IPv6: Dynamic Tunnel ISATAP

From OnnoWiki
Revision as of 12:02, 30 December 2023 by Onnowpurbo (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

WARNING: MIKROTIK tampaknya belum / tidak ada support untuk ISATAP. Berikut adalah usaha untuk mentest ISATAP tapi gagal total.


R1,

/interface ethernet set ether1 disabled=no
/interface ethernet set ether2 disabled=no
/interface ethernet set ether3 disabled=no
/ip address add address=12.12.12.1/24 interface=ether1
/ip address add address=13.13.13.1/24 interface=ether2
/ip address add address=14.14.14.1/24 interface=ether3
/routing ospf instance set 0 disabled=no
/routing ospf network add area=backbone network=12.12.12.0/24
/routing ospf network add area=backbone network=13.13.13.0/24
/routing ospf network add area=backbone network=14.14.14.0/24

R2,

/interface ethernet set ether1 disabled=no
/interface ethernet set ether2 disabled=no
/ip address add address=12.12.12.2/24 interface=ether1
/ipv6 address add address=2001:1:2:3::1/64 interface=ether2 advertise=no
/routing ospf instance set 0 disabled=no
/routing ospf network add area=backbone network=12.12.12.0/24

R3,

/interface ethernet set ether1 disabled=no
/interface ethernet set ether2 disabled=no
/ip address add address=13.13.13.3/24 interface=ether1
/ipv6 address add address=2001:4:5:6::1/64 interface=ether2 advertise=no
/routing ospf instance set 0 disabled=no
/routing ospf network add area=backbone network=13.13.13.0/24

R4,

/interface ethernet set ether1 disabled=no
/interface ethernet set ether2 disabled=no
/ip address add address=14.14.14.4/24 interface=ether1
/ipv6 address add address=2001:7:8:9::1/64 interface=ether2 advertise=no
/routing ospf instance set 0 disabled=no
/routing ospf network add area=backbone network=14.14.14.0/24

Selanjutnya kita konfigurasikan ISATAP tunnel pada R2 dan R3

R2,

/interface 6to4 add name=tunnel0
/ipv6 address add address=2000::/64 eui-64 interface=tunnel0
/interface 6to4 set tunnel0 tunnel=yes
/interface 6to4 set tunnel0 src-address=ether1
/interface 6to4 set tunnel0 tunnel-mode=isatap

R3,

/interface 6to4 add name=tunnel0
/ipv6 address add address=2000::/64 eui-64 interface=tunnel0
/interface 6to4 set tunnel0 tunnel=yes
/interface 6to4 set tunnel0 src-address=ether1
/interface 6to4 set tunnel0 tunnel-mode=isatap

R4,

/interface 6to4 add name=tunnel0
/ipv6 address add address=2000::/64 eui-64 interface=tunnel0
/interface 6to4 set tunnel0 tunnel=yes
/interface 6to4 set tunnel0 src-address=ether1
/interface 6to4 set tunnel0 tunnel-mode=isatap

Cek IPv6 tunnel untuk routing

R2,

/interface ipv6 print brief


FastEthernet0/0            [administratively down/down]
    unassigned
Ethernet1/0                [up/up]
    unassigned
Ethernet1/1                [up/up]
    FE80::C802:34FF:FE9B:1D
    2001:1:2:3::1
Ethernet1/2                [administratively down/down]
    unassigned
....
Tunnel0                    [up/up]
    FE80::5EFE:C0C:C02
    2000::5EFE:C0C:C02

R3,

/interface ipv6 print brief
.....
2000::5EFE:D0D:D03

R4,

/interface ipv6 print brief
....
2000::5EFE:E0E:E04



Set routing

R2,

/ipv6 settings set enabled=yes
/ipv6 route add dst-address=2001:4:5:6::/64 gateway=2000::5EFE:D0D:D03
/ipv6 route add dst-address=2001:7:8:9::/64 gateway=2000::5EFE:E0E:E04

R3

/ipv6 settings set enabled=yes
/ipv6 route add dst-address=2001:1:2:3::/64 gateway=2000::5EFE:C0C:C02
/ipv6 route add dst-address=2001:7:8:9::/64 gateway=2000::5EFE:E0E:E04


R4,

/ipv6 settings set enabled=yes
/ipv6 route add dst-address=2001:1:2:3::/64 gateway=2000::5EFE:C0C:C02
/ipv6 route add dst-address=2001:4:5:6::/64 gateway=2000::5EFE:D0D:D03


Cek

R2

/interface 6to4 print detail where name=tunnel0
/ipv6 route print
/tool ping address=2001:4:5:6::1
/tool ping address=2001:7:8:9::1

R3

/interface 6to4 print detail where name=tunnel0
/ipv6 route print
/tool ping address=2001:1:2:3::1
/tool ping address=2001:7:8:9::1

R4,

/interface 6to4 print detail where name=tunnel0
/ipv6 route print
/tool ping address=2001:1:2:3::1
/tool ping address=2001:4:5:6::1
/tool ping address=2001:7:8:9::1


Setup Virtual PC

VPC1

ip 2001:1:2:3::100/64 2001:1:2:3::1

VPC2

ip 2001:4:5:6::100/64 2001:4:5:6::1

VPC3

ip 2001:7:8:9::100/64 2001:7:8:9::1

Cek

ping 2001:1:2:3::1
ping 2001:1:2:3::100
ping 2001:4:5:6::1
ping 2001:4:5:6::100
ping 2001:7:8:9::1
ping 2001:7:8:9::100