Belajar Mengkonfigurasi Isatap Tunnel

http://iwing.wordpress.com
http://www.ittelkom.ac.id/pinguin

Penggantian infrastruktur secara langsung pada seluruh jaringan IPv4 menuju ke

IPv6 tidak dapat dilakukan serta merta karena beberapa hal, sehingga dibutuhkan
mekanisme transisi. Mekanisme yang sering digunakan adalah model tunneling. Pada
implementasinya ada banyak mekanisme transisi tunneling yang digunakan, mekanisme tadi
seperti tabel dibawah ini :
 Pada kesempatan ini, kita akan belajar mengkonfigurasi isatap tunnel didevice
cisco, Topology yang digunakan adalah sebagai berikut :

----------------------------------------------------------
Membuat Tunnel di router cnc2 dan cnc3
----------------------------------------------------------
cnc2#sh run int tun 1
Building configuration...

Current configuration : 188 bytes

!
interface Tunnel1
no ip address
no ip redirects
ipv6 address 2001:ABAB::/64 eui-64
ipv6 enable
no ipv6 nd ra suppress
tunnel source FastEthernet1/0
tunnel mode ipv6ip isatap
end

cnc2#
cnc3#sh run int tun 1
Building configuration...

Current configuration : 188 bytes

!
interface Tunnel1
no ip address
no ip redirects
ipv6 address 2001:ABAB::/64 eui-64
ipv6 enable
no ipv6 nd ra suppress
tunnel source FastEthernet1/0
tunnel mode ipv6ip isatap
end

cnc3#

The command no ipv6 nd ra suppress is required as the router does not send RA
messages on Tunnel interface (disabled by default).
----------------------------------------------------------
how to check 1 (sh ipv6 int brief)
----------------------------------------------------------

cnc3#sh ipv6 int brief

FastEthernet0/0 [up/up]
FE80::C803:FFF:FE20:8
13::13:1
FastEthernet0/1 [administratively down/down]
unassigned
FastEthernet1/0 [up/up]
unassigned
FastEthernet1/1 [administratively down/down]
unassigned
SSLVPN-VIF0 [up/up]
unassigned
Loopback0 [up/up]
unassigned
Tunnel0 [up/down]
unassigned
Tunnel1 [up/up]
FE80::5EFE:C0A8:1402
2001:ABAB::5EFE:C0A8:1402
cnc3#

cnc2#sh ipv6 int brief

FastEthernet0/0 [up/up]
FE80::C801:8FF:FEAC:8
10::10:1
FastEthernet0/1 [administratively down/down]
unassigned
FastEthernet1/0 [up/up]
 unassigned
FastEthernet1/1 [administratively down/down]
unassigned
SSLVPN-VIF0 [up/up]
unassigned
Loopback0 [up/up]
unassigned
Tunnel1 [up/up]
FE80::5EFE:C0A8:1401
2001:ABAB::5EFE:C0A8:1401
cnc2#

[64-bit link-local or global unicast prefix]:0000:5EFE:[IPv4 address of the

ISATAP link]

2001:ABAB::5EFE:C0A8:1402 C0A8:1402 (192.168.20.2)

2001:ABAB::5EFE:C0A8:1401 C0A8:1401 (192.168.20.1)

----------------------------------------------------------
how to check 2 (sh int tun 1)
----------------------------------------------------------
cnc2#sh int tun 1
Tunnel1 is up, line protocol is up
Hardware is Tunnel
MTU 17920 bytes, BW 100 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 192.168.20.1 (FastEthernet1/0)
Tunnel protocol/transport IPv6 ISATAP
Tunnel TTL 255
Tunnel transport MTU 1480 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input never, output 00:03:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops:
0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
2 packets input, 268 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
11 packets output, 1116 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
cnc2#
cnc3#sh int tunnel 1
Tunnel1 is up, line protocol is up
Hardware is Tunnel
MTU 17920 bytes, BW 100 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 192.168.20.2 (FastEthernet1/0)
Tunnel protocol/transport IPv6 ISATAP
Tunnel TTL 255
Tunnel transport MTU 1480 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input never, output 00:04:11, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops:
0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4 packets input, 536 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
9 packets output, 876 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
cnc3#
----------------------------------------------------------
how to check 3 (ping and traceroute)
----------------------------------------------------------
cnc1#ping ipv6
Target IPv6 address: 13::13:2
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]:
Extended commands? [no]:
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 13::13:2, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!..!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!...!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 93 percent (93/100), round-trip min/avg/max =
112/283/1824 ms
cnc1#
cnc1#traceroute 13::13:2

Type escape sequence to abort.

Tracing the route to 13::13:2

1 10::10:1 84 msec 128 msec 72 msec

2 2001:ABAB::5EFE:C0A8:1402 160 msec 220 msec 208 msec
3 13::13:2 228 msec * 2676 msec
cnc1#

----------------------------------------------------------

----------------------------------------------------------
"Sekian dulu dan semoga bermanfaat"

Ref:
[1]. Cisco IOS IPv6 Configuration Guide, URL:http://www.cisco.com, (April 2010)
[2]. RFC 4214.