Wednesday, January 10, 2018

Overlay VPN task #9. LISP part 2.

Topology:



Use configuration from Overlay VPN task #8 as initial configuration for this task.

Requirements: 

Site A has been allocated an IPv6 prefix 2001:1::/32.
Site B has been allocated an IPv6 prefix 2001:3::/32.

1. Enable IPv6 routing on routers R1,R2, R3 and R4.
2. Use the following networks to connect the devices:
R1-R2: 2001:1:0:12::/64
R3-R4: 2001:3:0:34::/64
3. Configure static default route to provide connectivity for routers R2 and R4.
4. Configure the  network to provide IPv6 connectivity between Site 1 and Site 2.
5. Do not enable IPv6 routing on routers R5, R6, R8 and R9.
6. Do not use "interface tunnel" command. 

Solution:

Highlight the text below to reveal the solution.

This solution requires understanding of LISP configuration with IPv4 and IPv6 EID addresses.

Note that this type of solution can be used as IPv6 transition mechanism, when use of arbitrary IPv6 prefixes at each site is required.

R1:


ipv6 unicast-routing
!
interface Ethernet0/2
 ip address 10.1.12.1 255.255.255.0
 ipv6 address 2001:1:0:12::1/64
!
!
router lisp
 database-mapping 10.1.0.0/16 35.0.15.1 priority 100 weight 50
 database-mapping 10.1.0.0/16 38.0.18.1 priority 100 weight 50
 database-mapping 2001:1::/32 35.0.15.1 priority 100 weight 50
 database-mapping 2001:1::/32 38.0.18.1 priority 100 weight 50
 ipv4 itr map-resolver 35.0.57.7
 ipv4 itr map-resolver 39.0.109.10
 ipv4 itr
 ipv4 etr map-server 35.0.57.7 key STRONG
 ipv4 etr map-server 39.0.109.10 key STRONG
 ipv4 etr
 ipv6 itr map-resolver 35.0.57.7
 ipv6 itr map-resolver 39.0.109.10
 ipv6 itr
 ipv6 etr map-server 35.0.57.7 key STRONG
 ipv6 etr map-server 39.0.109.10 key STRONG
 ipv6 etr
 exit
!


R2:


ipv6 unicast-routing
!
interface Ethernet0/0
 ip address 10.1.12.2 255.255.255.0
 ipv6 address 2001:1:0:12::2/64
!
ipv6 route ::/0 2001:1:0:12::1


R3:


ipv6 unicast-routing
!
interface Ethernet0/2
 ip address 10.3.34.3 255.255.255.0
 ipv6 address 2001:3:0:34::3/64
!
!
router lisp
 database-mapping 10.3.0.0/16 36.0.36.3 priority 100 weight 50
 database-mapping 10.3.0.0/16 39.0.39.3 priority 100 weight 50
 database-mapping 2001:3::/32 36.0.36.3 priority 100 weight 50
 database-mapping 2001:3::/32 39.0.39.3 priority 100 weight 50
 ipv4 itr map-resolver 35.0.57.7
 ipv4 itr map-resolver 39.0.109.10
 ipv4 itr
 ipv4 etr map-server 35.0.57.7 key STRONG
 ipv4 etr map-server 39.0.109.10 key STRONG
 ipv4 etr
 ipv6 itr map-resolver 35.0.57.7
 ipv6 itr map-resolver 39.0.109.10
 ipv6 itr
 ipv6 etr map-server 35.0.57.7 key STRONG
 ipv6 etr map-server 39.0.109.10 key STRONG
 ipv6 etr
 exit
!


R4:

ipv6 unicast-routing
!
interface Ethernet0/0
 ip address 10.3.34.4 255.255.255.0
 ipv6 address 2001:3:0:34::4/64
!
ipv6 route ::/0 2001:3:0:34::3


R7 & R10:


!
vrf definition MRMS
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
!
router lisp
 site S1
  authentication-key STRONG
  eid-prefix 10.1.0.0/16
  eid-prefix 2001:1::/32
  exit
 !
 site S3
  authentication-key STRONG
  eid-prefix 10.3.0.0/16
  eid-prefix 2001:3::/32
  exit
 !
 ipv4 map-server
 ipv4 map-resolver
 ipv4 alt-vrf MRMS
 ipv6 map-server
 ipv6 map-resolver
 ipv6 alt-vrf MRMS
 exit
!




Verification:


R2#traceroute 2001:3:0:34::4
Type escape sequence to abort.
Tracing the route to 2001:3:0:34::4

  1 2001:1:0:12::1 20 msec 5 msec 5 msec
  2 2001:3:0:34::3 1 msec 0 msec 0 msec
  3 2001:3:0:34::4 37 msec 5 msec 4 msec


No comments:

Post a Comment