wiki:ipv6v6config

Version 23 (modified by admin, 8 years ago) ( diff )

--

Device Configuration (Dual Stack/IPv6)

As our network is working well in IPv4 mode lets enable dual stack. This is very easy as its only configuring the interface IP addresses and IPv6 routing.

https://ws.learn.ac.lk/raw-attachment/wiki/ipv6v6config/IPv6.jpg

You can refer the following table for assign Interface IPv6 addresses. In the following IPv6 addresses replace the PQRT segment with the IPv6 block assign to you. You can find your IP block from here.

VLAN

VLAN Name

Device Name

VLAN Interface IPnsrc dynagen recovery

2

Core

CampusCore

2401:dd00:PQRT:2::1/64

FacACore

2401:dd00:PQRT:2::2/64

FacBCore

2401:dd00:PQRT:2::3/64

10

Dept1

FacACore

2401:dd00:PQRT:A110::FFFF/64

Dept1PC

no interface IP

20

Dept2

FacBCore

2401:dd00:PQRT:B220::FFFF/64

Dept2PC

no interface IP

255

Router Connection/Public IP

CampusCore

2401:dd00:PQRT::FFFE/64

Initial Configurations

As we have done most of our configurations before setting up IPv4, Only configuration left is adding IPv6 DNS. Use the following command in all Core Devices and the Router (No need to add this in Dept1Sw & Dept2Sw) 

ip name-server 2401:DD00:1::161

Core Network Layer

First Configure the CampusCore with IPv6 addresses and then move in to FacACore and FacBCore.

CampusCore

  • Login to CampusCore device. Give your console port password (class password)
  • Go to config mode from user mode. Give your enable password (class password)
  • Assign the IPv6 Address to the VLAN interface 
    CampusCore(config)#interface vlan 2
CampusCore(config-if)# ipv6 address 2401:dd00:PQRT:2::1/64 
CampusCore(config-if)# exit
CampusCore(config)#interface vlan 255
CampusCore(config-if)# ipv6 address 2401:dd00:PQRT::FFFE/64 
CampusCore(config-if)# exit
  • Next we have to configure unicast routing in the Switch 
    CampusCore(config)#ipv6 unicast-routing
  • Make sure you save the configurations to start-up

Then we will configure FacACore with it's IPv6 Addresses

FacACore

  • Login to FacACore device. Give your console port password (class password)
  • Go to config mode from user mode. Give your enable password (class password)
  • Assign the IP Address to the VLAN interface and enable unicast routing 
    FacACore(config)#interface vlan 2
FacACore(config-if)#ipv6 address 2401:dd00:PQRT:2::2/64
FacACore(config-if)#exit
FacACore(config)#interface vlan 10
FacACore(config-if)#ipv6 address 2401:dd00:PQRT:A110::FFFF/64
FacACore(config-if)#exit 
FacACore(config)#ipv6 unicast-routing
FacACore(config)#exit
FacACore#write

FacBCore

  • Repeat same to configure FacBCore 
    FacBCore(config)#interface vlan 2
FacBCore(config-if)#ipv6 address 2401:dd00:PQRT:2::3/64
FacBCore(config-if)#exit
FacBCore(config)#interface vlan 20
FacBCore(config-if)#ipv6 address 2401:dd00:PQRT:B220::FFFF/64
FacBCore(config-if)#exit 
FacBCore(config)#ipv6 unicast-routing
FacBCore(config)#exit
FacBCore#write
  • Finally Verify the connectivity
    • Go to FacACore device
    • Go to privileged mode and ping CampusCore and FacBCore 
      ping 2401:dd00:PQRT:2::1
ping 2401:dd00:PQRT:2::3
  • You should get a positive reply with "!!"

PC Auto Configuration

Log in to your Dept1PC and check its IP address by issuing ifconfig in console. You may notice that there is a new IPv6 address auto configured with the VLAN 10 prefix.

  • You were already capturing some packets on wireshark with icmpv6 filter. Go to wireshark
  • You will see neighbor solicitation packets coming to your PC
  • Try ping IPv6 gateway 
    ping6 2401:dd00:PQRT:A110::FFFF
  • you will get a positive result

Check the same with Dept2PC. But now it should show an address from VLAN 20 prefix. Check connectivity by ping6 VLAN20 interface ipv6 address.

Now let's configure a static IPv6 address for Dept2PC

  • go to Dept2PC and edit /etc/network/interfaces file 
    vi /etc/network/interfaces
  • Find the following line 
    iface enp0s3 inet6 auto
  • Replace the line with following 
    iface enp0s3 inet6 static
address 2401:DD00:<PQRT>:B220::1
netmask 64
gateway 2401:DD00:<PQRT>:B220::FFFF
  • Reboot the machine
  • After the reboot ping6 to IPv6 Gateway

Connecting LAN to the Router

Now you have done LAN interface configuration. Let's start routers Configuration.

  • Login to BorderRt Router and switch to config mode
  • Router's IP allocation is as follows. You can get your Router's IP address from here.
Interface Name IP Address
Fast Ethernet 0/0 2401:dd00:PQRT::FFFF/64
Fast Ethernet 0/1 <Your Routers WAN IPv6>
  • Let's configure the LAN port (fa 0/0) 
    BorderRt(config)#interface fastEthernet 0/0
BorderRt(config-if)#ipv6 address 2401:dd00:PQRT::FFFF/64
BorderRt(config-if)#exit
  • Configure the WAN port (fa 0/1) 
    BorderRt(config)#interface fastEthernet 0/1
BorderRt(config-if)#ipv6 address 2401:dd00:1:128::XXXX/64
BorderRt(config-if)#exit
BorderRt(config)#ipv6 unicast-routing
BorderRt(config)#exit
BorderRt#write
  • You have successfully finished connecting CampusCore to the BorderRt router. Let's verify the connectivity using the ping command
  • Go to BorderRt and ping to CampusCore switch's VLAN 255 Interface IP 
    ping 2401:dd00:PQRT::FFFF
  • Now Check the routers connectivity in WAN port. Ping to the WAN Gateway 
    ping 2401:DD00:1:128::FFFF
    • Both these ping commands should give you a reply 

Routing

In this Lab we will enable OSPF for IPv6 in all the core switches and we will add default routes in !Campuscore and the router.

  • Now let's enable OSPF on Core devices. Starting from CampusCore
    • Login to CampusCore? switch and switch to config mode
    • Define OSPF process and Process ID. In this lab use process ID as 1 
      CampusCore(config)#ipv6 router ospf 1
    • Give the router ID, this will be the same as ipv4 ospf router ID for simplicity 
      CampusCore(config-rtr)#router-id 10.0.2.1
    • You are going to announce the subnets which are directly connects to you. Use this command for that 
      CampusCore(config-rtr)#redistribute connected
    • You are enabling OSPF on VLAN 2. Use this command for that. 
      CampusCore(config)#interface vlan 2
CampusCore(config-if)# ipv6 ospf 1 area 2
CampusCore(config-if)# exit
    • Now you have enable OSPF on CampusCore Switch. Now lets add the default Route. 
      CampusCore(config)# ipv6 route ::/0 2401:dd00:PQRT::FFFF
  • Follow the same steps in FacACore and FacBCore

FacACore

FacACore(config)#ipv6 router ospf 1
FacACore(config-rtr)#router-id 10.0.2.2
FacACore(config-rtr)#redistribute connected
FacACore(config-rtr)#exit
FacACore(config)#interface vlan 2
FacACore(config-if)# ipv6 ospf 1 area 2
FacACore(config-if)# exit
FacACore(config)#ipv6 route ::/0 2401:dd00:PQRT:2::1

FacBCore

FacBCore(config)#ipv6 router ospf 1
FacBCore(config-rtr)#router-id 10.0.2.3
FacBCore(config-rtr)#redistribute connected
FacBCore(config-rtr)#exit
FacBCore(config)#interface vlan 2
FacBCore(config-if)# ipv6 ospf 1 area 2
FacBCore(config-if)# exit
FacBCore(config)#ipv6 route ::/0 2401:dd00:PQRT:2::1
  • Now you have enable Routing in your Core network. Let's verify whether it is working. 
    • Go to Dept1PC and try a Ping6 to Dept2PC. You get get the auto configured IPv6 address of the Dep2tPC by ifconfig command
    • Try a ping to Router's LAN port 
      ping6 2401:dd00:PQRT::FFFF
    • Both should give you a reply
  • Add the BorderRt Routers default gateway
    • Go to BorderRt and switch to config mode
    • Add the default route 
       - BorderRt(config)# ipv6 route ::/0 2401:DD00:1:128::FFFF
    • Verify the route by ping a known host from the BorderRt router 
      ping 2401:dd00:1::161
    • This should give you a reply

Router Configuration

Here we need no NAT to access internet, only dependency is the correct routing details.

  • Login to BorderRt Router and switch to config mode
  • Add a static route in the router so that the traffic coming to our defined network will redirect to CampusCore switch 
    BorderRt(config)#ipv6 route 2401:dd00:PQRT::/48 2401:dd00:PQRT::FFFE
  • Now try a ping from DeptPC1 to the 2401:dd00:1::161 . It should give reply

Wireshark

Let's capture some packets and do a analysis.

  • Log in to Dept1PC and and start blackbox. 
    sudo startx
  • Right click on desktop and open xterm terminal
  • type wireshark and press enter
  • On the wireshark interface select the enp0s3 interface and click Capture packets button
  • While you are capturing. Open another xterm terminal. And type midori and press enter.
  • You will get midori browser. Click the arrow head at top right corner to get the menu. In the menu select New Private Browsing Window
  • Browse for www.google.com from the browser.
  • Go back to wireshark and stop capturing
  • Click on Statistics and select Summary
  • You will see high percentage of IPv6 packets
  • Try for some other popular sites

HTTP on IPv6

Your Dept1PC and Dept2PC were unaccessible from the outside network when you are using IPv4 only. Let's see if it is the same with IPv6. We have configure lighttpd in Dept2PC which is a light weight web server. Lest see whether you can access it from outside.

  • Go to Dept2PC and edit the /var/www/html/index.html 
    vi /var/www/html/index.html
  • Find PQRST and replace it with your Institute Name
  • Save and exit the file
  • Open a web browser in your host machine (Your windows or MAC)
  • Type http://[2401:dd00:<PQRT>:b220::1]
  • You should get a web page.

Attachments (1)

Download all attachments as: .zip

Note: See TracWiki for help on using the wiki.