现在需要使用ipv6 与路由器互联,不能影响原ipv4,核心这边需要怎么做
进vlanif100配置一个ipv6的地址吗?
不知道vlanif能不能配置多个IP哦
S5560-54S-EI 两台堆叠作为核心交换机,核心这么与路由器互联的:
1、创建vlan100:
vlan 100
description TO_RT
2、配置管理vlan的vlanif
interface vlan-interface100
ip address 192.168.100.2 255.255.255.0
3、创建链路聚合组
interface Bridge-Aggregation999
port access vlan 100
link-aggregation mode dynamic
1、两个47端口加入vlan100、加入链路聚合组20
interface GigabitEthernet1/0/47
port link-mode bridge
port access vlan 100
port link-aggregation group 20
interface GigabitEthernet2/0/47
port link-mode bridge
port access vlan 100
port link-aggregation group 20
路由表:
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 60 0 192.168.100.1 Vlan100
... ...
现在需要使用ipv6 与路由器互联,不能影响原ipv4,核心这边需要怎么做呢?进vlanif100配置一个ipv6的地址吗?不知道vlanif能不能配置多个IP哦
核心交换机上已存在的ipv6地址池:
ipv6 dhcp pool 1
network fc00:1003:1005::/64
dns-server
gateway-list fc00:1003:1005::1
interface Vlan-interface25
ipv6 dhcp select server
ipv6 address fc00:1003:1005::1/64
ipv6 nd autoconfig managed-address-flag
ipv6 nd autoconfig other-flag
undo ipv6 nd ra halt
有一台胖ap,接在了核心的vlan24,ap的配置是:
[WA4620i-ACN]display current-configuration
#
version 5.20, Release 1508P03
#
sysname WA4620i-ACN
#
domain default enable system
#
ipv6
#
telnet server enable
#
undo wlan-client-isolation enable
#
port-security enable
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
vlan 24
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool ipv6pool
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$T/chYu8DJsOyL/UmqAmYUwYBLBZR7dkqduuS2vI=
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-sate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid service1
#
wlan service-template 2 crypto
ssid h3c-ipv6
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
security-ie wpa
gtk-rekey client-offline enable
fast-association enable
service-template enable
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.50 255.255.255.0
#
interface Vlan-interface24
undo ipv6 nd ra halt
ipv6 address dhcp-alloc
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/2
description ith
port link-type trunk
port trunk permit vlan all
#
interface WLAN-BSS1
port access vlan 24
#
interface WLAN-BSS32
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS34
port link-type hybrid
port hybrid vlan 1 24 untagged
port hybrid pvid vlan 24
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==
#
interface WLAN-BSS35
port link-type hybrid
port hybrid vlan 1 24 untagged
port hybrid pvid vlan 24
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher $c$3$U9akTY5hNJaFoniK8X+VWsmnSYdq5NpG1RshgA==
#
interface WLAN-Radio1/0/1
service-template 2 interface wlan-bss 34
#
interface WLAN-Radio1/0/2
radio-type dot11g
channel 6
service-template 1 interface wlan-bss 33
service-template 2 interface wlan-bss 35
#
undo info-center enable
#
dhcp enable
#
arp-snooping enable
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
[WA4620i-ACN]
[WA4620i-ACN]
[WA4620i-ACN]sa fo
[WA4620i-ACN]sa force .......
Configuration is saved to device successfully.
[WA4620i-ACN]dis cu
[WA4620i-ACN]dis current-configuration
#
version 5.20, Release 1508P03
#
sysname WA4620i-ACN
#
domain default enable system
#
ipv6
#
telnet server enable
#
undo wlan-client-isolation enable
#
port-security enable
#
password-recovery enable
#
undo attack-defense tcp fragment enable
#
vlan 1
#
vlan 24
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool ipv6pool
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$T/chYu8DJsOyL/UmqAmYUwYBLBZR7dkqduuS2vI=
authorization-attribute level 3
service-type telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 clear
ssid service1
#
wlan service-template 2 crypto
ssid h3c-ipv6
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
security-ie wpa
gtk-rekey client-offline enable
fast-association enable
service-template enable
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.50 255.255.255.0
#
interface Vlan-interface24
undo ipv6 nd ra halt
ipv6 address dhcp-alloc
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/2
description ith
port link-type trunk
port trunk permit vlan all
#
interface WLAN-BSS1
port access vlan 24
#
interface WLAN-BSS32
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS33
port link-type hybrid
port hybrid vlan 1 untagged
port hybrid pvid vlan 24
qos trust dot11e
#
interface WLAN-BSS34
port link-type hybrid
port hybrid vlan 1 24 untagged
port hybrid pvid vlan 24
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher
#
interface WLAN-BSS35
port link-type hybrid
port hybrid vlan 1 24 untagged
port hybrid pvid vlqn 24
port-security port-moee psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher
#
interface WLAN-Radio1/0/1
service-template 2 interface wlan-bss 34
#
interface WLAN-Radio1/0/2
radio-type dot11g
channel 6
service-template 1 interface wlan-bss 33
service-template 2 interface wlan-bss 35
#
undo info-center enable
#
dhcp enable
#
arp-snooping enable
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
[WA4620i-ACN] qu
[WA4620i-ACN]quit
胖ap就是做二层使用的,手机与胖ap可以得到来自核心的地址
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
请问下可以这样配置吗:核心:int vlan 100 ipv6 address FC00:1002:1005::/64 eui-64 路由器:ipv6 address FC00:1002:1004::/64 eui-64 谢谢
FC地址就不要用了,配置全球单播地址