Belajar Mengkonfigurasi Isatap Tunnel

http://iwing.wordpress.com

http://www.ittelkom.ac.id/pinguin

Penggantian infrastruktur secara langsung pada seluruh jaringan IPv4 menuju ke

IPv6 tidak dapat dilakukan serta merta karena beberapa hal, sehingga dibutuhkan

mekanisme transisi. Mekanisme yang sering digunakan adalah model tunneling. Pada

implementasinya ada banyak mekanisme transisi tunneling yang digunakan, mekanisme tadi

seperti tabel dibawah ini :

Pada kesempatan ini, kita akan belajar mengkonfigurasi isatap tunnel didevice

cisco, Topology yang digunakan adalah sebagai berikut :

----------------------------------------------------------

Membuat Tunnel di router cnc2 dan cnc3

---------------------------------------------------------- cnc2#sh run int tun 1

Building configuration...

Current configuration : 188 bytes

!

interface Tunnel1

no ip address

no ip redirects

ipv6 address 2001:ABAB::/64 eui-64

ipv6 enable

no ipv6 nd ra suppress

tunnel source FastEthernet1/0

tunnel mode ipv6ip isatap

end

cnc2#

cnc3#sh run int tun 1

Building configuration...

Current configuration : 188 bytes

!

interface Tunnel1

no ip address

no ip redirects

ipv6 address 2001:ABAB::/64 eui-64

ipv6 enable

no ipv6 nd ra suppress

tunnel source FastEthernet1/0

tunnel mode ipv6ip isatap

end

cnc3#

The command no ipv6 nd ra suppress is required as the router does not send RA

messages on Tunnel interface (disabled by default).

----------------------------------------------------------

how to check 1 (sh ipv6 int brief)

----------------------------------------------------------

cnc3#sh ipv6 int brief

FastEthernet0/0 [up/up]

FE80::C803:FFF:FE20:8

13::13:1

FastEthernet0/1 [administratively down/down]

unassigned

FastEthernet1/0 [up/up]

unassigned

FastEthernet1/1 [administratively down/down]

unassigned

SSLVPN-VIF0 [up/up]

unassigned

Loopback0 [up/up]

unassigned

Tunnel0 [up/down]

unassigned

Tunnel1 [up/up]

FE80::5EFE:C0A8:1402

2001:ABAB::5EFE:C0A8:1402

cnc3#

cnc2#sh ipv6 int brief

FastEthernet0/0 [up/up]

FE80::C801:8FF:FEAC:8

10::10:1

FastEthernet0/1 [administratively down/down]

unassigned

FastEthernet1/0 [up/up]

unassigned

FastEthernet1/1 [administratively down/down]

unassigned

SSLVPN-VIF0 [up/up]

unassigned

Loopback0 [up/up]

unassigned

Tunnel1 [up/up]

FE80::5EFE:C0A8:1401

2001:ABAB::5EFE:C0A8:1401

cnc2#

[64-bit link-local or global unicast prefix]:0000:5EFE:[IPv4 address of the

ISATAP link]

2001:ABAB::5EFE:C0A8:1402 C0A8:1402 (192.168.20.2)

2001:ABAB::5EFE:C0A8:1401 C0A8:1401 (192.168.20.1)

----------------------------------------------------------

how to check 2 (sh int tun 1)

---------------------------------------------------------- cnc2#sh int tun 1

Tunnel1 is up, line protocol is up

Hardware is Tunnel

MTU 17920 bytes, BW 100 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive not set

Tunnel source 192.168.20.1 (FastEthernet1/0)

Tunnel protocol/transport IPv6 ISATAP

Tunnel TTL 255

Tunnel transport MTU 1480 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input never, output 00:03:01, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops:

0

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

2 packets input, 268 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

11 packets output, 1116 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

cnc2#

cnc3#sh int tunnel 1

Tunnel1 is up, line protocol is up

Hardware is Tunnel

MTU 17920 bytes, BW 100 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive not set

Tunnel source 192.168.20.2 (FastEthernet1/0)

Tunnel protocol/transport IPv6 ISATAP

Tunnel TTL 255

Tunnel transport MTU 1480 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input never, output 00:04:11, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops:

0

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

4 packets input, 536 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

9 packets output, 876 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

cnc3#

----------------------------------------------------------

how to check 3 (ping and traceroute)

---------------------------------------------------------- cnc1#ping ipv6

Target IPv6 address: 13::13:2

Repeat count [5]: 100

Datagram size [100]:

Timeout in seconds [2]:

Extended commands? [no]:

Type escape sequence to abort.

Sending 100, 100-byte ICMP Echos to 13::13:2, timeout is 2 seconds:

!!!!!!!!!!!!!!!!!!!!!!!!..!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!...!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Success rate is 93 percent (93/100), round-trip min/avg/max =

112/283/1824 ms

cnc1#

cnc1#traceroute 13::13:2

Type escape sequence to abort.

Tracing the route to 13::13:2

1 10::10:1 84 msec 128 msec 72 msec

2 2001:ABAB::5EFE:C0A8:1402 160 msec 220 msec 208 msec

3 13::13:2 228 msec * 2676 msec

cnc1#

----------------------------------------------------------

----------------------------------------------------------

"Sekian dulu dan semoga bermanfaat"

Ref:

[1]. Cisco IOS IPv6 Configuration Guide, URL:http://www.cisco.com, (April 2010)

[2]. RFC 4214.