一.概述:
IPV6 NAT-PT( Network Address Translation - Port Translation)應用與ipv4和ipv6網絡互訪的情況,根據參考連結配置時出現一些問題,是以記錄下來。
參考連結:
<a href="http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080b9a911.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080b9a911.shtml</a>
---配置有些小錯誤:ipv4接口沒有敲ipv6 enable;ipv6接口沒有敲ipv6 nat
<a href="http://blog.sina.com.cn/s/blog_5ec353710101e8mb.html" target="_blank">http://blog.sina.com.cn/s/blog_5ec353710101e8mb.html</a>
---配置有些小錯誤:ipv4接口沒有敲ipv6 enable;并測試時發現單向通不了
二.基本思路:
A.測試環境:
GNS,Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 12.4(24)T7, RELEASE SOFTWARE (fc2)
B.IPV4通路IPV6網絡時,将IPV4位址轉換成帶IPV6 NAT字首的位址
IPV6通路IPV4網絡,使用IPV4轉換後的IPV6位址通路。
C.測試發現處于IPV4和IPV6的雙棧路由器,IPV4的接口需要配置ipv6 nat和ipv6 enable
D.測試環境ip cef和ipv6 cef對NAT轉換有時有影響,有時沒有影響
E.不知是否是IOS的問題,隻配置v6v4的NAT,通不了,路由器不會自動根據nat字首将IPV4的位址轉成IPV6的位址
F.經過測試,雙棧路由器配置IPV6位址的接口可以不用配置Iipv6 enable,而隻配置IPV4位址的接口需要敲ipv6 enable
G.動态NAT-PT,V6可以主動通路V4(使用V4位址池),還是V4可以主動通路V6(使用V6位址池),跟動态NAT類似,每次都需要占用一個位址,而不能像PAT那樣
三.測試拓撲:
<a href="http://blog.51cto.com/attachment/201312/101950771.jpg" target="_blank"></a>
四.配置步驟:
A.R1:
interface FastEthernet0/0
ip address 192.168.30.1 255.255.255.0
no shut
!
ip route 0.0.0.0 0.0.0.0 192.168.30.2
B.R2:
ip address 192.168.30.2 255.255.255.0
ipv6 enable
ipv6 nat
interface FastEthernet0/1
ipv6 address 2001:DB8:3002::2/64
!
ipv6 route ::/0 2001:DB8:3002::3
ipv6 nat v4v6 source 192.168.30.1 2000::C0A8:1E01
ipv6 nat v6v4 source 3001:11:0:1::1 150.11.3.1
ipv6 nat prefix 2000::/96
C.R3:
interface Loopback0
ipv6 address 3001:11:0:1::1/64
ipv6 address 2001:DB8:3002::3/64
ipv6 route ::/0 2001:DB8:3002::2
五.測試:
R1#ping 150.11.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 150.11.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/87/168 ms
R1#
R3#debug ipv6 icmp
ICMP Packet debugging is on
R3#
*Dec 28 17:24:06.699: ICMPv6: Received echo request, Src=2000::C0A8:1E01, Dst=3001:11:0:1::1
*Dec 28 17:24:06.703: ICMPv6: Sent echo reply, Src=3001:11:0:1::1, Dst=2000::C0A8:1E01
*Dec 28 17:24:06.779: ICMPv6: Received echo request, Src=2000::C0A8:1E01, Dst=3001:11:0:1::1
*Dec 28 17:24:06.783: ICMPv6: Sent echo reply, Src=3001:11:0:1::1, Dst=2000::C0A8:1E01
*Dec 28 17:24:06.839: ICMPv6: Received echo request, Src=2000::C0A8:1E01, Dst=3001:11:0:1::1
*Dec 28 17:24:06.843: ICMPv6: Sent echo reply, Src=3001:11:0:1::1, Dst=2000::C0A8:1E01
*Dec 28 17:24:06.907: ICMPv6: Received echo request, Src=2000::C0A8:1E01, Dst=3001:11:0:1::1
*Dec 28 17:24:06.907: ICMPv6: Sent echo reply, Src=3001:11:0:1::1, Dst=2000::C0A8:1E01
*Dec 28 17:24:07.015: ICMPv6: Received echo request, Src=2000::C0A8:1E01, Dst=3001:11:0:1::1
*Dec 28 17:24:07.015: ICMPv6: Sent echo reply, Src=3001:11:0:1::1, Dst=2000::C0A8:1E01
R2#show ipv6 nat translations
Prot IPv4 source IPv6 source
IPv4 destination IPv6 destination
--- --- ---
192.168.30.1 2000::C0A8:1E01
--- 150.11.3.1 3001:11:0:1::1
--- ---
本文轉自 碧雲天 51CTO部落格,原文連結:http://blog.51cto.com/333234/1346328,如需轉載請自行聯系原作者