1 Use of VLANs for IPv4-IPv6 Coexistence in Enterprise Networks presented by tech3 R322 rfc 4554

2 VLAN Overview - 1 3rd floor 2nd floor 1st floor SALES ADMIN ENG physical LAN = A broadcast domain

3 VLAN Overview - 2 3rd floor 2nd floor 1st floor SALES ADMIN ENG physical LAN = A broadcast domain !?

4 VLAN Overview - 3 3rd floor 2nd floor 1st floor SALESADMINENG A VLAN = A broadcast domain = Logical network (subnet) Segmentation Flexibility Security

5 VLAN Operations - 1 Switch A ADMIN VLAN SALES VLAN ENG VLAN Switch B ADMIN VLAN SALES VLAN ENG VLAN Each logical VLAN is like a separate physical bridge VLANs can span across multiple switches

6 VLAN Operations - 2 Each logical VLAN is like a separate physical bridge VLANs can span across multiple switches Trunks carries traffic for multiple VLANs Trunk Fast Ethernet Switch A ADMIN VLAN SALES VLAN ENG VLAN Switch B ADMIN VLAN SALES VLAN ENG VLAN

7 For a LAN environment… IPv6 host IPv4 host Layer 2 switch IPv6 host IPv4 host Can be treated as separate LANs noise

8 Routing works…. IPv6 host IPv4 host Layer 2 switch IPv6 only router R1 IPv4 only router R2

9 Separate to 2 domains IPv6 host IPv4 host Layer 2 switch IPv6 host IPv4 host

10 Pure IPv4/IPv6.. R R R Data Link Network VLAN trunking IPv6 hosts Vlan 19 IPv4 only router IPv6 only router IPv6 hosts Vlan 19 IPv6 hosts Vlan 19 A case for providing pure IPv4 and pure IPv6 by using same physical link

11 Congruent IPv4 and IPv6 subnets IPv6 hostIPv4 host Dual stack router IPv4 /IPv6 R Layer 2 switch Dual stack host

12 A mix of IPv4 and IPv6 Solutions

13 Cisco cmd: sh run int fa9/35 ! interface FastEthernet9/35 description "R3-R0-1" no ip address switchport switchport access vlan 39 switchport mode access end

14 Cisco cmd: sh run int vlan39 interface Vlan39 description "Computer Classroom" ip address ip access-group 139 in ip helper-address no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow ip igmp snooping querier ip policy route-map ADSL1 !

15 Cisco cmd: show vlan 39 VLAN0039 active Fa9/35 41 VLAN0041 active Gi7/43 47 VLAN0047 active Fa9/24 80 VLAN0080 active Fa9/18

16 Example: Create vlan of Layer 2

17 Example: Delete vlan of Layer 2

18 Example: Delete vlan of Layer 2

19 Example: create a routing interface

20 Example: create a IPv6 routing interface

21 Example: assign an interface to a vlan

22 Example: assign an interface to a vlan

23 取自 page5 try to remember…..

24 Draft-ietf-ngtrans-isatap-13.txt Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) 取自 RFC 4212

25 ISATAP The primary function of ISATAP is to allow hosts that are multiple IPv4 hops away from an IPv6 router to participate in the IPv6 network by automatically tunneling IPv6 packets over IPv4 to the next-hop address. Example: ISATAP host communicates with IPv6 host (no ISATAP support). The ISATAP host is isolated in an IPv4 network whereas the IPv6 host is a IPv6 network IPv4Infrastructure HOST B ISATAP Supported IPv6 Network IPv6 Network IPv6 HOST 取自

26 ISATAP

27 ISATAP In the reverse direction, the ISATAP router automatically performs IPv6-in-IPv4 tunneling for packets from the native IPv6 host to the ISATAP host even though the native IPv6 host has no knowledge of the legacy IPv4 infrastructure or addressing architecture. IPv4Infrastructure HOST B ISATAP Supported IPv6 Network IPv6 Network IPv6 HOST 取自

28 Construction of ISATAP address ISATAP interface identifier can be combined with any 64-bit prefix (including 6to4 prefixes) to form an RFC 2373 compliant IPv6 globally aggregatable unicast address. IPv4 address inside EUI-64 interface identifier ::0:5EFE:A.B.C.D for IPv4 address A.B.C.D The 0:5EFE portion is formed from the combination of the Oganizational Unit Identifier (OUI) that is assigned to IANA, and a type that indicates an embedded IPv4 address (FE). Interface IdentifierPrefix ISATAP Prefix Specially constructed EUI64 Interface ID 64-bits ISATAP Address Format 取自

29 ISATAP Address Example If TYPE = 0xFF and TSE = 0xFE, TSD contains legacy EUI48 (TSE = 0xFF reserved by IEEE). If TYPE = 0xFE, TSE and TSD together contain embedded IPv4 address. IPv4 address is: routing prefix is: 3FFE:1A05:510:2412 ISATAP IPv6 address is: OUIExtension ID 24-bits40-bits EUI-64 Format Interface Identifier 00 5eTYPETSETSD :0:5EFE:3FFE:1A05:510: Link-local variant is: FE80::0:5EFE: Specially constructed EUI64 Interface ID 取自

30 ISATAP Operation Simple Deployment Scenario of ISATAP (Hosts….) The Automatic Tunneling Pseudo-Interface uses the link-local ISATAP address assigned to the interface as a source, and uses the last 32 bits in the source and destination IPv6 addresses (corresponding to the embedded IPv4 addresses) as the source and destination IPv4 addresses FE80::5EFE: IPv4Infrastructure IPv6 Header IPv6 Data IPv6 Header IPv6 Data IPv4 Header FE80::5EFE: HOST A ISATAP Supported HOST B ISATAP Supported IPv6 Header IPv6 Data Src = FE80::5EFE: Dst = FE80::5EFE: Src = FE80::5EFE: Dst = FE80::5EFE: Src = Dst = 取自

31 ISATAP Operation Simple Deployment Scenario of ISATAP (Routers…) IPv6 Network IPv6 Network IPv4 Network IPv6 in IPv4 ISATAP IPv6 HOST ISATAP HOST 3FFE:1A05: :5EFE: IPv6 Header IPv6 Data 3FFE:1A05: :5EFE: IPv6 Header IPv6 Data IPv4 Header IPv6 Header IPv6 Data Src = 3FFE:1A05: :5EFE: Dst = 3FFE:3600:8::1 Src = Dst = Src = 3FFE:1A05: :5EFE: Next = 3FFE:1A05: :5EFE: Dst = 3FFE:3600:8::1 取自

32 Thank you!