############################################ # IPv6 & dual-stack VRFs ############################################ !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! ! R1,R2,R3,R4 ! conf t ! ipv6 unicast-routing ! vrf definition D rd 65432:10 address-family ipv4 exit address-family ipv6 exit ! vrf definition M rd 65432:42 address-family ipv4 exit address-family ipv6 exit ! end wr ############################################ # INTERFACES ############################################ ################################# # R1 ################################# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! ! R1 ! conf t ! int loopback 0 vrf forwarding M ip address 10.1.1.1 255.255.255.255 ! username ISP1 pass cisco ! int ser 2/1 descr -> ISP1 (Internet) bandwidth 8064 enc ppp ppp authentication chap vrf forwarding D ip address 1.1.1.102 255.255.255.252 ipv6 address fe80::1 link-local ipv6 address 2001::102/64 no shut ! int fa 0/0 descr -> ServM duplex full vrf forwarding M ip address 10.0.42.1 255.255.255.0 no shut ! username R2 pass cisco ! int ser 2/0 descr -> R2 clock rate 806400 bandwidth 8064 enc ppp ppp authentication chap vrf forwarding M ip address 10.0.0.1 255.255.255.252 no shut ! int tun 42 descr -> R2 vrf forwarding D ip address 10.0.0.101 255.255.255.252 ipv6 address fe80::1 link-local tunnel source serial 2/0 tunnel destination 10.0.0.2 tunnel vrf M tunnel key 42 ! int fa 1/0 descr -> R3 duplex full no shut ! int fa 1/0.10 descr -> R3 enc dot1q 10 vrf forwarding D ip address 10.0.0.5 255.255.255.252 ipv6 address fe80::1 link-local ! int fa 1/0.42 descr -> R3 enc dot1q 42 vrf forwarding M ip address 10.0.0.5 255.255.255.252 ! int fa 1/1 descr -> R4 duplex full no shut ! int fa 1/1.10 descr -> R4 vrf forwarding D enc dot1q 10 ip address 10.0.0.9 255.255.255.252 ipv6 address fe80::1 link-local ! int fa 1/1.42 descr -> R4 enc dot1q 42 vrf forwarding M ip address 10.0.0.9 255.255.255.252 ! ip route vrf D 0.0.0.0 0.0.0.0 1.1.1.101 ipv6 route vrf D ::/0 serial 2/1 2001::101 ! end wr !----- # ping vrf D 1.1.1.101 # ping vrf D 2001::101 # ping vrf M 10.0.42.100 !----------------------------------------------------------- ! OSPFv3 .. NACH (!) Konfiguration und VERIFIKATION der IFs !----------------------------------------------------------- ! ! ACHTUNG: auf einem IF muss IPv6 aktiv sein ! ACHTUNG: "capability vrf-light" im SubConfig der address-families ! .. ist nur bei Multiple Area OSPF notwendig ! ! R1 ! conf t ! router ospfv3 1 router-id 10.1.1.1 auto-cost reference-bandwidth 1000 area 0 encryption ipsec spi 256 esp aes-cbc 256 90c52980a363031dd835d1459c6a601eb36d2be9f20269a6edba0416657bdd01 sha1 62ce85a2905b5243f37a9b93fe265ffbe6bed929 address-family ipv4 unicast vrf D default-information originate metric 10 metric-type 1 exit address-family ipv6 unicast vrf D default-information originate metric 10 metric-type 1 exit address-family ipv4 unicast vrf M passive-interface fa 0/0 exit ! int loopback 0 descr (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 0/0 descr -> ServM (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int ser 2/0 descr -> R2 (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int tun 42 descr -> R2 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ! int fa 1/0.10 descr -> R3 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/0.42 descr -> R3 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! int fa 1/1.10 descr -> R4 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/1.42 descr -> R3 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 ipv4 network point-to-point ! end wr ################################# # R2 ################################# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! ! R2 ! conf t ! int loopback 0 vrf forwarding M ip address 10.1.1.2 255.255.255.255 ! username ISP2 pass cisco ! int ser 2/1 descr -> ISP2 (Internet) bandwidth 8064 enc ppp ppp authentication chap vrf forwarding M ip address 2.2.2.102 255.255.255.252 no shut ! int fa 0/0 descr -> ServD duplex full vrf forwarding D ip address 10.0.10.1 255.255.255.0 ipv6 address fe80::2 link-local ipv6 address fd10::1/64 no shut ! username R1 pass cisco ! int ser 2/0 descr -> R1 bandwidth 8064 enc ppp ppp authentication chap vrf forwarding M ip address 10.0.0.2 255.255.255.252 no shut ! int tun 42 descr -> R1 vrf forwarding D ip address 10.0.0.101 255.255.255.252 ipv6 address fe80::2 link-local tunnel source serial 2/0 tunnel destination 10.0.0.1 tunnel vrf M tunnel key 42 ! int fa 1/0 descr -> R4 duplex full no shut ! int fa 1/0.10 descr -> R4 enc dot1q 10 vrf forwarding D ip address 10.0.0.13 255.255.255.252 ipv6 address fe80::2 link-local ! int fa 1/0.42 descr -> R4 enc dot1q 42 vrf forwarding M ip address 10.0.0.13 255.255.255.252 ! int fa 1/1 descr -> R3 duplex full no shut ! int fa 1/1.10 descr -> R3 enc dot1q 10 vrf forwarding D ip address 10.0.0.17 255.255.255.252 ipv6 address fe80::2 link-local ! int fa 1/1.42 descr -> R3 enc dot1q 42 vrf forwarding M ip address 10.0.0.17 255.255.255.252 ! ip route vrf M 0.0.0.0 0.0.0.0 2.2.2.101 ! end wr !----------------------------------------------------------- ! OSPFv3 .. NACH (!) Konfiguration und VERIFIKATION der IFs !----------------------------------------------------------- ! ! R2 ! ! conf t ! router ospfv3 1 router-id 10.1.1.2 auto-cost reference-bandwidth 1000 area 0 encryption ipsec spi 256 esp aes-cbc 256 90c52980a363031dd835d1459c6a601eb36d2be9f20269a6edba0416657bdd01 sha1 62ce85a2905b5243f37a9b93fe265ffbe6bed929 address-family ipv4 unicast vrf D passive-interface fa 0/0 exit address-family ipv6 unicast vrf D passive-interface fa 0/0 exit address-family ipv4 unicast vrf M default-information originate metric 10 metric-type 1 exit ! ! int loopback 0 descr (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 0/0 descr -> ServD (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ! int ser 2/0 descr -> R1 (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int tun 42 descr -> R1 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ! int fa 1/0.10 descr -> R4 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/0.42 descr -> R4 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! int fa 1/1.10 descr -> R3 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/1.42 descr -> R3 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! end wr ################################# # R3 ################################# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! ! R3 ! conf t ! int loopback 0 vrf forwarding M ip address 10.1.1.3 255.255.255.255 ! int fa 0/0 descr -> VLANs duplex full no shut ! int fa 0/0.10 descr -> VLAN 10 enc dot1q 10 vrf forwarding D ip address 192.168.10.1 255.255.255.0 ipv6 address fe80::3 link-local ipv6 address 2001:ba:ff:10::1/64 vrrp 10 ip 192.168.10.254 vrrp 10 priority 110 ! int fa 0/0.42 descr -> VLAN 42 enc dot1q 42 vrf forwarding M ip address 192.168.42.1 255.255.255.0 vrrp 42 ip 192.168.42.254 ! int fa 1/0 descr -> R1 duplex full no shut ! int fa 1/0.10 descr -> R1 enc dot1q 10 vrf forwarding D ip address 10.0.0.6 255.255.255.252 ipv6 address fe80::3 link-local ! int fa 1/0.42 descr -> R1 enc dot1q 42 vrf forwarding M ip address 10.0.0.6 255.255.255.252 ! int fa 1/1 descr -> R2 duplex full no shut ! int fa 1/1.10 descr -> R2 enc dot1q 10 vrf forwarding D ip address 10.0.0.18 255.255.255.252 ipv6 address fe80::3 link-local ! int fa 1/1.42 descr -> R2 enc dot1q 42 vrf forwarding M ip address 10.0.0.18 255.255.255.252 ! end wr !----------------------------------------------------------- ! OSPFv3 .. NACH (!) Konfiguration und VERIFIKATION der IFs !----------------------------------------------------------- ! ! R3 ! ! conf t ! router ospfv3 1 router-id 10.1.1.3 auto-cost reference-bandwidth 1000 area 0 encryption ipsec spi 256 esp aes-cbc 256 90c52980a363031dd835d1459c6a601eb36d2be9f20269a6edba0416657bdd01 sha1 62ce85a2905b5243f37a9b93fe265ffbe6bed929 address-family ipv4 unicast vrf D passive-interface fa 0/0.10 exit address-family ipv6 unicast vrf D passive-interface fa 0/0.10 exit address-family ipv4 unicast vrf M passive-interface fa 0/0.42 exit ! int loopback 0 descr (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 0/0.10 descr -> VLAN 10 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ! int fa 0/0.42 descr -> VLAN 42 (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 1/0.10 descr -> R1 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/0.42 descr -> R1 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! int fa 1/1.10 descr -> R2 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/1.42 descr -> R2 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! end wr ################################# # R4 ################################# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! ! R4 ! conf t ! int loopback 0 vrf forwarding M ip address 10.1.1.4 255.255.255.255 ! int fa 0/0 descr -> VLANs duplex full no shut ! int fa 0/0.10 descr -> VLAN 10 enc dot1q 10 vrf forwarding D ip address 192.168.10.2 255.255.255.0 ipv6 address fe80::4 link-local ipv6 address 2001:ba:ff:10::2/64 vrrp 10 ip 192.168.10.254 ! int fa 0/0.42 descr -> VLAN 42 enc dot1q 42 vrf forwarding M ip address 192.168.42.2 255.255.255.0 vrrp 42 ip 192.168.42.254 vrrp 42 priority 110 ! int fa 1/0 descr -> R2 duplex full no shut ! int fa 1/0.10 descr -> R2 enc dot1q 10 vrf forwarding D ip address 10.0.0.14 255.255.255.252 ipv6 address fe80::4 link-local ! int fa 1/0.42 descr -> R2 enc dot1q 42 vrf forwarding M ip address 10.0.0.14 255.255.255.252 ! int fa 1/1 descr -> R1 duplex full no shut ! int fa 1/1.10 descr -> R1 enc dot1q 10 vrf forwarding D ip address 10.0.0.10 255.255.255.252 ipv6 address fe80::4 link-local ! int fa 1/1.42 descr -> R1 enc dot1q 42 vrf forwarding M ip address 10.0.0.10 255.255.255.252 ! end wr !----------------------------------------------------------- ! OSPFv3 .. NACH (!) Konfiguration und VERIFIKATION der IFs !----------------------------------------------------------- ! ! R4 ! conf t ! router ospfv3 1 router-id 10.1.1.4 auto-cost reference-bandwidth 1000 area 0 encryption ipsec spi 256 esp aes-cbc 256 90c52980a363031dd835d1459c6a601eb36d2be9f20269a6edba0416657bdd01 sha1 62ce85a2905b5243f37a9b93fe265ffbe6bed929 address-family ipv4 unicast vrf D passive-interface fa 0/0.10 exit address-family ipv6 unicast vrf D passive-interface fa 0/0.10 exit address-family ipv4 unicast vrf M passive-interface fa 0/0.42 exit ! int loopback 0 descr (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 0/0.10 descr -> VLAN 10 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ! int fa 0/0.42 descr -> VLAN 42 (M) ipv6 enable ospfv3 1 ipv4 area 0 ! int fa 1/0.10 descr -> R2 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/0.42 descr -> R2 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! int fa 1/1.10 descr -> R1 (D) ospfv3 1 ipv4 area 0 ospfv3 1 ipv6 area 0 ospfv3 1 network point-to-point ! int fa 1/1.42 descr -> R1 (M) ipv6 enable ospfv3 1 ipv4 area 0 ospfv3 1 network point-to-point ! end wr