© 2006 Cisco Systems, Inc. All rights reserved.IP6FD v2.05-1 IPv6 Services Using Cisco IOS Software Features. - презентация

1 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v IPv6 Services Using Cisco IOS Software Features

2 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 Telnet Support router# telnet 2001:db8:1:1001::f Cisco routers will, by default, receive IPv6 interface addresses on port 23, just as they would for IPv4. The Cisco IOS Telnet client is also IPv6-capable.

3 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 SSH Support Cisco IOS software supports IPv6 SSH: –Can replace Telnet for interactive session on router for added security Authentication is protected. Session is protected. SSH is available in Cisco IOS software with 3DES cryptographic software.

4 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v ssh [-v {1 | 2}] [-c {3des | aes128-cbc | aes192-cbc | aes256-cbc}] [-l userid | -l userid:{number} {ip-address} | -l userid:rotary{number} {ip-address}] [-m {hmac-md5 | hmac-md5-96 | hmac-sha1 | hmac-sha1-96}] [-o numberofpasswordprompts n] [-p port-num] {ip-addr | hostname} [command] router# Connects to SSH server specified as an IPv6 address or a host name Cisco IOS software supports an IPv6 SSH client. Cisco IOS IPv6 SSH Client

5 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v ip ssh {[timeout seconds] | [authentication-retries integer]} router(config)# Configures SSH control variables on your router Cisco IOS IPv6 SSH Server Cisco IOS software supports the IPv6 SSH server. Supported on platforms using Cisco IOS 3DES software show ip ssh router# Displays the version and configuration data for SSH show ssh router# Displays the status of SSH server connections

6 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 Tools These IPv6 applications are available in Cisco IOS software for network diagnostics: traceroute ping HTTP

7 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 TFTP Support TFTP now supports transfers over IPv6. router# copy running-config tftp://2001:db8:700:1234:a:1111:c:7e7e:/running-config

8 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 ping ping supports both IPv4 and IPv6. router# ping [ipv6] 2001:db8:1:1001::f Switch no longer required

9 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS IPv6 HTTP Support Enabled IP HTTP Cisco routers will, by default, listen to IPv6 interface addresses on port 80, just as they would for IPv4. IPv4 HTTP access-class mechanisms do not work with IPv6 ACLs.

10 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v IPv6 Support for CDP CDP: Used to discover protocol addresses and platform information of neighboring devices Runs on all Cisco devices (routers, switches, and so on) CDP IPv6 support: Adds IPv6 address and address-type information

11 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco IOS CDP show Commands These commands display the IPv6 address of the neighbor: show cdp entry {* | device-name[*]} [version] [protocol] router# show cdp neighbors [type number] [detail]

12 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v routerB# show cdp neighbors detail Device ID: routerC Entry address(es): IPv6 address: FE80::208:A3FF:FEAE:3B81 (link-local) IPv6 address: FEC0::2 (site-local) Platform: cisco 2621, Capabilities: Router Switch Interface: FastEthernet0/1, Port ID (outgoing port): FastEthernet0/1 Holdtime : 169 sec... Cisco IOS CDP show Command Example

13 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Cisco Express Forwarding IPv6 Similarities between CEFv6 and CEFv4: Rapid packet forwarding on interfaces Behavior of commands

14 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v [no] ipv6 cef router(config)# Enables central CEF mode. The ip cef command must be enabled first. [no] ipv6 cef distributed router(config)# Enables dCEF mode (7500, GSR). The ip cef distributed command must be enabled first. [no] ipv6 cef accounting [per-prefix] [prefix-length] router(config)# Configures per-prefix or prefix-length accounting. CEF is adapted to support IPv6: CEFv6 uses a subset of the CEFv4 commands. Enabling CEFv6 and dCEFv6

15 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v show cef interface [detail] [statistics] show cef linecard [detail] [internal] show cef not-cef-switched show cef drop router# show commands available for both CEFv6 and CEFv4: Cisco IOS show Commands for CEFv6 and CEFv4

16 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v router# debug commands for CEFv6: debug ipv6 cef drops debug ipv6 cef events debug ipv6 cef hash debug ipv6 cef receive debug ipv6 cef table Cisco IOS IPv6 debug Commands for CEFv6

17 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v Summary Cisco routers are able to use SSH, Telnet, and HTTP over IPv6 transport, making control connections without an IPv4 management network. TFTP, traceroute, ping, and CDP also support IPv6, allowing those standard network management and debugging tools to be used. Cisco CDP supports IPv6 information. CEF and dCEF perform the same functions for IPv6 traffic handling as for IPv4. CEF and dCEF are available on selected Cisco devices.

18 © 2006 Cisco Systems, Inc. All rights reserved.IP6FD v