latest ccna exam

latest ccna exam

Image Ipv6 access-list v4map permit 2001:1::/64 2001:2::/96 ipv6 nat prefix 2001:2::/96 v4-mapped v4map State From now on, when the ISATAP host needs to access IPv6 resources, the IPv6 data packet is encapsulated in the IPv4 tunnel, that is, the IPv4 header of the ISATAP tunnel is set , and then transmitted to the ISATAP router, which is then decapsulated by the ISATAP router. Help forward IPv6 data. Ipv6 address 2001:0001::FFFF/64 ipv6 rip RIPprocess enable ! Address-family ipv6 Application layer gateway ALG Ipv6 dhcp server DHCP-pool !! Enable ipv6 DHCP on the interface and call the pool In R2 on a simple look: Note that, in the IPv6 environment is not recommended as IPv4 treat NAT attitude Which, to use NAT . Only in V4 single protocol with V6 Network None FastEthernet1/0 When ISP1 is down, and the interface of GW connected to ISP1 is DOWN , the data of PC accessing 100 network is switched to ISP2. By default , Cisco routers enable fast switching or optimal switching or cef switching instead of process R2#show ip bgp ipv6 unicast summary Y Image Mechanism introduction None Router redirection Ip nat inside source route-map nat1 interface serial0/0 overload ip nat inside source route-map nat2 interface serial0/1 overload ip nat inside source route-map nat3 interface serial0/1 overload The configuration of R2 is added as follows: Ipv6 address FE80::FFFF:FE10:6 link-local ipv6 router isis The prefix list contains the serial number, matching from the smallest Match interface : To distribute any routes that have their next hop out one of the interfaces specified, use the match interface command in route-map configuration mode . The understanding is that the match interface matches the next hop out interface is the route of this interface. entry Ipv6 enable !! Restart after installation, default to open stateless automatic access address Image 0x7768 The configuration of R1 is as follows (basic configuration and OSPFv3 ): 4 : local management scope; A default route will be published into the RIP and passed to other routers. For example, R1 , R2 , and R3 run RIP and open loopback on R1 . Address-family ipv6 B 2001:1111::1/128 ! Router ospf 100 A distribution list is a tool used to control routing updates. It only filters routing information and cannot filter LSAs . Therefore: the distribution list is used in the distance vector routing protocol, and the route can be filtered normally in either in or out direction. But the work in the link state routing protocol is a bit problematic. BGP Image In the Stale state, if A wants to send data to B , it can be sent directly, and the entry about B from A is from Stale->Delay , and will wait for the prompt information of the application layer to indicate whether the neighbor is reachable. Support follow RFC 's NBMA on-multipoint topologies and modes of OSPV3 operation. OSPFv3 also supports other CISCO modes, such as point-to-point, etc. At this point, the initial configuration has been completed. Adjust DAD Image The configuration of R3 is as follows: Image Test phenomenon: unable to ping . At this point, the direct connection is re-released on R2 , and it is found that 1.1.1.0 has not been re-released into RIP. The PMTU is the minimum interface MTU on the path . Experimental phenomena: UDP Router ospf1 Se0/0 R1 , R2 establish IPv6 in IBGP neighbor relationship (based LOOPBACK Interface) If the static route configured by the outbound interface is configured, the router considers the destination network segment as a local direct connection . Therefore , when the RIP is in the network , it will be announced. RIP re-advertises routes to OSPF : Router(config)# ipv6 router ospf process-id Default route Ipv6 unicast-routing Redistribute ospf 3 subnets route-map OSPF3to1 router ospf 2 CA004FEC0008CA014FEC00080800 Next Hop RIPv2 Cc01.0cf0.0000 CEF form Exit Ipv6 ospf 1 area 2 Ipv6 nat v4v6 source 202.101.100.2 2001:2::2 No bgp default ipv4-unicast bgp log-neighbor-changes Ipv6 enable Image The IPv6 address that the node must have : The summary of the route is actually done by the operation of the subnet mask. For the following example: Route-map Image Image Is the checksum of ICMPv6 correct? Address does not need Note that for a link-state routing protocol such as OSPF , the message passed between routers is no longer routing information, but LSA , and the distribution list cannot filter LSAs . Therefore, to deploy the distribution list in the link state protocol, you need to be aware of: OSPFv3 packet 1/256 011x xxxx xxxx xxxx Image Interface Tunnel0 ipv6 enable Defaut-network takes precedence and becomes the default gateway gateway of last resort . However, if the network specified by ip defaut-network is learned from a dynamic routing protocol, ip route 0/0 takes precedence. Ipv6 route 2001::/64 2002:CA65:C01::FFFF Ipv6 enable Perform a poison reverse, which is turned off by default. Image meaning Prefix announcement overview The functional components of ISATAP are as follows: Show ip cef detail Increase flow label Ge ge-value Associate route-map when route is re-published Mpls ip Neighbor 2.2.2.2 send-community extended exit-address-family IPv4- compatible addresses are used for transition mechanisms such as automatic ipv4- compatible tunneling and NAT-PT (see the IPv6 Transition Technology section of this document for details). experiment analysis Image Route-map test permit/deny 10 Transition from the old routing protocol to the new routing protocol This is the problem, how to solve it? Very simple, on the OR2 , deploy PBR , as long as the server data from Netcom, all forced to OR1 ,latest ccna exam, it is solved. DC Network 3.3.3.3 0.0.0.0 area 0 Ipv6 unicast-routing ! A static route to the host Milne is added to the ROO . The next hop is the E1 port of Kanga . The purpose is to pass the bridge that is often congested. But found that Kanga will be sent to the host Ipv6 ospf 1 area 0 ! 16 bits IPv6 is enabled, link-local address is FE80::CE01:CFF:FEF0:10 Global unicast address(es): Configuring a sample RIP environment Image In a route-map statement, if there is no match statement, match all You can use the show cef interface command to check which load balancing mode is used. This command gives the CEF information configured on this interface . Route-map usage scenario X !! Attention tunnel mode OSPF , but R3 ignores this route (locally configured with a static summary route pointing to null0 ), although the LSA is still passed to R5 , which means that although R5 still has a 1.0.0.0/8 route, the packet After being thrown to R3 , it is finally discarded at R3 , so there is still a problem here. Ipv6 enable ip route 172.16.1.0 255.255.255.0 192.168.12.1 !! go subnet route Ipv6 address 2001:45::5/64 ipv6 ospf 1 area 0 The difference between set ip next-hop and set ip default next-hop is relatively simple, it is not resolved here. RIP-2 MD5 Authentication Ipv6 unicast-routing By default , Cisco routers enable fast switching or optimal switching or cef switching instead of process Ipv6 address 2001::FFFF/64 no ipv6 nd suppress-ra Distribute-list 1 out Matches the network number and prefix length in the route prefix to enhance the accuracy of the match. OSPFv3 packet ND reachable time is 30000 milliseconds NSAP Match ip next-hop matches the next hop address to those allowed in a particular access list Area 1 range 2001:1::/32 IPv4 Set metric 2 !! Change the metric to 2 Ipv6 address 2001:5555::5/128 interface FastEthernet0/0 The configuration of PE1 is as follows: Y An IPv6 packet consists of a basic header plus zero or more extension headers plus an upper layer protocol unit. The meaning of several fields: The router queries through recursion, the next hop 2002: CA65:1703::FFFF should be thrown to tunnel0 , and tunnel0 is a 6to4 tunnel, so the 2002:CA65:1703::FFFF is translated into the corresponding V4 address, which is 202.101.23.3 If it is unreachable, the suppression timer is started at the same time. If the timer expires, the same neighbor still advertises the Image F000 – F7FF Tag Size Ipv6 address 2001:12::2/64 ipv6 ospf 1 area 0 Router(config-if)# ipv6 router isis Initially, R3 can learn three loopback routes from R1 and 192.168.12.0/24 routes. Now we don't want R3 to learn the route to 192.168.3.0/24 , then we can configure it on R2 as follows: Transition mechanism from IPv6 single protocol network to IPv4 single protocol network 16 bits ::FFFF: 4.4.4.4 Router ospf 1 Interface FastEthernet0/0 1/256 Let's take a brief look at the most basic tunneling techniques to connect IPv6 islands in an IPv4 network : Unassigned Check the VPNv6 prefix 2001:5555::5 on PE1 . You can see that the out label is 403. It is obvious that R4 is the label assigned by PE2 . This label is actually the label of VPNv6 . In order for PE2 to know, this data belongs to VRF . You can also use the following command to view !! Interface activates IPv6 Martian NEXTHOP; CISCO IOS does not yet support tunnel servers. 3.3.3.3/32 Static NAT-PT (two-way) Access-list 1 permit any route-map PBR permit 10 match ip address 1 Update behavior Incoming interface: FastEthernet1/0 RPF nbr: FE80::CE02:1BFF:FE54:0 Difficult case Ipv6 router ospf 100 supplement: Router# Show ipv6 route 1 : RIP-1 ; 200-299 ; P has a label space of 300-399 ; PE2 has a 400-499 . Border Gateway Protocol (BGP) Connected 9.9.23.0 is directly connected, FastEthernet0/0 None Abbreviation of IPv6 address BGP comes in 1 and other routes are 20 , and the metric between OSPF remains unchanged. Ipv6 nd managed-config-flag Ipv6 address 2012::1/64 ipv6 nd suppress-ra Image The mask of the destination address. V1 defaults to send v1 to receive v1, v2 Tunnel mode ipv6ip 0.0.0.0 . So match interface is a match with the outbound interface attribute, and this !! ISP1 , ISP2 and GW all need to open CDP Adjust the parameters of the NDP message Image Router-id 3.3.3.3 !! This IPv4 address is the destination address of the ISATAP tunnel ! The IPv6 prefix reserved for NAT-PT . Then use the ipv6 nat prefix 2001:2::/96 v4-mapped v4map command to associate this ACL . In this way, when A accesses B , you can directly use the 2001:2:: CA65:6402 address to access B on the V4 network . Note that the prefix 2001:2::/96 is the IPv6 prefix reserved for NAT-PT . The latter CA65:6402 will be translated into an IPv4 address, ie L2 Router bgp 12 ISATAP address format: The IPv6 address assigned to the ISATAP router is a global unicast address, and the prefix of this address will be used by the ISATAP host for its own IPv6 address construction. ISATAP host through the IPv4 established ISATAP from the tunnel ISATAP receives the message sent by the router / 64 of the IPv6 prefix and the prefix used in conjunction with "special interface identifier" to construct its own IPv6 address.