1 / 13

IPV6 實作

IPV6 實作. 李煒 alfred@ntpc.edu.tw. IPV6 Lab. IPV6 Lab 2001:288:2200/39 新北市教網 2001:288:school code:vlan tag::/64 Geteway 2001:288:school code:vlan tag :: ff /64 . IP 網段說明. 未來 IP 網段配置. IPv6 address 分配原則. 2001:288:2200:vlan tag::/64 each vlan in core 2001:288:2201::/48

yvon
Download Presentation

IPV6 實作

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. IPV6實作 李煒 alfred@ntpc.edu.tw

  2. IPV6 Lab IPV6 Lab 2001:288:2200/39新北市教網 2001:288:school code:vlan tag::/64 Geteway2001:288:school code:vlan tag::ff/64

  3. IP網段說明 未來IP網段配置

  4. IPv6 address 分配原則 • 2001:288:2200:vlan tag::/64 • each vlan in core 2001:288:2201::/48 • NS5200 and school L3 • 2001:288:2202/48 - 2001:288:232E/48 • 301 schools → 2001:288:school code:vlan tag::/64

  5. Cisco ipv6指令 • > # (config) # (config-if)# • En • Config t • Ipv6 unicast-routing • Interface vlan XX • Ipv6 enable • Ipv6 address 2001:288:22xx:vid::ff/64 • Exit

  6. IPV4 vs IPV6 • IP • Gateway • Mask • Vlan • Route • Ping • tracert • Ipv6 • Gateway • \64 \48 • Vlan • Ipv6 unicast-routing • Ping • tracert

  7. ipv6 • FE80::/10 Link Local Address • 2XXX: Global Unicast • 3XXX: Global Unicast • FFXX:Multicast • 2001:288:2200/39新北市教網 • When we config ipv6 address, it’s also enables ipv6 for now.

  8. Router 指令參考 • Service timestamps debug uptime • Debug ipv6 nd (Neighbor Discovery) • INCMP imcomplete • NS Neighbor Solicitation • NA Neighbor Advertisment • LLA:Link Layer Address(MAC) • INCMP() ->REACH()->STALE(30’snot flesh anymore)

  9. 業務宣導 • 無線網路現況 • Ntpc • Dlink dsa3600->後端認證系統進行驗證 • Operator • Ntpc-Mobile • L3->Winoc認證系統進行驗證 • Ntpc-WPA2 • Ap->Winoc->後端認證系統進行驗證 • L3 Switch & L2 Switch • 報修處理說明

  10. 學校架構示意圖 未來學校網路架構 TANET DGS-3627 DSA-3600 10G堆疊 DGS-3100-24P DGS-3100-48P DPH-150SE 無線網路 行政電腦 電腦教室 行政電腦 無線網路 DAP-2590 教學教室 教學教室

  11. 架構應用說明—話機 PoE Switch Voice vlan (vid 25) LAN port PC port Voice vlan Intra-2 vlan (vid 20) Intra-2 vlan DPH-150SE LAN port負責傳送兩個vlan的流量至PoE Switch DPH-150SE PC port接取PC

  12. 架構應用說明—無線AP PoE Switch TPC-WPA2 TPC (vid30) TPC TPC-WPA2(vid35) TPC-Mobile(vid36) TPC-Mobile Mgmt (vid1) 每台DAP-2590提供三組SSID, TPC提供web認證功能 TPC-WPA2提供WPA2認證功能 TPC-Mobile提供行動裝置MAC認證功能

  13. 無線AP認證機制說明 DSA-3600 DGS-3627 PoE Switch TPC-WPA2 TPC TPC-Mobile SSID TPC認證透過DSA-3600與後端系統進行驗證 SSID TPC-WAP2則透過DAP-2590與後端認證系統進行驗證 SSID TCP-Mobile則透過DGS-3627與後端系統進行驗證

More Related