华为ME60 IPV6配置
1、全局启用IPV6
ipv6
2、配置ISIS IPV6
isis 115
ipv6 enable topology ipv6
ipv6 maximum load-balancing 16
ipv6 preference 115
ipv6 bfd all-interface enable
3、配置ipv6 loopback
interface Loopback 6
ipv6 enable
isis ipv6 enable 115
desc For-IPv6-Management
ipv6 address XXXX:9:3000::01C/128
4、配置与CR互联接口ipv6
interface GigabitEthernet1/0/0
ipv6 enable
ipv6 address XXXX:9:YYYY:01C1::3/127
isis ipv6 enable 115
isis ipv6 cost 3000
5、配置黑洞路由
ipv6 route-static XXXX:A4:AD00:: 40 Null0 preference 210 //用于PD
ipv6 route-static XXXX:A4:A00D:: 48 Null0 preference 210 //用于ND
6、与RR建ipv6 bgp邻居
bgp 64642
peer XXXX:9:3000::00E as-number 64642
peer XXXX:9:3000::00E password cipher gldx
peer XXXX:9:3000::00E connect-interface Loopback6
peer XXXX:9:3000::00F as-number 64642
peer XXXX:9:3000::00F password cipher gldx
peer XXXX:9:3000::00F connect-interface Loopback6
ipv6-family unicast
network XXXX:A4:AD00:: 40
network XXXX:A4:A00D:: 48
peer XXXX:9:3000::00E enable
peer XXXX:9:3000::00E next-hop-local
peer XXXX:9:3000::00E advertise-community
peer XXXX:9:3000::00F enable
peer XXXX:9:3000::00F next-hop-local
peer XXXX:9:3000::00F advertise-community
7、配置IPV6地址池
首先配置PD地址池,PD分配地址即CPE(家庭网关)进行PPPOE拨号申请前缀(/56),并可分配给CPE下带的用户
定义PD前缀,每台BAS分配/40地址段,为每个用户分配的前缀为/56,共可承载65536个用户
ipv6 prefix plipv6-pppoe-pd-1 delegation
prefix XXXX:A4:AD00::/40 delegating-prefix-length 56
pd-unshare-only
用之前的前缀定义PD地址池
ipv6 pool ipv6-pppoe-pd-1 bas delegation
dns-server XXXX:9:2000:100:202:103:225:68 XXXX:9:0:100:202:103:224:68
prefix plipv6-pppoe-pd-1
其次定义ND地址池,用户直接使用PPPOEV6拨号,分配一个/64的前缀,用于DHCPV6无状态配置IP
ipv6 prefix plipv6-pppoe-nd-1 delegation
prefix XXXX:A4:A00D::/48
slaac-unshare-only
ipv6 pool ipv6-pppoe-nd-1 bas delegation
dns-server XXXX:9:2000:100:202:103:225:68 XXXX:9:0:100:202:103:224:68
prefix plipv6-pppoe-nd-1
再定义本地地址池,注意如果引用此地址池域要配置m标志位,分配用户128位IPV6地址,即单个地址
ipv6 prefix ipv6-pppoe-lo-1 local
prefix YYYY:10::/48
ipv6 pool ipv6-pppoe-lo-1 local
dns-server XXXX:9:2000:100:202:103:225:68 XXXX:9:0:100:202:103:224:68
prefix YYYY:10::/48
8、配置private-ds域
该域使用户获得IPV4私网地址和IPV6公网地址
aaa
domain private-ds
ip-pool nat-pppoe-pool-1
radius-server group nat-pppoe-radius
accounting-copy radius-server zhongying-dacs
user-group nat-pppoe-1 bind nat instance nat-pppoe-1
user-group nat-pppoe-2 bind nat instance nat-pppoe-2
prefix-assign-mode unshared
ipv6-pool ipv6-pppoe-nd-1
ipv6-pool ipv6-pppoe-pd-1
domain ipv6
ip-pool nat-pppoe-pool-1
radius-server group nat-pppoe-radius
accounting-copy radius-server zhongying-dacs
user-group nat-pppoe-1 bind nat instance nat-pppoe-1
user-group nat-pppoe-2 bind nat instance nat-pppoe-2
ipv6-pppoe-lo-1
ipv6 nd autoconfig mana iner ipv6cp
9、最后要在子接口下使能IPV6
interface Eth-Trunk0.1800
ipv6 enable
ipv6 address auto link-local
发表评论: