神州路由器与防火墙ospfv3路由配置

配置如下:

DCFW-1800(config)# interface e0/3

DCFW-1800(config-if-eth0/3)# zone untrust

DCFW-1800(config-if-eth0/3)# ipv6 enable

DCFW-1800(config-if-eth0/3)# ipv6 address 2001::1/64

DCFW-1800(config-if-eth0/3)# manage ping

RT-1_config#int g0/3

RT-1_config_g0/3#ipv6 enable

RT-1_config_g0/3#ipv6 address 2001::2/64

DCFW-1800# ping ipv6 2001::2

Sending ICMPv6 packets to 2001::2

Seq hop time(ms)

1 64 0.701

2 64 0.643

3 64 0.642

4 64 0.621

5 64 0.622

statistics:

5 packets sent, 5 received, 0% packet loss, time 3996ms

rtt min/avg/max/mdev = 0.621/0.645/0.701/0.043 ms

RT-1_config#ping6 2001::1

PING 2001::1 (2001::1): 56 data bytes

!!!

— 2001::1 ping6 statistics —

5 packets transmitted, 5 packets received, 0% packet loss

round-trip min/avg/max = 0/0/0 ms

RT-1_config#int l0

RT-1_config_l0#ipv6 enable

RT-1_config_l0#ipv6 address 2001:10:10:11::1/64

RT-1_config_l0#int l1

RT-1_config_l1#ipv6 address 2001:10:10:21::1/64

RT-1#show ipv6 int bri

GigaEthernet0/3 is up, line protocol is UP

FE80:5::203:FFF:FEDC:6CD4

2001::2

Loopback1 is up, line protocol is up

FE80:8::203:FFF:FEDC:6CD1

2001:10:10:21::1

Loopback0 is up, line protocol is up

FE80:A::203:FFF:FEDC:6CD1

2001:10:10:11::1

DCFW-1800(config)# interface loopback1

DCFW-1800(config-if-loo1)# zone trust

DCFW-1800(config-if-loo1)# manage ping

DCFW-1800(config-if-loo1)# manage http

DCFW-1800(config-if-loo1)# manage https

DCFW-1800(config-if-loo1)# ipv6 enable

DCFW-1800(config-if-loo1)# ipv6 address 2001:10:10:1::2/128

DCFW-1800(config-if-loo1)# interface loopback2

DCFW-1800(config-if-loo2)# zone trust

DCFW-1800(config-if-loo2)# ipv6 enable

DCFW-1800(config-if-loo2)# ipv6 address 2001:10:10:1::1/128

DCFW-1800(config-if-loo2)# manage ping

RT-1_config#ipv6 unicast-routing //全局开启ipv6 路由

RT-1_config#int l0

RT-1_config_l0#ipv6 enable

RT-1_config_l0#ipv6 address 2001:10:10:11::1/64

RT-1_config_l0#int l1

RT-1_config_l1#ipv6 enable

RT-1_config_l1#ipv6 address 2001:10:10:21::1/64

RT-2#show ipv6 int bri

GigaEthernet0/3 is down, line protocol is DOWN

FE80:5::203:FFF:FEDC:C054

2001::2

Loopback0 is up, line protocol is up

FE80:9::203:FFF:FEDC:C051

2001:10:10:11::1

Loopback1 is up, line protocol is up

FE80:A::203:FFF:FEDC:C051

2001:10:10:21::1

配置ospf v3

DCFW-1800(config)# ip vrouter trust-vr

DCFW-1800(config-rtr)# router-id 1.1.1.1

DCFW-1800(config-vrouter)# ipv6 router ospf

DCFW-1800(config)# interface loopback1

DCFW-1800(config-if-loo1)# ipv6 ospf area 0

DCFW-1800(config-if-loo1)# interface loopback2

DCFW-1800(config-if-loo2)# ipv6 ospf area 0

DCFW-1800(config-if-loo2)# interface e0/3

DCFW-1800(config-if-eth0/3)# ipv6 ospf area 0

RT-1_config#router ospfv3 1

RT-1_config#int g0/3

RT-1_config_g0/3#ipv6 ospf 1 area 0

RT-1_config_g0/3#interface l0

RT-1_config_l0#ipv6 ospf 1 area 0

RT1_config_l0#interface l1

RT-1_config_l1#ipv6 ospf 1 area 0

RT-1_config_l1#

验证:

DCFW-1800# show ipv6 route

Codes: K - kernel route, C - connected, S - static, R - RIPng, O - OSPFv3,

B - BGP, I - ISIS, A - AUTOCONF, H - HOST, > - selected route,

* - FIB route,

Routing Table for Virtual Router

C> 2001::/64

is directly connected, ethernet0/3

O 2001::/64

is directly connected, ethernet0/3 [110/1/1]

H> 2001::1/128

is local address, ethernet0/3 [0/0/1]

H> 2001:10:10:1::1/128

is local address, loopback2 [0/0/1]

H> 2001:10:10:1::2/128

is local address, loopback1 [0/0/1]

O> 2001:10:10:11::1/128

via FE80::203:FFF:FEDC:6CD4, ethernet0/3 [110/1/1]

O> 2001:10:10:21::1/128

via FE80::203:FFF:FEDC:6CD4, ethernet0/3 [110/1/1]

K> fe80::/10

is directly connected, null0

==============================================================================

DCFW-1800#

RT-1#show ipv6 route

Codes: C - Connected, L - Local, S - Static, R - Ripng, B - BGP, O - OSPF

ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2

OE1 - OSPF external type 1, OE2 - OSPF external type 2, OIA - OSPF inter

area

DHCP - DHCP type, L1 - IS-IS level-1, L2 - IS-IS level-2, IA - ISIS inter

level

VRF ID: 0

C 2001::/64[1]

is directly connected, C,GigaEthernet0/3

C 2001::2/128[1]

is directly connected, L,GigaEthernet0/3

O 2001:10:10:1::1/128[1]

[110,2] via fe80::203:fff:fea4:fc3(on GigaEthernet0/3)

O 2001:10:10:1::2/128[1]

[110,2] via fe80::203:fff:fea4:fc3(on GigaEthernet0/3)

C 2001:10:10:11::/64[1]

is directly connected, C,Loopback0

C 2001:10:10:11::1/128[1]

is directly connected, L,Loopback0

C 2001:10:10:21::/64[1]

is directly connected, C,Loopback1

C 2001:10:10:21::1/128[1]

is directly connected, L,Loopback1

C fe80::/64[1]

is directly connected, C,GigaEthernet0/3

C fe80::203:fff:fedc:6cd4/128[1]

is directly connected, L,GigaEthernet0/3

C fe80::/64[1]

is directly connected, C,Loopback0

C fe80::203:fff:fedc:6cd1/128[1]

is directly connected, L,Loopback0

C fe80::/64[1]

is directly connected, C,Loopback1

C fe80::203:fff:fedc:6cd1/128[1]

is directly connected, L,Loopback1

DCFW-1800# ping ipv6 2001:10:10:11::1

Sending ICMPv6 packets to 2001:10:10:11::1

Seq hop time(ms)

1 64 0.785

2 64 0.467

3 64 0.456

4 64 0.444

5 64 0.453

statistics:

5 packets sent, 5 received, 0% packet loss, time 3996ms

rtt min/avg/max/mdev = 0.444/0.521/0.785/0.132 ms

猜你喜欢

转载自blog.csdn.net/weixin_41687096/article/details/129850001