ipv6 operations tools and troubleshooting

1 NYSERNet IPv6 Operations, Tools, and Troublshooting 2 Router Configuration IPv6 Headers IPv6 Security IPv6 Performance and Monitoring IPv6 Applications Agenda 3 Router Configuration Rule #1: What would v4 do? Enable routing ipv6 unicast-routing Configure interfaces ipv6 address Configure routing protocols Cisco Router Configuration 4 LAN Interface interface FastEthernet0/0 ip address 192.168.1.254 255.255.255.0 ipv6 address 2001:468:123:1::2/64 Interface Configuration Router Configuration 5 IGP - OSPFv3, IS-IS, EIGRPv6 Static ipv6 route <prefix> <nexthop> IGP Configuration Router Configuration 6 Published as RFC 2740 (80 pages!) – Protocol version 3 – Link-state IGP (additive interface costs) – Same basic structure as OSPF for IPv4 – IPv4/IPv6 OSPF run as “ships in the night” OSPF for IPv6 Router Configuration 7 Use of link-local addresses Used for next hop Link-local destination not forwarded Authentication changes Remove authentication-related fields Rely on AH, ESP Use normal IP checksum Changes in OSPF for IPv6 Router Configuration 8 interface Vlan257 ip address 128.254.1.12 255.255.255.0 load-interval 30 ipv6 address 2001:FFE8:1:1::C/64 ipv6 enable ! Not needed for physical interface ipv6 ospf network broadcast ipv6 ospf 1 area 0.0.0.0 ! ipv6 router ospf 1 log-adjacency-changes passive-interface default redistribute connected metric-type 1 OSPFv3 Interface Configuration Router Configuration 9 router#show ipv6 ospf neighbor Neighbor ID Pri State Dead Time Interface ID Interface 128.254.1.17 1 FULL/BDR 00:00:33 7 Vlan257 128.254.1.18 1 FULL/DROTHER 00:00:31 7 Vlan257 OSPF Neighbor Router Configuration 10 router BGP <AS-NUMBER> <generic config> address-family ipv6 unicast <ipv6 config> address-family ipv4 unicast <ipv4 config> address-family ipv4 multicast <ipv4 multicast config> BGP Configuration Router Configuration [...]... REACH Gi5/2 22 Agenda Router Configuration IPv6 Headers IPv6 Security IPv6 Performance and Monitoring IPv6 Applications 23 IPv6 Headers IPv6 Headers What are the changes in the IP header in IPv6 How those changes may affect policies 24 IPv6 Headers Basic Headers IPv6 IPv4 25 IPv6 Headers Basic Headers Fields Version (4 bits) – only field to keep same position and name Class (8 bits) – was Type of Service... hop Allows for MTU determination General format: 34 IPv6 Headers Summary of Changes in IPv6 Expanded addressing capabilities Header format simplification Improved support for extensions and options Flow labeling capability Authentication and privacy capabilities 35 Agenda Router Configuration IPv6 Headers IPv6 Security IPv6 Performance and Monitoring IPv6 Applications 36 ... network 2001:DB8:4ff::/48 exit-address-family 12 Router Configuration BGP Configuration: Supporting Configuration ipv6 route 2001:DB8:4ff::/48 Null0 ! ipv6 prefix-list to-Internet2-v6 seq 5 permit 2001:DB8:4ff::/48 13 Router Configuration Cisco Show Commands show bgp ipv6 c7609#sh bgp ipv6 BGP table version is 5108260, local router ID is 199.109.35.125 Status codes: s suppressed, d damped, h history,... 2620:F:0:900::/56 0 32768 i *> 2620:F:1::/48 2620:F:0:901::3 0 0 3756 i *> 2620:4E::/48 2620:F:0:907::3 0 0 11872 i Total number of prefixes 9 17 Router Configuration Cisco Show Commands show ipv6 route syr-7600#sh ipv6 route IPv6 Routing Table - default - 8932 entries Codes: C - Connected, L - Local, S - Static, U - Per-user Static route B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2 IA - ISIS interarea,... 59 Upper Layer TCP 6 Upper Layer UDP 17 Upper Layer ICMPv6 58 29 IPv6 Headers Extension Headers Option headers in general Provides the next header and length Any options that might be defined 30 IPv6 Headers Header Types Look in packet for next header Can be extension header Can be something like ICMP, TCP, UDP, or other normal types 31 IPv6 Headers ICMP Completely changed – note new header type Now... ND router advertisements live for 1800 seconds ND advertised default router preference is Medium Hosts use stateless autoconfig for addresses 21 Router Configuration Cisco Show Commands show ipv6 neighbors c7609#sh ipv6 nei IPv6 Address Age Link-layer Addr State Interface FE80::222:19FF:FE60:383D 0 0022.1960.383d STALE Vl101 2620:F:1:1101::2D 203 0022.1960.383d STALE Vl101 FE80::2F4:B9FF:FE29:45A4 3... B 2001:200:E000::/35 [200/3214] B 2001:208::/32 [200/3214] via 2620:F:0:B01::3 via 2620:F:0:B01::3 B 2001:208:1:1::/64 [200/4156] via 2620:F::3 18 Router Configuration Cisco Show Commands show ipv6 interface syr-7600#sh ipv6 interface brief GigabitEthernet1/1 [up/up] FE80::212:80FF:FE20:E3C0 2620:F:0:901::2 GigabitEthernet1/2 [administratively down/down] unassigned GigabitEthernet1/3 [up/up] unassigned... GigabitEthernet1/5 [up/up] FE80::212:80FF:FE20:E3C0 2620:F:0:701::3 GigabitEthernet1/6 [up/up] FE80::212:80FF:FE20:E3C0 2620:F:0:734::2 19 Router Configuration Cisco Show Commands show ipv6 interface GigabitEthernet1/1 is up, line protocol is up IPv6 is enabled, link-local address is FE80::212:80FF:FE20:E3C0 No Virtual link-local address(es): Description: NYSERNet Syracuse Office Global unicast address(es):... 11537 22388 7660 i *> 2001:208::/32 2620:F:0:901::2 0 3754 11537 7610 7472 i *> 2001:208:1:1::/64 2620:F:0:901::2 0 3754 19401 7610 7472 i 14 Router Configuration Cisco Show Commands show bgp ipv6 unicast summary syr-7600#sh bgp ipv6 uni sum BGP router identifier 199.109.0.70, local AS number 3754 … Neighbor V 2620:F::3 4 3754 220379 12569 13209423 0 0 1w0d 2620:F::8 4 3754 176865 176836 13209423 0 0... 0 23w6d 1 2620:F:0:909::5 4 32360 106482 757371 13209423 0 0 9w4d 0 2620:F:0:910::3 4 65001 310881 2242736 13209423 0 0 30w5d 1 15 Router Configuration Cisco Show Commands show bgp ipv6 unicast neighbor routes syr-7600#sh bgp ipv6 unicast nei 2620:F::8 routes BGP table version is 13209574, local router ID is 199.109.0.70 Network Next Hop Metric LocPrf Weight Path *>i2001:468:900:800::/56 2620:F::8 . Cisco Show Commands Router Configuration 18 show ipv6 route syr-7600#sh ipv6 route IPv6 Routing Table - default - 8932 entries Codes: C - Connected, L - Local, S - Static, U - Per-user Static. route B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2 IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external ND - Neighbor Discovery O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF. 1 NYSERNet IPv6 Operations, Tools, and Troublshooting 2 Router Configuration IPv6 Headers IPv6 Security IPv6 Performance and Monitoring IPv6 Applications Agenda