IPv6 addressing and unicast routing are disable by default on Cisco switches, all those features has to be enabled before we can configure them.
Here is default IPv6 configuration:
Feature
|
Default Setting
| ||
SDM template
|
Advance desktop. Default is advanced template
| ||
IPv6 routing
|
Disabled globally and on all interfaces
| ||
CEFv6 or dCEFv6
|
Disabled (IPv4 CEF and dCEF are enabled by default)
| ||
IPv6 addresses
|
None configured
|
No, SDM is not Security Device Manager, this actually stand for Switch Database Manager.
SDM templates are used to configure system resources in the switch to optimize support for specific features and to balance resources, in this case we are going to use for IPv6. For more details about SDM template go to: Cisco doc about SDM Template
Let’s start with changing default configuration.
Fist check for information about SDM template by using command show sdm prefer.
SW_SEC_LAB#show sdm prefer
The current template is "desktop default" template.
The selected template optimizes the resources in
the SW_SEC_LAB to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses: 6K
number of IPv4 IGMP groups + multicast routes: 1K
number of IPv4 unicast routes: 8K
number of directly-connected IPv4 hosts: 6K
number of indirect IPv4 routes: 2K
number of IPv4 policy based routing aces: 0
number of IPv4/MAC qos aces: 0.5K
number of IPv4/MAC security aces: 1K
! Using dual-ipv4-and-ipv6 you can configure you switch for both ipv4 and ipv6 routing, but you
! will have to enable them, little bit later how to configure that feature.
! will have to enable them, little bit later how to configure that feature.
SW_SEC_LAB(config)#sdm prefer dual-ipv4-and-ipv6 routing
Changes to the running SDM preferences have been stored, but cannot take effect
until the next reload.
Use 'show sdm prefer' to see what SDM preference is currently active.
! You will have to Reload you switch after issued command above.
SW_SEC_LAB#reload
System configuration has been modified. Save? [yes/no]: y
Building configuration...
[OK]
Proceed with reload? [confirm]
! After switch is up and running, check for SDM template
SW_SEC_LAB#show sdm prefer
The current template is "desktop IPv4 and IPv6 routing" template.
The selected template optimizes the resources in
the SW_SEC_LAB to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses: 1.5K
number of IPv4 IGMP groups + multicast routes: 1K
number of IPv4 unicast routes: 2.75K
number of directly-connected IPv4 hosts: 1.5K
number of indirect IPv4 routes: 1.25K
number of IPv6 multicast groups: 1.125k
number of directly-connected IPv6 addresses: 1.5K
number of indirect IPv6 unicast routes: 1.25K
number of IPv4 policy based routing aces: 0.25K
number of IPv4/MAC qos aces: 0.5K
number of IPv4/MAC security aces: 0.5K
number of IPv6 policy based routing aces: 0.25K
number of IPv6 qos aces: 0.5K
number of IPv6 security aces: 0.5K
! Now let’s enable routing on switch, I will enable both IPv4 and IPv6 routing, but to run IP
! routing protocols you will have to have IPServices image on the switch, but that is another
! story J
! routing protocols you will have to have IPServices image on the switch, but that is another
! story J
SW_SEC_LAB(config)#ipv6 unicast-routing
SW_SEC_LAB(config)#ip routing
! Now we are enabled to configure ip addresses on switch for SVI or no switched ports.
SW_SEC_LAB(config-if)#ipv6 address ?
WORD General prefix name
X:X:X:X::X IPv6 link-local address
X:X:X:X::X/<0-128> IPv6 prefix
autoconfig Obtain address using autoconfiguration
dhcp Obtain a ipv6 address using dhcp
SW_SEC_LAB(config-if)#ipv6 address 2001:aaaa:bbbb:cccc:0001::/64 ?
anycast Configure as an anycast
eui-64 Use eui-64 interface identifier
SW_SEC_LAB(config-if)#ipv6 address 2001:aaaa:bbbb:cccc:0001::/64 eui-64
SW_SEC_LAB(config-if)#
SW_SEC_LAB#
SW_SEC_LAB#conf ter
Enter configuration commands, one per line. End with CNTL/Z.
SW_SEC_LAB(config)#inter fas
SW_SEC_LAB(config)#inter fastEthernet 1/0/1
SW_SEC_LAB(config-if)#no switchport
SW_SEC_LAB(config-if)#ipv6 address 2001:aaaa:bbbb:dddd:0001::/64 eui-64
SW_SEC_LAB(config-if)#exit
No comments:
Post a Comment