IPv6 Cisco Live

8/11/2019 IPv6 Cisco Live

1/115

2012 Cisco and/or its affiliates. All rights reserved.BRKRST-2302 Cisco Public

IPv6 Troubleshooting

BRKRST-2302


2/115


Agenda

Definition

Service Level Agreement 5 9s 4 9s 3 9s

IPv6 addressing refresher

Troubleshooting approach in LAN/WAN environment

Troubleshooting FHRP

Troubleshooting IPv6 routingOSPFv3,EIGRPv6,mBGPTroubleshooting tunnels

Troubleshooting 6PE,6VPE


3/115


Definition and Purpose

A systematic search for the source of a problem so that it can be solved

To ensure that the system is available and operating in an effective and effimanner as required in accomplishing its specified objective


4/115


5/115 2012 Cisco and/or its affiliates. All rights reserved.BRKRST-2302 Cisco Public

Avail abi li ty Down t ime / yr. Down t ime /month Down t

90% ("one nine") 36.5 days 72 hours 16.8

99.9% ("three nines") 8.76 hours 43.2 minutes 10.1

99.95% 4.38 hours 21.56 minutes 5.04

99.99% ("four nines") 52.56 minutes 4.32 minutes 1.0199.999% ("five nines") 5.26 minutes 25.9 seconds 6.05

99.9999% ("six nines") 31.5 seconds 2.59 seconds 0.60

High Availability - challenges

http://en.wikipedia.org/wiki/High_availability



Back 2 the Hex - IPv6 addressing refreshe



Aggregatable Global Unicast Address Allocation Mechanism

The strip from 0000:: to ffff::

The first 16 bits of the total 128 bits

0000:: - loopback and unspecified

0001 IANA Registry ISP

0010 - 2000::/3 - 2001::/16 - 2001::/23 - 2001::/32 - 2001::/48

00110100

0101

ffff::

Typicaallocat

Allocation fromRegistries to ISP

ARINAPNICAFRINICLACNICRIPE

Note Enterprises can get PI prefix from ARIN



IPv6 Site Addressing Common Misconcepti

ExampleAllocated prefix is 2001:0db8:1234::/48

That means 16 bits are available to generate 64 K subnets from the alloc

You have 2001:0db8:1234: 0001::/64 , 2001:0db8:1234: 000your subnet prefixes

2001:0db8:1234::/48 - 2001:0db8:1234: 0000 ::/64

to

2001:0db8:1234: ffff ::/64

65535Not ho



A Typical IPv6 Interface on a Router

R1#sh ipv6 interface

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00

Global unicast address(es):

2001:DB8:1234:5678:A8BB:CCFF:FE00:A00

Joined group address(es):

FF02::1

FF02::2

FF02::1:FF00:A00

All Nodes Multicast Address

All Routers Mul ticast Address

Solicited Node Multicast Add

Valid only on t

Reachable Glo



Dual StackIPv4 and IPv6

IPv6-router#sh run int gigabitEthernet 2/2

Building configuration...

interface GigabitEthernet2/2

ip address 192.168.1.1 255.0.0.0

ipv6 address 2001:DB8:1234:5678::/64 eui-64end

Nodes IPv4 a

Stack

Note Nexus OS follows secondary address CLI for now. Multiplecan be assigned to a single interface. In IPv6 no concept of secondary



Let The Trouble Shooting Begin

Connectivity



A Peek Inside the IPv6 Basic HeaderTrafficClass

Destination Add

Source Address

Payload Length

Version

R10#debug ipv6 icmp

R10#ping 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200,timeout is 2 seconds !!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 40/53/72 ms

Mar 23 20:31:28.495: IPv6: nexthop FE80::A8BB:CCFF:FE00:1400,Mar 23 20:31:28.495: IPV6: source 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 (local)Mar 23 20:31:28.495: dest 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200 (Ethernet0/0)Mar 23 20:31:28.495: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating


13/115


ICMPv6 ND Message Types Captured

Router solicitation (ICMPv6 type 133)

Mar 24 23:07:32.721: ICMPv6-ND: Received RS on Ethernet1/0 fromFE80::A8BB:CCFF:FE00:2801

Router advertisement (ICMPv6 type 134)Mar 24 22:59:17.205: ICMPv6-ND: Sending RA to FF02::1 on Ethernet1/0

Neighbor solicitation (ICMPv6 type 135)

Mar 24 22:58:29.417: ICMPv6-ND: Received NS for FE80::A8BB:CCFF:FE00:A00 on from FE80::A8BB:CCFF:FE00:1400

Neighbor advertisement (ICMPv6 type 136)Mar 24 22:58:29.417: ICMPv6-ND: Sending NA for FE80::A8BB:CCFF:FE00:A00 on E


14/115


Stateless Address Assignment Through RA(Router Advertisement)

R20#sh runBuilding configuration...

Current configuration : 89 bytes!interface Ethernet0/0no ip addressipv6 address 2001:DB8:1234:5678::/64end


Current configuration interfaceEthernet0/0no ip addressipv6 address autoconfigipv6 enable

end

What is

missing

Router R20 Will Not Send Any Prefix and as a Result Router R10 Will Not Receive Any Global Prefix

R20

R10


15/115


IPv6 Unicast Address Configuration

1. Configure IPv6 unicast routing globally

IPv6-router(config)#ipv6 unicast-routing2. On the interface, a global unicast address can be configured using sta

(router advertisements),stateful (DHCP) or administrator assigned

stateless

IPv6-router(config-if)#ipv6 address autoconfigadmin assignedIPv6-router(config)#int gigabitEthernet 2/2IPv6-router(config-if)# ipv6 address 2001:0db8:1234:5678::/64 eui-64IPv6-router(config-if)#end

Yes, you

configur

Required Steps


16/115


Debug Captures of SLAAC

R10#

*Feb 2 22:18:25.455: ICMPv6-ND: Sending RS onEthernet0/0

*Feb 2 22:18:25.475: ICMPv6-ND: Received RAfrom FE80::A8BB:CCFF:FE00:1400 on Ethernet0/0

*Feb 2 22:18:25.475: ICMPv6-ND: Sending NS for2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 onEthernet0/0

*Feb 2 22:18:25.475: ICMPv6-ND:Autoconfiguring2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 onEthernet0/0

R20#

*Feb 2 22:14:01.107: ICMPv6-ND: Senon Ethernet0/0

*Feb 2 22:14:01.107: ICMPv6-ND: M

*Feb 2 22:14:01.107: ICMPv6-ND: p2001:DB8:1234:5678::/64 onlink autoco

PPPOE - IPv6CP does not support negotaddresses. you have to use SLAAC or DH


17/115


Interface Now Has a Global AddressR10#show ipv6 interface ethernet 0/0

Ethernet0/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:A00

Global unicast address(es):

2001:DB8:1234:5678:A8BB:CCFF:FE00:A00, subnet is 2001:DB8:1234:5678::/64 [PRE]

Joined group address(es):

FF02::1

FF02::2

FF02::1:FF00:A00

MTU is 1500 bytes

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ND DAD is enabled, number of DAD attempts: 1

ND reachable time is 30000 milliseconds

ND advertised reachable time is 0 milliseconds

ND advertised retransmit interval is 0 milliseconds

ND router advertisements are sent every 200 seconds

ND router advertisements live for 1800 seconds

Hosts use stateless autoconfig for addresses.

On P2P serial links, wDAD kicks in and intenot process IPv6 packdisable DAD to get ar


18/115


/64 Requirement for autoconfig

R10#Mar 17 19:28:45.119: ICMPv6-ND: Sending RA to FF02::1 on Ethernet1/0Mar 17 19:28:45.119: ICMPv6-ND: MTU = 1500Mar 17 19:28:45.119: ICMPv6-ND: prefix = 2001:DB8:1040:1040::/96 onlink auto

*Mar 1 18:28:24.775: ICMPv6: Received ICMPv6 packet from FE80::A8BB:CCFF:FE00:A01, typ

R40#show ipv6 interface eth 1/0Ethernet1/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:2801 No Virtual link-local address(es): No global unicast address is configured

e1/0R40


19/115


/64 Requirement for autoconfigR10#sh run int eth 1/0


interface Ethernet1/0no ip addressno ip directed-broadcastipv6 address 2001:DB8:1040:1040::/96

endR10(config-if)#ipv6 address 2001:DB8:1040:1040::/64 eui

R10(config-if)#Mar 17 19:37:44.795: ICMPv6-ND: Adding prefix 2001:DB8:1040:1040::/64 to Ethernet1/0Mar 17 19:37:44.795: ICMPv6-ND: Sending NS for 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 on Ethernet1/0Mar 17 19:37:45.815: ICMPv6-ND: DAD: 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 is unique.Mar 17 19:37:45.815: ICMPv6-ND: Sending NA for 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 on Ethernet1/0

Mar 17 19:37:45.815: ICMPv6-ND: Address 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01/64 is up on Ethernet1/0

R40#*Mar 1 18:43:56.427: ICMPv6: Received ICMPv6 packet from FE80::A8BB:CCFF:FE00:1400, type 134R40#show ipv6 interface eth1/0Ethernet1/0 is up, line protocol is up

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:2801 No Virtual link-local address(es):Global unicast address(es):

2001:DB8:1040:1040:A8BB:CCFF:FE00:2801, subnet is 2001:DB8:1040:1040::/64

e1/0R40


20/115


Neighbor Relationship Using Link Local Addr

R20#sh ipv6 routers

Router FE80::A8BB:CCFF:FE00:A00 on Ethernet0/0, last updateHops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1

Reachable time 0 msec, Retransmit time 0 msec

Router FE80::A8BB:CCFF:FE00:2800 on Ethernet0/0, last updat

Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1Reachable time 0 msec, Retransmit time 0 msec

R20#


21/115


Neighbor cache

Router# show ipv6 neighbors ethernet 2

IPv6 Address Age Link-layer Addr State Interface

2000:0:0:4::2 0 0003.a0d6.141e REACH Ethernet2

FE80::203:A0FF:FED6:141E 0 0003.a0d6.141e REACH Ethernet2

3001:1::45a - 0002.7d1a.9472 REACH Ethernet


22/115


show ipv6 neighbors

Age

Time (in minutes) since the address was confirmed to be reachable. A hyphen (-) indicatentry.

Link-layer Addr

MAC address. If the address is unknown, a hyphen (-) is displayed.

State

The state of the neighbor cache entry. Following are the states for dynamic entries in theneighbor discovery cache:

show ipv6 neighbors (continued)


23/115


show ipv6 neighbors (continued)

INCMP (Incomplete)Address resolution is being performed on the entry. A neighbsolicitation message has been sent to the solicited-node multicast address of the target

corresponding neighbor advertisement message has not yet been received.

REACH (Reachable)Positive confirmation was received within the last Reachablemilliseconds that the forward path to the neighbor was functioning properly. While instate, the device takes no special action as packets are sent.

STALEMore than ReachableTime milliseconds have elapsed since the last positiveconfirmation was received that the forward path was functioning properly. While in Sthe device takes no action until a packet is sent.


24/115


Show ipv6 neighbors (continued)

DELAYMore than ReachableTime milliseconds have elapsed since the last positive cwas received that the forward path was functioning properly. A packet was sent within thDELAY_FIRST_PROBE_TIME seconds. If no reachability confirmation is received wiDELAY_FIRST_PROBE_TIME seconds of entering the DELAY state, send a neighbor message and change the state to PROBE.

PROBEA reachability confirmation is actively sought by resending neighbor solicitatevery RetransTimer milliseconds until a reachability confirmation is received

????Unknown state.


25/115


Show ipv6 neighbors (static entries)

Following are the possible states for static entries in the IPv6 neigdiscovery cache:

INCMP (Incomplete)The interface for this entry is down.

REACH (Reachable)The interface for this entry is up.

Note Reachability detection is not applied to static entries in the Ineighbor discovery cache; therefore, the descriptions for the INC(Incomplete) and REACH (Reachable) states are different for dynand static cache entries.


26/115


Neighbor stats = arp sum

R10#sh ipv6 neigh stat

IPv6 ND StatisticsEntries 1, High-water 2, Gleaned 0, Scavenged 1, Static 0Entry States

INCMP 0 REACH 1 STALE 0 GLEAN 0 DELAY 0 PROBE 0Resolutions

Requested 2, timeouts 0, resolved 1, failed 0In-progress 0, High-water 1, Throttled 0, Data discards 0

NUD

Requested 0, timeouts 0, resolved 0, failed 0in-progress 1, high-water 2, throttled 0, current queue 0, queue high-water 0

For cache use


27/115


Good Neighbors

Nx7010-# show ipv6 neighbor vrf CiscoLive_2012

Flags: # - Adjacencies Throttled for GleanG - Adjacencies of vPC peer with G/W bit

IPv6 Adjacency Table for VRF CiscoLive_2012Total number of entries: 10Address Age MAC Address Pref Source Interfacfe80::222:55ff:fe79:2c42 2d02h 0022.5579.1c42 50 icmpv6 Vlan351fe80::20c:bdff:fe02:abf1 1d21h 000c.bd02.abf1 50 icmpv6 Vlan2012106:abbc:d00d:801::2 2d02h 0022.4579.1c42 50 icmpv6 Vlan50

N7K-7009-3# show ipv6 icmp neig

Flags: + - Adjacencies synced via CF# - Adjacencies Throttled for Gl

ICMPv6 Adjacency Table for VRF dAddress Age MAC Addres


28/115


Common issue Router Hardening ?6CE_1#show ipv6 neighborsIPv6 Address Age Link-layer Addr State Inter2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 - INCMP Et0/

6VPE_1#sh run int eth 0/0Building configuration...

Current configuration : 187 bytes!

interface Ethernet0/0no ip addressipv6 address 2001:DB8:1234:5678::/64 eui-6ipv6 traffic-filter ciscolive2012 inipv6 traffic-filter ciscolive2012 outipv6 nd ra suppress

End


29/115


ICMPv6 needs free but controlled flow6VPE_1#show ipv6 access-listIPv6 access list ciscolive2012

deny icmp any any (114 matches) sequence 50 permit ipv6 any any (3 matches) sequence 60

6CE_1#

*Mar 29 19:00:12.415: ICMPv6: Received ICMP unreachable code 1 fromFE80::A8BB:CCFF:FE00:1400

6VPE_1(config-ipv6-acl)#no deny icmp any any

6CE_1#show ipv6 neighborsIPv6 Address Age Link-layer Addr State In2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 aabb.cc00.1400 REACH EFE80::A8BB:CCFF:FE00:1400 0 aabb.cc00.1400 REACH


30/115


Testing Connectivity on Link Local AddreDirectly connected IPv6 hosts do not need global unicast prefixes assigned and caneach other on link local addresses (FE80::/10). However, an output interface needs to bespecified as all the interfaces have the same fe80::/10 prefix

FE80::A8BB:CCFF:FE00:A00

FE80::A8BB

R1#ping FE80::A8BB:CCFF:FE00:1400Output Interface: ethernet0/0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FEseconds:Packet sent with a source address of FE80::A8BB:CCFF:FE!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max =

R1#

R2

No packet loss as in IPv4.FF02:0:0:0:0:1:FF/104based Neighbor discovery

R1

Testing Connectivity on Global Prefixes


31/115



Global prefixes reachability does not need output interface specified

R1

R2

2001:DB8:1234:5678:A8B

2001:DB8:1234:5678:A8BB:CCFF:FE00:A00

R1#ping 2001:DB8:1234:5678:A8BB:CCFF:FE00:1

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to2001:DB8:1234:5678:A8BB:CCFF:FE00:1400, time!!!!!Success rate is 100 percent (5/5), round-trip min/avg/msR1#

"Unreach" counter corresponds to"Destination Unreachable Message "

R1



32/115



IPv6: Packets addressed to unused addresses in P2P links are pingponge

R1

R2 ping-pong issue identified in RFC 6164. for XR See CSCtf64096 . IOS/XE a

/127 issue

:0 and :1 are the addresses Not :1 and :2

/126 issue

A P fi


33/115


Anycast Prefixes

R10

R20

R20#sh run int eth 0/0Building configuration...

Current configuration : 129 bytes!interface Ethernet0/0

ipv6 address2001:DB8:1230:1230::/64 anycast


Current configuration : 129 by!interface Ethernet0/0

ipv6 address2001:DB8:1230:1230::/64 any

Anycast suffix required

Anycast addresswill never be thesource. Assigned on Routers only

A B h i

I i i ll l R30


34/115


Anycast Behavior

R10#ping 2001:DB8:1230:1230::

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 20/44/132 msR10#R10#ping 2001:DB8:1230:1230::Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds:....!Success rate is 20 percent (1/5), round-trip min/avg/max = 1060/1060/1060 msR10#ping 2001:DB8:1230:1230::Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 20/45/128 msR10#

R10

R20

Initially only R30responds

R2aft

NeighborDiscoveryBased in LAN

Anycast Interfaces back t6CE 1#sh run int eth 0/0


35/115


y6CE_1#sh run int eth 0/0Building configuration...

Current configuration : 90 bytes!interface Ethernet0/0no ip addressipv6 address 2001:DB8:1234:5678::/64 anycast

end

6VPE_1#show ipv6 interfaceEthernet0/0 is up, line protocol is up


2001:DB8:1234:5678::, subnet is 2001:DB8:1234:5678::/64 [ANY ND DAD is enabled, number of DAD attempts: 1

A t N ighb C h t ggl


36/115


Anycast Neighbor Cache struggle

6CE_1#show ipv6 neighborsIPv6 Address Link-layer Addr State 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 - INCMP

*Mar 28 22:20:30.971: ICMPv6-ND: INCMP -> DELETE: 2001:DB8:1234:5678:A8BB:CCFF:FE

6CE_1#show ipv6 neighborsIPv6 Address Age Link-layer Addr State Interfac

FE80::A8BB:CCFF:FE00:1400 7 aabb.cc00.1400 STALE Et0/0


37/115


FHRP Diving Catches

FHRP: HSRP The Required Steps


38/115


q pR10

R20

IPv6 hosts learn of available IPv6 routers through IPv6 neighbor discoveryRA messages. These are multicast periodically, or may be solicited by hosts. HSRP is dto provide only a virtual first hop for IPv6 hosts.

R10(config-if)#standby ipv6 ?

X:X:X:X::X IPv6 link-local addressautoconfig Obtain address using autoconfiguration

R10(config-if)#standby ipv6 FE80::A8BB:CCFF:FE00:A00% HSRP version 2 is required for IPv6 support

R10(c onfig-if)#standby ipv6 FE80::A8BB:CCFF:FE00:A00% Address already in-use

Use a different Laddress or use thoption

FHRP: HSRP


39/115


FHRP: HSRPR10

R20


Current configuration : 191 bytes!interface Ethernet0/0ipv6 address 2001:DB8:1230:1230::/64 eui-64ipv6 enablestandby version 2standby 0 ipv6 autoconfigstandby 0 priority 200standby 0 preempt

end

R20#sh run intBuilding confi

Current config!interface Etherno ip address

ipv6 address2001:DB8:123ipv6 enablestandby versiostandby 0 ipv6standby 0 priostandby 0 pree

end

R10(config-if)#00:11:40: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Speak -> Standby

00:11:40: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Standby -> Active

FHRP: HSRP Validation


40/115


R10#show standbyEthernet0/0 - Group 0 (version 2)State is Active

4 state changes, last state change 01:00:16Virtual IP address is FE80::5:73FF:FEA0:0Active virtual MAC address is 0005.73a0.0000

Local virtual MAC address is 0005.73a0.0000 (v2 IPv6 default)

Hello time 3 sec, hold time 10 sec Next hello sent in 1.820 secs

Preemption enabledActive router is localStandby router is FE80::A8BB:CCFF:FE00:1400, priority 150 (expires in 8.920 secPriority 200 (configured 200)IP redundancy name is "hsrp-Et0/0-0" (default)

FHRP: HSRP ValidationR10

R20

FHRP: HSRP Validat


41/115


R10

R20

R30#ping ipv6Target IPv6 address: FE80::5:73FF:FEA0:0Repeat count [5]: 10000Datagram size [100]:Timeout in seconds [2]:Extended commands? [no]:

Sweep range of sizes? [no]:Output Interface: ethernet0/0Type escape sequence to abort.Sending 10000, 100-byte ICMP Echos to FE80::5:73FF:FEA0:0, timeout is 2 seconds:Packet sent with a source address of FE80::A8BB:CCFF:FE00:1E00!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!R10(config)#int eth 0/0R10(config-if)#shutR10(config-if)#00:25:42: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Active -> InitR10(config-if)#00:25:44: %LINK-5-CHANGED: Interface Ethernet0/0, changed state to administratively down00:25:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to downR10(config-if)#no shutR10(config-if)#00:25:58: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up00:25:59: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up00:26:00: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Listen -> Active

Virtual IPv6address

Global V


42/115


OSPFv3 Pit Falls

OSPFv3 Header and Hello Packet


43/115


OSPFv3 Header and Hello Packet

Rtr Pri

Neighbor ID

HelloInterval RouterDeadIntervalDesignated Router

Backup Designated Router

Interface IDOptions

Version Type

Instance ID

Router ID Area ID

Packet Length

Checksum

Basic Header16 Bytes

Hel

Not Network Mask

OSPFv3 Configuration Needs


44/115


e0/0e0/0

R10#sh run intBuilding configuration...

Current configuration : 137

ipv6 unicast-routing!interface Ethernet0/0

ipv6 address 2001:DB8:12

ipv6 ospf 124 area 0

ipv6 router ospf 124router-id 0.0.10.0log-adjacency-changes

R20#sh run int eth 0/0Building configuration

Current configuration : 137 bytes

ipv6 unicast-routing!interface Ethernet0/0

ipv6 address 2001:DB8:1240:1240::/64 eui-64ipv6 ospf 124 area 0

ipv6 router ospf 124router-id 0.0.20.0log-adjacency-changes

R20(config)#ipv6 router ospf 124*Feb 5 04:06:07.314: %OSPFv3-4-NORTRID: OSPFv3 process 124 could not pick a rou

please configure manuallyR20(config-rtr)#router-id 0.0.20.0

Process ID need not matchbetween Neighbors

R10e0/0e0/0

R20

OSPFv3-Related Multicast Group


45/115


OSPFv3 Related Multicast Group

R10#sh ipv6 interface eth 0/0

Ethernet0/0 is up, line protocol is upIPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE0Global unicast address(es):

2001:DB8:1240:1240:A8BB:CCFF:FE00:A00, subnet is2001:DB8:1240:1240::/64 [EUI]

Joined group address(es):FF02::1FF02::2FF02::5FF02::6

AllSPFRouters

AllDRouters

Common Indicators

Remembe


46/115


Common Indicators

R20#sh ipv6 ospf interfaceEthernet0/0 is up, line protocol is up

Link Local Address FE80::A8BB:CCFF:FE00:1400, Interface ID 2Area 0, Process ID 124, Instance ID 0, Router ID 20.20.20.20 Network Type BROADCAST, Cost: 10Transmit Delay is 1 sec, State BDR, Priority 1Designated Router (ID) 10.10.10.10, local address FE80::A8BB:CCFF:FE00:A00Backup Designated router (ID) 20.20.20.20, local address FE80::A8BB:CCFF:FE00:1400Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

Hello due in 00:00:00Index 1/1/1, flood queue length 0

Next 0x0(0)/0x0(0)/0x0(0)Last flood scan length is 0, maximum is 2Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 2, Adjacent neighbor count is 2Adjacent with neighbor 40.40.40.40Adjacent with neighbor 10.10.10.10 (Designated Router)

Suppress hello for 0 neighbor(s)

multiple ininterface ainstance ID

Timersmatchneighb

show ipv6 ospf


47/115


show ipv6 ospf

R20#show ipv6 ospfRouting Process "ospfv3 124" with ID 0.0.20.0It is an area border routerSPF schedule delay 5 secs, Hold time between two SPFs 10 secsMinimum LSA interval 5 secs. Minimum LSA arrival 1 secsLSA group pacing timer 240 secsInterface flood pacing timer 33 msecsRetransmission pacing timer 66 msecs

Number of external LSA 0. Checksum Sum 0x0 Number of areas in this router is 2. 2 normal 0 stub 0 nssa

Area BACKBONE(0) Number of interfaces in this area is 1SPF algorithm executed 11 times

Number of LSA 10. Checksum Sum 0x567F6 Number of DCbitless LSA 0 Number of indication LSA 0 Number of DoNotAge LSA 0Flood list length 0

database database: Summary


48/115


database database: SummaryProcess 124 database summary

LSA Type Count Delete Maxage

Router 6 0 0 Network 1 0 0Link 7 0 0Prefix 4 0 0Inter-area Prefix 4 0 0Inter-area Router 0 0 0

Type-7 External 0 0 0Unknown 0 0 0Type-5 Ext 0 0 0Unknown AS 0 0 0Total 22 0 0

Mismatched Hello Parameters R30#sh run int serial 3/0Building configuration


49/115


R50S3/0S2/0

R20#sh run int serial 3/0Building configuration...


ipv6 unicast-routing!interface serial3/0ipv6 address 2001:DB8:1223:1223::/64 eui-64ipv6 ospf 124 area 0

Ipv6 ospf network point-to-multipoint

R20#


Current configuration : 17ipv6 unicast-routing!interface serial0/0ipv6 address 2001:DB8:12ipv6 ospf 124 area 0

R30#R20#sh ipv6 ospf interface ser 3/0Serial2/0 is up, line protocol is upLink Local Address FE80::A8BB:CCFF:FE00:140Area 1, Process ID 124, Instance ID 0, Router ID 2 Network Type POINT_TO_MULTIPOINT, Cost: 4

Transmit Delay is 1 sec, State POINT_TO_MULTIPTimer intervals configured, Hello 30, Dead 120, W

Hello due in 00:00:20Index 1/1/2, flood queue length 0

Next 0x0(0)/0x0(0)/0x0(0)Last flood scan length is 0, maximum is 0Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 0, Adjacent neighbor count is 0Suppress hello for 0 neighbor(s)

Interface- Networktype mismatch

R20

R20#Mismatched Hello Parameters


50/115


0*Feb 5 20:47:21.205: OSPFv3: Rcv hello from 50.50.50.50 area 1 from Serial3/0 FE80::A8BB:CCFF:FE00:3200

*Feb 5 20:47:21.205: OSPFv3: Mismatched hello parameters from FE80::A8BB:CCFF:FE00:3200

After matching/rectifying the network types on the interfaces

R20#*Feb 5 20:52:35.369: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from DOWN to INIT, Re

R20#*Feb 5 20:52:38.961: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from INIT to 2WAY, 2-W

*Feb 5 20:52:38.961: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from 2WAY to EXSTART*Feb 5 20:52:38.981: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from EXSTART to EXCH Negotiation Done*Feb 5 20:52:39.105: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 fromEXCHANGE to LOADING, Exchange Done

*Feb 5 20:52:39.105: %OSPFv3-5-ADJCHG: Process 124, Nbr 50.50.50.50 on Serial3/0 fromLOADING to FULL, Loading Done

IP MTU Mismatch


51/115


interface Ethernet0/0ipv6 address 2001:DB8:1020:1020::/64 eui-64ipv6 mtu 1400

ipv6 ospf 124 area 0

*Feb 15 18:20:04.332: OSPFv3: Rcv DBD from 40.40.40.40 on Ethernet0/0 seq 0x260x0013 flag 0x7 len 28 mtu 1400 state EXCHANGE*Feb 15 18:20:04.332: OSPFv3: Nbr 40.40.40.40 has smaller interface MTU

Ensure identical MTU on both ends of the link

*Feb 15 18:31:56.888: %OSPFv3-5-ADJCHG: Process 124, Nbr 40.40.40.40 on Ethfrom EXSTART to EXCHANGE, Negotiation DoneR20(config-if)#*Feb 15 18:32:01.916: %OSPFv3-5-ADJCHG: Process 124, Nbr 40.40.40.40 on Ethfrom EXCHANGE to LOADING, Exchange Done*Feb 15 18:32:01.916: %OSPFv3-5-ADJCHG: Process 124, Nbr 40.40.40.40 on Ethfrom LOADING to FULL, Loading Done

e0/0R10

passive-interface Default


52/115


p

ipv6 router ospf 124router-id 0.0.0.10

log-adjacency-changes passive-interface default

R40e1/0e1/0

R10(config-rtr)#no passive-interface ethernet 1/0R10(config-rtr)#

*Feb 8 18:28:08.757: %OSPFv3-5-ADJCHG: Process 124, Nbr 40.40.40.40 on Ethernet1/0 LOADING to FULL, Loading Done

R10

Area Type Mismatch


53/115


yp

R10#

ipv6 router ospf 124router-id 10.10.10.10log-adjacency-changesarea 2 nssa

R40e1/0e1/0

R40#ipv6 router ospf 1router-id 40.40.4log-adjacency-ch

area 2 nssa *Feb 8 18:32:20.237: OSPFv3: Hello fromFE80::A8BB:CCFF:FE00:2801 with mismatched NSSA option bit

*Feb 8 18:35:29.268: %OSPFv3-5-ADJCHG: Process 124, Nbr 40.40.40.40 on Ethernet1/0 from LOADING to FULL, Loading Done

Changearea type

ABR

R10

The Routing Table


54/115


R10#sh ipv6 route ospfIPv6 Routing Table - 13 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

U - Per-user Static routeI1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summaryO - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF exON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2

OI 2001:DB8:2030:2030::/64 [110/122]

via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0OI 2001:DB8:2050:2050::/64 [110/58]via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0

OI 2001:DB8:2323:2323::/64 [110/122]via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0

Link loca

Loopback Interface Behavior


55/115


R50#show ipv6 ospf interface lo 0Loopback0 is up, line protocol is up

Link Local Address FE80::A8BB:CCFF:FE00:3200, Interface ID 20Area 1, Process ID 124, Instance ID 0, Router ID 50.50.50.50 Network Type LOOPBACK, Cost: 1Loopback interface is treated as a stub Host

O 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200/128 [110/10]

R50#R50(config-if)#ipv6 ospf network point-to-point

R50(config-if)#endR50#show ipv6 ospf interface lo 0Loopback0 is up, line protocol is up

Link Local Address FE80::A8BB:CCFF:FE00:3200, Interface ID 20Area 1, Process ID 124, Instance ID 0, Router ID 50.50.50.50 Network Type POINT_TO_POINT, Cost: 1

OI 2001:DB8:ABCD:BCDF::/64 [110/59]

Routing ta

Instance ID: No Support at This Time


56/115


Router#sh run interface ethernet 0/0Building configuration...Current configuration : 156 bytes!

interface Ethernet0/0ipv6 address 2001:DB8:1234:5678::/64 eui-64ipv6 ospf 1 area 0 instance 1Router(config)#int eth 0/0

Router(config-if)#ipv6 ospf 2 area 0 instance 2

Router#sh run interface etheBuilding configuration...

Current configuration : 156 b

!interface Ethernet0/0ip address 12.12.12.1 255.2ipv6 address 2001:DB8:123ipv6 ospf 2 area 0 instance 2

Just over writes theconfiguration


57/115


EIGRPv6 challenges

Prerequisites for EIGRPv6


58/115


EIGRPv6 available since 02/06 in 12.4.x.T trains

FF02::A multicast address is used for updates

A 32 bit IPv4 router ID must be defined

No Shut command applied to EIGRP process

Interfaces need to be applied with IPv6 EIGRP command to be advertised in to EIGRPv6

Recall Hex A isDecimal 10

Neighbor Process

Hello


59/115




ipv6 router eigrp 124router-id 10.10.10.10shutdown

!interface Ethernet0/0ipv6 address 2001:DB8:1020:1020::/64 eui-64ipv6 eigrp 124ipv6 ospf 124 area 0

end

R40#sh runBuilding conf

Current confi

ipv6 router eirouter-id 10.no shutdown

interface Etheipv6 address

2001:DB8:40ipv6 eigrp 12end

R40#

R10(config)#ipv6 router eigrp 124R10(config-rtr)#no shutR10(config-rtr)#*Feb 12 20:16:22.640: %DUAL-5-NBRCHANGE: IPv6-EIGRP(0) 124: NeighborFE80::A8BB:CCFF:FE00:2800 (Ethernet0/0) is up: new adjacency

Interfaces neednot be on thesame subnet

e0/0e0

R10

EIGRPv6-Enabled Interface


60/115


R40#show ipv6 interface ethernet 0/0Ethernet0/0 is up, line protocol is up


2001:DB8:1240:1240:A8BB:CCFF:FE00:2800, subnet is2001:DB8:1240:1240::/64 [EUI]

Joined group address(es):FF02::1FF02::2FF02::5FF02::AFF02::1:FF00:2800

This interface has joined theEIGRPv6 multicast group

EIGRPv6 Neighbor


61/115


R40# show ipv6 eigrp neighbors

IPv6-EIGRP neighbors for process 124H Address Interface Hold Uptime SRTT RTO Q Seq(sec) (ms) Cnt Num

0 Link-local address: Et0/0 12 00:03:01 23 200 0 3FE80::A8BB:CCFF:FE00:A00

Count down before declaring neighbor down

Neighbor Discovered Since Neighbor Response Time

Wait time before next Xmission if no

Neighbor-Changes Messages-What Do They Mean ?


62/115


What Do They Mean ?

Peer restartedneighbor reset relationship; why did relationbounce?

New adjacencynew neighbor relationship with this neighboinitial startup or after recovering from a neighbor that went do

Holding time expiredNo EIGRP packets from this neighborthe duration of the hold time; typically 15 seconds (180 secon

for low-speed NBMA)Retry limit exceededneighbor didn

t acknowledge a rpacket after at least 16 retransmissions

EIGRP Topology


63/115


R10#show ipv6 eigrp topology

IPv6-EIGRP Topology Table for AS(124)/ID(10.10.10.10)Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,

r - reply Status, s - sia Status

P 2001:DB8:1010:1010::/64, 1 successors, FD is 128256via Connected, Loopback0

P 2001:DB8:4012:4012::/64, 1 successors, FD is 307200via FE80::A8BB:CCFF:FE00:2800 (307200/281600), Ethern

Computeddistance

Reporteddistance

Successor

Multiple Addresses on an Interface


64/115


R50#sh run int ser 2/0Building configuration...

Current configuration : 228 bytes!interface Serial2/0no ip addressipv6 address 2001:DB8:2050:2050::/64 eui-64ipv6 address 2001:DB8:ABCD:ABCD::/64 eui-64

ipv6 eigrp 124serial restart-delay 0end

No concept ofPrimary/Secondarall prefixes areadvertised by defa

R40e0/0e0/0

RR10

Routing Table for Multiple Prefixes Receivedfrom the Same Interface


65/115


from the Same InterfaceR40#show ipv6 route eigrp

IPv6 Routing Table - 16 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

U - Per-user Static route

I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summaryO - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2D - EIGRP, EX - EIGRP external

D 2001:DB8:1010:1010::/64 [90/409600]via FE80::A8BB:CCFF:FE00:A00, Ethernet0/0

D 2001:DB8:2050:2050::/64 [90/2195456]via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0

D 2001:DB8:ABCD:ABCD::/64 [90/2707456]via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0


Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:2050:2050:A8BB:CCFF:FE00:3200, timeout iseconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 20/22/32 msR40#

Expired Hold Timer


66/115


The hold time expires when an EIGRP packetis not received during hold time

Typically caused by congestion or physical errors

Router crash, powered off, disconnected, etc.Link issues (input/output queue drops, etc.) Network between us may be dropping packets(CRC errors, frame errors, excessive collisions)

e0/0

e0/0R10

Ping to Verify


67/115


Ping the multicast address FF02::A from the other router

R40#ping ff02::a

Output Interface: ethernet0/0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to FF02::A, timeout is 2 seconds:Packet sent with a source address of FE80::A8BB:CCFF:FE00:2800

Reply to request 0 received from FE80::A8BB:CCFF:FE00:1400, 16 msReply to request 1 received from FE80::A8BB:CCFF:FE00:1400, 0 msReply to request 2 received from FE80::A8BB:CCFF:FE00:1400, 4 msReply to request 3 received from FE80::A8BB:CCFF:FE00:1400, 0 msReply to request 4 received from FE80::A8BB:CCFF:FE00:A00, 0 msSuccess rate is 100 percent (5/5), round-trip min/avg/max = 0/4/16 ms5 multicast replies and 0 errors.R40#

Ensure you ping forcorrect neighbor


68/115

2012 Cisco and/or its affiliates All rights reservedBRKRST-2302 Cisco Public

MPBGP Multiple Guards

Multiprotocol BGP


69/115


Multiprotocol BGP is an enhanced BGP that carries routing informationmultiple network layer protocol address families, for example, IPv6 addfamily and for IP multicast routes. All BGP commands and routing policcapabilities can be used with multiprotocol BGP.

Address Family Information/Sub-AFI(Capability) len 6


70/115


(Capability) len 6*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPAcode: 1, length 4*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has MP_Efor afi/safi: 2/1*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ op

parameter type 2 (Capability) len 2*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPAcode: 128, length 0*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has ROUTREFRESH capability(old) for all address-families*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ op

parameter type 2 (Capability) len 2*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPAB

code: 2, length 0*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has ROUTREFRESH capability for all address-familiesBGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ remote AS 65535*Feb 21 01:23:26.511: BGP: 2001 :DB8:1010:1010:A8BB:CCFF:FE00:A00 went from OpeOpenConfirm*Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 went fromOpenConfirm to Established

AFI 2 - IPv6 and SAFI IPv6 unicast

Remember the 32-Bit router-id


71/115

2012 Cisco and/or its affiliates All rights reservedBRKRST 2302 Cisco Public

R20#sh ip bgp sum% BGP cannot run because the router-id is not configuredBGP router identifier 0.0.0.0, local AS number 65535BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxR2001:DB8:1020:1020:A8BB:CCFF:FE00:A00

4 65535 0 0 0 0 0 never IdleR20#*Feb 20 20:45:48.665: %BGP-4-NORTRID: BGP could not pick a router-id.

Please configure manually. Where there is no IPv4address configured ona device

Peering on Loopback Interface Addresses


72/115


router bgp 65535

bgp router-id 20.20.20.20 bgp log-neighbor-changesneighbor 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 remote-as 65535neighbor 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 update-source Loopback0

address-family ipv6neighbor 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 activate

R10 e0/0e0/0

*Feb 20 23:15:03.091: BGP: 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 passive open failed2001:DB8:1020:1020:A8BB:CCFF:FE00:1400 is not update-source Loopback0's address(2001:2020:2020:0:A8BB:CCFF:FE00:1400)

One of the most common mistakes. Use addresses to peer. Not default interface a

Do Not Peer on Loopback Link Local Addres


73/115


R10 R20e0/0e0/0

R20#show ipv6 interface lo 0Loopback0 is up, line protocol is upIPv6 is enabled, link-local address is FE80::A8BB:CCFF

No Virtual link-local address(es):R10#show bgp ipv6 sumBGP router identifier 10.10.10.10, local AS number 65535BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcdFE80::A8BB:CCFF:FE00:1400

4 65535 8 8 1 0 0 00:00:45 0R10#

Everything looksfine right?

Peer Address Down but Session UpNot Rea


74/115


R20#sh ipv6 int lo 0Loopback0 is administratively down, line protocol is down

IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:1400 [TEN]

R10#show bgp ipv6 sumBGP router identifier 10.10.10.10, local AS number 65535BGP table version is 2, main routing table version 21 network entries using 149 bytes of memory1 path entries using 76 bytes of memory2/1 BGP path/bestpath attribute entries using 264 bytes of memory0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memoryBGP using 489 total bytes of memoryBGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRFE80::A8BB:CCFF:FE00:1400

4 65535 22 21 2 0 0 00:03:57 R10#

Last One on Link Local Addresses Based iBG


75/115


router bgp 65535no synchronization bgp router-id 10.10.10.10 bgp log-neighbor-changesneighbor FE80::A8BB:CCFF:FE00:1400 remote-as 65535neighbor FE80::A8BB:CCFF:FE00:1400 update-source Loopback0neighbor FE80::A8BB:CCFF:FE00:1E00 remote-as 65535

neighbor FE80::A8BB:CCFF:FE00:1E00 update-source Loopback0no auto-summary!address-family ipv6neighbor FE80::A8BB:CCFF:FE00:1400 activateneighbor FE80::A8BB:CCFF:FE00:1E00 activateexit-address-family

R10 R20e0/0

e0/0

R

Link Local Addresses Cannot Be ReachedBeyond the Connected Neighbor


76/115


y g

R10#show bgp ipv6 summaryBGP router identifier 10.10.10.10, local AS number 65535

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcdFE80::A8BB:CCFF:FE00:1400

4 65535 77 76 2 0 0 00:58:44 1FE80::A8BB:CCFF:FE00:1E00

4 65535 0 0 0 0 0 never ActiveR10#

R10#ping FE80::A8BB:CCFF:FE00:1E00Output Interface: ethernet0/0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FE00:1E00, timeout is 2 seconds:Packet sent with a source address of FE80::A8BB:CCFF:FE00:A00.....Success rate is 0 percent (0/5)

R10 R20e0/0

e0/0

R

Always Use Global Prefix for iBGP Peeringrouter bgp 65535no synchronization


77/115


bgp router-id 10.10.10.10 bgp log-neighbor-changesneighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 remote-as 65535neighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 update-source Loopback0

no auto-summary!address-family ipv6neighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 activateexit-address-family

R10 e0/0

router bgp 65535no synchronization

bgp router-id 20.20.20.20 bgp log-neighbor-changesneighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 remneighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 updno auto-summary!address-family ipv6neighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 actinetwork 2001:2121:2121::/64no synchronizationexit-address-family

Here is where youadvertise prefixes toBGP

? Routing Table Has an Entry- Where Is the Prefix

R10# h i b


78/115


R10#show ip bgp sumBGP router identifier 10.10.10.10, local AS number 65535BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd2001:db8:2020:0:A8BB:CCFF:FE00:14004 65535 90 89 1 0 0 0 1:26:54 0

R10#

R10#show ipv6 route bgpIPv6 Routing Table - 18 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

U - Per-user Static routeI1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summaryO - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPFON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2

B 2001:db8:2121::/64 [200/0]via 2001:db8:2020:0:A8BB:CCFF:FE00:1400

R10#

Use IPv6 Specific Commands


79/115


R10#show bgp ipv6 unicast summaryBGP router identifier 10.10.10.10, local AS number 65535BGP table version is 2, main routing table version 21 network entries using 161 bytes of memory1 path entries using 76 bytes of memory2/1 BGP path/bestpath attribute entries using 248 bytes of memory0 BGP route-map cache entries using 0 bytes of memory0 BGP filter-list cache entries using 0 bytes of memoryBGP using 485 total bytes of memoryBGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd2001:db8:2020:0:A8BB:CCFF:FE00:1400

4 65535 15 14 2 0 0 00:11:42 1R10#R10#ping 2001:db8:2121:0:A8BB:CCFF:FE00:1400

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:db8:2121:0:A8BB:CCFF:FE00:1400, timeout is 2 se!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 12/15/20 msR10#


80/115


Migration Bumps

Manual Tunnel


81/115


R20#sh run int tunnel 0Building configuration...

Current configuration : 188 bytes!interface Tunnel0no ip addressipv6 address 2001:DB8:2424:2424::/64 eui-64ipv6 ospf 12345 area 0tunnel source 23.23.23.20tunnel destination 34.34.34.40tunnel mode ipv6ip

R40#sh run int tun 0


Current configuration : 188 byte!interface Tunnel0no ip addressipv6 address 2001:DB8:2424:2ipv6 ospf 12345 area 0tunnel source 34.34.34.40tunnel destination 23.23.23.20tunnel mode ipv6ip

IPv4IPv6 R20

R40

Sanity Check for Manual Tunnels


82/115


R20#pingProtocol [ip]:Target IP address: 34.34.34.40Repeat count [5]:Datagram size [100]:Timeout in seconds [2]:Extended commands [n]: ySource address or interface: 23.23.23.20Type of service [0]:Set DF bit in IP header? [no]:Validate reply data? [no]:Data pattern [0xABCD]:Loose, Strict, Record, Timestamp, Verbose[none]:Sweep range of sizes [n]:Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 34.34.34.40, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 20/38/100 msR20#

IPv4IPv6 R20

R40

Tunnel destination

Tunnel source

Tunnel Configuration Mismatch

IPv4 IP


83/115


R20#show int tun 0Tunnel0 is up, line protocol is down

Hardware is TunnelMTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, rely 255/255, load 1/255Encapsulation TUNNEL, loopback not setKeepalive not setTunnel source 23.23.23.20, destination 34.34.34.40Tunnel protocol/transport IPv6, sequencing disabled

R40#show int tunnel 0Tunnel0 is up, line protocol is up

Hardware is TunnelMTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, rely 255/255, load 1/255Encapsulation TUNNEL, loopback not setKeepalive not setTunnel source 34.34.34.40, destination 23.23.23.20Tunnel protocol/transport IPv6/IP, sequencing disabled

IPv4IPv6 R20

R40

Tunnel Configuration MismatchIPv4


84/115


R20#sh run int tun 0Building configuration...

Current configuration : 188 bytes!interface Tunnel0

no ip directed-broadcastipv6 address 2001:DB8:2424:2424::/64 eui-64tunnel source 23.23.23.20tunnel destination 34.34.34.40tunnel mode ipv6

end

R20(config-if)#tunnel mode ipv6ipR20(config-if)#

R20(config-if)#*Mar 12 03:18:20.787: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, chan*Mar 12 03:18:20.827: IPV6: source :: (local)*Mar 12 03:18:20.827: dest FF02::16 (Tunnel0)*Mar 12 03:18:20.827: traffic class 224, flow 0x0, len 76+0, prot 0, hops 1, originating

IPv4IPv6 R20

R40

A Working Tunnel 2001:DB8:5050:5050:A8BB:C

R40


85/115



Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201, timeout is!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 80/98/152 msR10*Mar 13 18:00:37.262: Tunnel0: IPv6/IP encapsulated 23.23.23.20->34.34.34.40 (linktype=79*Mar 13 18:00:37.822: Tunnel0: to decaps IPv6/IP packet 34.34.34.40->23.23.23.20 (len=100

*Mar 13 18:00:37.822: Tunnel0: decapsulated IPv6/IP packet*Mar 13 18:00:37.822: FE80::2222:2228 -> FF02::5 (len=40 ttl=1)*Mar 13 18:00:38.890: Tunnel0: IPv6/IP encapsulated 23.23.23.20->34.34.34.40 (linktype=79*Mar 13 18:00:38.950: Tunnel0: to decaps IPv6/IP packet 34.34.34.40->23.23.23.20 (len=120*Mar 13 18:00:38.950: Tunnel0: decapsulated IPv6/IP packet*Mar 13 18:00:38.950: 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201 ->

2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 (len=60 ttl=63

IPv4R40

IPv6 R20R40

OSPFv3 Network Across the Tunnel

R40


86/115


R20#show ipv6 ospf neighbor

Neighbor ID Pri State Dead Time Interface ID Interface40.40.40.40 1 FULL/ - 00:00:37 20 Tunnel010.10.10.10 1 FULL/BDR 00:00:37 2 Ethernet0/0R20#

*Mar 10 00:10:45.575: Tunnel0: IPv6/IP encapsulated 23.23.23.20->34.34.34.40 (linktype=79, len=120)*Mar 10 00:10:45.583: Tunnel0: IPv6/IP to classify 34.34.34.40->23.23.23.20 (len=120 ttl=253 tos=0x0)*Mar 10 00:10:45.623: Tunnel0: to decaps IPv6/IP packet 34.34.34.40->23.23.23.20 (len=120, ttl=253)*Mar 10 00:10:45.623: Tunnel0: decapsulated IPv6/IP packet*Mar 10 00:10:45.623:

2001:DB8:5050:5050:A8BB:CCFF:FE00:3200 -> 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 (len=60 ttl=63)*Mar 10 00:10:43.363: Tunnel0: decapsulated IPv6/IP packet*Mar 10 00:10:43.363: FE80::2222:2228 -> FF02::5 (len=40 ttl=1)

IPv4IPv6 R20R40

6to4 Automatic Tunnels


87/115


IPv4IPv6

I

R20R40


Current configuration : 122 bytes!

interface Tunnel0no ip addressno ip directed-broadcastipv6 unnumbered Ethernet0/0tunnel source Ethernet1/0tunnel mode ipv6ip 6to4

end


Current configuration : 122!interface Tunnel0

no ip addressno ip directed-broadcastipv6 unnumbered Ethernetunnel source Ethernet0/0tunnel mode ipv6ip 6to4

end

Use the Correct Prefix of 2002::/16

IPv4IP 6

IPvR40

e 1/0e 0/0


88/115



Current configuration : 116 bytes!interface Ethernet0/0no ip addressno ip directed-broadcastipv6 address 2001:1717:1714:2020::/64 eui-64


Current configuration : 93 bytes!interface Ethernet1/0ip address 23.23.23.20 255.255.255.0no ip directed-broadcast

IPv6 R20

Should be 2002

R20#ping 2001:2222:2228:4040:A8BB:CCFF:FE00:2801

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:2222:2228:4040:A8BB:CCFF:FE00:2801, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 40/61/140 msR20#

2001:2222:2228:4040:A8BB

Works in wrong pre

Common Mistake in Automatic TunnelsR40#sh run int eth 1/0

IPv4IPv6

I

R20R40

E0/0

E1/0


89/115


R40#sh run int eth 1/0Building configuration..

Current configuration : !interface Ethernet1/0no ip addressno ip directed-broadcasipv6 address 2002:DB8ipv6 ospf 45 area 0

end

R40#R40#sh run int eth 0/0Building configuration..

Current configuration : 9!interface Ethernet0/0ip address 34.34.34.40 no ip directed-broadcas

end

R20#sh run int eth 1/0Building configurationCurrent configuration : 93 bytes

!interface Ethernet1/0ip address 23.23.23.20 255.255.255.0no ip directed-broadcast

end

R20#sh run int eth 0/0Building configurationCurrent configuration : 136 bytes

!interface Ethernet0/0no ip addressno ip directed-broadcastipv6 address 2002:DB8:1212:1212::/64 eui-64

ipv6 ospf 12 area 0

Can you spot the mistake23.23.23.20 in Hex is 1717:1714

E1/0

All the Required Configs for Automatic Tunn

IPIPv4T0R20IPv6

E 0/0 E 1/0E 0/0

E 1/0

R40


90/115


R40#sh run

interface Tunnel0ipv6 unnumbered Etherntunnel source Ethernet0/tunnel mode ipv6ip 6to4

interface Ethernet0/0ip address 34.34.34.40 2

interface Ethernet1/0ipv6 address 2002:2222:ipv6 ospf 45 area 0

ipv6 route 2002::/16 Tunn

R20#sh run

interface Tunnel0ipv6 unnumbered Ethernet0/0

tunnel source Ethernet1/0tunnel mode ipv6ip 6to4

interface Ethernet1/0ip address 23.23.23.20 255.255.255.0

interface Ethernet0/0ipv6 address 2002:1717:1714:2020::/64 eui-64ipv6 ospf 12 area 0

ipv6 route 2002::/16 Tunnel0ipv6 route ::/0 2002:2222:2228:4040:A8BB:CCFF:FE00:2801

T0R20IPv6 T0

23.23.23.20 inHex is 1717:1714

The Automatic Tunnel in Action

E 1/0


91/115


R20#debug tunnelTunnel Interface debugging is onR20#ping 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201, timeout!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 60/84/152 msR20#*Mar 15 17:19:24.466: Tunnel0: to decaps IPv6/IP packet 34.34.34.40->23.23.23.20(len=120, ttl=253)

*Mar 15 17:19:24.618: Tunnel0: decapsulated IPv6/IP packet*Mar 15 17:19:24.618: 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201 -> 2002:1717:1714:2020:A8BB:CCFF:FE00:1400 (len=60 ttl=63)

IPv4IPv6

IPv

R20R40

T0

E 0/0 E 1/0E 0/0 E 1/0

T0

Accessing 2001 Global Prefixes2001:DB8:6060:6060


92/115


R10#ping 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA, timeout is 2 seconds:

.....Success rate is 0 percent (0/5)

IPv4IPv6 R20R40

T0

E 0/0E 1/0

E 0/0 E

T0

ipv6 route 2002::/16 Tunnel0ipv6 route ::/0 2002:2222:2228:4040:A8BB:CCFF:FE00:2801

Ensure the networks on both sides of the tunnel are aware of a default route toreach the IPv6 internet

Accessing 2001 Global Prefixes

IP 4E 0/0E 0/0


93/115


R20

IPv4IPv6 R40T0

E 0/0 E 1/0T0

R10#sh ipv6 routeIPv6 Routing Table - 8 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP

U - Per-user Static routeI1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summaryO - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2

OE2 ::/0 [110/1], tag 12via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0

OE2 2002::/16 [110/20]via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0

R60#sh ipv6 route bgpIPv6 Routing Table - 8 entriesCodes: C - Connected, L - Local, S - Static, R - RI

U - Per-user Static routeI1 - ISIS L1, I2 - ISIS L2, IA - ISIS interareaO - OSPF intra, OI - OSPF inter, OE1 - OSPFON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA

B 2001:DB8:5050:5050::/64 [20/20]via FE80::A8BB:CCFF:FE00:2800, Serial3/0

B 2002::/16 [20/0]via FE80::A8BB:CCFF:FE00:2800, Serial3/0

R10#ping 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA

Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to

2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 88/96/108 msR10#

R20

Automatic Tunnels Are Point to Multipoint


94/115


ipv6 route 2002:: /16 Tunnel0ipv6 route ::/0 2002:2222:2228:4040:A8BB:CCFF:FE00:2801

R70

IPv6

v6Interne

T0

E 0/0 E 1/0E 0/0

T0IPv4

IPv6IP

R20R40

R10T0E 0/0

IPv6

R80

On evPE

6rd Tunnels (RFC 5969)IPv4Header

IPv6Packet

IPv6Packet

IPPa


95/115


Native dual-stack IP service to the end site

Simple, stateless, automatic IPv6-in-IPv4 encap and decap functions

Embedded IPv4 address needs to match IPv4 address in Tunnel header for security

IPv6 traffic automatically follows IPv4 Routing (IPv4 address used as tunnel endpoint)

BRs placed at IPv6 edge, addressed via anycast for load-balancing and resiliency

Service ProviderIPv6

2001:db8:0f01

PEP P

6rd Tunnel

IPv4 Access Network6rd IPv6 End Site IPv6 Inte

IPv62001:db8:0d01

CETunnelbetweenCPEs

6rd Relay/CPETunnels

6rd BorderRelay


96/115

6rd CE Configuration (IOS)

IPv4Header

IPv6Packet

IPv6Packet

IPPa


97/115


!ipv6 general-prefix 6rd-prefix 6rd Tunnel1ipv6 unicast-routingipv6 cef!interface Tunnel1

ipv6 enabletunnel source Ethernet0/0tunnel mode ipv6ip 6rdtunnel 6rd prefix 2001:db8::/32tunnel 6rd ipv4 prefix-len16tunnel 6rd br 200.15.0.1 Config to Border Relay

IPv4Backbone Network

CE

IPv62001:db8:0f01

PE

P P

PE

6rd Tunnel

CE

IPv4 Backbone Network6rd IPv6 End Site 6rd IPv6 E

200.15.11.1 (e0/0)200.15.15.1 (e0/0)

!interface Ethernet0/0

description Shared IPv4 infrastructureip address 200.15.15.1 255.255.255.0


description End Site LANipv6 address 6rd-prefix ::1/64

!ipv6 route 2001:db8::/32 tunnel1ipv6 route ::/0 Tunnel1 2001:db8:1:: Default to BR

2001:db8:0f01::2(Host)

2001:db8:0b01::1 (e0/1)2001:db8:0f01::1 (e0/1)

6rd Border Relay Configuration (IOS)

IPv6Packet

IPv4Header

IPv6Packet


98/115


IPv4Backbone Network

CE

IPv62001:db8:0f 01

PE

P PPE

IPv4 Backbone NetworkIPv6 Network

200.15.15.1 (e0/0)

2001:db8:0f01::2(Host)

IPv6 Internet2000::/3

200.15.0.1/128 (lo0)

2001:db8:1::/128 (e0/0)

6rd BorderRelay

6rd Border Relay

200.15.0.1/128 (lo0)

2001:db8:1::/128 (e0/0)6rd tunnel to closest BR

ipv6 general-prefix 6rd-prefix 6rd Tunnel1ipv6 unicast-routingipv6 cef!interface Tunnel1

ipv6 enabletunnel source Loopback0tunnel mode ipv6ip 6rdtunnel 6rd prefix 2001:db8::/32tunnel 6rd ipv4 prefix-len16

interface Ethernet0/0description IPv6 Internetipv6 address 2001:db8:1::/64

!interface Loopback0

description Shared IPv4 infrastructureip address 200.15.0.1 255.255.255.0

!ipv6 route 2001:db8::/32 tunnel1ipv6 route ::/0 2001:db8:2:: ! Or use routing protocol

6ProviderEdge mBGP session

IPv4 MPLSIPv6

2001:DB8:123

PE1


99/115


PE1

PE2v6 IPv6

Hosts

2001:DB8:1234:5678::/64 eui-64

PE1#show ipv6 route

IPv6 Routing Table - 5 entriesCodes: C - Connected, L - Local, S - Static, R - RIP,U - Per-user Static routeI1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IO - OSPF intra, OI - OSPF inter, OE1 - OSPF eON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA

C 2001:DB8:1234:5678::/64 [0/0]via ::, Loopback10

L 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900

via ::, FastEthernet0/1B 2001:DB8:1234:ABCD::/64 [200/0]via ::FFFF:2.2.2.2, IPv6-mpls

L FE80::/10 [0/0]via ::, Null0

L FF00::/8 [0/0]via ::, Null0

PE1#

PE1

PE1 learns the prefixthrough mPBGP session

PE1


PE2PE1v6

IPv6Hosts

2001:DB8:1234:5678::/64 eui-64

2001:DB8:123

PE1# hrouter ospf 12

IPv4 MPLS PE2


100/115


PE1#sh runBuilding configuration...hostname PE1

ip cefipv6 unicast-routingipv6 cefmpls label protocol ldpmpls ipv6 source-interface FastEthernet0/1!interface Loopback0ip address 1.1.1.1 255.255.255.255!

interface FastEthernet0/1ipv6 address 2001:DB8:1234:5678::/64 eui-64!interface Ethernet0/0ip address 12.12.12.1 255.255.255.0

mpls ip!

log-adjacency-changesnetwork 1.1.1.1 0.0.0.0 area 0network 12.12.12.0 0.0.0.255 area

!router bgp 12no bgp default ipv4-unicast

bgp log-neighbor-changesneighbor 2.2.2.2 remote-as 12neighbor 2.2.2.2 update-source Lo!address-family ipv4neighbor 2.2.2.2 activateno auto-summaryno synchronizationexit-address-family!address-family ipv6neighbor 2.2.2.2 activateneighbor 2.2.2.2 send-labelnetwork 2001:DB8:1234:5678::/6exit-address-family

IPv6 CEF mustbe enabled

6ProviderEdgeIPv4 MPLS

mBGP session

PE1 PE2v6IPv6

Hosts

2001:DB8:123

IPv4 MPLS


101/115


osts2001:DB8:1234:5678::/64 eu i-64

PE1# show bgp ipv6 unicastBGP table version is 14, local router ID is 1.1.1.1Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S StaleOrigin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path*> 2001:DB8:1234:5678::/64

:: 0 32768 i*>i2001:DB8:1234:ABCD::/64

::FFFF:2.2.2.2 0 100 0 I

PE1#show mpls forwarding-tableLocal Outgoing Prefix Bytes tag Outgoing Next Hoptag tag or VC or Tunnel Id switched interface16 Pop tag 2.2.2.2/32 0 Et0/0 12.12.12.219 Aggregate 2001:DB8:1234:5678::/64 \ 520PE1#

The required mPBGPsession and tags


PE22001:DB8:1234:5678::/64 eui-64

2001:DB8:123

PE1v6IPv6

HostsIPv4 MPLS

PE2#show bgp ipv6 sum

PE2


102/115


PE2#show bgp ipv6 sumBGP router identifier 2.2.2.2, local AS number 12BGP table version is 14, main routing table version 142 network entries using 298 bytes of memory

2 path entries using 152 bytes of memory3/2 BGP path/bestpath attribute entries using 396 bytes of memoryBGP using 846 total bytes of memoryBGP activity 9/7 prefixes, 11/9 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd1.1.1.1 4 12 181 180 14 0 0 00:12:01 1PE2#

PE2#PE2#ping 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900, timeout is 2 seconds:Packet sent with a source address of 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 40/48/60 msPE2#

Good old 32 bitBGP router ID

6ProviderEdgeIPv4 MPLS

mBGP session

PE1 PE2v6 IPv6

HostsIPv4 MPLS

::FFFF:2.2.2.2::FFFF:1.1.1.1


103/115


2001:DB8:1234:5678::/64 eui-642001:DB8:123

PE2#01:23:21: IPv6: nexthop ::FFFF:1.1.1.1,01:23:21: IPV6: source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 (local)01:23:21: dest 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls)01:23:21: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating01:23:21: IPv6: Sending on Ethernet0/001:23:21: IPV6: source 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls)01:23:21: dest 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A0001:23:21: traffic class 0, flow 0x0, len 100+18, prot 58, hops 64, forward to ulp01:23:21: IPv6: nexthop ::FFFF:1.1.1.1,01:23:21: IPV6: source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 (local)01:23:21: dest 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls)01:23:21: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating01:23:21: IPv6: Sending on Ethernet0/001:23:21: IPV6: source 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls)01:23:21: dest 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A0001:23:21: traffic class 0, flow 0x0, len 100+18, prot 58, hops 64, forward to ulp

IPv6 VPN 6VPE (RFC 4659)IPv6Packet

MPLS IPv4 BackboneIPv6/IPv4 Network IPv6/IPv4 Ne

VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


104/115


IPv4MPLS

6VPE uses existing IPv4 MPLS infrastructure to provide IPv6 VPNCore uses IPv4 control plane (LDPv4, TEv4, IGPv4)PEs must support dual stack IPv4+IPv6Offers same architectural features as MPLS-VPN for IPv4RTs, VRFs, RDs are appended to IPv6 to form VPNv6 addressMP-BGP distributed both VPN address familiesBGP NH uses IPv4 to IPv6 mapped address format ::ffff:A.B.C.D

VRF can contain both VPNv4 and VPNv6 routes

IPv4

IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1/32001:db8:ca

172.16.1.0.0/302001:db8:cafe:1::/64

6VPE2

CE1 ConfigurationIPv6Packet

MPLS IPv4 BackboneIPv6/IPv4 Network IPv6/IPv4 Netw

VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


105/115


IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1/302001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64

ipv6 unicast-routingipv6 cef!interface Ethernet0/0

description Link to PE1ip address 172.16.1.1 255.255.255.0ipv6 address 2001:db8:cafe:1::1/64


description to GREEN LANip address 10.1.1.1 255.255.255.0ipv6 address 2001:db8:beef:1::1/64ipv6 rip GREEN enable

router bgp 500neighbor 2001:db8:cafe:1::2 remote-as 100neighbor 172.16.1.2 remote-as 100!address-family ipv4

redistribute eigrp 100neighbor 172.16.1.2 activate 6VPE1exit-address-family!address-family ipv6neighbor 2001:db8:cafe:1::2 activate 6VPE1redistribute rip GREENexit-address-family

6VPE2

Dual stack

6VPE1 General ConfigurationIPv6Packet


VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


106/115


ipv6 unicast-routingipv6 cef!interface Loopback0

ip address 200.10.10.1 255.255.255.255

!interface Ethernet0/0Description Link to CE1vrf forwarding GREENip address 172.16.1.2 255.255.255.0ipv6 address 2001:db8:cafe:1::2/64

IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1/302001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64


description Link to Core Networkip address 192.168.1.1 255.255.255.252

mpls ip

!router ospf 1log-adjacency-changesredistribute connected subnets

passive-interface Loopback0network 192.168.1.0 0.0.0.255 area 0

6VPE2

6VPE1 BGP ConfigurationIPv6Packet


VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


107/115


router bgp 100neighbor 200.11.11.1 remote-as 100neighbor 200.11.11.1 update-source lo0!address-family ipv4 Internet Routesneighbor 200.11.11.1 activateno auto-summaryno synchronizationexit-address-family!address-family vpnv4 To 6VPE2neighbor 200.11.11.1 activateneighbor 200.11.11.1 send-community extexit-address-family

IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1.0/2001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64

address-family vpnv6 To 6VPE2neighbor 200.11.11.1 activateneighbor 200.11.11.1 send-community extexit-address-family

!address-family ipv4 vrf GREEN To CE1redistribute connectedneighbor 172.16.1.1 remote-as 500neighbor 172.16.1.1 activateexit-address-family!address-family ipv6 vrf GREEN To CE1neighbor 2001:db8:cafe:1::1 remote-as 500neighbor 2001:db8:cafe:1::1 activateexit-address-family

6VPE2

6VPE2 IPv6 VRF RoutesIPv6Packet


VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


108/115


IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1.0/2001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64

6VPE2#show ipv6 route vrf GREENB 2001:db8:beef:1::/64 [200/0]

via 200.10.10.1B 2001:db8:beef:2::/64 [20/0]

via FE80::A8BB:CCFF:FE01:FA00, Ethernet1/0B 2001:db8:cafe:1::/64 [200/0]via 200.10.10.1

C 2001:db8:cafe:3::/64 [0/0]via Ethernet1/0, directly connected

L 2001:db8:cafe:3::2/128 [0/0]via Ethernet1/0, receive

L FF00::/8 [0/0]via Null0, receive

6VPE2

6VPE1 BGP VPNv6 TableIPv6Packet


VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


109/115


IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1.0/2001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64

6VPE1#show bgp vpnv6 unicast all Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 200:1 (default for vrf GREEN)*> 2001:db8:beef:1::/64

2001:db8:cafe:1::1 Route from CE10 0 500 ?*>i2001:db8:beef:2::/64

::FFFF:200.11.11.1 Route from CE2 via 6VPE20 100 0 506 ?

*>i2001:db8:cafe:3::/64::FFFF:200.11.11.1 PE/CE Connected route from 6VPE2

0 100 0 ?

6VPE2

Recall taddress

6VPE1 LFIBIPv6Packet


VPNLabel

IPv6Packet

LDPLabel

IPv6Packet


110/115


IPv4MPLSIPv4IPv6

P P

CE1 6VPE1

P P

10.1.1.0/242001:db8:beef:1::/64

VRF

200.10.10.1 200.11.11.1

VRF

172.16.3.1.0/2001:db8:caf

172.16.1.0/302001:db8:cafe:1::/64

6VPE1#show mpls forwardingLocal Outgoing Prefix Bytes Label Outgoing Next HopLabel Label or VC or Tunnel Id Switched interface16 Pop Label 192.168.1.4/30 0 Et2/0 192.168.1.217 16 192.168.1.8/30 0 Et2/0 192.168.1.2

18 Pop Label 200.12.12.1/32 0 Et2/0 192.168.1.219 18 200.13.13.1/32 0 Et2/0 192.168.1.220 19 200.11.11.1/32 0 Et2/0 192.168.1.221 No Label 10.1.1.0/24[V] 0 Et0/0 172.16.1.122 Aggregate 172.16.1.0/24[V] 570 GREEN25 No Label 2001:db8:beef:1::/64[V] \

570 Et0/0 FE80::A8BB:CCFF:FE01:F40026 Aggregate 2001:db8:cafe:1::/64[V] \

35456 GREEN

6VPE2

IPv6 Related Sessions at Cisco LiveSession Title

BRKRST-2044 Enterprise Multi-Homed Internet Edge Architectures

BRKCRS-2301 Enterprise IPv6 Deployment

Search Session Catalog: ipv6


111/115


BRKCRT-9344 IPv6 for Cert Nuts

BRKRST-2311 IPv6 Planning, Deployment and Operation Considerations

BRKSEC-2003 IPv6 Security Threats and MitigationsBRKRST-2302 IPv6 Troubleshooting

BRKSPG-2602 IPv4 Exhaustion: NAT and Transition to IPv6 for SPs

BRKSPG-2603 How to Securely Operate an IPv6 Network

BRKUCC-2061 IPv6 in UC Networks

LTRRST-1301, LTRSEC-3033 IPv6 Hands-on Lab, IPv6 Network Threat, Defense, Countermeasures and Controls

BRKEWN-2010 Design and Deployment of Ent. WLAN

BRKCCIE-9492 IPv6 for Route & Switching CCIE Candidates

BRKRST-3300 Service Provider IPv6 Deployment

BRKSPG-2604 Deploying Carrier Grade IPv6 using CGSE

COCRST-3464 Cisco on Cisco: Making the Leap to IPv6


112/115


Complete Your OnlineSession Evaluation

Give us your feedback and you


113/115


y ycould win fabulous prizes.Winners announced daily.

Receive 20 Passport points for eachsession evaluation you complete.

Complete your session evaluationonline now (open a browser throughour wireless network to access our

portal) or visit one of the Internetstations throughout the ConventionCenter.

Dont forget to activate yourCisco Live Virtual account for access all session material, communities, andon-demand and live activities throughthe year. Activate your account at theCisco booth in the World of Solutions www.ciscolive.com .

Final Thoughts

Get hands-on experience with the Walk-in Labs located in World of


114/115


pSolutions, booth 1042

Come see demos of many key solutions and products in the main Ciscbooth 2924

Visit www.ciscoLive365.com after the event for updated PDFs, ondemand session videos, networking, and more!

Follow Cisco Live! using social media:

Facebook: https://www.facebook.com/ciscoliveus Twitter: https://twitter.com/#!/CiscoLive LinkedIn Group: http://linkd.in/CiscoLI


115/115


Date post:	02-Jun-2018
Category:	Documents
Upload:	huy-nguyen
View:	250 times
Download:	6 times

IPv6 Cisco Live

Documents