本文主要是介绍IPV6过渡技术-6VPE,希望对大家解决编程问题提供一定的参考价值,需要的开发者们随着小编来一起学习吧!
拓扑设计
拓扑介绍
如图,上海分公司与北京分公司内部都是使用的IPV6网络,而中间的互联网只可以运行IPV4协议。因为IPV6地址无法在IPV4网络上面跑,所以两边的通信成为了一个新的问题。为了解决这个问题,决定使用6VPE技术进行配置。
数据配置
R1配置
sysname R1 # ipv6 # ip vpn-instance vpn1 ipv6-family route-distinguisher 1:1 vpn-target 13:13 export-extcommunity vpn-target 13:13 import-extcommunity # mpls lsr-id 1.1.1.1 mpls # mpls ldp # isis 1 is-level level-2 cost-style wide network-entity 49.0000.0000.0001.00 # interface Ethernet0/0/0 ip binding vpn-instance vpn1 ipv6 enable ipv6 address 2000:14::1/64 # interface Ethernet0/0/1 ip address 12.1.1.1 255.255.255.0 isis enable 1 mpls mpls ldp # interface LoopBack0 ip address 1.1.1.1 255.255.255.255 isis enable 1 # bgp 100 peer 3.3.3.3 as-number 100 peer 3.3.3.3 connect-interface LoopBack0 # ipv4-family unicast undo synchronization peer 3.3.3.3 enable # ipv6-family vpnv6 policy vpn-target peer 3.3.3.3 enable # ipv6-family vpn-instance vpn1 import-route direct |
R2配置
sysname R2 # mpls lsr-id 2.2.2.2 mpls # mpls ldp # isis 1 is-level level-2 cost-style wide network-entity 49.0000.0000.0002.00 # interface Ethernet0/0/0 ip address 12.1.1.2 255.255.255.0 isis enable 1 mpls mpls ldp # interface Ethernet0/0/1 ip address 23.1.1.2 255.255.255.0 isis enable 1 mpls mpls ldp # interface LoopBack0 ip address 2.2.2.2 255.255.255.255 isis enable 1 |
R3配置
sysname R3 # ipv6 # ip vpn-instance vpn1 ipv6-family route-distinguisher 3:3 vpn-target 13:13 export-extcommunity vpn-target 13:13 import-extcommunity # mpls lsr-id 3.3.3.3 mpls # mpls ldp # isis 1 is-level level-2 cost-style wide network-entity 49.0000.0000.0003.00 interface Ethernet0/0/0 ip address 23.1.1.3 255.255.255.0 isis enable 1 mpls mpls ldp # interface Ethernet0/0/1 ip binding vpn-instance vpn1 ipv6 enable ipv6 address 2000:35::3/64 # interface LoopBack0 ip address 3.3.3.3 255.255.255.255 isis enable 1 # bgp 100 peer 1.1.1.1 as-number 100 peer 1.1.1.1 connect-interface LoopBack0 # ipv4-family unicast undo synchronization peer 1.1.1.1 enable # ipv6-family vpnv6 policy vpn-target peer 1.1.1.1 enable # ipv6-family vpn-instance vpn1 import-route direct |
R4配置
sysname R4 # ipv6 # interface Ethernet0/0/0 ipv6 enable ipv6 address 2000:14::4/64 # # ipv6 route-static :: 0 2000:14::1# ospf 1 vpn-instance vpn1 import-route bgp dn-bit-check disable summary dn-bit-check disable ase dn-bit-check disable nssa area 0.0.0.0 |
R5配置
sysname R5 # ipv6 # interface Ethernet0/0/0 ipv6 enable ipv6 address 2000:35::5/64 # ipv6 route-static :: 0 2000:35::3 |
查看现象
由此可见,VPN可以正常转发数据包
由此看见,是标签带着IPV6报头在IPV4网络中进行传递的。路由器不会读到IPV6的数据包,所以也就不会丢包
转发平面
R4设备发起数据包,进入VPN实例后会加入内层标签与外层标签。此时在IPV4网络中穿越的时候一直是在解析外层标签进行传递。到了R3设备,根据RT值进入相应的VPN实例,最后可将数据包转发给R5.
这篇关于IPV6过渡技术-6VPE的文章就介绍到这儿,希望我们推荐的文章对编程师们有所帮助!