Configuration example

As shown in Figure 90, an IPv6 network is connected to an IPv4 network through an ISATAP switch. IPv6 hosts reside in the IPv4 network.

Configure the IPv6 hosts to access the IPv6 network through the ISATAP tunnel.

Before configuring an ISATAP tunnel, make sure the corresponding VLAN interfaces have been created on the switch, and that VLAN-interface 101 on the ISATAP switch and the ISATAP host can reach each other.

• Configure the switch:

  # Enable IPv6.

  <Switch> system-view
  [Switch] ipv6
  

  # Specify addresses for interfaces.

  [Switch] interface vlan-interface 100
  [Switch-Vlan-interface100] ipv6 address 3001::1/64
  [Switch-Vlan-interface100] quit
  [Switch] interface vlan-interface 101
  [Switch-Vlan-interface101] ip address 1.1.1.1 255.0.0.0
  [Switch-Vlan-interface101] quit
  

  # Create service loopback group 1 to support the tunnel service.

  [Switch] service-loopback group 1 type tunnel
  

  # Assign GigabitEthernet 1/0/3 to service loopback group 1, and disable STP, NDP, and LLDP on the interface.

  [Switch] interface GigabitEthernet 1/0/3
  [Switch-GigabitEthernet1/0/3] undo stp enable
  [Switch-GigabitEthernet1/0/3] undo ndp enable
  [Switch-GigabitEthernet1/0/3] undo lldp enable
  [Switch-GigabitEthernet1/0/3] port service-loopback group 1
  [Switch-GigabitEthernet1/0/3] quit
  

  # Configure an ISATAP tunnel.

  [Switch] interface tunnel 0
  [Switch-Tunnel0] ipv6 address 2001::5efe:0101:0101 64
  [Switch-Tunnel0] source vlan-interface 101
  [Switch-Tunnel0] tunnel-protocol ipv6-ipv4 isatap
  

  # Disable the RA suppression so that hosts can acquire information such as the address prefix from the RA message released by the ISATAP switch.

  [Switch-Tunnel0] undo ipv6 nd ra halt
  

  # Reference service loopback group 1 on the tunnel.

  [Switch-Tunnel0] service-loopback-group 1
  [Switch-Tunnel0] quit
  

  # Configure a static route to the ISATAP host.

  [Switch] ipv6 route-static 2001:: 16 tunnel 0
  

• Configure the ISATAP host:

  The specific configuration on the ISATAP host is related to its operating system. The following example shows the configuration of the host running the Windows XP.

  # Install IPv6.

  C:\>ipv6 install
  

  # On a Windows XP-based host, the ISATAP interface is usually interface 2. Configure the IPv4 address of the ISATAP router on the interface to complete the configuration on the host. Before doing that, display the ISATAP interface information:

  C:\>ipv6 if 2
  Interface 2: Automatic Tunneling Pseudo-Interface
    Guid {48FCE3FC-EC30-E50E-F1A7-71172AEEE3AE}
    does not use Neighbor Discovery
    does not use Router Discovery
    routing preference 1
    EUI-64 embedded IPv4 address: 0.0.0.0
    router link-layer address: 0.0.0.0
      preferred link-local fe80::5efe:2.1.1.2, life infinite
    link MTU 1280 (true link MTU 65515)
    current hop limit 128
    reachable time 42500ms (base 30000ms)
    retransmission interval 1000ms
    DAD transmits 0
    default site prefix length 48
  

  # A link-local address (fe80::5efe:2.1.1.2) in the ISATAP format was automatically generated for the ISATAP interface. Configure the IPv4 address of the ISATAP switch on the ISATAP interface.

  C:\>ipv6 rlu 2 1.1.1.1
  

  # Display information on the ISATAP interface.

  C:\>ipv6 if 2
  Interface 2: Automatic Tunneling Pseudo-Interface
    Guid {48FCE3FC-EC30-E50E-F1A7-71172AEEE3AE}
    does not use Neighbor Discovery
    uses Router Discovery
    routing preference 1
    EUI-64 embedded IPv4 address: 2.1.1.2
    router link-layer address: 1.1.1.1
      preferred global 2001::5efe:2.1.1.2, life 29d23h59m46s/6d23h59m46s (public)
      preferred link-local fe80::5efe:2.1.1.2, life infinite
    link MTU 1500 (true link MTU 65515)
    current hop limit 255
    reachable time 42500ms (base 30000ms)
    retransmission interval 1000ms
    DAD transmits 0
    default site prefix length 48
  

  # By comparison, it is found that the host acquires the address prefix 2001::/64 and automatically generates the address 2001::5efe:2.1.1.2. Meanwhile, "uses Router Discovery" is displayed, indicating that the router discovery function is enabled on the host. At this time, ping the IPv6 address of the tunnel interface of the switch. If the address is successfully pinged, an ISATAP tunnel is established.

  C:\>ping 2001::5efe:1.1.1.1
  
  Pinging 2001::5efe:1.1.1.1 with 32 bytes of data:
  
  Reply from 2001::5efe:1.1.1.1: time=1ms
  Reply from 2001::5efe:1.1.1.1: time=1ms
  Reply from 2001::5efe:1.1.1.1: time=1ms
  Reply from 2001::5efe:1.1.1.1: time=1ms
  
  Ping statistics for 2001::5efe:1.1.1.1:
      Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
      Minimum = 1ms, Maximum = 1ms, Average = 1ms
  

The ISATAP host can access the host in the IPV6 network.