内联 6rd 和 6to4 软线
内联 6rd 和 6to4 配置准则
配置和使用内联 6rd 和 6to4 时,请记住以下几点。
单个线卡上最多可配置 1024 个软线集中器。
来自客户边缘的第 6 个 IPv4 数据包的重组未作为此版本的一部分添加。
不支持第 6 个组播。
IPv4 访问网络中(CPE 和边界中继之间)中生成的任何 ICMPv4 错误都将被丢弃在边界中继上。它们不会转换为 IPv6 错误并转发至 IPv6 端。
6rd/6to4 只能使用下一跃点样式的服务接口配置(而非接口样式)配置任播和负载平衡。
对于流向第 6 条隧道的数据包,不使用 si- 接口输入功能。
来自第 6 个隧道的流量带宽受可用 PFE 带宽的限制;流向第 6 条隧道的流量带宽受内部 VRF 环路带宽的限制。层次结构下的
[edit chassis]SI-IFD 环路带宽配置对第 6 个环路带宽没有影响。使用 IPv4 标头封装后,如果数据包长度大于下行链路数据包的隧道 MTU,则数据包将作为 v4 MTU 错误丢弃。对于这些数据包丢弃,
ICMPv6 packet too big error消息将被发送回发送方。通常,第 6 条隧道 MTU 配置较高的值,因此,如果数据包大小大于配置的值,则出口接口(朝向 IPv4 接入网络)将发生分段。
配置内联 6rd
MX 系列路由器上的所有模块化端口集中器 (MPC) 线卡上都支持 Junos OS 内联第 6 联。这为客户节省了将 MS-DPC 用于所需隧道、封装和解封装过程的成本。6to4 支持任播(仅限下一跳服务接口)。第 6 个域之间的流量也支持发夹。
Junos OS 在以下 MPC 上支持内联 6rd:
-
MPC5 和 MPC6 — 从 Junos OS 15.1R3 版开始支持。
-
MPC7、MPC8 和 MPC9 — 从 Junos OS 17.2R1 版开始支持。
-
MPC10E-15C-MRATE 和 MPC10E-10C-MRATE —从 Junos OS 20.3R1 版开始支持。
-
MX2K-MPC11E — 从 Junos OS 20.3R1 版开始支持。
要实现内联功能,请将 MPC 上的服务接口配置为内联服务接口 (si-),而不是多服务 (ms-) 接口。
配置内联服务的带宽
您必须为用于内联第六处理的模块化端口集中器 (MPC) 上的内联服务提供带宽配置。
要配置带宽:
user@host# set chassis fpc mpc-number pic logical-interface-number inline-services bandwidth bandwidth
例如:
user@host# set chassis fpc 0 pic 0 inline-services bandwidth 10g
配置接口
为第 6 控制和数据配置 si- 接口。必须在端口 0 上配置第 6 个服务。
要配置 si- 接口,请执行以下作:
配置软线集中器和规则
为客户边缘定义用于通过 IPv4 数据包封装和解封装 IPv6 的软线集中器和规则。
要定义软线集中器,请执行以下作:
要配置软线规则:
-
指定软线规则,指定要通过隧道传输的流量方向以及要使用的第 6 个软线集中器。
user@host# set services softwire rule softwire-rule-name match-direction match-direction term rule-term-number then v6rd concentrator-name
例如:
user@host# set services softwire rule swire01-r1 match-direction input term t1 then v6rd swire01-rd1
配置服务集
要为第六次处理配置接口样式或下一跳服务集:
配置路由实例
要配置路由实例,请执行以下作:
示例:第 6 和 6to4 配置
M Series 路由器上的多服务 100、400 和 500 PIC 以及配备多服务 DPC 的 MX 系列 路由器支持 6rd 和 6to4 功能。带有 MS-MPC 或 MS-MIC 的 MX 系列 路由器支持内联 6rd 和内联 6to4 功能。
示例:第 6 个使用接口样式服务集配置
chassis {
fpc 0 {
pic 0 {
inline-services {
bandwidth 10g;
}
}
}
}
services {
service-set vrf-intf-service-set {
softwire-rules swire01-r1;
interface-service {
service-interface si-0/0/0.0;
}
}
softwire {
softwire-concentrator {
v6rd swire01-rd1 {
softwire-address 10.30.30.1;
ipv4-prefix 10.10.0.0/16;
v6rd-prefix 2001:db8::/32;
mtu-v4 9192;
}
}
rule swire01-r1 {
match-direction input;
term t1 {
then {
v6rd swire01-rd1;
}
}
}
}
}
interfaces {
si-0/0/0 {
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
ge-0/2/7 {
unit 0 {
family inet {
address 10.10.10.1/16;
}
}
}
ge-0/2/8 {
unit 0 {
family inet6 {
address 2001:db8:3abc::1/64;
}
}
}
}
routing-instances {
v6rd-vrf {
instance-type vrf;
interface si-0/0/0.1;
interface ge-0/2/7.0;
route-distinguisher 10.1.1.1:1;
vrf-target target:100:100;
}
}
示例:第 6 个跃点样式服务集配置
chassis {
fpc 0 {
pic 0 {
inline-services {
bandwidth 10g;
}
}
}
}
services {
service-set vrf-nh-service-set {
softwire-rules swire01-r1;
next-hop-service {
inside-service-interface si-0/0/0.1;
outside-service-interface si-0/0/0.2;
}
}
softwire {
softwire-concentrator {
v6rd swire01-rd1 {
softwire-address 10.30.30.1;
ipv4-prefix 10.10.0.0/16;
v6rd-prefix 2001:db8:3040::0/48;
mtu-v4 9192;
}
}
rule swire01-r1 {
match-direction input;
term t1 {
then {
v6rd swire01-rd1;
}
}
}
}
}
interfaces {
si-0/0/0 {
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
ge-0/2/7 {
unit 0 {
family inet {
address 10.10.10.1/16;
}
}
}
ge-0/2/8 {
unit 0 {
family inet6 {
address 2001:db8:3abc::1/64;
}
}
}
}
routing-instances {
v6rd-vrf {
instance-type vrf;
interface si-0/0/0.1;
interface ge-0/2/7.0;
route-distinguisher 10.1.1.1:1;
vrf-target target:100:100;
}
}
示例:第 6 个任播配置
chassis {
fpc 0 {
pic 0 {
inline-services {
bandwidth 10g;
}
}
pic 2 {
inline-services {
bandwidth 1g;
}
}
}
}
services {
service-set anycast-nh-set1 {
softwire-rules swire01-r1;
next-hop-service {
inside-service-interface si-0/0/0.1;
outside-service-interface si-0/0/0.2;
}
}
service-set anycast-nh-set2 {
softwire-rules swire01-r1;
next-hop-service {
inside-service-interface si-0/2/0.1;
outside-service-interface si-0/2/0.2;
}
}
softwire {
softwire-concentrator {
v6rd swire01-rd1 {
softwire-address 10.30.30.1;
ipv4-prefix 10.10.0.0/16;
v6rd-prefix 2001:db8:3040::0/48;
mtu-v4 9192;
}
}
rule swire01-r1 {
match-direction input;
term t1 {
then {
v6rd swire01-rd1;
}
}
}
}
}
interfaces {
si-0/0/0 {
unit 0 {
family inet;
family inet6;
}
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
si-0/2/0 {
unit 0 {
family inet;
family inet6;
}
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
ge-0/2/7 {
unit 0 {
family inet {
address 10.10.10.1/16;
}
}
}
ge-0/2/8 {
unit 0 {
family inet6 {
address 2001:db8:3abc::1/64;
}
}
}
}
示例:第 6 个域配置之间的发夹
此示例使用接口服务集和下一跳服务集作为发夹域。
chassis {
fpc 0 {
pic 0 {
inline-services {
bandwidth 10g;
}
}
}
}
services {
service-set hairpin-intf-service-set {
softwire-rules swire01-r1;
interface-service {
service-interface si-0/0/0.0;
}
}
service-set hairpin-nh-service-set {
softwire-rules swire01-r2;
next-hop-service {
inside-service-interface si-0/0/0.1;
outside-service-interface si-0/0/0.2;
}
}
softwire {
softwire-concentrator {
v6rd swire01-rd1 {
softwire-address 30.30.30.1;
ipv4-prefix 10.10.0.0/16;
v6rd-prefix 2001:db8:3040::0/48;
mtu-v4 9192;
}
v6rd swire01-rd2 {
softwire-address 10.60.60.1;
ipv4-prefix 10.40.40.0/24;
v6rd-prefix 2001:db8:3050::0/48;
mtu-v4 9192;
}
}
rule swire01-r1 {
match-direction input;
term t1 {
then {
v6rd swire01-rd1;
}
}
}
rule swire01-r2 {
match-direction input;
term t1 {
then {
v6rd swire01-rd2;
}
}
}
}
}
interfaces {
si-0/0/0 {
unit 0 {
family inet;
family inet6;
}
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
ge-0/2/7 {
unit 0 {
family inet {
service {
input {
service-set hairpin-intf-service-set;
}
output {
service-set hairpin-intf-service-set;
}
}
address 10.10.10.1/16;
}
}
}
ge-0/2/8 {
unit 0 {
family inet {
address 10.40.40.1/24;
}
}
}
}
示例:6to4 配置
chassis {
fpc 0 {
pic 0 {
inline-services {
bandwidth 10g;
}
}
}
}
services {
service-set 6to4-intf-service-set {
softwire-rules shenick01-r1;
interface-service {
service-interface si-0/0/0.0;
}
}
interfaces {
si-0/0/0 {
unit 0 {
family inet;
family inet6;
}
unit 1 {
family inet;
family inet6;
service-domain inside;
}
unit 2 {
family inet;
family inet6;
service-domain outside;
}
}
ge-0/2/7 {
unit 0 {
family inet {
service {
input {
service-set 6to4-intf-service-set;
}
output {
service-set 6to4-intf-service-set;
}
}
address 10.10.10.1/16;
}
}
}
ge-0/2/8 {
unit 0 {
family inet6 {
address 2001:db8:3abc::1/64;
}
}
}
}