Добавил:
Upload Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:
Скачиваний:
50
Добавлен:
11.04.2015
Размер:
22.9 Mб
Скачать

446 Understanding IPv6, Second Edition

This tests whether IPv4 packets can be forwarded between CLIENT2 on Subnet 3 and CLIENT1 on Subnet 1.

At this point in the test lab configuration, there is an IPv4-only routing infrastructure. IPv4 traffic can be sent and received by any node on the test lab network. All the nodes have IPv6 installed, but there is no native IPv6 routing or autoconfiguration of global or unique local address prefixes. Therefore, IPv6 nodes can communicate only with each other if they are connected to the same subnet and can use only link-local addresses. For example, CLIENT1 can use link-local addresses to communicate with DNS1 and ROUTER1, but it cannot use link-local addresses to communicate with ROUTER2 or CLIENT2.

IPv6 Test Lab Tasks

The following sections are designed to take you through the common IPv6 tasks and configurations to transform the IPv4-only test lab network to an IPv6-only test lab network:

Performing link-local pings

Enabling native IPv6 connectivity on Subnet 1

Configuring ISATAP

Configuring native IPv6 connectivity for all subnets

Using name resolution

Configuring an IPv6-only routing infrastructure

The last step is optional because most intranets in the near future will not be IPv6-only networks, but IPv6-capable networks that support both IPv4 and native IPv6 connectivity. However, you might need an IPv6-only test network to test IPv6-capable applications.

Performing Link-Local Pings

To ping a node using link-local addresses and view the entries created in the neighbor cache, complete the following steps:

1.On ROUTER1, type the netsh interface ipv6 show address command to obtain the link-local address of the interface named Subnet 1 Connection.

2.On CLIENT1, type the netsh interface ipv6 show address command to obtain the link-local address and interface index of the interface named Local Area Connection.

3.On CLIENT1, type the following command to ping the link-local address of ROUTER1’s interface on Subnet 1:

ping ROUTER1LinkLocalAddress%InterfaceIndex

InterfaceIndex is the interface index of the interface named Local Area Connection obtained in step 2.

Appendix E Setting Up an IPv6 Test Lab

447

For example, if the link-local address of ROUTER1’s interface on Subnet 1 is fe80::b500:734b:fe5b:3945 and the interface index for the Local Area Connection interface on CLIENT1 is 7, the command is

ping fe80::b500:734b:fe5b:3945%7

4.On CLIENT1, type the netsh interface ipv6 show neighbors command to view the entry in the CLIENT1 neighbor cache for ROUTER1. You should see an entry for ROUTER1’s link-local address.

5.On CLIENT1, type the netsh interface ipv6 show route command to view the entries in the CLIENT1 routing table.

Enabling Native IPv6 Connectivity on Subnet 1

To enable native IPv6 connectivity on Subnet 1, complete the following steps:

1.On ROUTER1, type the following commands:

netsh interface ipv6 set interface “Subnet 1 Connection” advertise=enabled forwarding=enabled

netsh interface ipv6 add route 2001:db8:0:1::/64 “Subnet 1 Connection” publish=yes

netsh interface ipv6 add route ::/0 “Subnet 2 Connection” fe80::1 publish=yes

These commands configure ROUTER1 to advertise the 2001:DB8:0:1::/64 prefix on Subnet 1 and itself as a default IPv6 router. The FE80::1 address is a temporary next-hop IPv6 address for ROUTER1.

2.On ROUTER1, type the netsh interface ipv6 show address command to obtain the public address assigned to the interface named Subnet 1 Connection.

3.On CLIENT1, type the netsh interface ipv6 show address command to obtain the public address assigned to the interface named Local Area Connection.

4.On CLIENT1, type the following command to ping the public address of ROUTER1’s interface on Subnet 1:

ping ROUTER1PublicAddress

For example, if the public address of ROUTER1’s interface on Subnet 1 is 2001:db8::1:b500:734b:fe5b:3945, the command is

ping 2001:db8::1:b500:734b:fe5b:3945

At this point in the test lab configuration, there is an IPv4 routing infrastructure throughout the network and Subnet 1 has native IPv6 connectivity. CLIENT1 can use IPv6 addresses based on the 2001:DB8:0:1::/64 global address prefix and native IPv6 traffic to communicate

448 Understanding IPv6, Second Edition

with DNS1 and ROUTER1, but it still cannot use IPv6 to communicate with ROUTER2 or CLIENT2. To enable IPv6 connectivity to ROUTER2 and CLIENT2 without enabling native IPv6 routing and advertising on Subnet 2 and Subnet 3, our next task is to configure ROUTER1 as an Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) router.

Configuring ISATAP

In this task, we configure ROUTER1 as an ISATAP router so that IPv6 hosts on the IPv4-only portion of the test lab network (Subnet 2 and Subnet 3) can communicate with IPv6 hosts on the native IPv6 portion of the test lab network (Subnet 1). To configure the test lab network to use ISATAP, do the following:

1.On ROUTER1, type the netsh interface isatap set router 10.0.2.1 command, and then the netsh interface ipv6 show address command to obtain the interface index of the ISATAP interface that is assigned the link-local address FE80::5EFE:10.0.2.1.

2.On ROUTER1, enable forwarding and advertising on the ISATAP interface, using the following commands:

netsh interface ipv6 set interface ISATAPInterfaceIndex forwarding=enabled advertise=enabled

ISATAPInterfaceIndex is the interface index obtained in step 1.

This command configures ROUTER1 as an advertising ISATAP router for the logical ISATAP subnet consisting of Subnet 2 and Subnet 3.

3.On ROUTER1, add a route for the subnet prefix of the logical ISATAP subnet to the ISATAP interface and configure it to be published with the following command:

netsh interface ipv6 add route 2001:db8:0:99::/64 ISATAPInterfaceIndex publish=yes

This command configures ROUTER1 to advertise the 2001:DB8:0:99::/64 route to ISATAP hosts on the logical ISATAP subnet.

4.On DNS1, use the Registry Editor (Regedit.exe) to remove the ISATAP entry from the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS\Parameters\ GlobalQueryBlockList registry value.

5.Use the DNS snap-in to restart the DNS Server service on DNS1.

6.Use the DNS snap-in to add a host (A) resource record named “ISATAP” to the testlab.microsoft.com forward lookup zone for the IPv4 address of 10.0.2.1.

7.On CLIENT1, type the netsh interface ipv6 show address command to obtain the public address assigned to the interface named Local Area Connection.

8.From the Network Connections folder on CLIENT2, disable and then enable the Local Area Connection. This renews CLIENT2’s configuration to determine the ISATAP router

Appendix E Setting Up an IPv6 Test Lab

449

IPv4 address of 10.0.2.1 and obtain an ISATAP address with the global prefix of 2001:DB8:0:99::/64.

9.Ping CLIENT1 from CLIENT2. On CLIENT2, type the following command: ping CLIENT1PublicAddress

CLIENT1PublicAddress is the public address of CLIENT1 obtained in step 7.

This ping command should succeed because IPv6 connectivity using ISATAP now exists between CLIENT2 and CLIENT1. On the logical ISATAP subnet between CLIENT2 and ROUTER1, the IPv6 traffic is encapsulated as IPv4 packets.

At this point in the test lab configuration, there is an IPv4 routing infrastructure throughout the network. For IPv6 traffic, Subnet 1 has native IPv6 connectivity and Subnet 2 and Subnet 3 are a logical ISATAP subnet. CLIENT1 can communicate with DNS1 and ROUTER1 with native IPv6 traffic and communicate with ROUTER2 or CLIENT2 with encapsulated IPv6 traffic. In the next task, we will remove ISATAP and configure native IPv6 connectivity for all three subnets.

Configuring Native IPv6 Connectivity for All Subnets

To configure native IPv6 connectivity for all the subnets of the test lab network, complete the following steps:

1.On DNS1, type the netsh interface ipv6 show address command to obtain the public address assigned to the Local Area Connection interface.

2.On DNS1, use the DNS snap-in to remove the address (A) resource record named “ISATAP” from the testlab.microsoft.com forward lookup zone.

3.On ROUTER1, type the netsh interface ipv6 show address command to obtain the interface index of the ISATAP interface that is assigned the link-local address FE80::5EFE:10.0.2.1 and the link-local address of the interface named Subnet 2 Connection.

4.On ROUTER1, type the following commands: netsh interface isatap set router default

netsh interface ipv6 set interface ISATAPInterfaceIndex forwarding=disabled advertise=disabled

netsh interface ipv6 delete route 2001:db8:0:99::/64 ISATAPInterfaceIndex netsh interface ipv6 add dnsserver “Subnet 2 Connection” DNS1IPv6Address

ISATAPInterfaceIndex is the interface index of the ISATAP interface obtained in step 3. DNS1IPv6Address is the public address of DNS1 obtained in step 1.

5.On ROUTER2, type the netsh interface ipv6 show address command to obtain the link-local address of the interface named Subnet 2 Connection.

450Understanding IPv6, Second Edition

6.On ROUTER1, type the following commands:

netsh interface ipv6 set interface “Subnet 2 Connection” forwarding=enabled advertise=enabled

netsh interface ipv6 add route 2001:db8:0:2::/64 “Subnet 2 Connection” publish=yes

netsh interface ipv6 delete route ::/0 “Subnet 2 Connection”

netsh interface ipv6 add route ::/0 “Subnet 2 Connection”

ROUTER2AddressOnSubnet2 publish=yes

netsh interface ipv6 add dnsserver “Subnet 1 Connection” DNS1IPv6Address

ROUTER2AddressOnSubnet2 is the link-local address assigned to ROUTER2’s Subnet 2 Connection obtained in step 5.

7.On ROUTER2, type the following commands:

netsh interface ipv6 set interface “Subnet 2 Connection” forwarding=enabled advertise=enabled

netsh interface ipv6 set interface “Subnet 3 Connection” forwarding=enabled advertise=enabled

netsh interface ipv6 add route 2001:db8:0:2::/64 “Subnet 2 Connection” publish=yes

netsh interface ipv6 add route 2001:db8:0:3::/64 “Subnet 3 Connection” publish=yes

netsh interface ipv6 add route ::/0 “Subnet 2 Connection”

ROUTER1AddressOnSubnet2 publish=yes

ROUTER1AddressOnSubnet2 is the link-local address assigned to ROUTER1’s Subnet 2 Connection obtained in step 3.

8.On CLIENT1, run the netsh interface ipv6 add dnsserver “Local Area Connection”

DNS1IPv6Address command.

9.From the Network Connections folder on CLIENT1, disable and then enable the Local Area Connection. This renews CLIENT1’s configuration.

10.On CLIENT1, type the netsh interface ipv6 show route command to view the new routes for 2001:DB8:0:1::/64, 2001:DB8:0:2::/64, and ::/0.

As described in Chapter 10, “IPv6 Routing,” the IPv6 protocol for Windows Server 2008 and Windows Vista advertises off-link prefixes using the Route Information option in Router Advertisement messages. These prefixes become routes in the routing table of the receiving host.

11.On CLIENT2, run the netsh interface ipv6 add dnsserver “Local Area Connection”

DNS1IPv6Address command.

Соседние файлы в папке Lecture 2_10