OSPF IPV6 -IPSEC

martes, 1 de septiembre de 2015

22:23

R2

Habilitar IPV6 en Router

R1

Habilitar IPV6 en Router

R5

Habilitar IPV6 en Router

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 5.5.5.5

Configuracin de interface
interface f1/0
ipv6 enable
ipv6 address 2008::2/64
ipv6 ospf 1 area 1
interface loopback 0
ipv6 enable
ipv6 address 2009::1/64
ipv6 ospf 1 area 3

virtual-link para que la rea 0 vea la

rea 6, mediante la rea 5 (en ospf)
area 1 virtual-link 1.1.1.1

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 1.1.1.1

Configuracin de interface
interface f0/0
ipv6 enable
ipv6 address 2007::2/64
ipv6 ospf 1 area 2
interface f1/0
ipv6 enable
ipv6 address 2008::1/64
ipv6 ospf 1 area 1
interface f1/1
ipv6 enable
ipv6 address 2001::/64 eui-64
ipv6 ospf 1 area 0

virtual-link para que la rea 0 vea la rea

6, mediante la rea 5 (en ospf)
area 1 virtual-link 5.5.5.5

R6

Habilitar IPV6 en Router

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 6.6.6.6

R4

Configuracin de interface

Habilitar IPV6 en Router

interface f0/0
ipv6 enable
ipv6 address 2007::1/64
ipv6 Ospf 1 Area 2
interface loopback 0
ipv6 enable
ipv6 add 2010::1/64
ipv6 ospf 1 area 2

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 4.4.4.4

Configuracin de interface
interface f1/0
ipv6 e
ipv6 enable
ipv6 address 2003::/64 eui-64
ipv6 ospf 1 area 4
interface loopback 0
ipv6 enable
ipv6 address 2005::1/64
ipv6 ospf 1 area 5

virtual-link para que la rea 0 vea la

rea 6, mediante la rea 5 (en ospf)
area 4 virtual-link 3.3.3.3

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 2.2.2.2

Configuracin de interface
interface f1/1
ipv6 enable
ipv6 address 2001::/64 eui-64
ipv6 ospf 1 area 0
interface f0/0
ipv6 enable
ipv6 address 2002::/64 eui-64
ipv6 ospf 1 area 0
R7

Habilitar IPV6 en Router

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 7.7.7.7

Configuracin de interface
interface f1/1
ipv6 enable
ipv6 address 2004::/64 eui-64
ipv6 ospf 1 area 6
interface loopback 0
ipv6 enable
ipv6 address 2006::1/64
ipv6 ospf 1 area 6
R3

Habilitar IPV6 en Router

ipv6 unicast-routing

Configuracin de OSPF
ipv6 router ospf 1
router-id 3.3.3.3

Configuracin de interface
interface f0/0
ipv6 enable
ipv6 address 2002::/64 eui-64
ipv6 ospf 1 area 0
interface f1/0
ipv6 enable
ipv6 address 2003::/64 eui-64
ipv6 ospf 1 area 4
interface f1/1
ipv6 address 2004::/64 eui-64
ipv6 enable
ipv6 ospf 1 area 6

virtual-link para que la rea 0 vea la

rea 6, mediante la rea 5 (en ospf)
area 4 virtual-link 4.4.4.4

OSPF IPV6 -IPSEC pgina 1

R1
interface tunnel 1
tunnel destination 2002::C803:DFF:FEF8:0
tunnel source 2001::C801:12FF:FE84:1D
ipv6 address 2017::1/64
ipv6 enable
tunnel mode ipv6
no sh

R3
interface tunnel 1
tunnel destination 2001::C801:12FF:FE84:1D
tunnel source 2002::C803:DFF:FEF8:0
ipv6 address 2017::2/64
ipv6 enable
tunnel mode ipv6
no sh

exit
crypto isakmp policy 30
encryption 3des
group 5
authentication pre-share

exit
crypto isakmp policy 30
encryption 3des
group 5
authentication pre-share

exit

exit
Ahora crearemos la llave:
crypto isakmp key 6 cisco address ipv6 2002::C803:DFF:FEF8:0/64 (ip destino)

Ahora crearemos la llave:

crypto isakmp key 6 cisco address ipv6 2001::C801:12FF:FE84:1D/64
(ip destino)

Ahora IPSEC

Ahora IPSEC
crypto ipsec transform-set tunnel1 esp-3des esp-sha-hmac
mode tunnel

exit

crypto ipsec transform-set tunnel1 esp-3des esp-sha-hmac

mode tunnel

exit
crypto ipsec profile tunnelseguro
set transform-set tunnel1

crypto ipsec profile tunnelseguro

set transform-set tunnel1

exit

exit
crypto isakmp profile 3des
self-identity address ipv6
match identity address ipv6 2001::C801:12FF:FE84:1D/64
(ip origen)
keyring default

exit
inter tunnel 1
tunnel mode ipsec ipv6
tunnel protection ipsec profile tunnelseguro

exit

OSPF IPV6 -IPSEC pgina 2

crypto isakmp profile 3des

self-identity address ipv6
match identity address ipv6 2002::C803:DFF:FEF8:0/64
(ip origen)
keyring default

exit
inter tunnel 1
tunnel mode ipsec ipv6
tunnel protection ipsec profile tunnelseguro

exit