Pages

Thursday, February 3, 2011

NAT-PT

Sample Configuration of NAT-PT








Configuration
Download
http://ge.tt/4gnGkNu

R2
interface FastEthernet0/0
 no ip address
 ipv6 address 2002::2/64
 ipv6 nat
 ipv6 ospf 1 area 0
!
interface FastEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ipv6 nat
!
router ospf 1
 log-adjacency-changes
 network 0.0.0.0 255.255.255.255 area 0
!
ip forward-protocol nd
!
!
ip http server
no ip http secure-server
!
ipv6 router ospf 1
 router-id 2.2.2.2
 log-adjacency-changes
 redistribute connected
!
ipv6 nat v4v6 source 1.1.1.1 777::1
ipv6 nat v4v6 source 2.2.2.1 777::2
ipv6 nat v4v6 source 192.168.1.2 777::1:2
ipv6 nat v6v4 source 2002::1 10.12.1.1
ipv6 nat v6v4 source 3001::1 10.12.2.1
ipv6 nat v6v4 source 4001::1 10.12.2.2
ipv6 nat prefix 777::/96
!

Checking Interface address

IPv4 
R2#sh ip int brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            unassigned      YES unset  up                    up
FastEthernet0/1            192.168.1.1     YES manual up                    up
NVI0                       192.168.1.1     YES unset  up                    up

IPv6
R2#sh ipv6 int brief
FastEthernet0/0            [up/up]
    FE80::C001:11FF:FEFC:0
    2002::2
FastEthernet0/1            [up/up]
    FE80::C001:11FF:FEFC:1
NVI0                       [up/up]
    FE80::C001:11FF:FEFC:0
    unnumbered (FastEthernet0/0)


Routing table

R2#sh ipv6 route
IPv6 Routing Table - 6 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
       U - Per-user Static route, M - MIPv6
       I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
       O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
       D - EIGRP, EX - EIGRP external
C   777::/96 [0/0]
     via ::, NVI0
C   2002::/64 [0/0]
     via ::, FastEthernet0/0
L   2002::2/128 [0/0]
     via ::, FastEthernet0/0
O   3001::1/128 [110/10]
     via FE80::C000:11FF:FEFC:0, FastEthernet0/0
O   4001::1/128 [110/10]
     via FE80::C000:11FF:FEFC:0, FastEthernet0/0
L   FF00::/8 [0/0]
     via ::, Null0


Verify Configuration

R1#ping 777::1 source lo0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 777::1, timeout is 2 seconds:
Packet sent with a source address of 3001::1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 168/245/352 ms



R3#ping 10.12.2.1 source lo0 repeat 5

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.12.2.1, timeout is 2 seconds:
Packet sent with a source address of 1.1.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 196/292/384 ms


Troubleshooting


Useful command 
show ipv6 nat translation
show ipv6 nat statistics
debug ipv6 nat
debug ipv6 nat detail

1 comment:

  1. Finally, I successfully nail it. This one consumed a lot of time. ;)

    ReplyDelete