ASW]
ASW(config)#no ip routing
ASW(config)#vlan 10
ASW(config-vlan)#name IPv4
ASW(config-vlan)#exit
ASW(config)#vlan 20
ASW(config-vlan)#name IPv6
ASW(config-vlan)#exit
ASW(config)#int f1/0
ASW(config-if)#sw mo ac
ASW(config-if)#sw ac vlan 10
ASW(config-if)#int f1/1
ASW(config-if)#sw mod ac
ASW(config-if)#sw ac vlan 20
DSW1]
DSW1(config)#vlan 10
DSW1(config-vlan)#name IPv4
DSW1(config-vlan)#vlan 20
DSW1(config-vlan)#name IPv6
DSW1(config-vlan)#exit
DSW1(config)#int f1/0
DSW1(config-if)#sw tr en dot
DSW1(config-if)#sw mode tr
DSW1(config-if)#sw trunk native vlan 10
DSW2]
DSW2(config)#vlan 10
DSW2(config-vlan)#name IPv4
DSW2(config-vlan)#vlan 20
DSW2(config-vlan)#name IPv6
DSW2(config-vlan)#exit
DSW2(config)#int f1/0
DSW2(config-if)#sw trunk enc dot
DSW2(config-if)#sw mode trunk
DSW2(config-if)#sw tr native vlan 10
ASW]
ASW(config-if)#int range f1/14 - 15
ASW(config-if-range)#sw tr enc dot
ASW(config-if-range)#sw trunk native vlan 10
ASW(config-if-range)#sw mode trunk
ASW(config-if-range)#do show run in f1/15
Building configuration...
Current configuration : 67 bytes
!
interface FastEthernet1/15
switchport trunk native vlan 10 //trunk되고 native vlan10들어간거 확인end
ip address넣기
CE]
CE(config)#ipv6 unicast-routing
CE(config)#int loo0
CE(config-if)#ip add 200.100.100.1 255.255.255.0
CE(config-if)#ipv6 add 2001:100:100:100::1/64
CE(config-if)#int f0/0
CE(config-if)#no shut
CE(config-if)#ip add 1.1.10.1 255.255.255.252
CE(config-if)#ipv6 add 2001:12:12:12::1/64
//링크로컬도 자동생성됨;;
CE(config-if)#int f0/1
CE(config-if)#no shut
CE(config-if)#ip add 1.1.10.5 255.255.255.252
CE(config-if)#ipv6 add 2001:23:23:23::1/64
DSW1]
DSW1(config-if)#int f1/1
DSW1(config-if)#no switchport
DSW1(config-if)#ip add 1.1.10.2 255.255.255.252
DSW1(config-if)#ipv6 add 2001:12:12:12::2/64
DSW1(config-if)#int vlan 10
DSW1(config-if)#ip add 1.1.1.252 255.255.255.0
DSW1(config-if)#int vlan 20
DSW1(config-if)#ipv6 add 2001:20:20:20::252/64
DSW2]
DSW2(config)#ipv6 unicast-routing
DSW2(config)#int f1/1
DSW2(config-if)#no switchport
DSW2(config-if)#ip add 1.1.10.6 255.255.255.252
DSW2(config-if)#ipv6 add 2001:23:23:23::3/64
DSW2(config-if)#int vlan 10
DSW2(config-if)#ip add 1.1.1.253 255.255.255.0
DSW2(config-if)#int vlan 20
DSW2(config-if)#ipv6 add 2001:20:20:20::253/64
=====
IPv6 Routing Table - 7 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route, M - MIPv6
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D - EIGRP, EX - EIGRP external
C 2001:12:12:12::/64 [0/0]
via ::, FastEthernet0/0
L 2001:12:12:12::1/128 [0/0]
via ::, FastEthernet0/0
C 2001:23:23:23::/64 [0/0]
via ::, Loopback0
L 2001:23:23:23::/128 [0/0]
via ::, Loopback0
C 2001:100:100:100::/64 [0/0]
via ::, Loopback0
L 2001:100:100:100::1/128 [0/0]
via ::, Loopback0
L FF00::/8 [0/0]
via ::, Null0
====
디폴트 라우팅 시키기
CE(config-if)#do show ipv6 int f0/1
FastEthernet0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::CE01:BFF:FEF0:1
CE(config-if)#do show ipv6 int f0/0
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::CE01:BFF:FEF0:0
CE(config-if)#ip route 1.1.1.0 255.255.255.0 f0/0 1.1.10.2
CE(config)#ip route 1.1.1.0 255.255.255.0 f0/1 1.1.10.6
CE(config)#ipv6 route 2001:20:20:20::/64 f0/0 FE80::CE03:3EFF:FE28:F101
CE(config)#ipv6 route 2001:20:20:20::/64 f0/1 FE80::CE02:3EFF:FE10:F101
DSW1(config)#ip route 0.0.0.0 0.0.0.0 f1/1 1.1.10.1
DSW1(config)#ipv6 route ::/0 f1/1 FE80::CE01:BFF:FEF0:0
DSW2(config-if)#ip route 0.0.0.0 0.0.0.0 f1/1 1.1.10.5
DSW2(config)#ipv6 route ::/0 f1/1 FE80::CE01:BFF:FEF0:1
▪ IPv6 HSRP
- IPv6의 경우 HSRP를 구성할 때 반드시 HSRP version 2를 사용해야 한다.
- UDP 포트 2029번 사용한다.
- Virtual MAC 주소는 [0005.73A0.0NNN]을 사용한다. NNN은 Group 번호를 의미한다.
- Virtual IP 주소는 Link-Local 주소가 사용되며, Autoconfig가 가능하다.
각 Group의 Virtual MAC 주소를 사용하여 EUI-64 방식으로 Virtual IP 주소의 Interface-ID를 생성.
- Active 장비가 전송하는 HSRPv2 Hello 메시지의 출발지 MAC 주소는 Virtual MAC 주소가 사용된다. Standby 장비가 전송하는 HSRPv2 Hello 메시지의 경우 출발지 MAC 주소가 실제 장비의 MAC 주소가 사용된다.
netsh interface ipv6 show neighbor -> ipv6 네이버 테이블 보기
netsh interface ipv6 delete neighbors -> ipv6 네이버 테이블 삭제
HSRP
vlan10은 DSW1쪽으로, vlan 20은 DSW2쪽으로가게해라.
DSW1(config)#int vlan 20
DSW1(config-if)#standby version 2
DSW1(config-if)#standby 20 ipv6 autoconfig //virtual interface를 자동생성
DSW1(config-if)#standby 20 preempt
DSW2(config)#int vlan 20
DSW2(config-if)#standby version 2
DSW2(config-if)#standby 20 ipv6 autoconfig
DSW2(config-if)#standby 20 priority 110
DSW2(config-if)#standby 20 track f1/1 50
DSW2(config-if)#standby 20 preempt delay minimum 5
DSW1(config-if)#int vlan 10
DSW1(config-if)#standby 10 ip 1.1.1.100 //중간에 가상라우터가 있다고 생각하라고...
DSW1(config-if)#standby 10 priority 110
DSW1(config-if)#standby 10 track f1/1 50
DSW1(config-if)#standby 10 preempt delay minimum 5
DSW2(config-if)#int vlan 10
DSW2(config-if)#standby 10 ip 1.1.1.100
DSW2(config-if)#standby 10 preempt
DSW2(config-if)#do show standby vlan 20
Vlan20 - Group 20 (version 2)
State is Active
2 state changes, last state change 00:05:10
Virtual IP address is FE80::5:73FF:FEA0:14 //virtual ip 로 링크로컬이 잡힘.=>게이트웨이
Active virtual MAC address is 0005.73a0.0014
Local virtual MAC address is 0005.73a0.0014 (v2 IPv6 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.092 secs
Preemption enabled, delay min 5 secs
Active router is local
Standby router is unknown
Priority 110 (configured 110)
Track interface FastEthernet1/1 state Up decrement 50
Group name is "hsrp-Vl20-20" (default)
win 702
cmd
netsh interface ipv6 show neighbor
host2에서 매쉬해서 봤더니 virtual mac주소가 게이트웨이로 잡혔고
dsw1 스탠바이 v20 이 링크로컬로 게이트웨이가 잡힘 (vritual이 아님)
win702(IPv6)
netsh interface ipv6 show neighbor
win701 (IPv4)
'네트워크 수업' 카테고리의 다른 글
[실습] Dynamic Routing Protocol - EIGRP 23.03.27 (0) | 2023.03.27 |
---|---|
[실습] 이번주 총정리 NAT DHCP pool 23.03.24 (0) | 2023.03.24 |
[실습] IPv6 (1) 23.03.23 (0) | 2023.03.23 |
[실습] ACL 확장 Password 시간지정 텔넷 ftp 23.03.22 (0) | 2023.03.22 |
[실습] 확장 ASL ping DoS공격 막기 23.03.21 (0) | 2023.03.21 |
댓글