02.hcie sec和參考hc ipv6上機(jī)指導(dǎo)書(shū)

1、（學(xué)員）IE 2.00目錄構(gòu)建 IPv6 網(wǎng)絡(luò)3部署 IPv6 網(wǎng)絡(luò)3實(shí)驗(yàn)步驟3部署 IPv6 ACL5實(shí)驗(yàn)步驟61 構(gòu)建 IPv6 網(wǎng)絡(luò)1.1 部署IPv6網(wǎng)絡(luò)學(xué)習(xí)目標(biāo)掌握基本 IPv6 地址的配置方法掌握 IPv6 靜態(tài)路由協(xié)議的配置方法掌握 IPv6 display 命令的使用組網(wǎng)設(shè)備兩臺(tái)AR2200 路由器實(shí)驗(yàn)拓?fù)鋱D圖5-1部署IPv6網(wǎng)絡(luò)實(shí)驗(yàn)拓?fù)鋱D實(shí)驗(yàn)步驟Step 1 實(shí)驗(yàn)環(huán)境準(zhǔn)備如果本任務(wù)中您使用的是空配置設(shè)備，則從步驟 1 開(kāi)始配置。如果使用的設(shè)備包含上一個(gè)實(shí)驗(yàn)的配置，請(qǐng)直接從步驟 2 開(kāi)始配置。system-view10：2/6410：1/64sysname R1system-

2、viewsysname R2system-viewsysname R3Step 2 配置 IPv6 地址在路由器的環(huán)回接口上配置 IPv6 全球單播地址，在所有路由器的 G0/0/0 接口配置本地鏈路地址。R1ipv6R1R1-LoR1-LoR1erface loack0ipv6 ack0ipv6ack 0 enableaddress 2001:1:A 64erface GigabitEthernet0/0/0 enableaddress 10:1 64R1-GigabitEthernet0/0/0ipv6R1-GigabitEthernet0/0/0ipv6R3ipv6R3R3-LoR3-L

3、oR3erface lo ack0ipv6ack0ipv6ack 0 enableaddress 2001:1:C 64erface GigabitEthernet0/0/0 enableaddress 10:3 64R3-GigabitEthernet0/0/0ipv6R3-GigabitEthernet0/0/0ipv6Step 3 配置 IPv6 靜態(tài)路由在路由器的環(huán)回接口上配置 IPv6 全球單播地址，在所有路由器的 G0/0/0 接口配置本地鏈路地址。R1ipv6 route-sR3ipv6 route-sic : 0 gigabitethernetic : 0 gigabiteth

4、ernet0/0/0 10：30/0/0 10：1驗(yàn)證結(jié)果配置完成后，查看 IPv6 接口信息。display ipv6erface GigabitEthernet0/0/0ipv6 2001:3:C2001:3:C : 56 data bytes, press CTRL_C to breakReply from 2001:3:Cbytes=56 Sequence=1 hop limit=64 time = 11 msReply from 2001:3:C bytes=56 Sequence=2 hop Reply from 2001:3:C bytes=56 Sequence=3 hop R

5、eply from 2001:3:C bytes=56 Sequence=4 hop Reply from 2001:3:Cbytes=56 Sequence=5 hoplimit=64time=6mslimit=64time=2mslimit=64time=2mslimit=64time=6ms- 2001:3:Csistics -5 packet(s) transmitted5 packet(s) received 0.00% packet lossround-trip min/avg/max = 2/5/11ms1.2 部署IPv6 ACL學(xué)習(xí)目標(biāo)掌握 IPv6 ACL 的配置方法組網(wǎng)設(shè)

6、備兩臺(tái)AR2200 路由器實(shí)驗(yàn)拓?fù)鋱D圖5-1部署IPv6網(wǎng)絡(luò)實(shí)驗(yàn)拓?fù)鋱D10：2/6410：1/64實(shí)驗(yàn)步驟Step 1 創(chuàng)建 ACL在 RouterA 上配置一個(gè) ACL6 規(guī)則，用于來(lái)自 2001:3:B 的 IPv6 報(bào)文, 允許來(lái)自2001:3:C 的 IPv6 報(bào)文,RouterA acl ipv6 number 3001RouterA-acl6-adv-3001 RouterA-acl6-adv-3001RouterA-acl6-adv-3001rule rulequitdeny ipv6 source 2001:3:B /64permit ipv6 source 2001:3:C

7、/64Step 2 定義流分類(lèi)RouterA traffic classifierclass1RouterA-classifier-class1 if-match ipv6 acl 3001RouterA-classifier-class1 quit RouterA traffic behavior behav1 RouterA-behavior-behav1 deny RouterA-behavior-behav1 quit RouterA traffic policy policy1RouterA-trafficpolicy-policy1 classifier class1 behavi

8、or behav1RouterA-trafficpolicy-policy1 quitStep 3 并在接口上應(yīng)用該規(guī)則，RouterAerface gigabitethernet 1/0/0RouterA-GigabitEthernet1/0/0 traffic-policy policy1RouterA-GigabitEthernet1/0/0 quitinbound驗(yàn)證結(jié)果驗(yàn)證配置結(jié)果# 查看 ACL6 的配置信息。RouterA display acl ipv6 3001Advanced IPv6 ACL 3001, 1 ruleAcls sts 5rule 0 deny ipv6 s

9、ource 2001:3:B /64rule 0 permit ipv6 source 2001:3:C /64# 查看流分類(lèi)的配置信息。RouterA display traffic classifier user-defined User Defined Classifier Information: Classifier: class1Operator: OR Rule(s) :if-match ipv6 acl 3001# 查看流策略的配置信息。RouterA display traffic policy user-defined User Defined Traffic Policy Information: Policy: policy1Classifier: class1 Operator: OR Behavior: behav1Deny# 查看流策略的應(yīng)用信息。RouterA display traffic-policy