Ripv2:: 1 - Default Route and Redistribute Commands

shitman2104@yahoo.
com
Common commands for routers and switchs
1 DeFault route and redistribute commands : 1.1 DeFault route : RIPv2 : Router(conFig)#router rip Router(conFig-router)#deFault-inFormation originate EIGRP : Cach 1 : Router(conFig)#ip route 0.0.0.0 0.0.0.0 loopback 0 Router(conFig)#router eigrp 100 Router(conFig-router)#redistribute static Cach 2 : Router(conFig)#router eigrp 33 Router(conFig-router)#network (*) Router(conFig)#ip deFault-network (*) (*) la dia chi mang cua cong loopback co tuyen deFault . Cach 3 : Router(conFig)#interFace loopback 0 Router(conFig-iF)#ip summary-address eigrp 33 0.0.0.0 0.0.0.0 OSPF : Router(conFig-iF)#router ospF 1 Router(conFig-router)#deFault-inFormation originate 1.2 Redistribute : Redistribute RIP hoac EIGRP OSPF : Router(conFig)#router ospF 1 Router(conFig-router)#redistribute rip metric x subnets
Page 1
shitman2104@yahoo.com
Router(conFig-router)#redistribute eigrp 33 metric x subnets x la cost cua tuyen RIP hoac EIGRP khi redistrinbute sang OSPF . Redistribute OSPF hoac EIGRP RIP : Router(conFig)#router rip Router(conFig-router)#redistribute ospF 1 metric x Router(conFig-router)#redistribute eigrp 33 metric x x la hopcount cua tuyen OSPF hoac EIGRP khi redistribute sang RIP Redistribute RIP hoac OSPF EIGRP : Router(conFig)#router eigrp 33 Router(conFig-router)#redistribute rip metric B D R L MTU Router(conFig-router)#redistribute ospF 1 metric B D R L MTU B = Bandwidth = D = Delay =
10 7 * 256 BW (kbps)
Delay ( s ) * 256 10
R =Reliability = 1 255 ( 255 la tot nhat ) L = Load = 1 255 ( 1 la tot nhat ) MTU = Maximum Transmission Unit = 1500
2 Authentication : RIP : Router(conFig)#key chain [ key name ] Router(conFig-keychain)#key [ keyID ] Router(conFig-keychain-key)#key-string [ password ] Router(conFig)#interFace [ port ] Router(conFig-iF)#ip rip authentication key-chain [ key name ] Router(conFig-iF)#ip rip authentication mode md5
Page 2
EIGRP : Router(conFig)#key chain [ key name ] Router(conFig-keychain)#key [ keyID ] Router(conFig-keychain-key)#key-string [ password ] Router(conFig)#interFace [ port ] Router(conFig-iF)#ip authentication key-chain eigrp 33 [ key name ] Router(conFig-iF)#ip authentication mode eigrp 33 md5 OSPF : Router(conFig)#interFace [ port ] Router(conFig-iF)#ip ospF authentication-key [ password ] Router(conFig)#router ospF 1 Router(conFig-router)#area 0 authentication ( Clear text ) Router(conFig)# interFace [ port ] Router(conFig-iF)#ip ospF message-digest-key [ keyID ] md5 [ password ] Router(conFig)#router ospF 1 Router(conFig-router)#area 0 authentication message-digest ( MD5 encryption )
3 Switch port conFiguration : Dua mot cong ve mode access : Switch(conFig-iF)#switchport mode access Dua mot cong dang o mode access vao mot VLAN : Switch(conFig-iF)#switchport access vlan [ VLAN ID ]
Page 3
Kiem tra cac VLAN va cac cong nam trong do : Switch#show vlan Dua mot cong vao mode trunk va cau hinh native vlan tren cong do : Switch(conFig-iF)#switchport mode trunk Switch(conFig-iF)#switchport trunk native vlan [ VLAN ID ] Kiem tra cac cong thuoc mode trunk : Switch#show interFace trunk
4 VLAN Trunk Protocol ( VTP ) : Switch(conFig)#vtp mode server ( hoac client ) Switch(conFig)#vtp domain [ domain name ] Khi doi ten domain se lam cho revision number reset ve 0 Switch(conFig)#vtp password [ password ] Switch(conFig)#vtp version 1 ( hoac version 2 ) Kiem tra cac thong so cua VTP : Switch#show vtp status
5 Spanning Tree Protocol : Priority mac dinh tren switch cisco la 32768 Cau hinh priority cho switch tren mot VLAN nao do : Switch(conFig)#spanning-tree vlan [ VLAN ID ] priority [ priority value ] [ priority value ] = 4096 * n ( n la so nguyen )
Page 4
Cau hinh mot con switch lam primary root bridge cua mot VLAN : Switch(conFig)#spanning-tree vlan [ VLAN ID ] root primary
Cau hinh mot con switch lam secondary root bridge cua mot VLAN : Switch(conFig)#spanning-tree vlan [ VLAN ID ] root secondary Cau hinh port priority cho switch : Switch(conFig-iF)#spanning-tree port-priority [ port priority value ] [ port priority value ] = 16 * n = 0 240 ( n la so nguyen ) Gia tri mac dinh deFault cho port priority la 128 Kiem tra cac thong so cua STP : Switch#show spanning-tree Cau hinh portFast , uplinkFast , backboneFast : Switch(conFig-iF)#spanning-tree portFast Switch(conFig-iF)#spanning-tree uplinkFast Switch(conFig-iF)#spanning-tree backboneFast Cau hinh portFast deFault tren tat ca cac cong cua switch : Switch(conFig)#spanning-tree portFast deFault
6 Point to point protocol PPP : Cau hinh nen du lieu : Router(conFig-iF)#encapsulation ppp Router(conFig-iF)#compress [ predictor | stac ]
Page 5
Cau hinh link quality : Router(conFig-iF)#encapsulation ppp Router(conFig-iF)# ppp quality [ percentage ] // percentage = 1 => 100
Hoat dong xac thuc authentication cua PAP :
Page 6
Cau hinh PAP authentication :
Page 7
Hoat dong xac thuc authentication cua CHAP :
Page 8
Cau hinh CHAP authentication :
Page 9
Cau hinh multilink loadbalancing : Cach 1 :
Page 10
Cach 2 :
7 Frame Relay : Cac gia tri cua DLCI : 0 => 15 va 1008 => 1023 duoc du tru 1019 => 1022 Multicast 1023 Cisco LMI 0 ANSI LMI 16 => 1007 ISP cung cap cho user Cac buoc cau hinh Frame Relay ben phia DTE:
Page 11
Frame Relay encapsulation co 2 loai : CISCO va IETF ( DeFault CISCO ) LMI type co 3 loai la : ANSI CISCO q993a ( DeFault CISCO ) Inverse ARP khong hoat dong trong mo hinh Hub and Spoke ( Cac con Spoke khong tu dong hoc DLCI cua nhau ) => Khac phuc bang cach su dung Static map , khi dung Static map phai map lai tat ca cac VC vi khi dung Static map , Inverse ARP se bi disable . Cau lenh static map : Router(conFig-iF)#Frame-relay map protocol destination-address local-DLCI [ broadcast ] [ cisco | ietF ]
Cau hinh Point to point va Multipoint :
Page 12
Cac buoc cau hinh point to point hoac multipoint :
Cau hinh Point to point :
Page 13
Cau hinh multipoint :
Page 14
8 Access Control Lists ACLs : Co hai loai ACLs cua Cisco la :
Page 15
Cau hinh Standard ACLs : Standard ACLs chi co the permit hoac deny mot hoac mot dai dia chi nguon , khong kiem tra them cac thong so khac . ID cua Standard ACLs nam trong khoang 1 => 99 hoac 1300 => 1999 Cu phap cau lenh : Router(conFig)#access-list 1 remark [ chu thich ] Router(conFig)#access-list 1 [ permit | deny ] address wildcard-mask hoac Router(conFig)#access-list 1 [ permit | deny ] host address Tu khoa host thay cho wildcard-mask la 0.0.0.0 Sau khi dinh nghia ra mot ACLs , phai gan ACLs do vao mot cong nao do theo chieu in hoac out : Router(conFig-iF)#ip access-group 1 [ in | out ] Khi dung Standard ACLs , nen gan ACLs loai nay vao cong gan voi dich nhat .
Page 16
Page 17
Cau hinh Extended ACLs : ACLs loai Extended kiem tra cac thong so : IP nguon va dich Port nguon va dich Giao thuc TCP , UDP , ICMP ...
Page 18
9 Cau hinh DHCP server : Su dung port 68 cho client va 67 cho server . Cac buoc cau hinh DHCP server : Step 1 : Exclude ( loai bo ) cac dia chi IP khong cap Step 2 : Dat ten cho pool Address Pool Step 3 : Cau hinh cac tham so cho pool vua tao ra
Page 19
Page 20
Kiem tra cau hinh DHCP tren server :
Page 21
10 Cau hinh NAT / PAT : Cau hinh static NAT :
Page 22
Cau hinh dynamic NAT :
Page 23
Cau hinh NAT with overload ( PAT ) :
Page 24
Page 25
11 IPv6 : Cac loai dia chi : 1 Unicast : - compatibility - special - link local - side local - global unicast
FP TLA RES 3 bit 13 bit 8 bit
NLA 24 bit
:: va ::1 Fe80::/10 Fec0::/10 3 bit dau luon la 001 , hien nay dang dung 2000::/3 . Dai dia chi danh cho 6to4 tunnel la 2002::/16 SLA InterFace ID 16 bit 64 bit
2 Anycast 3 Multicast FF Flag Scope 8 bit 4 bit 4 bit Flag :
0000...........................000 80 bit
Group ID 32 bit
Scope :
00T0 T = 0 Dia chi duoc gan vinh vien T = 1 Dia chi ko gan vinh vien 0001 => node 0010 => link => multicast den moi node / pham vi node => multicast den moi node / pham vi link => multicast den moi router / pham vi node => multicast den moi router / pham vi link => multicast den moi router / pham vi site
FF01::1 FF02::1 FF01::2 FF02::2 FF05::2
Page 26
Solicited node : Dia chi IPv6 64 bit Dia chi solicited node 104 bit FF02::1:FF / 104 Dia chi MAC multicast : IP muticast : MAC multicast 3333
40 bit
24 bit
24 bit
32 bit Group ID 32 bit Group ID
Cau hinh dia chi IPv6 dual stack : IOS tu phien ban 12.2(2)T tro len ho tro IPv6 De kich hoat router forward cac goi tin IPv6 : Router(config)#ipv6 unicast-routing Dat dia chi IPv6 cho mot interface : Router(config-if)#ipv6 address ipv6-address [/prefix length]
Page 27
Cau hinh giao thuc RIPng tren nen IPv6 :
Cac buoc cau hinh : Kich hoat IPv6 tren router Router(config)#ipv6 unicast-routing Router(config)#ipv6 router rip name Gan dia chi va cau hinh RIPng tren tung interface Router(config-if)#ipv6 address ipv6_address / prefix [eui-64] Router(config-if)#ipv6 rip name enable
Page 28
ICMPv6 :
Type: Gi tr bt u tin ca trng type s xc nh y l thng ip li (bt u c gi tr 0, ton b gi tr trng type t 0-127), hay thng ip thng tin (bt u c gi tr 1, ton b gi tr trng type t 128-255) Code: 8 bt trng code s phn dng su hn gi tin ICMPv6, nh r y l gi tin dng g trong tng loi thng ip trn. Thng ip ICMPv6 c xc nh bng gi tr 58 ca trng Next Header ca header lin k pha trc. Bng 1: Cc thng ip li Dng (type) M t Gi tr trng code
0 Khng c tuyn ti ch 1 Giao tip ti ch b cm Destination 2 Cha gn 1 unreachable 3 - a ch khng t ti 4 Port khng t ti c. 2 Packet too big 0 0 Vt qu gii hn hop limit 3 Time exceeded 1 Thi gian to li gi tin vt qu gii hn cho php 0 Li header Parameter 1 Khng nhn dng c 4 problem Next Header 2 Khng nhn ra IPv6 option
Page 29
Bng 2: Thng ip thng tin c bn
Bng 3: Thng ip thng tin m rng Type 130 131 M t Multicast Listener Query. Multicast Listener Report. Code 0 0 0 0 0 0 0 0
132 Multicast Listener Done 133 Router Solicitation 134 Router Advertisement 135 Neighbor Solicitation 136 Neighbor Advertisement 137 Redirect.
Page 30
Chuyn i s dng t th tc ipv4 sang th tc ipv6 khng phi l mt iu d dng. Trong trng hp th tc ipv6 c tiu chun ha hon thin v hot ng tt, vic chuyn i c th c thc y thc hin trong mt thi gian nht nh i vi mt mng nh, mng ca mt t chc. Tuy nhin kh c th thc hin ngay c i vi mt mng ln. i vi mng Internet ton cu, c th ni l khng th. Th tc ipv6 pht trin khi ipv4 c s dng rng ri, mng li ipv4 Internet hon thin, hot ng da trn th tc ny. Trong qu trnh trin khai th h a ch ipv6 trn mng Internet, khng th c mt thi im nht nh m ti , a ch ipv4 c hy b, thay th hon ton bi th h a ch mi ipv6. Hai th h mng ipv4, ipv6 s cng tn ti trong mt thi gian rt di. Trong qu trnh pht trin, cc kt ni ipv6 s tn dng c s h tng sn c ca IPV4. Do vy cn c nhng cng ngh phc v cho vic chuyn i t a ch ipv4 sang a ch ipv6. Nhng cng ngh chuyn i ny, c bn c th phn thnh ba loi nh sau: (1) Dual-stack: Cho php ipv4 v ipv6 cng tn ti trong cng mt thit b mng. (2) Cng ngh ng hm (Tunnel): Cng ngh s dng c s h tng mng ipv4 truyn ti gi tin ipv6, phc v cho kt ni ipv6. (3) Cng ngh bin dch: Thc cht l mt dng thc cng ngh NAT, cho php thit b ch h tr ipv6 c th giao tip vi thit b ch h tr ipv4. Dual-stack: Dual-stack l hnh thc thc thi TCP/IP bao gm c tng IP layer ca Ipv4 v tng IP layer ca ipv6
Page 31
ng dng h tr dual-stack s hot ng c c vi a ch ipv4 v a ch ipv6. Vic la chn a ch da trn kt qu tr v ca truy vn DNS. Thng thng, theo mc nh, a ch ipv6 trong kt qu tr v ca DNS s c la chn so vi a ch ipv4. V ng dng hin nay hot ng dual-stack, c th ly v d: HH Window XP, Window 2003 server, HH ca router Cisco.
Dual stack trong HH window:
Thc t, th tc ipv6 trong HH window cha phi l dual-stack ng ngha. Driver ca Ipv6 protocol (Tcpip6.sys) cha hai thc thi tch bit ca TCP, UDP, tuy nhin cng c cp nh mt thc thi dual-stack.
Dual stack trong HH Cisco:
Khi ngi qun tr mng cu hnh ng thi c hai dng a ch cho mt giao din trn Cisco router, n s hot ng dual-stack. Cng ngh ng hm (Tunnel):
a ch ipv6 pht trin khi Internet ipv4 s dng rng ri v c mt mng li ton cu. Trong thi im rt di ban u, cc mng IPV6 s ch l nhng c o, thm ch l nhng host ring bit trn c mt mng li ipv4 rng ln. Lm th no nhng mng ipv6, hay thm ch nhng host ipv6 ring bit ny c th kt ni vi nhau, hoc kt ni vi mng Internet IPV6 khi chng ch c ng kt ni ipv4. S dng chnh c s h tng mng ipv4 kt ni ipv6 l mc tiu ca cng ngh ng hm. Cng ngh chuyn i:
Page 32
Cng ngh chuyn i thc cht l mt dng cng ngh NAT, thc hin bin dch a ch cho php host ch h tr IPv6 c th ni chuyn vi host ch h tr IPv4. Cng ngh ph bin c s dng l NATPT. Thit b cung cp dch v NAT-PT s bin dch header v a ch cho php IPv6 host ni chuyn vi IPv4 host
Cng ngh ng hm l mt phng php s dng c s h tng sn c ca mng ipv4 thc hin cc kt ni ipv6 bng cch s dng cc thit b mng c kh nng hot ng dual-stack ti hai im u v cui nht nh. Cc thit b ny bc gi tin ipv6 trong gi tin c header ipv4 v truyn ti i trong mng ipv4 ti im u v g b ipv4 header, nhn li gi tin ipv6 ban u ti im ch cui ng truyn ipv4 Gi tr ca trng Protocol Field trong ipv4 header lun c xc lp c gi tr 41 xc nh y l gi tin ipv6 c bc trong gi tin ipv4. Do vy cc gi tin c th truyn i trn c s h tng mng ipv4, nu trn ng kt ni c s dng firewall, firewall ny cn phi c thit lp cho php gi tin c gi tr Protocol 41 i qua. im kt thc tunnel c th c xc nh ti host hoc router to nn kt ni nh sau: Router-ti-Router Host-ti-Router hoc Router-ti-Host
Page 33
Host-ti-Host
Vi nhiu cng ngh to tunnel khc nhau, cc IPv6 host, hay mng ipv6 ring bit hin nay trn Internet u c th c kt ni ipv6, u c th kt ni vo mng Internet IPV6 th nghim, tm hiu hay thc s trao i thng tin. Tt nhin cc host v mng ny phi c kt ni Internet ipv4 v la chn mt cng ngh tunnel ph hp. Nh vy, nu bn ang c kt ni ti mng Internet ipv4, bn ch mun th nghim kt ni ipv6 trn mt host hay bn ang c mt mng Ipv6, u c th kt ni c vo IPV6 Internet, hoc kt ni vi cc mng IPV6 khc trn Internet. Phn tip theo s m t c th mt s cng ngh tunnel bn c c th hnh dung v la chn cng ngh ph hp vi mc ch v nhu cu ca mnh. Phn loi cng ngh Tunnel: Ty theo cng ngh tunnel, cc im bt u v kt thc ng tunnel c th c cu hnh bng tay bi ngi qun tr, hoc c t ng suy ra t a ch ngun v a ch ch ca gi tin ipv6. ng kt ni tunnel s c dng kt ni im-im hay im a im. Da theo cch thc thit lp im u v cui ng hm (tunnel), cng ngh tunnel c th phn thnh hai loi: tunnel bng tay v tunnel t ng
Tunnel bng tay (Configured)
Tunnel bng tay l hnh thc to ng hm kt ni IPV6 trn c s h tng mng IPV4, trong i hi phi c cu hnh bng tay cc im kt thc tunnel. Trong tunnel cu hnh bng tay, cc im kt cui ng hm ny s khng c suy ra t cc a ch nm trong a ch ngun v a ch ch ca gi tin.
Page 34
Trc tip cu hnh ng tunnel, cng ngh Tunnel Broker l cng ngh tunnel bng tay.
Tunnel t ng (Automatic)
Tunnel t ng l cng ngh tunnel trong khng i hi phi cu hnh a ch ipv4 ca im bt u v kt thc tunnel bng tay. a ch ipv4 ca im bt u v kt thc tunnel c rt ra s dng giao din o tunnel, tuyn (route), a ch ngun v a ch ch ca gi tin Ipv6. C nhiu cng ngh tunnel t ng, trong c cng ngh tunnel hin khng cn c s dng na. Nguyn tc hot ng ca vic to ng hm: Nguyn tc ca vic to ng hm trong cng ngh tunnel nh sau:
Xc nh thit b kt ni ti cc im u v cui ng hm. Hai thit b ny phi c kh nng hot ng dual-stack. Xc nh a ch ipv4 v a ch ipv6 ngun v ch ca giao din tunnel (hai u kt thc tunnel) Trn hai thit b kt ni ti u v cui tunnel, thit lp mt giao din tunnel (giao din o, khng phi giao din vt l) dnh cho nhng gi tin IPv6 s c bc trong gi tin IPv4 i qua. Gn a ch ipv6 cho giao din tunnel. To tuyn (route) cc gi tin ipv6 i qua giao din tunnel. Ti , chng c bc trong gi tin ipv4 c gi tr trng Protocol 41 v chuyn i da trn c s h tng mng IPV4 v nh nh tuyn ipv4.
Page 35
Tunnel bng tay l hnh thc to ng hm kt ni IPV6 trn c s h tng mng IPV4, trong i hi phi c cu hnh bng tay cc im kt thc tunnel. Trong tunnel cu hnh bng tay, cc im kt cui ng hm ny s khng c suy ra t cc a ch nm trong a ch ngun v a ch ch ca gi tin. Thng thng, hnh thc to ng hm bng tay ny thng c cu hnh to ng hm gia router ti router (hai border router) nhm kt ni hai mng IPV6 xc nh s dng c s h tng mng ipv4. N cng c th c cu hnh gia router v host kt ni ipv6 host vo mt mng ipv6 t xa. Vic cu hnh giao din tunnel, bao gm a ch ipv6 gn cho giao din tunnel, a ch ipv4 ca cc im kt thc tunnel cn phi c cu hnh bng tay cng vi tuyn s s dng giao din tunnel. Tunnel cu hnh bng tay tng ng vi mt ng link vnh vin (permanent link) gia hai min Ipv6 trn c s h tng mng Ipv4, cho mt kt ni n nh gia hai im xc nh. Dng kt ni tunnel
Page 36
ny l kt ni im im, to nn mt ng kt ni n nh, bo mt, ring bit. Tnh cht ny tng t nh khi ta cu hnh nh tuyn tnh (static route) so vi nh tuyn ng (dynamic route). Tuy nhin, n i hi cu hnh, qun tr th cng. Nu mun kt ni ti nhiu im, s phi to nhiu giao din tunnel v nhiu ng tunnel. Trong trng hp mt t chc c hai phn mng ipv6 ti hai vng a l v ch c c s h tng ipv4 gia hai phn mng ny. Trong trng hp , c th c kt ni ipv6, to mt tunnel cu hnh bng tay gia hai router gateway ca hai phn mng c th l s la chn tt nht c mt kt ni n nh. Chng ta s thc hnh cu hnh to tunnel bng tay kt ni mt host vo mng IPv6 khi ng k s dng dch v Tunnel Broker trong phn ni dung sau.
Tunnel Broker l hnh thc tunnel, trong mt t chc ng ra lm trung gian, cung cp kt ni ti Internet IPV6 cho nhng thnh vin ng k s dng dch v Tunnel Broker do t chc cung cp. T chc cung cp dch v Tunnel Broker c vng a ch IPV6 c lp, ton cu, xin cp t cc t chc qun l a ch IP quc t, mng IPV6 ca t chc c kt ni ti Internet IPV6 v nhng mng Ipv6 khc. Thnh vin ng k v c cp quyn s dng dch v Tunnel Broker s nhn c nhng thng tin t t chc qun l Tunnel Broker thit lp ng hm tunnel t host hoc t router gateway mng IPV6 ca t chc mnh ti mng ca t chc duy tr
Page 37
Tunnel Broker, t kt ni ti c Internet IPV6 hay nhng mng IPV6 khc m t chc duy tr Tunnel Broker c kt ni ti Ngi s dng s kt ni ti c Ipv6 Internet v cc mng Ipv6 khc khi ng k v c php s dng dch v Tunnel Broker ca nh cung cp. Ngi s dng s c cung cp thng tin thit lp ng hm t host hoc mng ca mnh n mng ca t chc duy tr Tunnel Broker v dng mng ny nh mt trung gian kt ni ti cc mng IPV6 khc. Ngi ng k s dng dch v Tunnel Broker s c cp mt vng a ch thun IPv6, tu theo nhu cu s dng t khng gian a ch IPv6 ca nh cung cp dch v tunnel broker v c chuyn giao mt khng gian tn min cp di khng gian tn min ca nh cung cp dch v Tunnel Broker. y l a ch v tn min hp l ton cu, thnh vin ca Tunnel Broker c th s dng tn min ny thit lp IPV6 Website cho php nhng mng IPV6 c kt ni ti mng ca nh cung cp dch v Tunnel Broker truy cp ti. ng hm thit lp gia ngi s dng v mng ca nh cung cp dch v Tunnel Broker c cu hnh trn nguyn l Tunnel bng tay.
Page 38
M hnh ca mt Tunnel Broker cho trn hinh Trong Tunnel Broker: l nhng my ch dch v lm nhim v qun l thng tin ng k, cho php s dng dch v, qun l vic to ng hm, thay i thng tin ng hm cng nh xo ng hm. Trong h thng dch v Tunnel Broker ca nh cung cp, my ch Tunnel Broker s lin lc vi Tunnel Server (thc cht l cc dual-stack router) v my ch tn min ca nh cung cp Tunnel Broker thit lp ng hm pha nh cung cp dch v Tunnel Broker v to bn ghi tn min cho ngi ng k s dng dch v Tunnel Broker. Ngi s dng thng qua mng Internet IPV4 s truy cp my ch Tunnel Broker v ng k ti khon s dng dch v Tunnel Broker thng qua mu ng k di dng Web. Tunnel Server: Thc cht l cc router dual-stack lm nhim v cung cp kt ni ngi ng k s dng dch v kt ni ti truy cp vo mng IPv6 ca t chc cung cp Tunnel Broker. Cc router ny
Page 39
l im kt thc tunnel pha nh cung cp dch v Tunnel Broker. Tunnel Server nhn yu cu t my ch Tunnel Broker v to, hoc xo ng tunnel pha nh cung cp Tunnel Broker. ng k s dng ch v Tunnel Broker Nu ngi s dng ch mun kt ni mt host vo mng IPv6 ca nh cung cp tunnel broker, s ng k dng host v yu cu cp mt a ch (/128). Nu ngi s dng mun kt ni mt mng, cn ng k v Tunnel Broker s cp cho mt vng a ch theo nhu cu (thng l prefix /64 nu mng ipv6 ca t chc ch c mt subnet duy nht hoc prefix /48 nu mng ipv6 ca t chc c nhiu subnet v cn nhiu hn mt prefix /64) Thit lp ng hm pha nh cung cp dch v Tunnel Broker Khi nhn c thng tin ng k v chp nhn yu cu, my ch Tunnel Broker s lin h vi Tunnel Server, my ch tn min ca nh cung cp dch v Tunnel Broker thit lp ng hm pha nh cung cp Tunnel Broker v to bn ghi tn min ri gi cc thng tin cn thit phc v cho ngi s dng to ng hm pha ngi s dng (thng qua email, hoc web form). Thng tin c gi ti ngi s dng thng bao gm : a ch IPV4 pha client (ngi s dng, a ch ny do ngi s dng cung cp cho Tunnel Broker khi ng k). y s l a ch ipv4 ca u tunnel pha ngi s dng. a ch IPV4 pha server (a ch IPV4 ca mt dual-stack router ca nh cung cp Tunnel Broker, l cc Tunnel server). y l a ch IPV4 ca u tunnel pha nh cung cp dch v tunnel broker.
Page 40
a ch IPV6 pha client. y l a ch IPV6 thuc vng a ch IPV6 ca nh cung cp dch v Tunnel Broker cp cho ngi ng k s dng cho mng ipv6 v cho kt ni. a ch IPV6 pha server (a ch ipv6 ca dual-stack router ca nh cung cp Tunnel Broker) Tn min nh cung cp Tunnel Broker cp cho ngi s dng. y l tn min hp l ton cu, ng k trn my ch tn min ca nh cung cp dch v Tunnel Broker.
Thit lp ng hm pha ngi s dng: Da trn nhng thng tin nhn c, ngi s dng s cu hnh bng tay trn host hoc router ca mnh ng hm tunnel kt ni vi mng ca nh cung cp dch v tunnel broker. y l tunnel cu hnh bng tay. Trn cc HH khc nhau v cc thit b mng khc nhau c h tr IPV6 s cung cp cc tp hp lnh tng ng cu hnh tunnel. Trong nhiu trng hp, t chc cung cp dch v Tunnel Broker xy dng cc chng trnh Client gip ngi s dng khng phi trc tip g lnh thit lp tunnel m ch vic ci t chng trnh v giao tip vi chng trnh qua giao din. Mt s t chc cung cp dch v Tunnel Broker ton cu: Hin nay trn ton cu, c rt nhiu t chc cung cp dch v Tunnel Broker min ph. Ban c th tham kho danh sch sau y v ng k s dng dch v Tunnel ca cc t chc ny: http://www.ipv6tf.org http://tunnelbroker.ipv6.net.au (c) http://tunnel.be.wanadoo.com (B) http://www.hexago.com/ (Canada)
Page 41
http://tb.6test.edu.cn/ (Trung Quc) http://tunnelbroker.ipv6.estpak.ee/ (Estonia) http://tb.ngnet.it (Italia) http://www.iij.ad.jp/en/IPv6/zikken-e.html (Nht Bn) http://tbroker.manis.net.my/ (Malaysia) http://www.sixxs.net/ (H Lan) http://www.uninett.no/ (Nauy) http://tb.ptin.euro6ix.org/ (Th Nh K) http://tunnel-broker.singnet.com.sg/ (Singapore) http://tunnelbroker.as8758.net/ (Thu S) http://tb.ipv6.chttl.com.tw/ (i Loan) http://tb.ipv6.btexact.com (Anh) http://tunnelbroker.net (M)
Cong nghe 6to4 tunnel : C nhiu cch c a ch IPv6 cng nh kt ni IPV6. Mt trong nhng cch s dng Ipv6 khi bn ch c kt ni Ipv4 l s dng tunnel 6to4. 6to4 cho php bn truy cp Internet IPV6 m khng cn nhiu th tc hay cu hnh phc tp, bng cch s dng a ch Ipv6 c bit c tin t prefix 2002::/16 c IANA cp dnh ring cho
Page 42
cng ngh 6to4, kt hp vi a ch IPV4 ton cu. HH Window XP, Window 2003 server, h tr t ng cu hnh sn giao din o 6to4 tunnel khi my tnh c kch hot IPv6 protocol c kt ni Internet v c mt a ch ipv4 ton cu gn cho card mng. Ngi s dng khng cn thit phi thc hin thao tc no c mt ng hm tunnel kt ni vi Internet IPV6. Nh c im ny, nu ngi s dng ang truy cp Internet vi kt ni ipv4 qua dial up, c th kt ni vi Ipv6 Internet m khng cn thm thao tc cu hnh no. Tunnel 6to4 cho php nhng min Ipv6 6to4 tch bit c th kt ni qua mng Ipv4 ti nhng min Ipv6 6to4 khc. im khc bit c bn nht gia tunnel t ng 6to4 v tunnel cu hnh bng tay l ch ng hm 6to4 khng phi kt ni im im. Tunnel 6to4 l dng kt ni im a im. Trong , cc router khng c cu hnh thnh tng cp m chng coi mi trng kt ni Ipv4 l mt mi trng kt ni vt l o. Chnh a ch IPV4 gn trong a ch Ipv6 s c s dng tm thy u bn kia ca ng tunnel. Tt nhin, thit b ti hai u tunnel phi h tr c Ipv6 v Ipv4. Khung cnh ng dng tunnel 6to4 on gin nht l kt ni nhiu Ipv6 site ring bit, mi mng c t nht mt ng kt ni ti mng IPV4 chung. i hi c bn nht l mi site phi c mt a ch Ipv4 ton cu. Trong nhng mc trn, chng ta tm hiu bn cht cc ng kt ni tunnel, cch thit lp cc giao din kt ni tunnel bng tay. Trong mc ny, chng ta s tm hiu v cng ngh to tunnel 6to4 l mt dng tunnel t ng, s dng mt prefix a ch ring c IANA gn cho loi hnh tunnel ny : prefix a ch 2002::/16.
Page 43
IANA phn b rnh ring mt prefix a ch cho cng ngh tunnel 6to4 ton cu. l 2002::/16 Prefix a ch ny, kt hp vi 32 bt a ch IPV4 s to nn mt prefix a ch 6to4 kch c /48 duy nht ton cu s dng cho mt mng IPv6. Prefix /48 a ch Ipv6 tng ng mt a ch Ipv4 ton cu c to nn theo nguyn tc trn hnh V d, nu router ca bn ang ni vo Internet IPv4 vi a ch 203.119.9.15. Khi bn ang s hu mt vng a ch Ipv6 6to4 nh sau: 2002:cb77:090f::/48 Prefix a ch ny c to nn bng cch gn 16 bt prefix dnh ring ca tunnel 6to4 2002::/16 vi cb77:090f chnh l 32 bt a ch Ipv4 c vit di dng hexa. Vng a ch /48 ny bn c th s dng phn b to nn mt mng IPV6 cho t chc mnh. Mt subnet trong IPv6 c gn prefix /64. Vi vng a ch 6to4 /48 ca mnh, bn c 16 bt c th s dng nh s cc mng LAN 6to4 Ipv6 trong site ca bn, v c th nh s ti 65536 mng, mt con s rt ln v bn kh c th s dng ht vng a ch /48 mnh c, ch t mt i ch IPv4.
Page 44
Cc thnh phn ca 6to4 tunnel nh sau: 6to4 host
L bt k host IPv6 no c cu hnh vi t nht mt a ch 6to4. a ch 6to4 c th c t ng cu hnh. 6to4 router
6to4 router l mt router dual-stack h tr s dng giao din 6to4. Router ny s chuyn tip lu lng c gn a ch 6to4 gia nhng 6to4 host trong mt site v ti nhng router 6to4 khc hoc ti 6to4 relay router trong mng Ipv4 Internet. Vic cu hnh router 6to4 cn phi c cu hnh bng tay. 6to4 relay router
6to4 relay router l mt dual stack router thc hin chuyn tip lu lng c a ch 6to4 ca nhng router 6to4 trn Internet v host trn IPV6 Internet (s dng a ch IPv6 chnh thc, cung cp bi t chc qun l a ch ton cu). 6to4 relay router l mt 6to4 router c cu hnh h tr chuyn tip nh tuyn gia a ch 6to4 v a ch Ipv6 chnh thc (a ch IPv6 nh danh ton cu). 6to4 relay router
Page 45
s l gateway kt ni gia mng 6to4 v Ipv6 Internet. Nh gip cho nhng mng IPv6 6to4 c th kt ni ti Internet IPV6.
S dng vng a ch 6to4 (2002:cb77:090f::/48) to c t a ch IPv4 ton cu 203.119.9.15 trong mc trn, chng ta xy dng site IPV6 ca bn c mt mng LAN ni b, c phn hoch a ch nh sau LAN local: 2002:cb77:090f:0020::/64 Subnet 2002:cb77:090f:0010::/64 c dng gn cho giao din tunnel. Gi hy ni mng IPV6 6to4 ca bn vo Internet IPV4. Router R1 c kt ni Ipv4 vi a ch 203.119.9.15 gn ti FasE 0/1. Nu bn
Page 46
cu hnh router R1 thnh 6to4 router v cu hnh nh tuyn mc nh trn router ny tr ti mt 6to4 relay router, v d s dng 6to4 relay router ca Microsoft, khi , mng IPV6 6to4 ca bn c th c nhng kt ni Ipv6 sau y: Cc Ipv6 6to4 host bn trong mng LAN gi hon ton c th kt ni vi nhau.
Router R1 s qung b prefix 2002:cb77:090f:0020::/64 trn FasE 0/1. Cc host trong mng LAN ni b s t ng cu hnh a ch t prefix qung b ny v tr thnh 6to4 host. Trn cc 6to4 host, nh tuyn tng ng 2002:cb77:090f:0020::/64 route v default route ::/0 tr ti R1 cng c t ng cu hnh. 6to4 host trong mng 6to4 ca bn cng c th kt ni ti 6to4 host trn cc mng 6to4 khc trong Internet (v d Site B)
Trn 6to4 router R1 c cu hnh nh tuyn 2002::/16 route i qua giao din tunnel. Do vy nhng lu lng thuc a ch 6to4 s c giao din ny ng gi trong gi tin Ipv4 v gi qua mng IPV4 ti router R2 ca site B l u kia ca ng tunnel. R2 s g b IPV4 header, ly gi tin IPV6 v da theo bng thng tin nh tuyn ca n forward ti host 6to4 ch trn site B. 6to4 host thuc mng ca bn (site A) cng c th giao tip vi mt host IPV6 c gn a ch thun IPV6 (v d a ch c prefix 2001:xxx ) (site C).
S d nh vy v trn router 6to4 ca mng ca bn (site A) c cu hnh default routing ::/0 tr ti 6to4 relay router (v d ca Microsoft). Khi 6to4 host trong mng ca bn chuyn ti router 6to4 R1 nhng gi tin c a ch IPV6 native, khng phi a ch 6to4, R1 s tunnel nhng gi tin ny ti 6to4 relay router R3. R3 c cu hnh thc hin chc nng chuyn tip gia a ch 6to4 v a ch
Page 47
native IPV6. N c kt ni ti c Ipv4 Internet v Ipv6 Internet. 6to4 relay router R3 s g b Ipv4 header v forward gi tin ti host Ipv6 tng ng s dng cu trc nh tuyn ca mng Internet Ipv6. Ch : Khi s dng cng ngh 6to4, c mt im ch : nu site ipv6 6to4 ca bn khng ch c mt phn mng LAN nh trong mng trn hnh v m bao gm nhiu phn mng con, bn cn c cu trc nh tuyn bn trong mng ca bn cho a ch ipv6 6to4, s dng nhng th tc nh tuyn ph hp. nh tuyn bn ngoi site chnh l nh tuyn gi tin IPv4.
Page 48

Ripv2:: 1 - Default Route and Redistribute Commands

Uploaded by

Copyright:

Available Formats

You might also like

Ripv2:: 1 - Default Route and Redistribute Commands

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Ripv2:: 1 - Default Route and Redistribute Commands

Uploaded by

Copyright:

Available Formats

shitman2104@yahoo.

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Hoat dong xac thuc authentication cua PAP :

Common commands for routers and switchs

Cau hinh PAP authentication :

Common commands for routers and switchs

Hoat dong xac thuc authentication cua CHAP :

Common commands for routers and switchs

Cau hinh CHAP authentication :

Common commands for routers and switchs

Cau hinh multilink loadbalancing : Cach 1 :

Common commands for routers and switchs

Common commands for routers and switchs

Cau hinh Point to point va Multipoint :

Common commands for routers and switchs

Cac buoc cau hinh point to point hoac multipoint :

Cau hinh Point to point :

Common commands for routers and switchs

Cau hinh multipoint :

Common commands for routers and switchs

8 Access Control Lists ACLs : Co hai loai ACLs cua Cisco la :

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Common commands for routers and switchs

Kiem tra cau hinh DHCP tren server :

Common commands for routers and switchs

10 Cau hinh NAT / PAT : Cau hinh static NAT :

Common commands for routers and switchs

Cau hinh dynamic NAT :

Common commands for routers and switchs

Cau hinh NAT with overload ( PAT ) :

Common commands for routers and switchs

Common commands for routers and switchs

FP TLA RES 3 bit 13 bit 8 bit

2 Anycast 3 Multicast FF Flag Scope 8 bit 4 bit 4 bit Flag :

FF01::1 FF02::1 FF01::2 FF02::2 FF05::2

Common commands for routers and switchs

32 bit Group ID 32 bit Group ID

Common commands for routers and switchs

Cau hinh giao thuc RIPng tren nen IPv6 :

Common commands for routers and switchs

Common commands for routers and switchs

Bng 2: Thng ip thng tin c bn

Common commands for routers and switchs

Common commands for routers and switchs

Dual stack trong HH window:

Dual stack trong HH Cisco:

Common commands for routers and switchs

Common commands for routers and switchs