From: anthony.sequeira@thomson.com
Date: Thu Dec 07 2006 - 11:05:39 ART
Hello again Chee Chew Leong!
The ISATAP tunnel can be between the host and the router - or it can be
from router to router.
As far as the CCIE lab exam goes - my money would be on router to router
tunnels - since the exam writer is not going to want to sacrifice a
router to function as a client-only type system.
Yes - you are right - the IPv6 addresses on the tunnel endpoints are
going to be in the same network! The source address is going to be an
IPv4 address - and no tunnel destination address is going to be
specified.
Here is a sample configuration of ISATAP between two routers:
R1(config)#interface Tunnel12
R1(config-if)# ipv6 address 12:12::/64 eui-64
R1(config-if)# tunnel source 172.16.101.1
R1(config-if)# tunnel mode ipv6ip isatap
R2(config)#interface Tunnel12
R2(config-if)# ipv6 address 12:12::/64 eui-64
R2(config-if)# tunnel source 172.16.102.1
R2(config-if)# tunnel mode ipv6ip isatap
If you examine the Global Unicast address on R1 after this configuration
- you will find it is:
12:12::5EFE:AC10:6501
Remember, 0000:5EFE indicates ISATAP - and AC10:6501 is the tunnel
source converted to binary.
Anthony J. Sequeira
#15626
-----Original Message-----
From: Chee Chew Leong [mailto:cleong3@csc.com]
Sent: Wednesday, December 06, 2006 10:53 PM
To: Sequeira, Anthony (NETg)
Cc: ccielab@groupstudy.com
Subject: RE: isatap configuration
Thanks, Anthony.
I have better undertanding now. The tunnel is between isatap client and
server. Not like 6to4 or others where tunnel is between router to
router.
The isatap ipv6 address should be same segment for server and client.
The
tunnel is form using src/dst ipv4 address.
Am I having the right understanding?
Regards
-----<anthony.sequeira@thomson.com> wrote: -----
To: Chee Chew Leong/ASIA/CSC@CSC, ccielab@groupstudy.com
From: <anthony.sequeira@thomson.com>
Date: 12/06/2006 11:43PM
Subject: RE: isatap configuration
Hello Chee Chew Leong!
Lets assume there is an IPv6 client on the Ethernet 0 segment referenced
below that wants to use ISATAP to communicate with another remote IPv6
host. These hosts are separated by an IPv4 only network. That is why we
need the ISATAP tunnel.
The Ethernet 0 interface referenced below is configured with an IPv4
address only. It does not require an IPv6 address in this configuration.
The IPv6 address that is actually created for this tunnel endpoint will
incorporate the 32-bit IPv4 address from the Ethernet 0 interface
referenced. This enables automatic IPv6-in-IPv4 tunneling.
The global unicast IPv6 address created for this interface will begin
with the specified prefix 2001:0DB8 - then the last 64 bits will be made
up of 0000:5EFE followed by the 32 bits of the IPv4 address from
Ethernet 0. The 0000:5EFE indicates that we are dealing with an ISATAP
tunnel. This same approach will be used for the link-local address that
is generated - but of course that address will be prefixed with FE80.
The configuration on the other tunnel endpoint is typically a mirror of
this configuration.
In order for the tunnel to be used properly - we typically create a
static route entry with a next hop of the global unicast or link-local
ISATAP address of the other tunnel endpoint. Can we use dynamic routing
protocols in conjunction with ISATAP tunnels as opposed to static
routes? Yes and no - this question actually brings up another entire
interesting discussion.
NetMasterClass will have complete training available for download on
IPv6 later this month! This comprehensive training will include full
coverage of all tunneling methods and will include assessment questions
and practice labs for the major topics. For more information - check
out:
http://www.netmasterclass.com/site/cod_fr.php
The IPv6 training will be structured the same way as the Frame Relay
module that they currently have available. This means it will feature
exhaustive coverage of all lab-relevant topics - and beyond.
I certainly hope this helps you grasp the addressing required in ISATAP
tunnels.
Anthony J. Sequeira
#15626
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Chee Chew Leong
Sent: Wednesday, December 06, 2006 9:24 AM
To: 'Cisco certification'
Subject: isatap configuration
I don't understand how isatap work. The Cisco configuration guide only
show
as follow.
ipv6 unicast-routing
interface tunnel 1
tunnel source ethernet 0
tunnel mode ipv6ip isatap
ipv6 address 2001:0DB8::/64 eui-64
no ipv6 nd suppress-ra
If we assume the isatap client/host is on Ethernet0 LAN, do we have to
configure Ethernet0 for IPv6 and what IPv6 address to use?
How the isatap mechanism work? Any good and clear reference?
------------------------------------------------------------------------
------------------------------------------------------------------------
--------------------------------
This is a PRIVATE message. If you are not the intended recipient, please
delete without copying and kindly advise us by e-mail of the mistake in
delivery. NOTE: Regardless of content, this e-mail shall not operate to
bind CSC to any order or other contract unless pursuant to explicit
written
agreement or government initiative expressly permitting the use of
e-mail
for such purpose.
------------------------------------------------------------------------
------------------------------------------------------------------------
--------------------------------
This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART