The key takeaways are troubleshooting approaches for IPv6 networks including routing, tunnels, FHRP, and different tunneling technologies. It also discusses prerequisites like IPv6 addressing and networking concepts.
The main topics covered include troubleshooting IPv6 routing protocols like OSPFv3, EIGRPv6, mBGP, tunnels, 6PE, 6VPE. It also discusses service level agreements for availability and definitions for troubleshooting.
Some prerequisites discussed are OSI stack, IPv6 addressing, IPv6 routing, tunneling concepts, TCP, UDP, IPv4 fundamentals. A solid understanding of these topics is required for effective IPv6 network troubleshooting.
2012 Cisco and/or its affiliates. All rights reserved.
BRKRST-2302 Cisco Public
IPv6 Troubleshooting BRKRST-2302 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Agenda Definition Service Level Agreement 5 9s 4 9s 3 9s IPv6 addressing refresher Troubleshooting approach in LAN/WAN environment Troubleshooting FHRP Troubleshooting IPv6 routingOSPFv3,EIGRPv6,mBGP Troubleshooting tunnels Troubleshooting 6PE,6VPE 2 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Definition and Purpose A systematic search for the source of a problem so that it can be solved To ensure that the system is available and operating in an effective and efficient manner as required in accomplishing its specified objective 3 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Prerequisites OSI stack Hexadecimal numbering system0 through F Example A is decimal 10 IPv6 Addressing IPv6 Routing Tunneling TCP UDP IPv4 IPv6 Data Link (Ethernet) 0x0800 0x86dd Protocol ID 4 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Availability Down time / yr. Down time /month Down time / week 90% ("one nine") 36.5 days 72 hours 16.8 hours 99.9% ("three nines") 8.76 hours 43.2 minutes 10.1 minutes 99.95% 4.38 hours 21.56 minutes 5.04 minutes 99.99% ("four nines") 52.56 minutes 4.32 minutes 1.01 minutes 99.999% ("five nines") 5.26 minutes 25.9 seconds 6.05 seconds 99.9999% ("six nines") 31.5 seconds 2.59 seconds 0.605 seconds High Availability - challenges http://en.wikipedia.org/wiki/High_availability 5 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Back 2 the Hex - IPv6 addressing refresher 6 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Aggregatable Global Unicast Address Allocation Mechanism The strip from 0000:: to ffff:: The first 16 bits of the total 128 bits
Typical site prefix allocation from ISP Allocation from Registries to ISP ARIN APNIC AFRINIC LACNIC RIPE Note Enterprises can get PI prefix from ARIN 7 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv6 Site Addressing Common Misconception ExampleAllocated prefix is 2001:0db8:1234::/48 That means 16 bits are available to generate 64 K subnets from the allocated prefix
You have 2001:0db8:1234:0001::/64, 2001:0db8:1234:0002::/64, etc as your subnet prefixes 2001:0db8:1234::/48 - 2001:0db8:1234:0000::/64 to 2001:0db8:1234:ffff::/64
65535 subnets Not hosts 8 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public A Typical IPv6 Interface on a Router R1#sh ipv6 interface Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:A00 Global unicast address(es):
2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 J oined group address(es): FF02::1 FF02::2 FF02::1:FF00:A00 All Nodes Multicast AddressNode scope All Routers Multicast AddressLink scope Solicited Node Multicast Address Valid only on the link Reachable Globally 9 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Dual StackIPv4 and IPv6
IPv6-router#sh run int gigabitEthernet 2/2 Building configuration...
interface GigabitEthernet2/2 ip address 192.168.1.1 255.0.0.0 ipv6 address 2001:DB8:1234:5678::/64 eui-64 end Nodes supporting IPv4 and IPv6 is Dual Stack Note Nexus OS follows secondary address CLI for now. Multiple addresses can be assigned to a single interface. In IPv6 no concept of secondary address. 10 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Let The Trouble Shooting Begin
Connectivity 11 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public A Peek Inside the IPv6 Basic Header Next Header Hop Limit Flow Label Traffic Class Destination Address Source Address Payload Length Version R10#debug ipv6 icmp
R10#ping 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200, timeout is 2 seconds !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 40/53/72 ms
Mar 23 20:31:28.495: IPv6: nexthop FE80::A8BB:CCFF:FE00:1400, Mar 23 20:31:28.495: IPV6: source 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 (local) Mar 23 20:31:28.495: dest 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200 (Ethernet0/0) Mar 23 20:31:28.495: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating 12 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ICMPv6 ND Message Types Captured Router solicitation (ICMPv6 type 133) Mar 24 23:07:32.721: ICMPv6-ND: Received RS on Ethernet1/0 from FE80::A8BB:CCFF:FE00:2801 Router advertisement (ICMPv6 type 134) Mar 24 22:59:17.205: ICMPv6-ND: Sending RA to FF02::1 on Ethernet1/0 Neighbor solicitation (ICMPv6 type 135) Mar 24 22:58:29.417: ICMPv6-ND: Received NS for FE80::A8BB:CCFF:FE00:A00 on Ethernet0/0 from FE80::A8BB:CCFF:FE00:1400 Neighbor advertisement (ICMPv6 type 136) Mar 24 22:58:29.417: ICMPv6-ND: Sending NA for FE80::A8BB:CCFF:FE00:A00 on Ethernet0/0 13 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Stateless Address Assignment Through RA (Router Advertisement) R20#sh run Building configuration...
Current configuration : 89 bytes ! interface Ethernet0/0 no ip address ipv6 address 2001:DB8:1234:5678::/64 eui-64 end R10#sh run Building configuration...
Current configuration interface Ethernet0/0 no ip address ipv6 address autoconfig ipv6 enable end
What is missing Router R20 Will Not Send Any Prefix and as a Result Router R10 Will Not Receive Any Global Prefix R20 R10 14 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv6 Unicast Address Configuration 1. Configure IPv6 unicast routing globally IPv6-router(config)#ipv6 unicast-routing 2. On the interface, a global unicast address can be configured using stateless (router advertisements), stateful (DHCP) or administrator assigned
stateless IPv6-router(config-if)#ipv6 address autoconfig admin assigned IPv6-router(config)#int gigabitEthernet 2/2 IPv6-router(config-if)#ipv6 address 2001:0db8:1234:5678::/64 eui-64 IPv6-router(config-if)#end Yes, you have to configure Required Steps 15 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Debug Captures of SLAAC R10# *Feb 2 22:18:25.455: ICMPv6-ND: Sending RS on Ethernet0/0 *Feb 2 22:18:25.475: ICMPv6-ND: Received RA from FE80::A8BB:CCFF:FE00:1400 on Ethernet0/0 *Feb 2 22:18:25.475: ICMPv6-ND: Sending NS for 2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 on Ethernet0/0 *Feb 2 22:18:25.475: ICMPv6-ND: Autoconfiguring 2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 on Ethernet0/0 R20# *Feb 2 22:14:01.107: ICMPv6-ND: Sending RA to FF02::1 on Ethernet0/0
*Feb 2 22:14:01.107: ICMPv6-ND: MTU =1500
*Feb 2 22:14:01.107: ICMPv6-ND: prefix = 2001:DB8:1234:5678::/64 onlink autoconfig PPPOE - IPv6CP does not support negotiating addresses. you have to use SLAAC or DHCPv6 16 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Interface Now Has a Global Address R10#show ipv6 interface ethernet 0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:A00 Global unicast address(es): 2001:DB8:1234:5678:A8BB:CCFF:FE00:A00, subnet is 2001:DB8:1234:5678::/64 [PRE] J oined group address(es): FF02::1 FF02::2 FF02::1:FF00:A00 MTU is 1500 bytes ICMP error messages limited to one every 100 milliseconds ICMP redirects are enabled ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 200 seconds ND router advertisements live for 1800 seconds Hosts use stateless autoconfig for addresses. On P2P serial links, when looped DAD kicks in and interface does not process IPv6 packets. You may disable DAD to get around 17 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public /64 Requirement for autoconfig R10# Mar 17 19:28:45.119: ICMPv6-ND: Sending RA to FF02::1 on Ethernet1/0 Mar 17 19:28:45.119: ICMPv6-ND: MTU =1500 Mar 17 19:28:45.119: ICMPv6-ND: prefix =2001:DB8:1040:1040::/96 onlink autoconfig
*Mar 1 18:28:24.775: ICMPv6: Received ICMPv6 packet from FE80::A8BB:CCFF:FE00:A01, type 134
R40#show ipv6 interface eth 1/0 Ethernet1/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:2801 No Virtual link-local address(es): No global unicast address is configured
RA R10 e1/0 e1/0 R40 18 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public /64 Requirement for autoconfig R10#sh run int eth 1/0 Building configuration...
interface Ethernet1/0 no ip address no ip directed-broadcast ipv6 address 2001:DB8:1040:1040::/96 end R10(config-if)#ipv6 address 2001:DB8:1040:1040::/64 eui
R10(config-if)# Mar 17 19:37:44.795: ICMPv6-ND: Adding prefix 2001:DB8:1040:1040::/64 to Ethernet1/0 Mar 17 19:37:44.795: ICMPv6-ND: Sending NS for 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 on Ethernet1/0 Mar 17 19:37:45.815: ICMPv6-ND: DAD: 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 is unique. Mar 17 19:37:45.815: ICMPv6-ND: Sending NA for 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01 on Ethernet1/0 Mar 17 19:37:45.815: ICMPv6-ND: Address 2001:DB8:1040:1040:A8BB:CCFF:FE00:A01/64 is up on Ethernet1/0
ICMPv6 Type 135 R40# *Mar 1 18:43:56.427: ICMPv6: Received ICMPv6 packet from FE80::A8BB:CCFF:FE00:1400, type 134 R40#show ipv6 interface eth1/0 Ethernet1/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:2801 No Virtual link-local address(es): Global unicast address(es): 2001:DB8:1040:1040:A8BB:CCFF:FE00:2801, subnet is 2001:DB8:1040:1040::/64 R10 e1/0 e1/0 R40 19 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Neighbor Relationship Using Link Local Addresses R20#sh ipv6 routers Router FE80::A8BB:CCFF:FE00:A00 on Ethernet0/0, last update 1 min Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1500 Reachable time 0 msec, Retransmit time 0 msec Router FE80::A8BB:CCFF:FE00:2800 on Ethernet0/0, last update 1 min Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0, MTU=1500 Reachable time 0 msec, Retransmit time 0 msec R20# 20 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Neighbor cache 21 Router#show ipv6 neighbors ethernet 2
2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public show ipv6 neighbors Age
Time (in minutes) since the address was confirmed to be reachable. A hyphen (-) indicates a static entry.
Link-layer Addr
MAC address. If the address is unknown, a hyphen (-) is displayed.
State
The state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache:
22 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public show ipv6 neighbors (continued) INCMP (Incomplete)Address resolution is being performed on the entry. A neighbor solicitation message has been sent to the solicited-node multicast address of the target, but the corresponding neighbor advertisement message has not yet been received.
REACH (Reachable)Positive confirmation was received within the last ReachableTime milliseconds that the forward path to the neighbor was functioning properly. While in REACH state, the device takes no special action as packets are sent.
STALEMore than ReachableTime milliseconds have elapsed since the last positive confirmation was received that the forward path was functioning properly. While in STALE state, the device takes no action until a packet is sent.
23 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Show ipv6 neighbors (continued) DELAYMore than ReachableTime milliseconds have elapsed since the last positive confirmation was received that the forward path was functioning properly. A packet was sent within the last DELAY_FIRST_PROBE_TIME seconds. If no reachability confirmation is received within DELAY_FIRST_PROBE_TIME seconds of entering the DELAY state, send a neighbor solicitation message and change the state to PROBE.
PROBEA reachability confirmation is actively sought by resending neighbor solicitation messages every RetransTimer milliseconds until a reachability confirmation is received
????Unknown state.
24 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Show ipv6 neighbors (static entries) 25 Following are the possible states for static entries in the IPv6 neighbor discovery cache:
INCMP (Incomplete)The interface for this entry is down.
REACH (Reachable)The interface for this entry is up.
Note Reachability detection is not applied to static entries in the IPv6 neighbor discovery cache; therefore, the descriptions for the INCMP (Incomplete) and REACH (Reachable) states are different for dynamic and static cache entries. 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Neighbor stats = arp sum R10#sh ipv6 neigh stat IPv6 ND Statistics Entries 1, High-water 2, Gleaned 0, Scavenged 1, Static 0 Entry States INCMP 0 REACH 1 STALE 0 GLEAN 0 DELAY 0 PROBE 0 Resolutions Requested 2, timeouts 0, resolved 1, failed 0 In-progress 0, High-water 1, Throttled 0, Data discards 0 NUD Requested 0, timeouts 0, resolved 0, failed 0 in-progress 1, high-water 2, throttled 0, current queue 0, queue high-water 0 26 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Good Neighbors 27 Nx7010-#show ipv6 neighbor vrf CiscoLive_2012
Flags: #- Adjacencies Throttled for Glean G - Adjacencies of vPC peer with G/W bit
IPv6 Adjacency Table for VRF CiscoLive_2012 Total number of entries: 10 Address Age MAC Address Pref Source Interface fe80::222:55ff:fe79:2c42 2d02h 0022.5579.1c42 50 icmpv6 Vlan351 fe80::20c:bdff:fe02:abf1 1d21h 000c.bd02.abf1 50 icmpv6 Vlan201 2106:abbc:d00d:801::2 2d02h 0022.4579.1c42 50 icmpv6 Vlan501 For cache use
N7K-7009-3#show ipv6 icmp neighbor
Flags: +- Adjacencies synced via CFSoE #- Adjacencies Throttled for Glean
ICMPv6 Adjacency Table for VRF default Address Age MAC Address State Interface
2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Common issue Router Hardening ? 28 6CE_1#show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 - INCMP Et0/0
6VPE_1#sh run int eth 0/0 Building configuration...
Current configuration : 187 bytes ! interface Ethernet0/0 no ip address ipv6 address 2001:DB8:1234:5678::/64 eui-64 ipv6 traffic-filter ciscolive2012 in ipv6 traffic-filter ciscolive2012 out ipv6 nd ra suppress End
2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ICMPv6 needs free but controlled flow 29 6VPE_1#show ipv6 access-list IPv6 access list ciscolive2012 deny icmp any any (114 matches) sequence 50 permit ipv6 any any (3 matches) sequence 60
6CE_1#
*Mar 29 19:00:12.415: ICMPv6: Received ICMP unreachable code 1 from FE80::A8BB:CCFF:FE00:1400
6VPE_1(config-ipv6-acl)#no deny icmp any any
6CE_1#show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 aabb.cc00.1400 REACH Et0/0 FE80::A8BB:CCFF:FE00:1400 0 aabb.cc00.1400 REACH Et0/0 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Testing Connectivity on Link Local Address Directly connected IPv6 hosts do not need global unicast prefixes assigned and can talk to each other on link local addresses (FE80::/10). However, an output interface needs to be specified as all the interfaces have the same fe80::/10 prefix FE80::A8BB:CCFF:FE00:A00 FE80::A8BB:CCFF:FE00:1400 R1#ping FE80::A8BB:CCFF:FE00:1400 Output Interface: ethernet0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FE00:1400, timeout is 2 seconds: Packet sent with a source address of FE80::A8BB:CCFF:FE00:A00 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =0/1/4 ms R1# R2 No packet loss as in IPv4. FF02:0:0:0:0:1:FF/104 based Neighbor discovery R1 30 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Testing Connectivity on Global Prefixes Global prefixes reachability does not need output interface specified R1 R2 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 2001:DB8:1234:5678:A8BB:CCFF:FE00:A00 R1#ping 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =8/12/32 ms R1# "Unreach" counter corresponds to "Destination Unreachable Message" 31 R1 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Testing Connectivity on Global Prefixes IPv6: Packets addressed to unused addresses in P2P links are pingponged) R1 R2 ping-pong issue identified in RFC 6164. for XR See CSCtf64096 . IOS/XE are fine. /127 issue :0 and :1 are the addresses Not :1 and :2 32 /126 issue 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Anycast Prefixes R10 R20 R30 R20#sh run int eth 0/0 Building configuration...
Anycast suffix required Anycast address will never be the source. Assigned on Routers only 33 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Anycast Behavior R10#ping 2001:DB8:1230:1230::
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =20/44/132 ms R10# R10#ping 2001:DB8:1230:1230:: Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds: ....! Success rate is 20 percent (1/5), round-trip min/avg/max =1060/1060/1060 ms R10#ping 2001:DB8:1230:1230:: Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1230:1230::, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =20/45/128 ms R10# R10 R20 R30 Initially only R30 responds R20 responds only after R30 fails to Neighbor Discovery Based in LAN 34 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Anycast Interfaces back to back 35 6CE_1#sh run int eth 0/0 Building configuration...
Current configuration : 90 bytes ! interface Ethernet0/0 no ip address ipv6 address 2001:DB8:1234:5678::/64 anycast end 6VPE_1#show ipv6 interface Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:1400 No Virtual link-local address(es): Global unicast address(es): 2001:DB8:1234:5678::, subnet is 2001:DB8:1234:5678::/64 [ANY] ND DAD is enabled, number of DAD attempts: 1 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Anycast Neighbor Cache struggle 36 6CE_1#show ipv6 neighbors IPv6 Address Link-layer Addr State Interface 2001:DB8:1234:5678:A8BB:CCFF:FE00:1400 0 - INCMP Et0/0
6CE_1#show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface FE80::A8BB:CCFF:FE00:1400 7 aabb.cc00.1400 STALE Et0/0
2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public FHRP Diving Catches 37 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public FHRP: HSRP The Required Steps Gateway R10 R20 IPv6 hosts learn of available IPv6 routers through IPv6 neighbor discovery RA messages. These are multicast periodically, or may be solicited by hosts. HSRP is designed to provide only a virtual first hop for IPv6 hosts. R10(config-if)#standby ipv6 ? X:X:X:X::X IPv6 link-local address autoconfig Obtain address using autoconfiguration
R10(config-if)#standby ipv6 FE80::A8BB:CCFF:FE00:A00 % HSRP version 2 is required for IPv6 support R10(config-if)#standby ipv6 FE80::A8BB:CCFF:FE00:A00 % Address already in-use
Use a different Link Local address or use the autoconfig option 38 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public FHRP: HSRP R10 R20 R10#sh run int eth 0/0 Building configuration...
Current configuration : 191 bytes ! interface Ethernet0/0 ipv6 address 2001:DB8:1230:1230::/64 eui-64 ipv6 enable standby version 2 standby 0 ipv6 autoconfig standby 0 priority 200 standby 0 preempt end
R20#sh run int eth 0/0 Building configuration...
Current configuration : 191 bytes ! interface Ethernet0/0 no ip address ipv6 address 2001:DB8:1230:1230::/64 eui-64 ipv6 enable standby version 2 standby 0 ipv6 autoconfig standby 0 priority 150 standby 0 preempt end
R10(config-if)# 00:11:40: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Speak ->Standby 00:11:40: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Standby ->Active Gateway 39 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public R10#show standby Ethernet0/0 - Group 0 (version 2) State is Active 4 state changes, last state change 01:00:16 Virtual IP address is FE80::5:73FF:FEA0:0 Active virtual MAC address is 0005.73a0.0000 Local virtual MAC address is 0005.73a0.0000 (v2 IPv6 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.820 secs Preemption enabled Active router is local Standby router is FE80::A8BB:CCFF:FE00:1400, priority 150 (expires in 8.920 sec) Priority 200 (configured 200) IP redundancy name is "hsrp-Et0/0-0" (default) FHRP: HSRP Validation R10 R20 Gateway 40 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public FHRP: HSRP Validation R10 R20 R30#ping ipv6 Target IPv6 address: FE80::5:73FF:FEA0:0 Repeat count [5]: 10000 Datagram size [100]: Timeout in seconds [2]: Extended commands? [no]: Sweep range of sizes? [no]: Output Interface: ethernet0/0 Type escape sequence to abort. Sending 10000, 100-byte ICMP Echos to FE80::5:73FF:FEA0:0, timeout is 2 seconds: Packet sent with a source address of FE80::A8BB:CCFF:FE00:1E00 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! R10(config)#int eth 0/0 R10(config-if)#shut R10(config-if)# 00:25:42: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Active ->Init R10(config-if)# 00:25:44: %LINK-5-CHANGED: Interface Ethernet0/0, changed state to administratively down 00:25:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to down R10(config-if)#no shut R10(config-if)# 00:25:58: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up 00:25:59: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up 00:26:00: %HSRP-5-STATECHANGE: Ethernet0/0 Grp 0 state Listen ->Active
Virtual IPv6 address Gateway Global VIP HSRP 11/12
41 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public OSPFv3 Pit Falls 42 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public OSPFv3 Header and Hello Packet Rtr Pri Neighbor ID HelloInterval RouterDeadInterval Designated Router Backup Designated Router Interface ID Options Version Type Instance ID 0 Router ID Area ID Packet Length Checksum Basic Header 16 Bytes Hello Packet 32 Bit RID Not Network Mask 43 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public e0/0 e0/0 OSPFv3 Configuration Needs R10#sh run int Building configuration...
ipv6 router ospf 124 router-id 0.0.20.0 log-adjacency-changes R20(config)#ipv6 router ospf 124 *Feb 5 04:06:07.314: %OSPFv3-4-NORTRID: OSPFv3 process 124 could not pick a router-id, please configure manually R20(config-rtr)#router-id 0.0.20.0
Process ID need not match between Neighbors R10 e0/0 e0/0 R20 44 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public OSPFv3-Related Multicast Group R10#sh ipv6 interface eth 0/0
Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:A00 Global unicast address(es): 2001:DB8:1240:1240:A8BB:CCFF:FE00:A00, subnet is 2001:DB8:1240:1240::/64 [EUI]
J oined group address(es): FF02::1 FF02::2 FF02::5 FF02::6
AllSPFRouters AllDRouters 45 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Common Indicators R20#sh ipv6 ospf interface Ethernet0/0 is up, line protocol is up Link Local Address FE80::A8BB:CCFF:FE00:1400, Interface ID 2 Area 0, Process ID 124, Instance ID 0, Router ID 20.20.20.20 Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State BDR, Priority 1 Designated Router (ID) 10.10.10.10, local address FE80::A8BB:CCFF:FE00:A00 Backup Designated router (ID) 20.20.20.20, local address FE80::A8BB:CCFF:FE00:1400 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:00 Index 1/1/1, flood queue length 0 Next 0x0(0)/0x0(0)/0x0(0) Last flood scan length is 0, maximum is 2 Last flood scan time is 0 msec, maximum is 0 msec Neighbor Count is 2, Adjacent neighbor count is 2 Adjacent with neighbor 40.40.40.40 Adjacent with neighbor 10.10.10.10 (Designated Router) Suppress hello for 0 neighbor(s)
Remember OSPFv3 can run multiple instances on a interface and 0 is the default instance ID Timers should match between neighbors 46 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public show ipv6 ospf R20#show ipv6 ospf Routing Process "ospfv3 124" with ID 0.0.20.0 It is an area border router SPF schedule delay 5 secs, Hold time between two SPFs 10 secs Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs LSA group pacing timer 240 secs Interface flood pacing timer 33 msecs Retransmission pacing timer 66 msecs Number of external LSA 0. Checksum Sum 0x0 Number of areas in this router is 2. 2 normal 0 stub 0 nssa Area BACKBONE(0) Number of interfaces in this area is 1 SPF algorithm executed 11 times Number of LSA 10. Checksum Sum 0x567F6 Number of DCbitless LSA 0 Number of indication LSA 0 Number of DoNotAge LSA 0 Flood list length 0
47 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public database database: Summary Process 124 database summary
48 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Mismatched Hello Parameters R50 S3/0 S2/0 R20#sh run int serial 3/0 Building configuration...
R30#sh run int serial 3/0 Building configuration...
Current configuration : 177 bytes ipv6 unicast-routing ! interface serial0/0 ipv6 address 2001:DB8:1223:1223::/64 eui-64 ipv6 ospf 124 area 0 R30# R20#sh ipv6 ospf interface ser 3/0 Serial2/0 is up, line protocol is up Link Local Address FE80::A8BB:CCFF:FE00:1400, Interface ID 4 Area 1, Process ID 124, Instance ID 0, Router ID 20.20.20.20 Network Type POINT_TO_MULTIPOINT, Cost: 48 Transmit Delay is 1 sec, State POINT_TO_MULTIPOINT, Timer intervals configured, Hello 30, Dead 120, Wait 120, Retransmit 5 Hello due in 00:00:20 Index 1/1/2, flood queue length 0 Next 0x0(0)/0x0(0)/0x0(0) Last flood scan length is 0, maximum is 0 Last flood scan time is 0 msec, maximum is 0 msec Neighbor Count is 0, Adjacent neighbor count is 0 Suppress hello for 0 neighbor(s)
Interface- Network type mismatch R20 49 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public R20# *Feb 5 20:47:21.205: OSPFv3: Rcv hello from 50.50.50.50 area 1 from Serial3/0 FE80::A8BB:CCFF:FE00:3200 interface ID 10
*Feb 5 20:47:21.205: OSPFv3: Mismatched hello parameters from FE80::A8BB:CCFF:FE00:3200
After matching/rectifying the network types on the interfaces
R20# *Feb 5 20:52:35.369: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from DOWN to INIT, Received Hello
R20# *Feb 5 20:52:38.961: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from INIT to 2WAY, 2-Way Received *Feb 5 20:52:38.961: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from 2WAY to EXSTART, AdjOK? *Feb 5 20:52:38.981: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from EXSTART to EXCHANGE, Negotiation Done *Feb 5 20:52:39.105: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from EXCHANGE to LOADING, Exchange Done *Feb 5 20:52:39.105: %OSPFv3-5-ADJ CHG: Process 124, Nbr 50.50.50.50 on Serial3/0 from LOADING to FULL, Loading Done
Mismatched Hello Parameters 50 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IP MTU Mismatch interface Ethernet0/0 ipv6 address 2001:DB8:1020:1020::/64 eui-64 ipv6 mtu 1400 ipv6 ospf 124 area 0
*Feb 15 18:20:04.332: OSPFv3: Rcv DBD from 40.40.40.40 on Ethernet0/0 seq 0x2693 opt 0x0013 flag 0x7 len 28 mtu 1400 state EXCHANGE *Feb 15 18:20:04.332: OSPFv3: Nbr 40.40.40.40 has smaller interface MTU Ensure identical MTU on both ends of the link
*Feb 15 18:31:56.888: %OSPFv3-5-ADJ CHG: Process 124, Nbr 40.40.40.40 on Ethernet0/0 from EXSTART to EXCHANGE, Negotiation Done R20(config-if)# *Feb 15 18:32:01.916: %OSPFv3-5-ADJ CHG: Process 124, Nbr 40.40.40.40 on Ethernet0/0 from EXCHANGE to LOADING, Exchange Done *Feb 15 18:32:01.916: %OSPFv3-5-ADJ CHG: Process 124, Nbr 40.40.40.40 on Ethernet0/0 from LOADING to FULL, Loading Done R40 e0/0 e0/0 R10 51 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public passive-interface Default
*Feb 8 18:28:08.757: %OSPFv3-5-ADJ CHG: Process 124, Nbr 40.40.40.40 on Ethernet1/0 from LOADING to FULL, Loading Done
R10 52 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Area Type Mismatch R10# ipv6 router ospf 124 router-id 10.10.10.10 log-adjacency-changes area 2 nssa
*Feb 8 18:32:20.237: OSPFv3: Hello from FE80::A8BB:CCFF:FE00:2801 with mismatched NSSA option bit
*Feb 8 18:35:29.268: %OSPFv3-5-ADJ CHG: Process 124, Nbr 40.40.40.40 on Ethernet1/0 from LOADING to FULL, Loading Done
Change area type ABR R10 53 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public The Routing Table R10#sh ipv6 route ospf IPv6 Routing Table - 13 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OI 2001:DB8:2030:2030::/64 [110/122] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0 OI 2001:DB8:2050:2050::/64 [110/58] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0 OI 2001:DB8:2323:2323::/64 [110/122] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0 Link local next hop 54 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Loopback Interface Behavior R50#show ipv6 ospf interface lo 0 Loopback0 is up, line protocol is up Link Local Address FE80::A8BB:CCFF:FE00:3200, Interface ID 20 Area 1, Process ID 124, Instance ID 0, Router ID 50.50.50.50 Network Type LOOPBACK, Cost: 1 Loopback interface is treated as a stub Host
O 2001:DB8:ABCD:BCDF:A8BB:CCFF:FE00:3200/128 [110/10] R50# R50(config-if)#ipv6 ospf network point-to-point R50(config-if)#end R50#show ipv6 ospf interface lo 0 Loopback0 is up, line protocol is up Link Local Address FE80::A8BB:CCFF:FE00:3200, Interface ID 20 Area 1, Process ID 124, Instance ID 0, Router ID 50.50.50.50 Network Type POINT_TO_POINT, Cost: 1 OI 2001:DB8:ABCD:BCDF::/64 [110/59]
Routing table extract 55 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Instance ID: No Support at This Time Router#sh run interface ethernet 0/0 Building configuration... Current configuration : 156 bytes! interface Ethernet0/0 ipv6 address 2001:DB8:1234:5678::/64 eui-64 ipv6 ospf 1 area 0 instance 1 Router(config)#int eth 0/0 Router(config-if)#ipv6 ospf 2 area 0 instance 2
Router#sh run interface ethernet 0/0 Building configuration...
Current configuration : 156 bytes ! interface Ethernet0/0 ip address 12.12.12.1 255.255.255.0 ipv6 address 2001:DB8:1234:5678::/64 eui-64 ipv6 ospf 2 area 0 instance 2
Just over writes the configuration 56 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public EIGRPv6 challenges 57 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Prerequisites for EIGRPv6 EIGRPv6 available since 02/06 in 12.4.x.T trains FF02::A multicast address is used for updates
A 32 bit IPv4 router ID must be defined No Shut command applied to EIGRP process Interfaces need to be applied with IPv6 EIGRP <as-num>command to be advertised in to EIGRPv6 Recall Hex A is Decimal 10 58 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Neighbor Process R10#sh run Building configuration...
ipv6 router eigrp 124 router-id 10.10.10.10 no shutdown interface Ethernet0/0 ipv6 address 2001:DB8:4012:4012::/64 eui-64 ipv6 eigrp 124 end R40#
R10(config)#ipv6 router eigrp 124 R10(config-rtr)#no shut R10(config-rtr)# *Feb 12 20:16:22.640: %DUAL-5-NBRCHANGE: IPv6-EIGRP(0) 124: Neighbor FE80::A8BB:CCFF:FE00:2800 (Ethernet0/0) is up: new adjacency
Interfaces need not be on the same subnet R40 e0/0 e0/0 Hello R10 59 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public EIGRPv6-Enabled Interface R40#show ipv6 interface ethernet 0/0 Ethernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:2800 No Virtual link-local address(es): Global unicast address(es): 2001:DB8:1240:1240:A8BB:CCFF:FE00:2800, subnet is 2001:DB8:1240:1240::/64 [EUI] J oined group address(es): FF02::1 FF02::2 FF02::5 FF02::A FF02::1:FF00:2800
This interface has joined the EIGRPv6 multicast group 60 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public R40#show ipv6 eigrp neighbors
IPv6-EIGRP neighbors for process 124 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 Link-local address: Et0/0 12 00:03:01 23 200 0 3 FE80::A8BB:CCFF:FE00:A00
Count down before declaring neighbor down Neighbor Discovered Since Neighbor Response Time Wait time before next Xmission if no ACK
EIGRPv6 Neighbor 61 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Neighbor-Changes Messages- What Do They Mean? Peer restartedneighbor reset relationship; why did relationship bounce? New adjacencynew neighbor relationship with this neighbor at initial startup or after recovering from a neighbor that went down Holding time expiredNo EIGRP packets from this neighbor for the duration of the hold time; typically 15 seconds (180 seconds for low-speed NBMA) Retry limit exceededneighbor didnt acknowledge a reliable packet after at least 16 retransmissions 62 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public R10#show ipv6 eigrp topology IPv6-EIGRP Topology Table for AS(124)/ID(10.10.10.10)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r - reply Status, s - sia Status
P 2001:DB8:1010:1010::/64, 1 successors, FD is 128256 via Connected, Loopback0 P 2001:DB8:4012:4012::/64, 1 successors, FD is 307200 via FE80::A8BB:CCFF:FE00:2800 (307200/281600), Ethernet0/0
EIGRP Topology Feasible distance Computed distance Reported distance Successor 63 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Multiple Addresses on an Interface R50#sh run int ser 2/0 Building configuration...
Current configuration : 228 bytes ! interface Serial2/0 no ip address ipv6 address 2001:DB8:2050:2050::/64 eui-64 ipv6 address 2001:DB8:ABCD:ABCD::/64 eui-64 ipv6 eigrp 124 serial restart-delay 0 end
No concept of Primary/Secondary all prefixes are advertised by default R40 e0/0 e0/0 R50 R10 64 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Routing Table for Multiple Prefixes Received from the Same Interface R40#show ipv6 route eigrp IPv6 Routing Table - 16 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 D - EIGRP, EX - EIGRP external D 2001:DB8:1010:1010::/64 [90/409600] via FE80::A8BB:CCFF:FE00:A00, Ethernet0/0 D 2001:DB8:2050:2050::/64 [90/2195456] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0 D 2001:DB8:ABCD:ABCD::/64 [90/2707456] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0
R40#ping 2001:DB8:2050:2050:A8BB:CCFF:FE00:3200
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:2050:2050:A8BB:CCFF:FE00:3200, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =20/22/32 ms R40#
65 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Expired Hold Timer The hold time expires when an EIGRP packet is not received during hold time Typically caused by congestion or physical errors
Router crash, powered off, disconnected, etc. Link issues (input/output queue drops, etc.) Network between us may be dropping packets (CRC errors, frame errors, excessive collisions) e0/0 R40 e0/0 R10 66 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Ping to Verify Ping the multicast address FF02::A from the other router R40#ping ff02::a Output Interface: ethernet0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to FF02::A, timeout is 2 seconds: Packet sent with a source address of FE80::A8BB:CCFF:FE00:2800
Reply to request 0 received from FE80::A8BB:CCFF:FE00:1400, 16 ms Reply to request 1 received from FE80::A8BB:CCFF:FE00:1400, 0 ms Reply to request 2 received from FE80::A8BB:CCFF:FE00:1400, 4 ms Reply to request 3 received from FE80::A8BB:CCFF:FE00:1400, 0 ms Reply to request 4 received from FE80::A8BB:CCFF:FE00:A00, 0 ms Success rate is 100 percent (5/5), round-trip min/avg/max =0/4/16 ms 5 multicast replies and 0 errors. R40#
Ensure you ping for the correct neighbor 67 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public MPBGP Multiple Guards 68 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Multiprotocol BGP
Multiprotocol BGP is an enhanced BGP that carries routing information for multiple network layer protocol address families, for example, IPv6 address family and for IP multicast routes. All BGP commands and routing policy capabilities can be used with multiprotocol BGP. 69 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Address Family Information/Sub-AFI (Capability) len 6 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPABILITY code: 1, length 4 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has MP_EXT CAP for afi/safi: 2/1 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ optional parameter type 2 (Capability) len 2 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPABILITY code: 128, length 0 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has ROUTE- REFRESH capability(old) for all address-families *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ optional parameter type 2 (Capability) len 2 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has CAPABILITY code: 2, length 0 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 OPEN has ROUTE- REFRESH capability for all address-families BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 rcvd OPEN w/ remote AS 65535 *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 went from OpenSent to OpenConfirm *Feb 21 01:23:26.511: BGP: 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 went from OpenConfirm to Established AFI 2 - IPv6 and SAFI IPv6 unicast 70 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Remember the 32-Bit router-id R20#sh ip bgp sum % BGP cannot run because the router-id is not configured BGP router identifier 0.0.0.0, local AS number 65535 BGP table version is 1, main routing table version 1
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 4 65535 0 0 0 0 0 never Idle R20# *Feb 20 20:45:48.665: %BGP-4-NORTRID: BGP could not pick a router-id. Please configure manually.
Where there is no IPv4 address configured on a device 71 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Peering on Loopback Interface Addresses router bgp 65535 bgp router-id 20.20.20.20 bgp log-neighbor-changes neighbor 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 remote-as 65535 neighbor 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 update-source Loopback0
R10 R20 e0/0 e0/0 *Feb 20 23:15:03.091: BGP: 2001:DB8:1020:1020:A8BB:CCFF:FE00:A00 passive open failed - 2001:DB8:1020:1020:A8BB:CCFF:FE00:1400 is not update-source Loopback0's address (2001:2020:2020:0:A8BB:CCFF:FE00:1400)
One of the most common mistakes. Use loopback addresses to peer. Not default interface address 72 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Do Not Peer on Loopback Link Local Addresses R10 R20 e0/0 e0/0 R20#show ipv6 interface lo 0 Loopback0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:1400 No Virtual link-local address(es): R10#show bgp ipv6 sum BGP router identifier 10.10.10.10, local AS number 65535 BGP table version is 1, main routing table version 1
Everything looks fine right? 73 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Peer Address Down but Session UpNot Really R20#sh ipv6 int lo 0 Loopback0 is administratively down, line protocol is down IPv6 is enabled, link-local address is FE80::A8BB:CCFF:FE00:1400 [TEN]
R10#show bgp ipv6 sum BGP router identifier 10.10.10.10, local AS number 65535 BGP table version is 2, main routing table version 2 1 network entries using 149 bytes of memory 1 path entries using 76 bytes of memory 2/1 BGP path/bestpath attribute entries using 264 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 489 total bytes of memory BGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs
74 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Last One on Link Local Addresses Based iBGP router bgp 65535 no synchronization bgp router-id 10.10.10.10 bgp log-neighbor-changes neighbor FE80::A8BB:CCFF:FE00:1400 remote-as 65535 neighbor FE80::A8BB:CCFF:FE00:1400 update-source Loopback0 neighbor FE80::A8BB:CCFF:FE00:1E00 remote-as 65535 neighbor FE80::A8BB:CCFF:FE00:1E00 update-source Loopback0 no auto-summary ! address-family ipv6 neighbor FE80::A8BB:CCFF:FE00:1400 activate neighbor FE80::A8BB:CCFF:FE00:1E00 activate exit-address-family
R10 R20 e0/0 e0/0 R40 75 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Link Local Addresses Cannot Be Reached Beyond the Connected Neighbor
R10#show bgp ipv6 summary BGP router identifier 10.10.10.10, local AS number 65535
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd FE80::A8BB:CCFF:FE00:1400 4 65535 77 76 2 0 0 00:58:44 1 FE80::A8BB:CCFF:FE00:1E00 4 65535 0 0 0 0 0 never Active R10#
R10#ping FE80::A8BB:CCFF:FE00:1E00 Output Interface: ethernet0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to FE80::A8BB:CCFF:FE00:1E00, timeout is 2 seconds: Packet sent with a source address of FE80::A8BB:CCFF:FE00:A00 ..... Success rate is 0 percent (0/5)
R10 R20 e0/0 e0/0 R40 76 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Always Use Global Prefix for iBGP Peering router bgp 65535 no synchronization bgp router-id 10.10.10.10 bgp log-neighbor-changes neighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 remote-as 65535 neighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 update-source Loopback0 no auto-summary ! address-family ipv6 neighbor 2001:db8:2020:0:A8BB:CCFF:FE00:1400 activate exit-address-family R10 R20 e0/0 e0/0 router bgp 65535 no synchronization bgp router-id 20.20.20.20 bgp log-neighbor-changes neighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 remote-as 65535 neighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 update-source Loopback0 no auto-summary ! address-family ipv6 neighbor 2001:DB8:1010:1010:A8BB:CCFF:FE00:A00 activate network 2001:2121:2121::/64 no synchronization exit-address-family
Here is where you advertise prefixes to BGP 77 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ? Routing Table Has an Entry- Where Is the Prefix R10#show ip bgp sum BGP router identifier 10.10.10.10, local AS number 65535 BGP table version is 1, main routing table version 1
R10#show ipv6 route bgp IPv6 Routing Table - 18 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 B 2001:db8:2121::/64 [200/0] via 2001:db8:2020:0:A8BB:CCFF:FE00:1400 R10#
78 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Use IPv6 Specific Commands R10#show bgp ipv6 unicast summary BGP router identifier 10.10.10.10, local AS number 65535 BGP table version is 2, main routing table version 2 1 network entries using 161 bytes of memory 1 path entries using 76 bytes of memory 2/1 BGP path/bestpath attribute entries using 248 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 485 total bytes of memory BGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:db8:2121:0:A8BB:CCFF:FE00:1400, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =12/15/20 ms R10#
79 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Migration Bumps 80 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Manual Tunnel R20#sh run int tunnel 0 Building configuration...
Current configuration : 188 bytes ! interface Tunnel0 no ip address ipv6 address 2001:DB8:2424:2424::/64 eui-64 ipv6 ospf 12345 area 0 tunnel source 23.23.23.20 tunnel destination 34.34.34.40 tunnel mode ipv6ip
R40#sh run int tun 0 Building configuration...
Current configuration : 188 bytes ! interface Tunnel0 no ip address ipv6 address 2001:DB8:2424:2424::/64 eui-64 ipv6 ospf 12345 area 0 tunnel source 34.34.34.40 tunnel destination 23.23.23.20 tunnel mode ipv6ip
IPv4 IPv6 IPv6 R20 R40 81 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Sanity Check for Manual Tunnels R20#ping Protocol [ip]: Target IP address: 34.34.34.40 Repeat count [5]: Datagram size [100]: Timeout in seconds [2]: Extended commands [n]: y Source address or interface: 23.23.23.20 Type of service [0]: Set DF bit in IP header? [no]: Validate reply data? [no]: Data pattern [0xABCD]: Loose, Strict, Record, Timestamp, Verbose[none]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 34.34.34.40, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =20/38/100 ms R20# IPv4 IPv6 IPv6 R20 R40 Tunnel destination Tunnel source 82 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Tunnel Configuration Mismatch R20#show int tun 0 Tunnel0 is up, line protocol is down Hardware is Tunnel MTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, rely 255/255, load 1/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source 23.23.23.20, destination 34.34.34.40 Tunnel protocol/transport IPv6, sequencing disabled
R40#show int tunnel 0 Tunnel0 is up, line protocol is up Hardware is Tunnel MTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, rely 255/255, load 1/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source 34.34.34.40, destination 23.23.23.20 Tunnel protocol/transport IPv6/IP, sequencing disabled IPv4 IPv6 IPv6 R20 R40 83 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Tunnel Configuration Mismatch R20#sh run int tun 0 Building configuration...
Current configuration : 188 bytes ! interface Tunnel0 no ip directed-broadcast ipv6 address 2001:DB8:2424:2424::/64 eui-64 tunnel source 23.23.23.20 tunnel destination 34.34.34.40 tunnel mode ipv6 end
R20(config-if)#tunnel mode ipv6ip R20(config-if)#
R20(config-if)# *Mar 12 03:18:20.787: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to up *Mar 12 03:18:20.827: IPV6: source :: (local) *Mar 12 03:18:20.827: dest FF02::16 (Tunnel0) *Mar 12 03:18:20.827: traffic class 224, flow 0x0, len 76+0, prot 0, hops 1, originating
IPv4 IPv6 IPv6 R20 R40 84 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public A Working Tunnel 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201 R10#ping 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201
IPv4 R40 IPv6 R20 IPv6 85 R40 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public OSPFv3 Network Across the Tunnel R20#show ipv6 ospf neighbor
Neighbor ID Pri State Dead Time Interface ID Interface 40.40.40.40 1 FULL/ - 00:00:37 20 Tunnel0 10.10.10.10 1 FULL/BDR 00:00:37 2 Ethernet0/0 R20#
IPv4 IPv6 R20 IPv6 R40 86 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6to4 Automatic Tunnels IPv4 IPv6 IPv6 R20 R40 R20#sh run int tunnel 0 Building configuration...
Current configuration : 122 bytes ! interface Tunnel0 no ip address no ip directed-broadcast ipv6 unnumbered Ethernet0/0 tunnel source Ethernet1/0 tunnel mode ipv6ip 6to4 end
R40#sh run int tunnel 0 Building configuration...
Current configuration : 122 bytes ! interface Tunnel0 no ip address no ip directed-broadcast ipv6 unnumbered Ethernet1/0 tunnel source Ethernet0/0 tunnel mode ipv6ip 6to4 end
87 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Use the Correct Prefix of 2002::/16 R20#sh run int eth 0/0 Building configuration...
Current configuration : 116 bytes ! interface Ethernet0/0 no ip address no ip directed-broadcast ipv6 address 2001:1717:1714:2020::/64 eui-64
R20#sh run int eth 1/0 Building configuration...
Current configuration : 93 bytes ! interface Ethernet1/0 ip address 23.23.23.20 255.255.255.0 no ip directed-broadcast
IPv4 IPv6 IPv6 R20 R40 e 1/0 e 0/0 Should be 2002 R20#ping 2001:2222:2228:4040:A8BB:CCFF:FE00:2801
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:2222:2228:4040:A8BB:CCFF:FE00:2801, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =40/61/140 ms R20#
2001:2222:2228:4040:A8BB:CCFF:FE00:2801 Works in spite of the wrong prefix 88 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Common Mistake in Automatic Tunnels R40#sh run int eth 1/0 Building configuration...
Current configuration : 136 bytes ! interface Ethernet1/0 no ip address no ip directed-broadcast ipv6 address 2002:DB8:4545:4545::/64 eui-64 ipv6 ospf 45 area 0 end
R40# R40#sh run int eth 0/0 Building configuration...
Current configuration : 93 bytes ! interface Ethernet0/0 ip address 34.34.34.40 255.255.255.0 no ip directed-broadcast end
R20#sh run int eth 1/0 Building configuration Current configuration : 93 bytes ! interface Ethernet1/0 ip address 23.23.23.20 255.255.255.0 no ip directed-broadcast end
R20#sh run int eth 0/0 Building configuration Current configuration : 136 bytes ! interface Ethernet0/0 no ip address no ip directed-broadcast ipv6 address 2002:DB8:1212:1212::/64 eui-64 ipv6 ospf 12 area 0
Can you spot the mistake23.23.23.20 in Hex is 1717:1714 IPv4 IPv6 IPv6 R20 R40 E0/0 E1/0 89 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public All the Required Configs for Automatic Tunnel R40#sh run
IPv6 IPv4 T0 R20 IPv6 E 0/0 E 1/0 E 0/0 E 1/0 T0 23.23.23.20 in Hex is 1717:1714 90 R40 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public The Automatic Tunnel in Action R20#debug tunnel Tunnel Interface debugging is on R20#ping 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =60/84/152 ms R20# *Mar 15 17:19:24.466: Tunnel0: to decaps IPv6/IP packet 34.34.34.40->23.23.23.20 (len=120, ttl=253) *Mar 15 17:19:24.618: Tunnel0: decapsulated IPv6/IP packet *Mar 15 17:19:24.618: 2001:DB8:5050:5050:A8BB:CCFF:FE00:3201 ->2002:1 717:1714:2020:A8BB:CCFF:FE00:1400 (len=60 ttl=63)
IPv4 IPv6 IPv6 R20 R40 T0 E 0/0 E 1/0 E 0/0 E 1/0 T0 91 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Accessing 2001 Global Prefixes 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA R10#ping 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA, timeout is 2 seconds: ..... Success rate is 0 percent (0/5)
IPv4 IPv6 IPv6 R20 R40 T0 E 0/0 E 1/0 E 0/0 E 1/0 T0 v6 Internet ipv6 route 2002::/16 Tunnel0 ipv6 route ::/0 2002:2222:2228:4040:A8BB:CCFF:FE00:2801 Ensure the networks on both sides of the tunnel are aware of a default route to reach the IPv6 internet 92 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Accessing 2001 Global Prefixes R20 IPv4 IPv6 IPv6 R40 T0 E 0/0 E 1/0 E 0/0 E 1/0 T0 v6 Internet R10#sh ipv6 route IPv6 Routing Table - 8 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 OE2 ::/0 [110/1], tag 12 via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0 OE2 2002::/16 [110/20] via FE80::A8BB:CCFF:FE00:1400, Ethernet0/0
R60#sh ipv6 route bgp IPv6 Routing Table - 8 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 B 2001:DB8:5050:5050::/64 [20/20] via FE80::A8BB:CCFF:FE00:2800, Serial3/0 B 2002::/16 [20/0] via FE80::A8BB:CCFF:FE00:2800, Serial3/0
R10#ping 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:6060:6060:9CD7:2EFF:FEF0:99FA, timeou t is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =88/96/108 ms R10# 93 R20 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ipv6 route 2002::/16 Tunnel0 ipv6 route ::/0 2002:2222:2228:4040:A8BB:CCFF:FE00:2801 Automatic Tunnels Are Point to Multipoint R70 IPv6 v6 Internet R50 T0 E 0/0 E 1/0 E 0/0 T0 IPv4 IPv6 IPv6 R20 R40 R10 T0 E 0/0 IPv6 R80 On every 6to4 PE 94 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv6 2001:db8:0b01 6rd Tunnels (RFC 5969) Native dual-stack IP service to the end site Simple, stateless, automatic IPv6-in-IPv4 encap and decap functions Embedded IPv4 address needs to match IPv4 address in Tunnel header for security IPv6 traffic automatically follows IPv4 Routing (IPv4 address used as tunnel endpoint) BRs placed at IPv6 edge, addressed via anycast for load-balancing and resiliency Service Provider IPv6 2001:db8:0f0 1 PE P P 6rd Tunnel IPv4 Header IPv6 Packet IPv6 Packet IPv6 Packet IPv4 Access Network 6rd IPv6 End Site IPv6 Internet IPv6 2001:db8:0d 01 CE Tunnel between CPEs 6rd Relay/CPE Tunnels 6rd Border Relay 95 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Destination Dynamically Computed Example 6rd IPv6 Prefix 32 bits Interface ID 2001:0db8: 0000:0000:0000:0002 0000: Server Address 0b01: IPv4 16 bits Subnet 16 bits IPv6 2001:db8:0b01 IPv4 Backbone Network CE IPv6 2001:db8:0f01 PE P P BR 6rd Tunnel CE IPv4 Header IPv6 Packet IPv6 Packet IPv6 Packet IPv4 Backbone Network 6rd IPv6 End Site 6rd IPv6 End Site 200.15.11.1 (e0/0) 200.15.15.1 (e0/0) 2001:db8:0f01::2 (Host) 2001:db8:0b01::2 (Server) 6rd tunnel end point in IPv4 Network 200.15. 11.1 IPv4 Common Prefix (16bits) 6rd Parameter Value 6rd Prefix 2001:db8::/32 IPv4 Common Prefix 200.15/16 IPv4 Common Suffix 0/0 (Cisco specific) (Dst) 200.15.11.1 (Src) 200.15.15.1 (Dst) 2001:0db8:0b01::2 (Src) 2001:0db8:0f01::2 IPv6 Header IPv4 Header 2001:db8:0b01::1 (e0/1) 2001:db8:0f01::1 (e0/1) 96 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ! ipv6 general-prefix 6rd-prefix 6rd Tunnel1 ipv6 unicast-routing ipv6 cef ! interface Tunnel1 ipv6 enable tunnel source Ethernet0/0 tunnel mode ipv6ip 6rd tunnel 6rd prefix 2001:db8::/32 tunnel 6rd ipv4 prefix-len16 tunnel 6rd br 200.15.0.1 Config to Border Relay 6rd CE Configuration (IOS) IPv6 2001:db8:0b01 IPv4 Backbone Network CE IPv6 2001:db8:0f01 PE P P PE 6rd Tunnel CE IPv4 Header IPv6 Packet IPv6 Packet IPv6 Packet IPv4 Backbone Network 6rd IPv6 End Site 6rd IPv6 End Site 200.15.11.1 (e0/0) 200.15.15.1 (e0/0) ! interface Ethernet0/0 description Shared IPv4 infrastructure ip address 200.15.15.1 255.255.255.0 ! interface Ethernet1/0 description End Site LAN ipv6 address 6rd-prefix ::1/64 ! ipv6 route 2001:db8::/32 tunnel1 ipv6 route ::/0 Tunnel1 2001:db8:1:: Default to BR
2001:db8:0f01::2 (Host) 2001:db8:0b01::2 (Server) 2001:db8:0b01::1 (e0/1) 2001:db8:0f01::1 (e0/1) 97 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6rd Border Relay Configuration (IOS) IPv4 Backbone Network CE IPv6 2001:db8:0f 01 PE P P PE IPv6 Packet IPv4 Backbone Network IPv6 Network 200.15.15.1 (e0/0) 2001:db8:0f01::2 (Host) IPv4 Header IPv6 Packet IPv6 Internet 2000::/3 200.15.0.1/128 (lo0) 2001:db8:1::/128 (e0/0) 6rd Border Relay 6rd Border Relay 200.15.0.1/128 (lo0) 2001:db8:1::/128 (e0/0) 6rd tunnel to closest BR ipv6 general-prefix 6rd-prefix 6rd Tunnel1 ipv6 unicast-routing ipv6 cef ! interface Tunnel1 ipv6 enable tunnel source Loopback0 tunnel mode ipv6ip 6rd tunnel 6rd prefix 2001:db8::/32 tunnel 6rd ipv4 prefix-len16
interface Ethernet0/0 description IPv6 Internet ipv6 address 2001:db8:1::/64 ! interface Loopback0 description Shared IPv4 infrastructure ip address 200.15.0.1 255.255.255.0 ! ipv6 route 2001:db8::/32 tunnel1 ipv6 route ::/0 2001:db8:2:: ! Or use routing protocol 98 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6ProviderEdge PE1 mBGP session IPv4 MPLS PE2 v6 v6 IPv6 Hosts IPv6 Hosts 2001:DB8:1234:5678::/64 eui-64 2001:DB8:1234:ABCD::/64 eui-64 PE1#show ipv6 route IPv6 Routing Table - 5 entries Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2 C 2001:DB8:1234:5678::/64 [0/0] via ::, Loopback10 L 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900/128 [0/0] via ::, FastEthernet0/1 B 2001:DB8:1234:ABCD::/64 [200/0] via ::FFFF:2.2.2.2, IPv6-mpls L FE80::/10 [0/0] via ::, Null0 L FF00::/8 [0/0] via ::, Null0 PE1# PE1 PE1 learns the prefix through mPBGP session 99 PE1 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6ProviderEdge
mBGP session PE2 v6 PE1 v6 IPv6 Hosts IPv6 Hosts 2001:DB8:1234:5678::/64 eui-64 2001:DB8:1234:ABCD::/64 eui-64 PE1#sh run Building configuration... hostname PE1
IPv4 MPLS IPv6 CEF must be enabled PE2 100 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6ProviderEdge
IPv4 MPLS mBGP session PE1 PE2 v6 v6 IPv6 Hosts IPv6 Hosts 2001:DB8:1234:5678::/64 eui-64 2001:DB8:1234:ABCD::/64 eui-64 IPv4 MPLS PE1#show bgp ipv6 unicast BGP table version is 14, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, >best, i - internal, r RIB-failure, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *>2001:DB8:1234:5678::/64 :: 0 32768 i *>i2001:DB8:1234:ABCD::/64 ::FFFF:2.2.2.2 0 100 0 I
PE1#show mpls forwarding-table Local Outgoing Prefix Bytes tag Outgoing Next Hop tag tag or VC or Tunnel Id switched interface 16 Pop tag 2.2.2.2/32 0 Et0/0 12.12.12.2 19 Aggregate 2001:DB8:1234:5678::/64 \ 520 PE1# The required mPBGP session and tags 101 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6ProviderEdge
mBGP session PE2 2001:DB8:1234:5678::/64 eui-64 2001:DB8:1234:ABCD::/64 eui-64 v6 IPv6 Hosts PE1 v6 IPv6 Hosts IPv4 MPLS PE2#show bgp ipv6 sum BGP router identifier 2.2.2.2, local AS number 12 BGP table version is 14, main routing table version 14 2 network entries using 298 bytes of memory 2 path entries using 152 bytes of memory 3/2 BGP path/bestpath attribute entries using 396 bytes of memory BGP using 846 total bytes of memory BGP activity 9/7 prefixes, 11/9 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 1.1.1.1 4 12 181 180 14 0 0 00:12:01 1 PE2#
PE2# PE2#ping 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900, timeout is 2 seconds: Packet sent with a source address of 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =40/48/60 ms PE2# Good old 32 bit BGP router ID 102 PE2 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 6ProviderEdge
IPv4 MPLS mBGP session PE1 PE2 v6 v6 IPv6 Hosts IPv6 Hosts 2001:DB8:1234:5678::/64 eui-64 2001:DB8:1234:ABCD::/64 eui-64 IPv4 MPLS PE2# 01:23:21: IPv6: nexthop ::FFFF:1.1.1.1, 01:23:21: IPV6: source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 (local) 01:23:21: dest 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls) 01:23:21: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating 01:23:21: IPv6: Sending on Ethernet0/0 01:23:21: IPV6: source 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls) 01:23:21: dest 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 01:23:21: traffic class 0, flow 0x0, len 100+18, prot 58, hops 64, forward to ulp 01:23:21: IPv6: nexthop ::FFFF:1.1.1.1, 01:23:21: IPV6: source 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 (local) 01:23:21: dest 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls) 01:23:21: traffic class 0, flow 0x0, len 100+0, prot 58, hops 64, originating 01:23:21: IPv6: Sending on Ethernet0/0 01:23:21: IPV6: source 2001:DB8:1234:5678:A8BB:CCFF:FE00:7900 (IPv6-mpls) 01:23:21: dest 2001:DB8:1234:ABCD:A8BB:CCFF:FE00:7A00 01:23:21: traffic class 0, flow 0x0, len 100+18, prot 58, hops 64, forward to ulp ::FFFF:2.2.2.2 ::FFFF:1.1.1.1 103 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv4 MPLS IPv6 VPN 6VPE (RFC 4659) 6VPE uses existing IPv4 MPLS infrastructure to provide IPv6 VPN Core uses IPv4 control plane (LDPv4, TEv4, IGPv4) PEs must support dual stack IPv4+IPv6 Offers same architectural features as MPLS-VPN for IPv4 RTs, VRFs, RDs are appended to IPv6 to form VPNv6 address MP-BGP distributed both VPN address families BGP NH uses IPv4 to IPv6 mapped address format ::ffff:A.B.C.D VRF can contain both VPNv4 and VPNv6 routes
IPv4
IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1/30 2001:db8:cafe:3::/64 172.16.1.0.0/30 2001:db8:cafe:1::/64 6VPE2 104 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv4 MPLS CE1 Configuration IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 ipv6 unicast-routing ipv6 cef ! interface Ethernet0/0 description Link to PE1 ip address 172.16.1.1 255.255.255.0 ipv6 address 2001:db8:cafe:1::1/64 ! interface Ethernet1/0 description to GREEN LAN ip address 10.1.1.1 255.255.255.0 ipv6 address 2001:db8:beef:1::1/64 ipv6 rip GREEN enable router bgp 500 neighbor 2001:db8:cafe:1::2 remote-as 100 neighbor 172.16.1.2 remote-as 100 ! address-family ipv4 redistribute eigrp 100 neighbor 172.16.1.2 activate 6VPE1 exit-address-family ! address-family ipv6 neighbor 2001:db8:cafe:1::2 activate 6VPE1 redistribute rip GREEN exit-address-family 6VPE2 Dual stack 105 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public ipv6 unicast-routing ipv6 cef ! interface Loopback0 ip address 200.10.10.1 255.255.255.255 ! interface Ethernet0/0 Description Link to CE1 vrf forwarding GREEN ip address 172.16.1.2 255.255.255.0 ipv6 address 2001:db8:cafe:1::2/64 IPv4 MPLS 6VPE1 General Configuration IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 ! interface Ethernet2/0 description Link to Core Network ip address 192.168.1.1 255.255.255.252 mpls ip ! router ospf 1 log-adjacency-changes redistribute connected subnets passive-interface Loopback0 network 192.168.1.0 0.0.0.255 area 0 6VPE2 106 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public router bgp 100 neighbor 200.11.11.1 remote-as 100 neighbor 200.11.11.1 update-source lo0 ! address-family ipv4 Internet Routes neighbor 200.11.11.1 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 To 6VPE2 neighbor 200.11.11.1 activate neighbor 200.11.11.1 send-community ext exit-address-family IPv4 MPLS 6VPE1 BGP Configuration IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1.0/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 address-family vpnv6 To 6VPE2 neighbor 200.11.11.1 activate neighbor 200.11.11.1 send-community ext exit-address-family ! address-family ipv4 vrf GREEN To CE1 redistribute connected neighbor 172.16.1.1 remote-as 500 neighbor 172.16.1.1 activate exit-address-family ! address-family ipv6 vrf GREEN To CE1 neighbor 2001:db8:cafe:1::1 remote-as 500 neighbor 2001:db8:cafe:1::1 activate exit-address-family 6VPE2 107 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv4 MPLS 6VPE2 IPv6 VRF Routes IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1.0/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 6VPE2#show ipv6 route vrf GREEN B 2001:db8:beef:1::/64 [200/0] via 200.10.10.1 B 2001:db8:beef:2::/64 [20/0] via FE80::A8BB:CCFF:FE01:FA00, Ethernet1/0 B 2001:db8:cafe:1::/64 [200/0] via 200.10.10.1 C 2001:db8:cafe:3::/64 [0/0] via Ethernet1/0, directly connected L 2001:db8:cafe:3::2/128 [0/0] via Ethernet1/0, receive L FF00::/8 [0/0] via Null0, receive 6VPE2 108 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv4 MPLS 6VPE1 BGP VPNv6 Table IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1.0/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 6VPE1#show bgp vpnv6 unicast all Network Next Hop Metric LocPrf Weight Path Route Distinguisher: 200:1 (default for vrf GREEN) *> 2001:db8:beef:1::/64 2001:db8:cafe:1::1 Route from CE1 0 0 500 ? *>i2001:db8:beef:2::/64 ::FFFF:200.11.11.1 Route from CE2 via 6VPE2 0 100 0 506 ? *>i2001:db8:cafe:3::/64 ::FFFF:200.11.11.1 PE/CE Connected route from 6VPE2 0 100 0 ? 6VPE2 Recall the v4 mapped v6 address 109 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv4 MPLS 6VPE1 LFIB IPv4 IPv6 P P IPv6 Packet MPLS IPv4 Backbone IPv6/IPv4 Network IPv6/IPv4 Network VPN Label IPv6 Packet LDP Label IPv6 Packet CE1 6VPE1 P P 10.1.1.0/24 2001:db8:beef:1::/64 VRF 200.10.10.1 200.11.11.1 CE2 IPv4 IPv6 VRF 10.1.2.0/24 2001:db8:beef:2::/64 172.16.3.1.0/30 2001:db8:cafe:3::/64 172.16.1.0/30 2001:db8:cafe:1::/64 6VPE1#show mpls forwarding Local Outgoing Prefix Bytes Label Outgoing Next Hop Label Label or VC or Tunnel Id Switched interface 16 Pop Label 192.168.1.4/30 0 Et2/0 192.168.1.2 17 16 192.168.1.8/30 0 Et2/0 192.168.1.2 18 Pop Label 200.12.12.1/32 0 Et2/0 192.168.1.2 19 18 200.13.13.1/32 0 Et2/0 192.168.1.2 20 19 200.11.11.1/32 0 Et2/0 192.168.1.2 21 No Label 10.1.1.0/24[V] 0 Et0/0 172.16.1.1 22 Aggregate 172.16.1.0/24[V] 570 GREEN 25 No Label 2001:db8:beef:1::/64[V] \ 570 Et0/0 FE80::A8BB:CCFF:FE01:F400 26 Aggregate 2001:db8:cafe:1::/64[V] \ 35456 GREEN
6VPE2 110 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public IPv6 Related Sessions at Cisco Live Session Title BRKRST-2044 Enterprise Multi-Homed Internet Edge Architectures BRKCRS-2301 Enterprise IPv6 Deployment BRKCRT-9344 IPv6 for Cert Nuts BRKRST-2311 IPv6 Planning, Deployment and Operation Considerations BRKSEC-2003 IPv6 Security Threats and Mitigations BRKRST-2302 IPv6 Troubleshooting BRKSPG-2602 IPv4 Exhaustion: NAT and Transition to IPv6 for SPs BRKSPG-2603 How to Securely Operate an IPv6 Network BRKUCC-2061 IPv6 in UC Networks LTRRST-1301, LTRSEC-3033 IPv6 Hands-on Lab, IPv6 Network Threat, Defense, Countermeasures and Controls BRKEWN-2010 Design and Deployment of Ent. WLAN BRKCCIE-9492 IPv6 for Route & Switching CCIE Candidates BRKRST-3300 Service Provider IPv6 Deployment BRKSPG-2604 Deploying Carrier Grade IPv6 using CGSE COCRST-3464 Cisco on Cisco: Making the Leap to IPv6 Search Session Catalog: ipv6 111 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public 112 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Receive 20 Passport points for each session evaluation you complete. Complete your session evaluation online now (open a browser through our wireless network to access our portal) or visit one of the Internet stations throughout the Convention Center.
Dont forget to activate your Cisco Live Virtual account for access to all session material, communities, and on-demand and live activities throughout the year. Activate your account at the Cisco booth in the World of Solutions or visit www.ciscolive.com.
113 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public Final Thoughts Get hands-on experience with the Walk-in Labs located in World of Solutions, booth 1042 Come see demos of many key solutions and products in the main Cisco booth 2924 Visit www.ciscoLive365.com after the event for updated PDFs, on- demand session videos, networking, and more! Follow Cisco Live! using social media: Facebook: https://www.facebook.com/ciscoliveus Twitter: https://twitter.com/#!/CiscoLive LinkedIn Group: http://linkd.in/CiscoLI
114 2012 Cisco and/or its affiliates. All rights reserved. BRKRST-2302 Cisco Public