配置IPv4 over IPv6隧道实验

学习精彩网络技术老师：华为HCIA和HCIP数通eNSP实战视频课
学习精彩网络技术老师：华为、华三、锐捷、WLAN、IPv6等全套视频课程
学习全套视频课程：IPv6组网实战从入门到精通视频课程

本举例介绍IPv4 over IPv6隧道的配置过程。

组网需求

图1 IPv4 over IPv6隧道组网图

如图1，两个IPv4网络分别通过RouterA和RouterE与IPv6网络连接。IPv6网络的边界设备RouterB和RouterD支持IPv4和IPv6双协议栈。要求在RouterB和RouterD之间配置IPv4 over IPv6隧道，使物理分离的这两个IPv4网络可以互通。

配置思路

本例按如下思路进行配置：

在两端IPv6网络边界路由器上配置IPv4-over-IPv6隧道

采用动态路由协议配置经过该隧道接口转发的路由

数据准备

进行本例配置，需准备如下数据：

IPv6和IPv4网络上使用的路由协议

隧道两端的源IPv6地址、目的Ipv6地址

Tunnel接口的IPv4地址

Loopback接口的IPv6地址

配置过程

配置IPv6网络的物理接口IPv6地址和IS-IS的IPv6特性，实现IPv6网络的IP连通性

# 配置RouterB。

<HUAWEI> system-view

[HUAWEI] sysname RouterB

[RouterB] ipv6

[RouterB] interface pos 2/0/0

[RouterB-Pos2/0/0] ipv6 enable

[RouterB-Pos2/0/0] ipv6 address 2001:db8:1::1 64

[RouterB-Pos2/0/0] undo shutdown

[RouterB-Pos2/0/0] quit

[RouterB] isis 1

[RouterB-isis-1] network-entity 10.0000.0000.0001.00

[RouterB-isis-1] ipv6 enable topology standard

[RouterB-isis-1] quit

[RouterB] interface pos 2/0/0

[RouterB-Pos2/0/0] isis ipv6 enable 1

[RouterB-Pos2/0/0] quit

[RouterB] interface Loopback 1

[RouterB-Loopback1] ipv6 enable

[RouterB-Loopback1] ipv6 address 2::2 64

[RouterB-Loopback1] isis ipv6 enable 1

[RouterB-Loopback1] quit

# 配置RouterC。

<Router> system-view

[Router] sysname RouterC

[RouterC] ipv6

[RouterC] interface pos 1/0/0

[RouterC-Pos1/0/0] ipv6 enable

[RouterC-Pos1/0/0] ipv6 address 2001:db8:1::2 64

[RouterC-Pos1/0/0] undo shutdown

[RouterC-Pos1/0/0] quit

[RouterC] interface pos 2/0/0

[RouterC-Pos2/0/0] ipv6 enable

[RouterC-Pos2/0/0] ipv6 address 2001:db8:2::1 64

[RouterC-Pos2/0/0] undo shutdown

[RouterC-Pos2/0/0] quit

[RouterC] isis 1

[RouterC-isis-1] network-entity 10.0000.0000.0002.00

[RouterC-isis-1] ipv6 enable topology standard

[RouterC-isis-1] quit

[RouterC] interface pos 1/0/0

[RouterC-Pos1/0/0] isis ipv6 enable 1

[RouterC-Pos1/0/0] quit

[RouterC] interface pos 2/0/0

[RouterC-Pos2/0/0] isis ipv6 enable 1

[RouterC-Pos2/0/0] quit

# 配置RouterD。

<HUAWEI> system-view

[HUAWEI] sysname RouterD

[RouterD] ipv6

[RouterD] interface pos 1/0/0

[RouterD-Pos1/0/0] ipv6 enable

[RouterD-Pos1/0/0] ipv6 address 2001:db8:2::2 64

[RouterD-Pos1/0/0] undo shutdown

[RouterD-Pos1/0/0] quit

[RouterD] isis 1

[RouterD-isis-1] network-entity 10.0000.0000.0003.00

[RouterD-isis-1] ipv6 enable topology standard

[RouterD-isis-1] quit

[RouterD] interface pos 1/0/0

[RouterD-Pos1/0/0] isis ipv6 enable 1

[RouterD-Pos1/0/0] quit

[RouterD] interface Loopback 1

[RouterD-Loopback1] ipv6 enable

[RouterD-Loopback1] ipv6 address 4::4 64

[RouterD-Loopback1] isis ipv6 enable 1

[RouterD-Loopback1] quit

配置IPv4网络的物理接口IPv4地址和OSPF，实现IPv4网络的IP连通性

# 配置RouterA。

<HUAWEI> system-view

[HUAWEI] sysname RouterA

[RouterA] interface pos 1/0/0

[RouterA-Pos1/0/0] ip address 10.1.2.2 30

[RouterA-Pos1/0/0] undo shutdown

[RouterA-Pos1/0/0] quit

[RouterA] ospf 1

[RouterA-ospf-1] area 0

[RouterA-ospf-1-area-0.0.0.0] network 10.1.2.0 0.0.0.3

# 配置RouterB。

<RouterB> system-view

[RouterB] interface pos 1/0/0

[RouterB-Pos1/0/0] ip address 10.1.2.1 30

[RouterB-Pos1/0/0] undo shutdown

[RouterB-Pos1/0/0] quit

[RouterB] ospf 1

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 10.1.2.0 0.0.0.3

# 配置RouterD。

<RouterD> system-view

[RouterD] interface pos 1/0/0

[RouterD-Pos1/0/0] ip address 10.1.3.1 30

[RouterD-Pos1/0/0] quit

[RouterD] ospf 1

[RouterD-ospf-1] area 0

[RouterD-ospf-1-area-0.0.0.0] network 10.1.3.0 0.0.0.3

# 配置RouterE。

<HUAWEI> system-view

[HUAWEI] sysname RouterE

[RouterE] interface pos 1/0/0

[RouterE-Pos1/0/0] ip address 10.1.3.2 30

[RouterE-Pos1/0/0] undo shutdown

[RouterE-Pos1/0/0] quit

[RouterE] ospf 1

[RouterE-ospf-1] area 0

[RouterE-ospf-1-area-0.0.0.0] network 10.1.3.0 0.0.0.3

配置Tunnel接口

# 创建Tunnel接口，配置Tunnel接口的IPv4地址、源IPv6地址（或源接口）、目的IPv6地址。

# 配置RouterB。

<RouterB> system-view

[RouterB] interface  Loopback 1

[RouterB-Loopback1] target-board 2

[RouterB-Loopback1] binding tunnel ipv4-ipv6

[RouterB-Loopback1] quit

[RouterB] interface tunnel 2/0/0

[RouterB-Tunnel2/0/0] tunnel-protocol ipv4-ipv6

[RouterB-Tunnel2/0/0] ip address 10.1.1.1 30

[RouterB-Tunnel2/0/0] source loopback1

[RouterB-Tunnel2/0/0] destination 4::4

# 配置RouterD。

<RouterD> system-view

[RouterD] interface  Loopback 1

[RouterD-Loopback1] target-board 1

[RouterD-Loopback1] binding tunnel ipv4-ipv6

[RouterD-Loopback1] quit

[RouterD] interface tunnel 1/0/0

[RouterD-Tunnel1/0/0] tunnel-protocol ipv4-ipv6

[RouterD-Tunnel1/0/0] ip address 10.1.1.2 30

[RouterD-Tunnel1/0/0] source loopback1

[RouterD-Tunnel1/0/0] destination 2::2

配置经过该隧道接口转发的路由

# 配置RouterB。

<RouterB> system-view

[RouterB] ospf 1

[RouterB-ospf-1] area 0

[RouterB-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.3

[RouterB-ospf-1-area-0.0.0.0] quit

[RouterB-ospf-1] quit

# 配置RouterD。

<RouterD> system-view

[RouterD] ospf 1

[RouterD-ospf-1] area 0

[RouterD-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.3

检查配置结果

完成上述配置后，在RouterB和RouterD上查看隧道接口，可看到隧道接口的协议状态为UP。

[RouterB] display interface tunnel 2/0/0

Tunnel2/0/0 current state : UP

Line protocol current state : UP

Last line protocol up time: 2010-06-22, 19:33:19Description : Tunnel2/0/0 Interface, Route Port

Route Port,The Maximum Transmit Unit is 1500

Internet Address is 10.1.1.1/30

Encapsulation is TUNNEL6, loopback not set

Tunnel protocol/transport (IPv6 or IPV4) over IPv6

Tunnel Source 2001:db8:1::1 (Pos2/0/0)

Tunnel Destination 2001:db8:2::2

Tunnel Encapsulation limit 4

Tunnel Traffic class not set

Tunnel Flow label not set

Tunnel Hop limit 64

Current system time: 2010-06-29 20:26:18

    5 minutes input rate 10 bits/sec, 0 packets/sec

    5 minutes output rate 14 bits/sec, 0 packets/sec

    0 seconds input rate 0 bits/sec, 0 packets/sec

    0 seconds output rate 0 bits/sec, 0 packets/sec

    493 packets input,  38480 bytes

    0 input error

    447 packets output,  53144 bytes

    0 output error

    Input:

      Unicast: 340 packets, Multicast: 153 packets

    Output:

      Unicast: 334 packets, Multicast: 113 packets

    Input bandwidth utilization  :    0%

    Output bandwidth utilization :    0%

在RouterB和RouterD上查看IPv4路由表，可看到去往远端IPv4网络的路由出接口为Tunnel接口。

[RouterB] display ip routing-table

Routing Tables: Public

         Destinations : 9        Routes : 9

Destination/Mask    Proto  Pre  Cost       NextHop         Interface

        1.1.1.1/32  Direct 0    0          127.0.0.1       InLoopBack0

       10.1.1.0/30  Direct 0    0          10.1.1.1        Tunnel2/0/0

       10.1.1.1/32  Direct 0    0          127.0.0.1       Tunnel2/0/0

       10.1.2.0/30  Direct 0    0          10.1.2.1        Pos1/0/0

       10.1.2.1/32  Direct 0    0          127.0.0.1       Pos1/0/0

       10.1.2.2/32  Direct 0    0          10.1.2.2        Pos1/0/0

       10.1.3.0/24  OSPF   10   2           10.1.1.2        Tunnel2/0/0

      127.0.0.0/8   Direct 0    0          127.0.0.1       InLoopBack0

      127.0.0.1/32  Direct 0    0          127.0.0.1       InLoopBack0

RouterA和RouterE可以互相ping通。

配置文件

RouterA的配置文件

#

 sysname RouterA

#

interface Pos1/0/0

 link-protocol ppp

 undo shutdown

 ip address 10.1.2.2 255.255.255.252

#

ospf 1

 area 0.0.0.0

  network 10.1.2.0 0.0.0.3

#

return

RouterB的配置文件

#

 sysname RouterB

#

 ipv6

#

isis 1

 network-entity 10.0000.0000.0001.00

 #

  ipv6 enable topology standard

 #

#

interface Pos1/0/0

 link-protocol ppp

 undo shutdown

 ip address 10.1.2.1 255.255.255.252

#

interface Pos2/0/0

 link-protocol ppp

 undo shutdown

 ipv6 enable

 ipv6 address 2001:db8:1::1/64

 isis ipv6 enable 1

#

interface LoopBack1

 ipv6 enable

 ipv6 address 2::2 64

 isis ipv6 enable 1

 target-board 6

 binding tunnel ipv4-ipv6

#

interface Tunnel2/0/0

 ip address 10.1.1.1 255.255.255.252

 tunnel-protocol ipv4-ipv6

 source loopback1

 destination 4::4

#

ospf 1

 area 0.0.0.0

  network 10.1.2.0 0.0.0.3

  network 10.1.1.0 0.0.0.3

#

return

RouterC的配置文件

#

 sysname RouterC

#

 ipv6

#

isis 1

 network-entity 10.0000.0000.0002.00

 #

  ipv6 enable topology standard

 #

#

interface Pos1/0/0

 link-protocol ppp

 undo shutdown

 ipv6 enable

 ipv6 address 2001:db8:1::2/64

 isis ipv6 enable 1

#

interface Pos2/0/0

 link-protocol ppp

 undo shutdown

 ipv6 enable

 ipv6 address 2001:db8:2::1/64

 isis ipv6 enable 1

#

return

RouterD的配置文件

#

 sysname RouterD

#

 ipv6

#

isis 1

 network-entity 10.0000.0000.0003.00

 #

  ipv6 enable topology standard

 #

#

interface Pos1/0/0

 link-protocol ppp

 undo shutdown

 ipv6 enable

 ipv6 address 2001:db8:2::2/64

 isis ipv6 enable 1

#

interface Pos2/0/0

 link-protocol ppp

 undo shutdown

 ip address 10.1.3.1 255.255.255.252

#

interface LoopBack1

 ipv6 enable

 ipv6 address 4::4 64

 isis ipv6 enable 1

 target-board 6

 binding tunnel ipv4-ipv6

#

interface Tunnel1/0/0

 ip address 10.1.1.2 255.255.255.252

 tunnel-protocol ipv4-ipv6

 source loopback1

 destination 2::2

#

ospf 1

 area 0.0.0.0

  network 10.1.1.0 0.0.0.3

  network 10.1.3.0 0.0.0.3

#

return

RouterE的配置文件

#

 sysname RouterE

#

interface Pos1/0/0

 link-protocol ppp

 undo shutdown

 ip address 10.1.3.2 255.255.255.252

#

ospf 1

 area 0.0.0.0

  network 10.1.3.0 0.0.0.3

#

return