Implementing Ipv6 in The Enterprise Network: CCNP Route: Implementing Ip Routing
Implementing Ipv6 in The Enterprise Network: CCNP Route: Implementing Ip Routing
Implementing Ipv6 in The Enterprise Network: CCNP Route: Implementing Ip Routing
ROUTE v6 Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 1
Introducing IPv6
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 2
Introducing IPv6
The ability to scale networks for future demands requires a
limitless supply of IP addresses and improved mobility.
• IPv6 combines expanded addressing with a more efficient and
feature-rich header to meet these demands.
• While it has many similarities to IPv4, IPv6 satisfies the increasingly
complex requirements of hierarchical addressing that IPv4 does not
support.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 3
The Internet Is Growing …
In 2009, only 21% of the world population were connected.
• This adoption rate will increase as underdeveloped countries get
connected.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 4
Explosion of New IP-Enabled Devices
More and more IP-enabled devices are connecting.
• Devices include cell phones, consumer products (blue ray players,
TVs), etc.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 5
IP Address Depletion
All of this growth is causing the Internet to run out of public
IPv4 address.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 6
IPv4 Issues
In January 2010, only 10% of the public IPv4 addresses
remained unallocated.
• It is estimated that this pool will have exhausted by the late 2011.
Source: http://www.potaroo.net/tools/ipv4/
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 7
Other IPv4 Issues
Internet routing table expansion
• The Internet routing tables continue to grow which means Internet
core routers require more processing power, memory, and overhead.
Lack of true end-to-end model
• IPv4 networks typically use NAT as the solution to address depletion.
• However, NAT hides the true source address of traffic, which can
cause other issues.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 8
Features of IPv6
Larger address space
• IPv6 addresses are 128 bits, compared to IPv4’s 32 bits.
• There are enough IPv6 addresses to allocate more than the entire IPv4
Internet address space to everyone on the planet.
Elimination of public-to-private NAT
• End-to-end communication traceability is possible.
Elimination of broadcast addresses
• IPv6 now includes unicast, multicast, and anycast addresses.
Support for mobility and security
• Helps ensure compliance with mobile IP and IPsec standards.
Simplified header for improved router efficiency
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 9
IPv6 Address Types
Address Type Description Topology
“One to One”
• An address destined for a single interface.
Unicast • A packet sent to a unicast address is delivered to the
interface identified by that address.
“One to Many”
• An address for a set of interfaces (typically belonging
Multicast to different nodes).
• A packet sent to a multicast address will be delivered
to all interfaces identified by that address.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 10
IPv4 Header vs. IPv6 Header
• The IPv4 header has 20 octets containing • The IPv6 header has 40 octets containing
12 basic header fields. 8 fields.
• Three of these fields are identical in nature.
• Other fields serve similar functions as in IPv4.
• The remaining IPv4 fields no longer exist in IPv6.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 11
Protocol and Next Header Fields
In IPv4 the Protocol field is used to identify the next level
protocol (e.g., TCP, UDP, ICMP, …).
In IPv6, this field is called the "Next Header" field and
serves the same purpose.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 12
Extension Headers
The Next Header field
identifies what follows the
Destination Address field:
• Protocols:
• TCP (protocol 6)
• UDP (protocol 17)
• ICMPv6 (protocol 58)
• Extension header
(Optional) Extension Header(s)
Extension headers make
Data …
the handling of options
more efficient.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 13
Extension Headers
Multiple extension headers (called a chain) may be included
in an IPv6 packet.
• The number of extension headers is not fixed, so the total length of the
extension header chain is variable.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 14
Extension Header Chain Order
Process Next-header value
Extension Header
Order (protocol #)
1 Hop-by-hop options header 0
2 Destination options header 60
3 Routing header 43
4 Fragment header 44
Authentication header (AH) and ESP ESP = 50
5
header AH = 51
Upper-layer header:
TCP = 6
6 TCP
UDP = 17
UDP
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 15
MTU Discovery
IPv6 routers no longer perform fragmentation.
A discovery process is used to determine the optimum MTU
to use during a given session.
• In this discovery process, the source IPv6 device attempts to send a
packet at the size that is specified by the upper IP layers, for example,
the transport and application layers.
If the device receives an Internet Control Message Protocol
(ICMP) “packet too big” message, it retransmits the MTU
discover packet with a smaller MTU; this process is
repeated until the device receives a response that the
discover packet arrived intact.
The device then sets the MTU for the session.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 16
New IPv6 Features
Prefix renumbering
• IPv6 allows simplified mechanisms for address and prefix
renumbering.
Multiple addresses per interface
• An IPv6 interface can have multiple addresses.
Link-local addresses
• IPv6 link-local addresses are used as the next hop when IGPs are
exchanging routing updates.
Stateless autoconfiguration:
• DHCP is not required because an IPv6 device can automatically
assign itself a unique IPv6 link-local address.
Provider-dependent or provider-independent
addressing
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 17
Is IPv4 Obsolete?
IPv4 is in no danger of disappearing overnight.
• It will coexist with IPv6 and then gradually be replaced.
IPv6 provides many transition options including:
• Dual stack:
• Both IPv4 and IPv6 are configured and run simultaneously on the interface.
• IPv6-to-IPv4 (6to4) tunneling and IPv4-compatible tunneling.
• NAT protocol translation (NAT-PT) between IPv6 and IPv4.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 18
IPv6 Addressing Overview
IPv6 increases the number of address bits by a factor of 4,
from 32 to 128, providing a very large number of
addressable nodes.
IPv4 = 32 bits
11111111.11111111.11111111.11111111
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 19
IPv6 Address Allocation Process
The following displays how IPv6 global unicast addresses
are allocated by the IANA.
• Only a small portion (12.5%) of the IPv6 address space is being
allocated to the Registries in the range of 2001::/16.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 20
IPv6 Address Specifics
The 128-bit IPv6 address is written using hexadecimal
numbers.
• Specifically, it consists of 8, 16-bit segments separated with colons
between each set of four hex digits (16 bits).
• Referred to as “coloned hex” format.
• Hex digits are not case sensitive.
• The format is x:x:x:x:x:x:x:x, where x is a 16-bit hexadecimal
field therefore each x is representing four hexadecimal digits.
An example address is as follows:
• 2035:0001:2BC5:0000:0000:087C:0000:000A
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 21
Abbreviating IPv6 Addresses
Leading 0s within each set of four hexadecimal digits can
be omitted.
• 09C0 = 9C0
• 0000 = 0
A pair of colons (“::”) can be used, once within an address,
to represent any number (“a bunch”) of successive 0s.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 22
IPv6 Address Example
2031:0000:130F:0000:0000:09C0:876A:130B
2031:0000:130F:0000:0000:09C0:876A:130B
2031:0:130F:0:0:9C0:876A:130B
2031:0:130F::9C0:876A:130B
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 23
IPv6 Address Example
FF01:0000:0000:0000:0000:0000:0000:1
FF01:0:0:0:0:0:0:1 = FF01::1
E3D7:0000:0000:0000:51F4:00C8:C0A8:6420
= E3D7::51F4:C8:C0A8:6420
3FFE:0501:0008:0000:0260:97FF:FE40:EFAB
= 3FFE:501:8:0:260:97FF:FE40:EFAB
= 3FFE:501:8::260:97FF:FE40:EFAB
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 24
IPv6 Addressing in an Enterprise Network
An IPv6 address consists of two parts:
• A subnet prefix representing the network to which the interface is
connected.
• Usually 64-bits in length.
• An interface ID, sometimes called a local identifier or a token.
• Usually 64-bits in length.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 25
Subnet Prefix
IPv6 uses the “/prefix-length” CIDR notation to denote
how many bits in the IPv6 address represent the subnet.
The syntax is ipv6-address/prefix-length
• ipv6-address is the 128-bit IPv6 address
• /prefix-length is a decimal value representing how many of the
left most contiguous bits of the address comprise the prefix.
For example:
fec0:0:0:1::1234/64
is really
fec0:0000:0000:0001:0000:0000:0000:1234/64
• The first 64-bits (fec0:0000:0000:0001) forms the address prefix.
• The last 64-bits (0000:0000:0000:1234) forms the Interface ID.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 26
Subnet Prefix
The prefix length is almost always /64.
• However, IPv6 rules allow for either shorter or longer prefixes
• Although prefixes shorter than /64 can be assigned to a device (e.g., /
60), it is considered bad practice and has no real application.
Deploying a /64 IPv6 prefix on a device:
• Is pre-subscribed by RFC3177 (IAB/IESG Recommendations on IPv6
Address Allocations to Sites)
• Allows Stateless Address Auto Configuration (SLAAC) (RFC 2462)
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 27
Interface Identifiers
IPv6 addresses on a link must be unique.
• Although they all share the same 64-bit subnet prefix they are made
unique by the interface ID.
Because the prefix length is fixed and well-known (64-bits),
IPv6 hosts can automatically create a unique IPv6 address.
For example, the following Layer 2 protocols can
dynamically create the IPv6 address interface ID:
• Ethernet (using the EUI-64 format discussed later)
• PPP
• HDLC
• NBMA, Frame Relay
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 28
Special IPv6 Addresses
IPv6 Address Description
• All routes and used when specifying a default static
::/0 route.
• It is equivalent to the IPv4 quad-zero (0.0.0.0).
• Unspecified address and is initially assigned to a host
::/128
when it first resolves its local link address.
• Loopback address of local host.
::1/128
• Equivalent to 127.0.0.1 in IPv4.
• Link-local unicast address.
FE80::/10 • Similar to the Windows autoconfiguration IP address of
169.254.x.x.
FF00::/8 • Multicast addresses.
2000::/3 • Global unicast address.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 29
IPv6 Address Scopes
Address types have well-defined destination scopes:
• Link-local address
• Global unicast address
• Site-local address
Note:
• Site-Local Address are deprecated in RFC 3879.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 30
Site-Local Addresses - Deprecated
Site-local addresses allowed devices in the same
organization, or site, to exchange data.
• Site-local addresses start with the prefix FEC0::/10.
They are analogous to IPv4's private address classes.
• However, using them would also mean that NAT would be required
and addresses would again not be end-to-end.
Site-local addresses are no longer supported (deprecated)
by RFC 3879.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 31
Multiple IP Addresses per Interface
An interface can have multiple IPv6 addresses
simultaneously configured and enabled on it.
• However, it must have a link-local address.
Typically, an interface is assigned a link-local and one (or
more) global IPv6 address.
• For example, an Ethernet interface can have:
• Link-local address (e.g., FE80::21B:D5FF:FE5B:A408)
• Global unicast address (e.g., 2001:8:85A3:4289:21B:D5FF:FE5B:A408)
Note:
• An interface could also be configured to simultaneously support IPv4
and IPv6 addresses.
• This creates a “dual-stacked” interface which is discussed later.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 32
IPv6 Link-Local Address
Link-local addresses are used for automatic address
configuration, neighbor discovery, router discovery, and by
many routing protocols.
They are dynamically created using a link-local prefix of
FE80::/10 and a 64-bit interface identifier.
• Unique only on the link, and it is not routable off the link.
128 bits
/10 /64
FE80 Interface ID
1111 1110 1000 0000 0000 0000 ... 0000 0000 0000
FE80::/10
FE8 ou FE9 ou FEA ou FEB
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 33
IPv6 Link-Local Address
Link-local packets are unique only on the link, and are not
routable off the link.
• Packets with a link-local destination must stay on the link where they
have been generated.
• Routers that could forward them to other links are not allowed to do
so because there has been no verification of uniqueness outside the
context of the origin link.
128 bits
/10 /64
FE80 Interface ID
1111 1110 1000 0000 0000 0000 ... 0000 0000 0000
FE80::/10
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 34
IPv6 Link-Local Address
When communicating with a link-local address, the outgoing
interface must be specified because every interface is
connected to FE80::/10.
• For example, if you ping the neighbor’s link-local address, you will be
asked to input the interface from which you wish to ping.
128 bits
/10 /64
FE80 Interface ID
1111 1110 1000 0000 0000 0000 ... 0000 0000 0000
FE80::/10
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 35
IPv6 Link-Local Address Example
R1# show ipv6 interface loopback 100
Loopback100 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::222:55FF:FE18:7DE8
No Virtual link-local address(es):
Global unicast address(es):
2001:8:85A3:4290:222:55FF:FE18:7DE8, subnet is 2001:8:85A3:4290::/64 [EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF18:7DE8
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 31238)
Hosts use stateless autoconfig for addresses.
R1#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 36
IPv6 Global Unicast Address
A global unicast address is an IPv6 address from the global
public unicast prefix (2001::/16).
• The structure enables aggregation of routing prefixes to reduce the
number of routing table entries in the global routing table.
Global unicast addresses are aggregated upward through
organizations and eventually to the ISPs.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 37
IPv6 Global Unicast Address
The global unicast address typically consists of:
• A 48-bit global routing prefix
• A 16-bit subnet ID
• A 64-bit interface ID (typically in EUI-64 bit format discussed later).
Subnet
Global Routing Prefix ID Interface ID
Registry
ISP Prefix
Site Prefix 2000::/3
Subnet Prefix 0010 = 2
0011 = 3
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 38
IPv6 Global Unicast Address
The current IANA global routing prefix uses the range that
start with binary 0010 (2000::/3).
• Addresses with a prefix of 2000::/3 (001) to E000::/3 (111)
are required to have 64-bit interface IDs in the extended universal
identifier (EUI)-64 format.
Subnet
Global Routing Prefix ID Interface ID
Registry
ISP Prefix
Site Prefix
Subnet Prefix
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 39
IPv6 Global Unicast Address
The subnet ID can be used by an organization to create
their own local addressing hierarchy.
• This 16-bit field allows up to 65,536 individual subnets.
Subnet
Global Routing Prefix ID Interface ID
Registry
ISP Prefix
Site Prefix
Subnet Prefix
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 40
IPv6 Global Unicast Address Example
R1# show ipv6 interface loopback 100
Loopback100 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::222:55FF:FE18:7DE8
No Virtual link-local address(es):
Global unicast address(es):
2001:8:85A3:4290:222:55FF:FE18:7DE8, subnet is 2001:8:85A3:4290::/64 [EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF18:7DE8
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 31238)
Hosts use stateless autoconfig for addresses.
R1#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 41
IPv6 Multicast Address
Multicasting is at the core of many IPv6 functions and it is a
replacement for the broadcast address.
They are defined by the prefix FF00::/8.
• An interface may belong to any number of multicast groups.
128 bits
/8 /16
F F 0 0 Group ID
1111 1111 00xx xxxx
FF00::/8
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 42
IPv6 Multicast Address
The second octet of the address contains the prefix and
transient (lifetime) flags, and the scope of the multicast
address.
128 bits
/8 /16
F F 0 0 Group ID
1111 1111 00xx xxxx
Flags:
• P = Prefix for unicast-based assignments
Flags Scope • T = 0 if permanent, 1 if temporary
0 0 P T xxxx Scope:
• 1 (0001) = Node
8 bits • 2 (0010) = Link
• 5 (0101) = Site
• 8 (1000) = Organization
• E (1110) = Global
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 43
IPv6 Multicast Address
The multicast addresses FF00:: to FF0F:: have the T
flag set to 0 and are therefore permanent and reserved.
For example:
• A multicast address starting with FF02::/16 is a permanent address.
128 bits
/8 /16
F F 0 0 Group ID
1111 1111 00xx xxxx
Flags:
• P = Prefix for unicast-based assignments
Flags Scope • T = 0 if permanent, 1 if temporary
0 0 P T xxxx Scope:
• 1 (0001) = Node
8 bits • 2 (0010) = Link
• 5 (0101) = Site
• 8 (1000) = Organization
• E (1110) = Global
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 44
Reserved IPv6 Multicast Addresses
Reserved Multicast
Description
Address
FF02::1 • All nodes on a link (link-local scope).
FF02::2 • All routers on a link.
• All routing information protocol (RIP) routers on a
FF02::9
link.
• All solicited-node multicast addresses used for
host autoconfiguration and neighbor discovery
(similar to ARP in IPv4).
FF02::1:FFxx:xxxx
• The xx:xxxx is the far right 24 bits of the
corresponding unicast or anycast address of the
node.
FF05::101 • All Network Time Protocol (NTP) servers.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 45
IPv6 Multicast Address Example
R1# show ipv6 interface loopback 100
Loopback100 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::222:55FF:FE18:7DE8
No Virtual link-local address(es):
Global unicast address(es):
2001:8:85A3:4290:222:55FF:FE18:7DE8, subnet is 2001:8:85A3:4290::/64 [EUI]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF18:7DE8
MTU is 1514 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds (using 31238)
Hosts use stateless autoconfig for addresses.
R1#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 46
Solicited-Node Multicast Addresses
The solicited-node multicast address (FF02::1:FF) is used
for:
• Neighbor discovery (ND) process
• Stateless address autoconfiguration
The Neighbor discovery (ND) process is used to:
• Determine the local-link address of the neighbor.
• Determine the routers on the link and default route.
• Actively keep track of neighbor reachability.
• Send network information from routers to hosts
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 47
Neighbor Discovery ICMPv6 Packet Types
Neighbor Discovery uses four ICMPv6 packet types:
• Neighbor Solicitation and Neighbor Advertisement messages
• Router Solicitation and Router Advertisement messages
ICMPv6 Message Type Description
• Sent by a host to determine the link-layer address of a neighbor.
Neighbor 135 • Used to verify that a neighbor is still reachable.
Solicitation (NS) • An NS is also used for Duplicate Address Detection (DAD).
• A response to a NS message.
Neighbor 136 • A node may also send unsolicited NA to announce a link-layer
Advertisement (NA)
address change.
• RAs contain prefixes that are used for on-link determination or
address configuration, a suggested hop limit value, MTU value,
Router 134 etc.
Advertisement (RA) • RAs are sent either periodically, or in response to a RS
message.
• When a host is booting it send s out an RS requesting routers
Router Solicitation 133 to immediately generate an RA rather than wait for their next
(RS)
scheduled time.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 48
Neighbor Solicitation Example
A B
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 51
Solicited-Node Multicast Address Example
2001:DB8::500:AAAA:BBBB
R2
2001:DB8::500:1234:5678
R1
2001:DB8::501:AAAA:BBBB
R3
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 52
Solicited-Node Multicast Address Example
2001:DB8::500:AAAA:BBBB
R2
2001:DB8::500:1234:5678
R1
2001:DB8::501:AAAA:BBBB
R3
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 53
Solicited-Node Multicast Address Example
2001:DB8::500:AAAA:BBBB
R2
2001:DB8::500:1234:5678
R1
2001:DB8::501:AAAA:BBBB
R3
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 54
Stateless Autoconfiguration
A
R1
Every IPv6 system (other than routers) is able to build its own unicast
global address.
• Enables new devices (e.g., cellular phones, wireless devices, home
appliances, and home networks) to easily connect to the Internet.
Stateless autoconfiguration uses the information in RA messages to
configure hosts automatically.
RAs are sent periodically, but a node can send out RS messages when it
boots so that it doesn’t have to wait for the next RA.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 55
Stateless Autoconfiguration
A
R1
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 56
Stateless Autoconfiguration
A B
The host now creates a link-local address and solicited-node address using the
RA supplied by the router.
Next it needs to verify that it’s new IPv6 address is unique on the link using the
Duplicate Address Detection (DAD) process.
• DAD is used during the autoconfiguration process to ensure that no other device is
using the autoconfiguration address.
During the DAD phase, Host A sends an NS to query if another node on the link
has the same IPv6 address.
• If a node responds to the request, it means that the IPv6 address is already in use, and
Host A needs to be manually configured.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 57
Configuring and
Verifying IPv6
Unicast
Addresses
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 58
Verifying IPv6
Command Description
show ipv6 neighbors Displays IPv6 neighbor discovery cache information for
[interface-type the specified neighbors.
interface-number | ipv6-
address | ipv6-hostname • The optional statistics parameter displays
| statistics] neighbor discovery cache statistics.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 59
Troubleshooting IPv6
Command Description
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 60
Enable IPv6 Routing
Enable the forwarding of IPv6 unicast datagrams.
Router(config)#
ipv6 unicast-routing
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 61
Enable CEF for IPv6
Enable Cisco Express Forwarding (CEF) for IPv6 (CEFv6).
Router(config)#
ipv6 cef
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 62
Configuring IPv6 Unicast Addresses
IPv6 Unicast
Address Assignment
Automatically created
(EUI-64 format) if a Stateless
IPv6 Address global unicast IPv6 IPv6 Address
Autoconfiguration
address is configured
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 63
Configuring IPv6 Unicast Addresses
IPv6 Unicast
Address Assignment
Automatically created
(EUI-64 format) if a Stateless
IPv6 Address IPv6 Address
global unicast IPv6 Autoconfiguration
address is configured
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 64
Enable IPv6 on an Interface
Configure an IPv6 address and prefix.
Router(config-if)#
ipv6 address address/prefix-length [link-local | eui-64]
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 65
Assigning a Link-Local Address
.2
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 66
Assigning a Static Link-Local Address
FE80::1 .2
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 67
Assigning a Static Global Unicast Address
FE80::1 .2
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 68
Assigning a Static Global Unicast Address
FE80::1 .2
R1 R2
R1# config t
R1(config)# int fa0/1
R1(config-if)# ipv6 add 2001::/64 eui-64
R1(config-if)# do show ipv6 interface fa0/1
FastEthernet0/1 is administratively down, line protocol is down
IPv6 is enabled, link-local address is FE80::211:92FF:FE54:E2A1 [TEN]
Global unicast address(es):
2001::211:92FF:FE54:E2A1, subnet is 2001::/64 [EUI/TEN]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF54:E2A1
MTU is 1500 bytes
<output omitted>
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 70
Assigning Multiple IPv6 Addresses
FE80::1
2001:1::1/64 .2
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 71
Assigning Multiple IPv6 Addresses
10.10.10.1/24
FE80::1
2001:1::1/64
2001:2::1/64 .2
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 72
Ethernet EUI-64 Address
EUI-64 IPv6 addresses are addresses where the first 64
bits are the network portion of the address and specified,
and the interface ID (second 64-bits) are the host portion of
the address and automatically generated by the router.
The interface ID on an Ethernet link is based on the 48-bit
MAC address of the interface with an additional 16-bit
0xFFFE inserted in the middle of the MAC address.
• This creates an extended unique identifier referred to as the EUI-64
format.
• The seventh bit in the high-order byte is set to 1 to indicate the
uniqueness of the interface ID.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 73
EUI-64 to IPv6 Interface Identifier
The EUI-64 standard explains how it inserts a 16-bit
0xFFFE in the middle at the 24th bit of the MAC address to
create a unique 64-bit interface identifier.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 74
Configuring an EUI-64 IPv6 Address
R1(config)# interface loopback 100
R1(config-if)# ipv6 address 2001:8:85a3:4289::/64 eui-64
<output omitted>
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 75
Configuring IPv6 Unicast Addresses
IPv6 Unicast
Address Assignment
Automatically created
(EUI-64 format) if a Stateless
IPv6 Address IPv6 Address
global unicast IPv6 Autoconfiguration
address is configured
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 76
Enable IP Unnumbered
Enable IPv6 on an interface without an explicit IPv6 address.
Router(config-if)#
ipv6 unnumbered interface-type interface-number
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 77
Assigning IPv6 Unnumbered Interfaces
Lo10: 2001:1::10/64
S0/0/0
R1 R2
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 78
Assigning IPv6 Unnumbered Interfaces
Lo10: 2001:1::10/64
S0/0/0
R1 R2
The output confirms that the Serial 0/0/0 interface uses the IPv6
address from interface loopback 10.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 79
Configuring IPv6 Unicast Addresses
IPv6 Unicast
Address Assignment
Automatically created
(EUI-64 format) if a Stateless
IPv6 Address IPv6 Address
global unicast IPv6 Autoconfiguration
address is configured
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 80
Enable Stateless Autoconfiguration
Enable the automatic configuration of IPv6 addresses.
Router(config-if)#
ipv6 address autoconfig [default]
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 81
Routing IPv6
Traffic
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 82
Configuring Static
Routing
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 83
Static Routing
Configured in the same way as IPv4.
There is an IPv6-specific requirement per RFC 2461.
• A router must be able to determine the link-local address of each of its
neighboring routers to ensure that the target address of a redirect
message identifies the neighbor router by its link-local address.
• This requirement basically means that using a global unicast address
as a next-hop address with routing is not recommended.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 84
Static Routing
Configure an IPv6 static route.
Router(config)#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 85
ipv6 route Command Parameters
Parameter Description
ipv6-prefix/prefix- The IPv6 network that is the destination of the static route, and its prefix
length length.
ipv6-address The IPv6 address of the next hop that can be used to reach the
specified network.
interface-type Specifies interface through which the destination network can be
interface-number reached.
administrative- Administrative distance; the default value is 1, which gives static routes
distance precedence over any other type of route except connected routes.
administrative- The distance used when selecting this route for multicast Reverse Path
multicast-distance Forwarding (RPF).
unicast Specifies a route that must not be used in multicast RPF selection.
multicast Specifies a route that must not be populated in the unicast RIB.
next-hop-address Address of the next hop that can be used to reach the specified network.
tag tag Tag value that can be used as a “match” value for controlling
redistribution via route maps.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 86
Types of Static Routes
Directly attached IPv6 static route:
• Created using only the outgoing interface.
• The specified interface must be up and have IPv6 enabled.
• For example, to specify that 2001:CC1E::/32 is reachable via the
Serial 0/0/0 interface:
• ipv6 route 2001:CC1E::/32 serial 0/0/0
Recursive static route:
• Created using only the next-hop address parameter.
• The router must refer to its routing table a second time to determine
the interface to use to reach the next-hop address.
• For example, to specify that 2001:CC1E::/32 is reachable via the
neighbor with address 2001:12::1:
• ipv6 route 2001:CC1E::/32 2001:12::1
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 87
Types of Static Routes
Fully specified static route:
• Includes both the outgoing interface and the next hop address.
• Used on multiaccess interfaces (Ethernet) with multiple devices.
• For example, the command to specify that 2001:CC1E::/32 is
reachable out interface Fa0/0 to the neighbor at 2001:12::1 is:
ipv6 route 2001:CC1E::/32 serial 0/0/0 2001:12::1
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 88
Static Route Example
2001:1::1/64 2001:1::2/64
Lo100: 10::10:1/64 Lo102: 13::13:1/64
R1 S0/1/0 R2
S0/1/0
Lo101: 11::11:1/64
In this example topology, assume that R1 is the central site router and
R2 is a branch site router.
A static route to the 13::13:1/64 network must be configured on R1.
As well, a default static route will be configured on R2 to reach all other
networks.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 89
Static Route Example
2001:1::1/64 2001:1::2/64
Lo100: 10::10:1/64 Lo102: 13::13:1/64
R1 S0/1/0 R2
S0/1/0
Lo101: 11::11:1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 90
Static Route Example
2001:1::1/64 2001:1::2/64
Lo100: 10::10:1/64 Lo102: 13::13:1/64
R1 S0/1/0 R2
S0/1/0
Lo101: 11::11:1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 91
Static Route Example
2001:1::1/64 2001:1::2/64
Lo100: 10::10:1/64 Lo102: 13::13:1/64
R1 S0/1/0 R2
S0/1/0
Lo101: 11::11:1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 92
RIPng
Routing Information Protocol next generation (RIPng, RFC
2080) is a distance vector routing protocol for IPv6.
• It’s based on IPv4 RIP version 2 (RIPv2).
It is similar to RIPv2 because:
• The hop limit is still 15.
• The administrative distance is still 120.
• It still uses split horizon and poison reverse to prevent routing loops.
Unlike RIPv2, RIPng is:
• Used to transport IPv6 networks and prefixes.
• It uses an IPv6 prefix and a next-hop IPv6 address.
• Uses UDP port 520 (instead of UDP port 521).
• Uses the multicast group FF02::9 (instead of 224.0.0.9).
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 93
Enable RIPng on an Interface
Enable an IPv6 RIP process on an interface.
Router(config-if)#
ipv6 rip name enable
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 94
Enable RIPng
Configure the IPv6 RIP routing process.
Router(config)#
ipv6 router rip name
R1(config-rtr)#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 95
Disable Split Horizon
Disable the split horizon route loop prevention feature.
Router(config-rtr)#
no split-horizon
R1(config-rtr)# no split-horizon
R1(config-rtr)#
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 96
Verifying and Troubleshooting RIPng
Command Description
debug ipv6 rip Displays IPv6 RIPng routing transaction debug messages.
[interface-type The interface-type interface-number option can
interface-number] be used to display interface specific debug messages.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 97
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 98
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 99
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 100
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 101
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 102
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 103
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 104
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
The next step is to enable IPv6 routing and then enable the respective
serial interfaces for RIPng.
• The loopback interfaces of R2 and R3 will also have to be configured.
• Configuring the interface for RIPng automatically creates the RIPng process.
The serial interface of R1 will also require that the split horizon feature
be disabled.
• Otherwise advertisements from R2 would not be propagated to R3, and R3
routes would not be propagated to R2.
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 105
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 106
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 107
Configuring RIPng Example
R1
S0/0/0 2001:12::1/64
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 108
Chapter 8
© 2007 – 2013, Cisco Systems, Inc. All rights reserved. Cisco Public 109