Download Hosts….

Survey
yes no Was this document useful for you?
   Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Document related concepts
no text concepts found
Transcript
Use of VLANs for IPv4-IPv6
Coexistence in Enterprise Networks
rfc 4554
presented by [email protected]
2007.05.14 tech3 R322
1
VLAN Overview - 1
ENG
3rd floor
SALES
2nd floor
ADMIN
1st floor
physical LAN = A broadcast domain
2
VLAN Overview - 2
!?
ENG
3rd floor
SALES
2nd floor
ADMIN
1st floor
physical LAN = A broadcast domain
3
VLAN Overview - 3
ENG
SALES
ADMIN
• Segmentation
3rd floor
2nd floor
• Flexibility
• Security
1st floor
A VLAN = A broadcast domain = Logical network (subnet) 4
VLAN Operations - 1
Switch A
ENG
VLAN
SALES
VLAN
Switch B
ADMIN
VLAN
ENG
VLAN
SALES
VLAN
ADMIN
VLAN
• Each logical VLAN is like a separate physical bridge
• VLANs can span across multiple switches
5
VLAN Operations - 2
Switch A
Switch B
Trunk
Fast Ethernet
ENG
VLAN
SALES
VLAN
ADMIN
VLAN
ENG
VLAN
SALES
VLAN
ADMIN
VLAN
• Each logical VLAN is like a separate physical bridge
• VLANs can span across multiple switches
• Trunks carries traffic for multiple VLANs
6
For a LAN environment…
IPv6 host
IPv4 host
IPv6 host
IPv4 host
Layer 2 switch
Can be treated as
separate LANs
IPv6 host
noise
IPv6 host
noise
IPv4 host
noise
IPv4 host
noise
7
Routing works….
IPv6 host
IPv4 host
IPv6 only router
IPv4 only router
R1
R2
Layer 2 switch
8
Separate to 2 domains
IPv6 host
IPv4 host
IPv6 host
IPv4 host
Layer 2 switch
IPv6 host
IPv6 host
IPv4 host
IPv4 host
9
Pure IPv4/IPv6..
IPv4 only router
Network
Data Link
IPv4 only router
R
10
11
12
IPv6 only router
R
19
IPv6 hosts
Vlan 19
13
14
15
R
19
IPv6 hosts
Vlan 19
16
17
18
19
IPv6 hosts
Vlan 19
A case for providing pure IPv4 and pure IPv6
by using same physical link
VLAN trunking10
Congruent IPv4 and IPv6 subnets
Dual stack router
Dual stack host
IPv4 host
IPv6 host
IPv4 /IPv6
R
Layer 2 switch
11
A mix of IPv4 and IPv6 Solutions
12
Cisco cmd:
sh run int fa9/35
!
interface FastEthernet9/35
description "R3-R0-1"
no ip address
switchport
switchport access vlan 39
switchport mode access
end
13
Cisco cmd:
sh run int vlan39
interface Vlan39
description "Computer Classroom"
ip address 10.10.39.254 255.255.255.0
ip access-group 139 in
ip helper-address 163.22.2.3
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
ip igmp snooping querier
ip policy route-map ADSL1
!
14
Cisco cmd:
39
41
47
80
show vlan
VLAN0039
VLAN0041
VLAN0047
VLAN0080
active Fa9/35
active Gi7/43
active Fa9/24
active Fa9/18
15
Example: Create vlan of Layer 2
16
Example: Delete vlan of Layer 2
17
Example: Delete vlan of Layer 2
18
Example: create a routing interface
19
Example: create a IPv6 routing interface
20
Example: assign an interface to a vlan
21
Example: assign an interface to a vlan
22
try to remember…..
取自 http://solomon.ipv6.club.tw/Course/IPv6/ch2.pdf page5
23
RFC 4212
Draft-ietf-ngtrans-isatap-13.txt
Intra-Site Automatic Tunnel
Addressing Protocol (ISATAP)
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
24
ISATAP
The primary function of ISATAP is to allow hosts that
are multiple IPv4 hops away from an IPv6 router to
participate in the IPv6 network by automatically
tunneling IPv6 packets over IPv4 to the next-hop
address.
Example: ISATAP host communicates with IPv6 host
(no ISATAP support).
The ISATAP host is isolated in an IPv4 network whereas the
IPv6 host is a IPv6 network
IPv6
HOST
HOST B
IPv4
Infrastructure
ISATAP
IPv6
Network
ISATAP
Supported
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
25
ISATAP
26
ISATAP
In the reverse direction, the ISATAP router
automatically performs IPv6-in-IPv4 tunneling for
packets from the native IPv6 host to the ISATAP
host even though the native IPv6 host has no
knowledge of the legacy IPv4 infrastructure or
addressing architecture.
IPv6
HOST
HOST B
IPv4
Infrastructure
ISATAP
IPv6
Network
ISATAP
Supported
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
27
Construction of ISATAP address
ISATAP interface identifier can be combined with any 64-bit
prefix (including 6to4 prefixes) to form an RFC 2373 compliant
IPv6 globally aggregatable unicast address.
IPv4 address inside EUI-64 interface identifier
::0:5EFE:A.B.C.D for IPv4 address A.B.C.D
The 0:5EFE portion is formed from the combination of the
Oganizational Unit Identifier (OUI) that is assigned to IANA,
and a type that indicates an embedded IPv4 address (FE).
ISATAP Prefix
Prefix
Specially constructed EUI64 Interface ID
Interface Identifier
64-bits
64-bits
ISATAP Address Format
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
28
ISATAP Address Example
EUI-64 Format Interface Identifier
00 00
5e TYPE TSE
24-bits
OUI
TSD
40-bits
Extension ID
If TYPE = 0xFF and TSE = 0xFE, TSD contains legacy EUI48
(TSE = 0xFF reserved by IEEE).
If TYPE = 0xFE, TSE and TSD together contain embedded
IPv4 address.
IPv4 address is: 140.173.129.3
routing prefix is: 3FFE:1A05:510:2412
ISATAP IPv6 address is:
Link-local variant is:
Specially constructed EUI64 Interface ID
3FFE:1A05:510:2412
:0:5EFE: 140.173.129.3
FE80::0:5EFE:140.173.129.3
29
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
ISATAP Operation
Simple Deployment Scenario of ISATAP (Hosts….)
The Automatic Tunneling Pseudo-Interface uses the link-local ISATAP
address assigned to the interface as a source, and uses the last 32 bits
in the source and destination IPv6 addresses (corresponding to the
embedded IPv4 addresses) as the source and destination IPv4
addresses
10.40.1.29
192.168.41.30
FE80::5EFE:10.40.1.29
IPv6
Header
IPv6
Data
IPv4
Infrastructure
HOST A
ISATAP
Supported
Src = FE80::5EFE:10.40.1.29
Dst = FE80::5EFE:192.168.41.30
FE80::5EFE:192.168.41.30
HOST B
ISATAP
Supported
IPv4
Header
IPv6
Header
IPv6
Data
Src = 10.40.1.29
Dst = 192.68.41.30
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
IPv6
Header
IPv6
Data
Src = FE80::5EFE:10.40.1.29
Dst = FE80::5EFE:192.168.41.30
30
ISATAP Operation
Simple Deployment Scenario of ISATAP
(Routers…)
ISATAP
HOST
IPv6
Network
IPv6
HOST
ISATAP
IPv6
Header
IPv6
Data
IPv6 in IPv4
IPv4
Network
192.168.41.25
3FFE:1A05:5102412:5EFE:192.168.41.25
10.40.1.29
3FFE:1A05:5102412:5EFE:10.40.1.29
IPv6
IPv4
IPv6
Header Header Data
IPv6
IPv6
Src = 10.40.1.29
Header Data
Dst = 192.68.41.25
Src = 3FFE:1A05:5102412:5EFE:10.40.1.29
Src = 3FFE:1A05:5102412:5EFE:10.40.1.29
Dst = 3FFE:3600:8::1
Next = 3FFE:1A05:5102412:5EFE:192.168.41.25
Dst = 3FFE:3600:8::1
取自 www.ipv6.org.tw/seminar/92_v6_training/2a.ppt
31
Thank you!
32
Related documents