防火墙上行口通过PPPOE拨号,获取到ipv6地址及前缀。在防火墙下行口启用undo ipv6 nd ra halt这个命令,核心交换机互联的vlanif接口开启auto自动配置,可以自动配置该前缀的ip。但是只有互联的vlanif接口有ipv6地址,怎么让其他业务vlan的终端获取ipv6地址呢?
组网情况:运营商-防火墙-核心交换机-终端
(0)
你需要用前缀委派功能,不过华三的设备不支持NDP代理,所以就只有把BRAS分配的PD前缀委派出去。
#
ipv6 unreachables enable
#
ipv6 dhcp pool pppoe
network prefix 1
option-group 1
#
ipv6 dhcp pool vlan30
network prefix 1 E:E:E:E::/64
option-group 1
#
ipv6 dhcp option-group 1
#
#
interface Dialer0
mtu 1492
ppp chap password cipher PPPOE PASSWORD
ppp chap user XXX
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user XXX password cipher XXX
dialer bundle enable
dialer-group 1
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1452
ipv6 address auto
ipv6 address auto link-local
ipv6 dhcp client pd 1 rapid-commit option-group 1
#
#
interface Vlan-interface1
description LAN-interface
ip address 192.168.100.1 255.255.255.0
tcp mss 1280
ipv6 mtu 1492
ipv6 dhcp select server
ipv6 dhcp server apply pool pppoe
ipv6 address 1 A:A:A:A::A/64
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
ipv6 nd ra interval 60 10
ipv6 nd ra dns server 240E:56:4000:8000::69 sequence 0
ipv6 nd ra dns server 240E:56:4000::218 sequence 1
#
interface Vlan-interface10
ip address 192.168.10.254 255.255.255.0
ipv6 mtu 1280
nat hairpin enable
ipv6 dhcp select server
ipv6 dhcp server apply pool pppoe
ipv6 address auto link-local
ipv6 address 1 ::1/64
ipv6 dhcp client stateless enable
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
ipv6 nd ra interval 60 10
ipv6 nd ra invalid-delegated-prefix advertise enable
ipv6 nd ra dns server 240E:56:4000:8000::69 sequence 0
ipv6 nd ra dns server 240E:56:4000::218 sequence 1
#
interface Vlan-interface30
ip address 192.168.30.254 255.255.255.0
ipv6 mtu 1280
nat hairpin enable
ipv6 dhcp select server
ipv6 dhcp server apply pool vlan30
ipv6 address auto link-local
ipv6 address 1 E:E:E:E::/64
ipv6 dhcp client stateless enable
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
ipv6 nd ra interval 60 10
ipv6 nd ra invalid-delegated-prefix advertise enable
ipv6 nd ra dns server 240E:56:4000:8000::69 sequence 0
ipv6 nd ra dns server 240E:56:4000::218 sequence 1
#
ip route-static 0.0.0.0 0 Dialer0
ipv6 route-static :: 0 Dialer0
#
www.icn.ink/note/69.html
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
这样不行啊