local address cannot be routed beyond the link from where
the packets originate.
64 bits 64 bits
0 Interface ID
1111 1110 10
FE80::/10
10 bits
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 12
IPv6 Address Classification —
Principles Commands Suggestions
Unique Local Address
Unique Local Address
Similar to an IPv4 private address.
Has a unique local address prefix FC00::/7.
1 bit
7 bits 40 bits 16 bits 64 bits
Prefix L Global ID Subnet ID Interface ID
1111 110
FC00::/7
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 13
IPv6 Address Classification —
Principles Commands Suggestions
Other Unicast Addresses
Other Unicast Addresses
Unspecified address
• 0:0:0:0:0:0:0:0/128 or ::/128
• Indicates that an interface or a node does not have an IP address.
Loopback address
• 0:0:0:0:0:0:0:1/128 or ::1/128
• Has the same function as the IPv4 loopback address 127.0.0.1.
• The loopback address cannot be used as the source or destination IP
address of packets to be forwarded.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 14
IPv6 Address Classification —
Principles Commands Suggestions
Multicast Address
Multicast Address
Similar to an IPv4 multicast address.
Consists of a prefix, flag, scope, and multicast group ID.
64 bits 32 bits
Reserved must be zero Group ID
1111 1111
FF00: Flag Scope
8 bits 4 bits 4 bits
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 15
IPv6 Address Classification —
Principles Commands Suggestions
Predefined Multicast Addresses
Predefined Multicast Addresses
Node-local
• Address for all nodes: FF01:0:0:0:0:0:0:1
• Address for all routers: FF01:0:0:0:0:0:0:2
Link-local
• Address for all nodes: FF02:0:0:0:0:0:0:1
• Address for all routers: FF02:0:0:0:0:0:0:2
• Solicited-node address: FF02:0:0:0:0:1:FFXX:XXXX
• Address for all OSPF routers: FF02:0:0:0:0:0:0:5
• Address for all OSPF DRs: FF02:0:0:0:0:0:0:6
• Address for all RIP routers: FF02:0:0:0:0:0:0:9
• Address for all PIM routers: FF02:0:0:0:0:0:0:13
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 16
IPv6 Address Classification—
Principles Commands Suggestions
Anycast Address
Anycast address
IPv6 anycast addresses are allocated from the unicast address space.
When configuring an anycast address, you need to specify that it is an
anycast address to distinguish it from a unicast address.
Subnet-router anycast address
• Packets sent to a subnet-router anycast address are delivered to the nearest
router on the subnet identified by the anycast address.
N bits 128-N bits
Subnet prefix 0
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 17
Principles Commands Suggestions
IPv6 Packet Format—Basic Header
IPv6 Packet Format
An IPv6 packet has three parts: an IPv6 basic header, one or more IPv6
extension headers, and an upper-layer protocol data unit (PDU).
An IPv6 basic header is fixed as 40 bytes long and has eight fields. Each
IPv6 packet must have an IPv6 basic header.
Version Traffic Class Flow Label
Payload Length Next Header Hop Limit
40 bytes
Source Address Basic header
Destination Address
Next Header Variable length
Extension Head Data Extension
header
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 18
Principles Commands Suggestions
IPv6 Packet Format—Extension Header
Extension Header
IPv6 uses extension headers to replace the Options field in the IPv4 header.
An IPv6 packet may carry zero, one, or more extension headers.
The extension header length is an integer multiple of 8 bytes.
Version Traffic Class Flow Label
Payload Length Next Header Hop Limit
40 octets
Source Address Basic header
Destination Address
Next Header Extension header len Extension Head Data Variable
length
Next Header Extension header len Extension
Extension Head Data header
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 19
IPv6 Packet Format—
Principles Commands Suggestions
Extension Header Types
Next
Header
Header Type Description
Field
Value
This header is used to specify sending parameters for each hop on the path of a packet. Every
intermediate node on the path needs to read and process the field. This header is used in the
Hop-by-Hop Options following applications:
0
header •Jumbo payload
•Prompting routers to check this option before the routers forward packets
•Used for resource reservation
Destination Options This header carries information that needs to be examined only by the destination node of a
60
header packet. Currently, this header is used in mobile IPv6.
Similar to the Loose Source and Record Route option in IPv4, this header is used by an IPv6
Routing header 43
source node to specify the intermediate routers that a packet must pass through.
Like IPv4 packets, IPv6 packets to be forwarded cannot exceed the MTU. When the packet
Fragment header 44 length exceeds the MTU, the packet needs to be fragmented. In IPv6, the fragmentation is
performed through the Fragment header.
This header is used in IPSec to provide data authentication, data integrity check, and packet
Authentication header 51
anti-replay. It also protects some fields in the IPv6 basic header.
Encapsulating Security Similar to the Authentication header, this header is used in IPSec to provide data authentication,
50
Payload header data integrity check, packet anti-replay, and IPv6 packet encryption.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 20
Principles Commands Suggestions
IPv6 Implementation
IPv6 Principles
IPv6 Basics
IPv6 Implementation
• ICMPv6
• Neighbor Discovery
• Path MTU
IPv6 Routing
IPv6 Multicast
IPv6 Transition
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 21
Principles Commands Suggestions
ICMPv6—Packet Format
ICMPv6
One of the basic IPv6 protocols
Support for Neighbor Discovery (ID), stateless address configuration
including duplicate address detection, and PMTU discovery
40 octets
Basic header
Next header=58
IGMPv6 packet
Type Code Checksum
ICMPv6 Data
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 22
Principles Commands Suggestions
ICMPv6—Error Messages
Classification of ICMPv6 error messages
Destination Unreachable message (type1)
• Data packets cannot be forwarded to the destination node or an upper-layer
protocol.
Packet Too Big message (type2)
• The size of a packet exceeds the link MTU of the outbound interface.
Time Exceeded message (type3)
• The value of the Hop Limit field is 0.
• The reassembly time is longer than the specified period.
Parameter Problem message (type4)
• The IPv6 basic header or extension header is incorrect.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 23
Principles Commands Suggestions
ICMPv6—Information Messages
Classification of ICMPv6 information messages
Echo Request message
• Sent to destination nodes. After receiving an Echo Request message, the
destination node responds with an Echo Reply message.
Echo Reply message
• After receiving an Echo Request message, the destination node responds
with an Echo Reply message.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 24
Neighbor Discovery—
Principles Commands Suggestions
Address Resolution
IPv6 address resolution is similar to IPv4 ARP.
Implemented based on ICMPv6.
Uses Neighbor Solicitation (NS) and Neighbor Advertisement (NA)
messages.
PC1 PC2
ICMP Type = 135 NS
Source = PC1
Destination = solicited-node multicast of PC2
Data = link-layer address of PC1
Query = What is your link-layer address? ICMP Type = 136
Source = PC2
NA Destination = PC1
Data = link-layer address of PC2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 25
Neighbor Discovery
Principles Commands Suggestions
—Duplicate Address Detection
IPv6 DAD is similar to IPv4 gratuitous ARP.
Implemented based on ICMPv6.
Uses NS and NA messages.
tentative address 2000::1 PC1 2000::1
PC2
ICMP Type = 135 NS
Source = ::
Destination = FF02::1:FF00:1
Target Address = 2000::1
Query = Is anyone using this address? ICMP Type = 136
Source = 2000::1
NA Destination t = FF02::1
Target Address = 2000::1
Answer = I am using this address
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 26
Neighbor Discovery
Principles Commands Suggestions
—Router Discovery
Router discovery
Implemented based on IGMPv6.
Discovers routers connected to the local link.
Obtains the prefix and configuration parameters for address
autoconfiguration.
Uses Router Advertisement (RA) and Router Solicitation (RS) messages.
RA RS
ICMP Type = 134
Source = router link-local address
Destination = all-nodes multicast address (FF02::1) ICMP Type = 133
Data = Router lifetime, Cur hop limit, Autoconfig flag, Source = self interface address
options (prefix, MTU)...... Destination = all-router multicast address (FF02::2)
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 27
Neighbor Discovery
Principles Commands Suggestions
—Redirection
Redirection
A gateway router sends a Redirection message to notify the sender of a
better forwarding path.
ICMPv6 messages are used.
PC2 R2 PC1 R1
IPv6 message
Neighbor redirect packet definitions:
ICMPv6 Type = 137
Src = link-local address of Router A
Dst = link-local address of PC1
Data = target address (link-local
address of Router B), destination
address(address of PC2),options
Subsequent IPv6 message (header of redirected packet)
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 28
Principles Commands Suggestions
Path MTU
Path MTU
The PMTU protocol is implemented through ICMPv6 Packet Too Big
messages.
PC1 R1 R2 R3 PC2
MTU=1500 MTU=1500 MTU=1400 MTU=1300
Packet with MTU=1500
ICMP error: packet too big, use MTU 1400
Packet with MTU=1400
ICMP error: packet too big, use MTU 1300
Packet with MTU=1300
Packet received Path MTU=1300
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 29
Principles Commands Suggestions
IPv6 Routing
IPv6 Principles
IPv6 Basics
IPv6 Implementation
IPv6 Routing
• RIPng
• OSPFv3
• IS-IS IPv6
• BGP4+
IPv6 Multicast
IPv6 Transition
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 30
Principles Commands Suggestions
IPv6 Routing Protocol—RIPng
RIPng made the following modifications to RIP:
RIPng uses UDP port 521.
RIPng uses the destination addresses with 128-bit prefixes.
RIPng uses link-local addresses as next hop addresses.
RIPng uses the link-local address FE80::/10 as the source address to
send RIPng Update packets.
RIPng periodically sends routing information in multicast mode and uses
FF02::9 as multicast address.
A RIPng packet consists of a header and multiple route table entries
(RTEs).
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 31
Principles Commands Suggestions
IPv6 Routing Protocol—OSPFv3 (1)
Comparison between OSPFv3 and OSPFv2
OSPFv3 and OSPFv2 are the same in the following aspects:
• Network type and interface type
• Interface state machine and neighbor state machine
• Link state database (LSDB)
• Flooding mechanism
• Five types of packets, including Hello, DD, LSR, LSU, and LSAck packets
• Route calculation
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 32
Principles Commands Suggestions
IPv6 Routing Protocol—OSPFv3 (2)
Comparison between OSPFv3 and OSPFv2
OSPFv3 and OSPFv2 are different in the following aspects:
• OSPFv3 is based on links rather than subnets.
• OSPFv3 does not depend on IP addresses.
• OSPFv3 packets and LSA format change.
• Information about the flooding scope is added in LSAs of OSPFv3.
• OSPFv3 supports multi-process on a link.
• OSPFv3 uses IPv6 link-local addresses.
• OSPFv3 packets do not contain authentication fields.
• OSPFv3 supports two new LSAs.
• OSPFv3 identifies neighbors based on router IDs only.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 33
Principles Commands Suggestions
IPv6 Routing Protocol—IS-IS IPv6
IS-IS uses two new TLVs for IPv6 support.
TLV 236
• Describes network reachability by defining the route prefix and metric.
TLV 232
• Is similar to the IP Interface Address TLV of IPv4, except that it changes a
32-bit IPv4 address to a 128-bit IPv6 address.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 34
Principles Commands Suggestions
IPv6 Routing Protocol—BGP4+
BGP4+
BGP4+ applies to IPv6 unicast networks.
MP-BGP uses two new optional non-transitive attributes:
• MP_REACH_NLRI
• MP_UNREACH_NLRI
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 35
Principles Commands Suggestions
IPv6 Multicast
IPv6 Principles
IPv6 Basics
IPv6 Implementation
IPv6 Routing
IPv6 Multicast
• Introduction to MLD
• MLDv1 Working Principles
• MLDv2 Working Principles
IPv6 Transition
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 36
Principles Commands Suggestions
Introduction to MLD
Introduction to MLD
Manages IPv6 multicast members.
Works in the same way as IGMP.
Uses ICMPv6 information messages (Nextheader=58)
Has two versions:
• MLDv1
• MLDv2
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 37
Principles Commands Suggestions
MLDv1 Working Principles
MLDv1
Inherits the working mechanism of IGMPv2.
Join mechanism Querier
R1 R2
Querier election
FE80::1 FE80::2
Leave mechanism
R1 advertises General
Query messages.
R2 advertises General
Query messages.
MLDv1 join message
PC1 PC2 PC3
PC1 sends a leave message.
G2 G1 G1
Multicast Address Specific
Query message
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 38
Principles Commands Suggestions
MLDv2 Working Principles
MLDv2
Filters IPv6 multicast sources.
Tracks IPv6 multicast group status.
Listens on status of the receiver hosts.
S1 R1 S2
PC1
G1
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 39
Principles Commands Suggestions
IPv6 Transition
IPv6 Principles
IPv6 Basics
IPv6 Implementation
IPv6 Routing
IPv6 Multicast
IPv6 Transition
• Introduction to IPv6 Transition
• IPv4/IPv6 Dual Stack
• IPv6 over IPv4 Tunnel
• IPv4 over IPv6 Tunnel
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 40
Principles Commands Suggestions
Introduction to IPv6 Transition
Introduction to IPv6 transition
IPv4/IPv6 Dual Stack
• Network devices support both the IPv4 protocol stack and IPv6 protocol
stack.
IPv6 over IPv4 Tunnel
• Used at the early stage of transition.
• Enables IPv6 packets to be transmitted on an IPv4 network.
• Manual tunnels are classified into IPv6 over IPv4 manual tunnels and IPv6
over IPv4 GRE tunnels.
• Automatic tunnels are classified into automatic IPv4-compatible IPv6 tunnels,
6to4 tunnels, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)
tunnels.
IPv4 over IPv6 Tunnel
• Used at the later stage of transition.
• Enables IPv4 packets to be transmitted over an IPv6 network.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 41
Principles Commands Suggestions
IPv4/IPv6 Dual Stack
IPv4/IPv6 Dual Stack
All devices must support the IPv4/IPv6 dual stack.
Interfaces connected to the dual-stack network must have both IPv4 and
IPv6 addresses configured.
PC1
www.huawei.com =? IPv4
10.1.1.1
R1
DNS
Network
server
3ffe:yyyy::1 IPv6
or 10.1.1.1
3ffe:yyyy::1
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 42
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—Overview
IPv6 over IPv4 Tunnel
IPv6 over IPv4 tunneling allows IPv6 packets to be transmitted on an
IPv4 network, interconnecting all IPv6 islands.
IPv6 over IPv4 tunnel classification:
• Manual tunnels: IPv6 over IPv4 manual tunnels and IPv6 over IPv4 GRE
tunnels
• Automatic tunnels: automatic IPv4-compatible IPv6 tunnels, 6to4 tunnels,
and ISATAP tunnels
IPv4
IPv6 IPv6 over IPv4 IPv6
PC1 R1 R2 PC2
IPv6 host Dual-stack Dual-stack IPv6 host
router router
IPv6 Header IPv6 Data IPv6 Header IPv6 Data
IPv4 Header IPv6 Header IPv6 Data
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 43
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—Manual Tunnel
Manual Tunnel
IPv6 over IPv4 manual tunnel
The source and destination addresses are manually configured.
Is set up between edge routers or between hosts and edge routers.
IPv4
IPv6 IPv6 over IPv4 IPv6
PC1 R1 R2 PC2
IPv6 host Dual-stack Dual-stack IPv6 host
router router
IPv6 Header IPv6 Data IPv6 Header IPv6 Data
IPv4 Header (protocol
IPv6 Header IPv6 Data
number 41)
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 44
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—GRE Tunnel
GRE Tunnel
One type of manual tunnel
The tunnel endpoint addresses must be manually configured.
GRE tunnels can encapsulate IPv6 packets.
IPv4
IPv6 IPv6 over IPv4 IPv6
PC1 R1 R2 PC2
IPv6 host Dual-stack Dual-stack IPv6 host
router router
IPv6 Header IPv6 Data IPv6 Header IPv6 Data
IPv4 Header GRE Header IPv6 Header IPv6 Data
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 45
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—IPv4-
Compatiable IPv6 Tunnel
IPv4-compatible IPv6 Tunnel
One type of automatic tunnel
Uses an IPv4-compatible address ::IPv4/96.
Each host must have a valid IP address.
IPv4
1.1.1.1/24 2.1.1.1/24
IPv4-compatible IPv6 tunnel
::1.1.1.1/96 ::2.1.1.1/96
R1 R2
Dual-stack Dual-stack
router router
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 46
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—6to4 Tunnel (1)
6to4 Tunnel
One type of automatic tunnel
Can be set up from a router to router, host to router, router to host, and
host to host.
Uses the 6to4 dedicated address 2002:IPv4::/48.
Address FP TLA IPv4 address SLA ID Interface ID
format
IPv4-Addr1 IPv4-Addr2
IPv6 Header IPv6 Data IPv6 Header IPv6 Data
IPv4
6to4 6to4 tunnel 6to4
6to4 router 6to4 router
2002:IPv4-Addr1::/48 2002:IPv4-Addr2::/48
IPv4 Header IPv6 Header IPv6 Data
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 47
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—6to4 Tunnel (2)
6to4 Tunnel
One edge device can connect to multiple 6to4 networks.
6to4 networks are differentiated based on SLA IDs.
IPv4-Addr1 IPv4-Addr2
6to4
IPv4
2002:IPv4-Addr1:1::/48
6to4 tunnel 6to4
6to4 router 6to4 router
2002:IPv4-Addr2::/48
IPv4 Header IPv6 Header IPv6 Data
6to4
2002:IPv4-Addr1:2::/48
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 48
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—6to4 Tunnel (3)
6to4 Relay
Enables common IPv6 networks to communicate with 6to4 networks.
IPv4-Addr1 IPv4-Addr2
IPv6
IPv4
6to4 tunnel 6to4 Net-2
6to4 relay 6to4 router
2002:IPv4-Addr2::/48
IPv4 Header IPv6 Header IPv6 Data
6to4 Net-1
2002:IPv4-Addr1::/48
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 49
Principles Commands Suggestions
IPv6 over IPv4 Tunnel—ISATAP Tunnel
ISATAP tunnel
One type of automatic tunnel
Can be set up from a host to a router, router to host, or host to host.
Uses the ISATAP tunnel dedicated address.
Address 000000ug00000000 0101111011111110 IPv4 address
format
Last 64bits 16bits 16bits 32 bits
PC2
10.1.2.5
10.1.2.1
FE80::5EFE:0A01:0205
1::5EFE:0A01:0205
un nel
AP t
ISATAP tunnel
PC1 ISAT
3::8 IPv6
IPv4
ISATAP router
PC3
Tunnel 1 10.1.2.6
FE80::5EFE:0A01:0201 FE80::5EFE:0A01:020
1::5EFE:0A01:0201 6
1::5EFE:0A01:0206
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 50
2002:IPv4-Addr1::/48
Principles Commands Suggestions
IPv4 over IPv6 Tunnel
IPv4 over IPv6 Tunnel
IPv4 over IPv6 tunneling allows IPv4 packets to be transmitted on an
IPv6 network, interconnecting all IPv4 islands.
IPv6
IPv4 IPv4 over IPv6 IPv4
PC1 R1 R2 PC2
IPv4 host Dual-stack Dual-stack IPv4 host
router router
IPv4 Header IPv4 Data IPv4 Header IPv4 Data
IPv6 Header IPv4 Header IPv4 Data
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 51
2002:IPv4-Addr1::/48
Principles Commands Suggestions
IPv6 Configuration Commands
IPv6 Principles
IPv6 Configuration Commands
Configuring RIPng
Configuring OSPFv3
Configuring IS-IS IPv6
Configuring BGP4+
Configuring a Manual Tunnel
Configuring a GRE Tunnel
Multicast Exam Preparation
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 52
Principles Commands Suggestions
Configuring RIPng (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Configure an IPv6 address in EUI-64 format for S2/0/0 of R3, with the prefix
2001:23::0/64.
Enable RIPng on the entire network except the network segment 2001:1::0/64
connected to R1.
Import the network segment 2001:1::1/64 to the RIPng network.
Set the metric of the route to 2001:3::0/64 to 10 on R1.
R1 R2 R3
2001:1::1/64
S1/0/0 S1/0/0 S2/0/0 S2/0/0
Loopback 0 Loopback 0
2001:2::2/64 2001:3::3/64
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 53
interface Serial2/0/0
Principles Commands Suggestions
link-protocol ppp
ipv6 enable
Configuring RIPng (2) ipv6 address 2001:23::/64 eui-64
ripng 1 enable
ripng metricout 9
interface LoopBack0
interface Serial1/0/0
ipv6 enable
link-protocol ppp
ipv6 address 2001:3::3/64
ipv6 enable
ripng 1 enable
ipv6 address 2001:12::1/64
ripng 1
ripng 1 enable
# R1 R2 R3
interface LoopBack0
ipv6 enable 2001:1::1/64
ipv6 address 2001:1::1/64 S1/0/0 S1/0/0 S2/0/0 S2/0/0
#
Loopback 0
ripng 1
import-route direct route-policy DIRECT 2001:3::3/64
#
route-policy DIRECT permit node 10 [R1]display ipv6 routing-table protocol ripng
if-match ip-prefix DIRECT Public Routing Table : RIPng
# Destination : 2001:2:: PrefixLength : 64
ip ipv6-prefix 10 index 10 permit 2001:1:: 64 NextHop : FE80::58C4:9:1 Preference : 100
Cost :1 Protocol : RIPng
[R3]display ipv6 interface s2/0/0 RelayNextHop : :: TunnelID : 0x0
Serial2/0/0 current state : UP Interface : Serial1/0/0 Flags :D
IPv6 protocol current state : UP
IPv6 is enabled, link-local address is FE80::372F:9:1 Destination : 2001:3:: PrefixLength : 64
Global unicast address(es): 2001:23::372F:9:1, subnet i2001:23::/64 NextHop : FE80::58C4:9:1 Preference : 100
Joined group address(es): Cost : 10 Protocol : RIPng
FF02::9 RelayNextHop : :: TunnelID : 0x0
FF02::1:FF09:1 Interface : Serial1/0/0 Flags :D
FF02::2
FF02::1 Destination : 2001:23:: PrefixLength : 64
MTU is 1500 bytes NextHop : FE80::58C4:9:1 Preference : 100
ND DAD is enabled, number of DAD attempts: 1 Cost :1 Protocol : RIPng
ND reachable time is 30000 milliseconds RelayNextHop : :: TunnelID : 0x0
ND retransmit interval is 1000 milliseconds Interface : Serial1/0/0 Flags :D
Hosts use stateless autoconfig for addresses
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 54
Principles Commands Suggestions
Configuring OSPFv3 (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Configure R2 to assign an IPv6 address to S2/0/0 of R3.
Add S1/0/0 and Loopback 0 (IPv6 address) of R1 and S1/0/0 of R2 to
OSPFv3 area 1 (NSSA) and S2/0/0 and Loopback 0 (IPv6 address) of
R2 and R3 to area 0.
R1 R2 R3
S1/0/0 S1/0/0 S2/0/0 S2/0/0
Loopback 0 Loopback 0 Loopback 0
Router-id 1.1.1.1 Router-id 2.2.2.2 Router-id 3.3.3.3/32
2001:1::1/64 2001:2::2/64 2001:3::3/64
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 55
Principles Commands Suggestions
Configuring OSPFv3 (2) ospfv3 1
router-id 3.3.3.3
#
ospfv3 1 interface Serial2/0/0
router-id 2.2.2.2 R1 R2 R3 link-protocol ppp
area 0.0.0.1 ipv6 enable
nssa no-summary ipv6 address auto global
# S1/0/0 S1/0/0 S2/0/0 S2/0/0 ospfv3 1 area 0.0.0.0
interface Serial1/0/0 #
link-protocol ppp interface LoopBack0
ipv6 enable [R3]display ipv6 interface Serial 2/0/0 ipv6 enable
ipv6 address 2001:12::2/64 Serial2/0/0 current state : UP ipv6 address 2001:3::3/64
ospfv3 1 area 0.0.0.1 IPv6 protocol current state : UP ospfv3 1 area 0.0.0.0
# IPv6 is enabled, link-local address is FE80::372F:9:1
interface Serial2/0/0 Global unicast address(es):
link-protocol ppp 2001:23::372F:9:1,
ipv6 enable subnet is 2001:23::/64 [SLAAC 2013-07-27 07:45:06 2592000S]
ipv6 address 2001:23::2/64 Joined group address(es):
undo ipv6 nd ra halt FF02::5
ospfv3 1 area 0.0.0.0 FF02::1:FF09:1
# FF02::2
interface LoopBack0 FF02::1
ipv6 enable MTU is 1500 bytes
ipv6 address 2001:2::2/64 ND DAD is enabled, number of DAD attempts: 1
ospfv3 1 area 0.0.0.0 ND reachable time is 30000 milliseconds
ND retransmit interval is 1000 milliseconds
Hosts use stateless autoconfig for addresses
[R1]display ospfv3 routing
OSPFv3 Process (1)
Destination Metric Next-hop
IA ::/0 1563 via FE80::58C4:9:1, Serial1/0/0
2001:1::1/128 0 directly connected, LoopBack0
2001:12::/64 1562 directly connected, Serial1/0/0
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 56
Principles Commands Suggestions
Configuring IS-IS IPv6 (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Configure R2 and R3 to assign an IPv6 address to S2/0/0 of each other
respectively, with the prefix 2001:23::/64.
Enable IS-IS on the entire network.
Configure R1 as a Level-1 router with the NET address
49.0002.0000.0000.0001.00, R2 as a Level-1-2 router, with the NET address
49.0002.0000.0000.0002.00, and R3 as a Level-2 router with the NET address
49.0003.0000.0000.0003.00.
Advertise the address of the loopback interface of R3 to area 49.0002.
R1 R2 R3
S1/0/0 S1/0/0 S2/0/0 S2/0/0
Loopback 0 Loopback 0 Loopback 0
2001:1::1/64 2001:2::2/64 2001:3::3/64
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 57
Principles Commands Suggestions
Configuring IS-IS IPv6 (2)
R1 R2 R3
isis 1
network-entity 49.0002.0000.0000.0002.00 S1/0/0 S1/0/0 S2/0/0 S2/0/0
import-route isis level-2 into level-1
#
ipv6 enable topology standard
ipv6 import-route isis level-2 into level-1 filter-policy ipv6-prefix
LEAK
#
[R1]display isis route ipv6 level-1
interface Serial1/0/0
link-protocol ppp
Route information for ISIS(1)
ipv6 enable
-----------------------------
ipv6 address 2001:12::2/64
isis ipv6 enable 1
ISIS(1) Level-1 Forwarding Table
interface Serial2/0/0
--------------------------------
link-protocol ppp
ipv6 enable
IPV6 Dest. ExitInterface NextHop Cost Flags
ipv6 address auto global
-------------------------------------------------------------------------------
ipv6 nd ra prefix 2001:23::/63 60 30
::/0 S1/0/0 FE80::58C4:9:1 10 A/-/-
undo ipv6 nd ra halt
2001:1::/64 Loop0 Direct 0 D/L/-
isis ipv6 enable 1
2001:2::/64 S1/0/0 FE80::58C4:9:1 10 A/-/-
interface LoopBack0
2001:3::/64 S1/0/0 FE80::58C4:9:1 20 A/-/U
ipv6 enable
2001:12::/64 S1/0/0 Direct 10 D/L/-
ipv6 address 2001:2::2/64
isis ipv6 enable 1
Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut,
#
U-Up/Down Bit Set
ip ipv6-prefix LEAK index 10 permit 2001:3:: 64
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 58
Principles Commands Suggestions
Configuring BGP4+ (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Deploy interfaces connecting R2 and R3, and their loopback interfaces in OSPFv3
area 0.
Add R1 to AS100, and R2 and R3 to AS200.
Establish an IBGP neighbor relationship between R2 and R3 and configure R1
and R2 to establish an EBGP neighbor relationship through physical interfaces.
Configure R1, R2, and R3 to advertise their loopback interface addresses to BGP.
Configure MD5 authentication for BGP sessions and set the authentication
password to Huawei.
R1 R2 R3
S1/0/0 S1/0/0 S2/0/0 S2/0/0
Loopback 0 Loopback 0 Loopback 0
2001:1::1/64 2001:2::2/64 2001:3::3/64
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 59
Principles Commands Suggestions
Configuring BGP4+ (2)
bgp 200 R1 R2 R3
router-id 2.2.2.2
peer 2001:3::3 as-number 200
peer 2001:3::3 connect-interface LoopBack0 S1/0/0 S1/0/0 S2/0/0 S2/0/0
peer 2001:3::3 password simple Huawei
peer 2001:12::1 as-number 100
peer 2001:12::1 password simple Huawei
[R3]display bgp ipv6 routing-table NextHop : 2001:2::2
#
BGP Local router ID is 3.3.3.3 LocPrf : 100
ipv4-family unicast
Total Number of Routes: 3 MED :0
undo synchronization
*>i Network : 2001:1:: PrefVal : 0
#
PrefixLen : 64 Label :
ipv6-family unicast
NextHop : 2001:2::2 Path/Ogn : i
undo synchronization
LocPrf : 100 *> Network : 2001:3::
network 2001:2:: 64
MED :0 PrefixLen : 64
peer 2001:3::3 enable
PrefVal : 0 NextHop : ::
peer 2001:3::3 next-hop-local
Label : LocPrf :
peer 2001:12::1 enable
Path/Ogn : 100 I MED :0
PrefVal : 0
bgp 200 *>i Network : 2001:2:: Label :
router-id 3.3.3.3 PrefixLen : 64 Path/Ogn : i
peer 2001:2::2 as-number 200
peer 2001:2::2 password simple Huawei
# <R3>ping ipv6 -a 2001:3::3 2001:1::1
ipv4-family unicast PING 2001:1::1 : 56 data bytes, press CTRL_C to break
undo synchronization Reply from 2001:1::1 bytes=56 Sequence=1 hop limit=63 time = 81 ms
# Reply from 2001:1::1 bytes=56 Sequence=2 hop limit=63 time = 62 ms
ipv6-family unicast Reply from 2001:1::1 bytes=56 Sequence=3 hop limit=63 time = 63 ms
undo synchronization Reply from 2001:1::1 bytes=56 Sequence=4 hop limit=63 time = 63 ms
network 2001:3:: 64 Reply from 2001:1::1 bytes=56 Sequence=5 hop limit=63 time = 63 ms
peer 2001:2::2 enable
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 60
Principles Commands Suggestions
Configuring a Manual Tunnel (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Configure IPv4 addresses for R1, R2, and R3 according to the figure
and deploy them in OSPFv2 area 0. (The configuration is already
complete.)
Specify the required IPv6 addresses.
Configure an IPv6 over IPv4 manual tunnel to enable Loopback1
interfaces of R1 and R3 to communicate.
Tunnel 0/0/0 R1 R2 R3 Tunnel 0/0/0
IPv6 2001:12::3/64 .1 12.1.1.1.0/24 .2 .2 23.1.1.1.0/24 .3 IPv6 2001:13::3/64
Loopback 1 S1/0/0 S1/0/0 S2/0/0 S2/0/0 Loopback 1
2001:1::1/64 Loopback 0 2001:3::3/64
Loopback 0 Loopback 0
1.1.1.1/32 2.2.2.2/32 3.3.3.3.3/32
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 61
Principles Commands Suggestions
Configuring a Manual Tunnel (2)
Tunnel 0/0/0 R1 R2 R3 Tunnel 0/0/0
IPv6 2001:12::3/64 .1 12.1.1.1.0/24 .2 .2 23.1.1.1.0/24 .3 IPv6 2001:13::3/64
Loopback 1 S1/0/0 S1/0/0 S2/0/0 S2/0/0 Loopback 1
2001:1::1/64 Loopback 0 2001:3::3/64
Loopback 0 Loopback 0
1.1.1.1/32 2.2.2.2/32 3.3.3.3.3/32
interface Tunnel0/0/0
interface Tunnel0/0/0
ipv6 enable
ipv6 enable
ipv6 address 2001:13::3/64
ipv6 address 2001:13::1/64
tunnel-protocol ipv6-ipv4
tunnel-protocol ipv6-ipv4
source LoopBack0
source LoopBack0
destination 1.1.1.1
destination 3.3.3.3
#
#
ospf 1
ospf 1
area 0.0.0.0
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 1.1.1.1 0.0.0.0
network 23.1.1.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
#
ipv6 route-static 2001:1:: 64 Tunnel0/0/0
ipv6 route-static 2001:3:: 64 Tunnel0/0/0
<R3> ping ipv6 2001:1::1
[R3]display ipv6 interface Tunnel 0/0/0 FF02::1
Reply from 2001:1::1 bytes=56 Sequence=1 hop limit=63 time =
Tunnel0/0/0 current state : UP FF02::1:FF00:3
81 ms
IPv6 protocol current state : UP MTU is 1500 bytes
Reply from 2001:1::1 bytes=56 Sequence=2 hop limit=63 time =
IPv6 is enabled, link-local address is ND reachable time is 30000
62 ms
FE80::303:303 milliseconds
Reply from 2001:1::1 bytes=56 Sequence=3 hop limit=63 time =
Global unicast address(es): ND retransmit interval is 1000
63 ms
2001:13::3, subnet is 2001:13::/64 milliseconds
Reply from 2001:1::1 bytes=56 Sequence=4 hop limit=63 time =
Joined group address(es): Hosts use stateless autoconfig for
63 ms
FF02::1:FF03:303 addresses
Reply from 2001:1::1 bytes=56 Sequence=5 hop limit=63 time =
FF02::2
63 ms
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 62
Principles Commands Suggestions
Configuring a GRE Tunnel (1)
The following figure shows the network topology of company A.
Complete the following configurations as required:
Configure IPv4 addresses for R1, R2, and R3 according to the figure
and deploy them in OSPFv2 area 0. (The configuration is already
complete.)
Specify the required IPv6 addresses.
Configure an IPv6 over IPv4 GRE tunnel to enable Loopback1
interfaces of R1 and R3 to communicate.
Tunnel 0/0/0 R1 R2 R3 Tunnel 0/0/0
IPv6 2001:12::3/64 .1 12.1.1.1.0/24 .2 .2 23.1.1.1.0/24 .3 IPv6 2001:13::3/64
Loopback 1 S1/0/0 S1/0/0 S2/0/0 S2/0/0 Loopback 1
2001:1::1/64 Loopback 0 2001:3::3/64
Loopback 0 Loopback 0
1.1.1.1/32 2.2.2.2/32 3.3.3.3.3/32
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 63
Principles Commands Suggestions
Configuring a GRE Tunnel (2)
Tunnel 0/0/0 R1 R2 R3 Tunnel 0/0/0
IPv6 2001:13::1/64 .1 12.1.1.1.0/24 .2 .2 23.1.1.1.0/24 .3 IPv6 2001:13::3/64
Loopback 1 S1/0/0 S1/0/0 S2/0/0 S2/0/0 Loopback 1
2001:1::1/64 Loopback 0 2001:3::3/64
Loopback 0 Loopback 0
1.1.1.1/32 2.2.2.2/32 3.3.3.3.3/32
interface Tunnel0/0/0
interface Tunnel0/0/0
ipv6 enable
ipv6 enable
ipv6 address 2001:13::3/64
ipv6 address 2001:13::1/64
tunnel-protocol gre
tunnel-protocol gre
source LoopBack0
source LoopBack0
destination 1.1.1.1
destination 3.3.3.3
#
#
ospf 1
ospf 1
area 0.0.0.0
area 0.0.0.0
network 3.3.3.3 0.0.0.0
network 1.1.1.1 0.0.0.0
network 23.1.1.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
#
ipv6 route-static 2001:1:: 64 Tunnel0/0/0
ipv6 route-static 2001:3:: 64 Tunnel0/0/0
<R3> ping ipv6 2001:1::1
[R3]display ipv6 interface Tunnel 0/0/0 FF02::1
Reply from 2001:1::1 bytes=56 Sequence=1 hop limit=63 time =
Tunnel0/0/0 current state : UP FF02::1:FF00:3
81 ms
IPv6 protocol current state : UP MTU is 1500 bytes
Reply from 2001:1::1 bytes=56 Sequence=2 hop limit=63 time =
IPv6 is enabled, link-local address is ND reachable time is 30000
62 ms
FE80::303:303 milliseconds
Reply from 2001:1::1 bytes=56 Sequence=3 hop limit=63 time =
Global unicast address(es): ND retransmit interval is 1000
63 ms
2001:13::3, subnet is 2001:13::/64 milliseconds
Reply from 2001:1::1 bytes=56 Sequence=4 hop limit=63 time =
Joined group address(es): Hosts use stateless autoconfig for
63 ms
FF02::1:FF03:303 addresses
Reply from 2001:1::1 bytes=56 Sequence=5 hop limit=63 time =
FF02::2
63 ms
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 64
Principles Commands Suggestions
IPv6 Exam Preparation
IPv6 Principles
IPv6 Configuration Commands
IPv6 Troubleshooting
IPv6 Case Analysis
IPv6 Exam Preparation
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 65
Principles Commands Suggestions
IPv6 Exam Preparation
Practice IPv6 commands
Get familiar with IPv6 principles and applications.
Know how to use IPv6 policy tools.
Read HedEx documents.
Include the cases covered by HedEx documents.
Master the display commands.
Understand the case scenarios designed in the course.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 66
Thank you
www.huawei.com
Copyright©2014 Huawei Technologies Co., Ltd. All Rights Reserved.
The information in this document may contain predictive statements including, without limitation,
statements regarding the future financial and operating results, future product portfolio, new technology,
etc. There are a number of factors that could cause actual results and developments to differ materially
from those expressed or implied in the predictive statements. Therefore, such information is provided for
reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the
information at any time without notice.