帮助我们改善您的体验。

让我们了解您的想法。

您是否能抽出两分钟的时间完成一份问卷调查?

Announcement: Our new, consolidated Junos CLI Reference is now available.

close
external-header-nav
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents

机器翻译对您有帮助吗?

starstarstarstarstar
Go to English page
免责声明:

我们将使用第三方机器翻译软件翻译本页面。瞻博网络虽已做出相当大的努力提供高质量译文,但无法保证其准确性。如果对译文信息的准确性有任何疑问,请参阅英文版本. 可下载的 PDF 仅提供英文版.

内联 6 和 6to4 软线

date_range 18-Dec-23

内联 6rd 和 6to4 配置准则

配置和使用内联 6rd 和 6to4 时,请记住以下几点。

  • 您最多可以在单个线卡上配置 1024 个软线集中器。

  • 来自 CE 的第 6 个 IPv4 数据包的重组不会作为此版本的一部分添加。

  • 不支持第 6 次组播。

  • 在 IPv4 接入网络(CPE 和边界中继之间)中生成的任何 ICMPv4 错误都将在边界中继上丢弃。它们不会转换为 IPv6 错误并转发到 IPv6 端。

  • 6rd/6to4 任播和负载平衡只能使用下一跃点样式的服务接口配置进行配置,而不能使用接口样式进行配置。

  • 对于流向第 6 条隧道的数据包,不会执行 si- 接口输入功能。

  • 来自第 6 条隧道的流量带宽受可用 PFE 带宽的限制;发往第 6 条隧道的流量带宽受内部 VRF 环路带宽的限制。层次结构下的 [edit chassis] SI-IFD 环路带宽配置对第 6 个环路带宽没有影响。

  • 如果使用 IPv4 标头封装后,如果数据包长度大于下行链路数据包的隧道 MTU,则该数据包将作为 v4 MTU 错误丢弃。对于这些丢包, ICMPv6 packet too big error 会将消息发送回发送方。通常,第 6 隧道 MTU 配置了较高的值,因此,如果数据包大小大于配置的值,出口接口(朝向 IPv4 接入网络)会发生分段。

配置内联第 6 次

Junos OS 在 MX 系列路由器上的所有模块化端口集中器 (MPC) 线卡上支持内联 6rd。这为客户节省了使用 MS-DPC 进行所需隧道、封装和解封装工艺的成本。6to4 支持任播(仅限下一跃点服务接口)。第 6 个域之间的流量也支持发夹。

Junos OS 在以下 MPC 上支持内联 6rd:

  • MPC5 和 MPC6 — 从 Junos OS 15.1R3 版开始支持。

  • MPC7、MPC8 和 MPC9 — 从 Junos OS 17.2R1 版开始支持。

  • MPC10E-15C-MRATE 和 MPC10E-10C-MRATE — 从 Junos OS 20.3R1 版开始提供支持。

  • MX2K-MPC11E — 从 Junos OS 20.3R1 版开始提供支持。

要实现内联功能,请将 MPC 上的服务接口配置为内联服务接口 (si-),而不是多服务 (ms-) 接口。

配置内联服务的带宽

您必须在用于内联第 6 次处理的模块化端口集中器 (MPC) 上为内联服务提供带宽配置。

要配置带宽:

指定 MPC 和逻辑接口,以及所需的带宽(1g 或 10g)。
content_copy zoom_out_map
user@host# set chassis fpc mpc-number pic logical-interface-number inline-services bandwidth bandwidth

例如:

content_copy zoom_out_map
user@host# set chassis fpc 0 pic 0 inline-services bandwidth 10g

配置接口

为 6rd 控制和数据配置 si- 接口。必须在端口 0 上配置第 6 项服务。

要配置 si- 接口,请执行以下操作:

  1. 在端口 0 上配置第 6 个服务,并包括用于 IPv4 和 IPv6 的单元。
    content_copy zoom_out_map
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit 0 family inet
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit 0 family inet6
    

    例如:

    content_copy zoom_out_map
    user@host# set interfaces si-0/0/0 unit 0 family inet
    user@host# set interfaces si-0/0/0 unit 0 family inet6
    
  2. 为内部服务域配置媒体接口。
    content_copy zoom_out_map
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number family inet
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number family inet6
    user@host# set interfaces si-0/0/0 unit unit-number service-domain inside
    

    例如:

    content_copy zoom_out_map
    user@host# set interfaces si-0/0/0 unit 1 family inet
    user@host# set interfaces si-0/0/0 unit 1 family inet6
    user@host# set interfaces si-0/0/0 unit 1 service-domain inside
    
  3. 为外部服务域配置媒体接口。
    content_copy zoom_out_map
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number family inet
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number family inet6
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number service-domain outside
    

    例如:

    content_copy zoom_out_map
    user@host# set interfaces si-0/0/0 unit 2 family inet
    user@host# set interfaces si-0/0/0 unit 2 family inet family inet6
    user@host# set interfaces si-mpc-number/logical-interface-number/0 unit unit-number service-domain outside
    
  4. 配置面向 IPv4 的接口,以便与接口样式或下一跃点服务集一起使用。
    • 要配置为与接口样式服务集一起使用,请配置输入和输出服务并指定服务集。

      content_copy zoom_out_map
      user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet service input service-set service-set-name
      user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet service output service-set service-set-name
      user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet address ip-address
      

      例如:

      content_copy zoom_out_map
      user@host# set interfaces ge-0/2/7 unit 0 family inet service input service-set vrf-intf-service-set
      user@host# set interfaces ge-0/2/7 unit 0 family inet service output service-set vrf-intf-service-set
      user@host# set interfaces ge-0/2/7 unit 0 family inet address 10.10.10.1/16
      
    • 要配置为与下一跃点样式服务集一起使用,请 service input 省略和 service output 引用。

      content_copy zoom_out_map
      user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet
      user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet address ip-address 
      

      例如:

      content_copy zoom_out_map
      user@host# set interfaces ge-0/2/7 unit 0 family inet 
      user@host# set interfaces ge-0/2/7 unit 0 family inet address 10.10.10.1/16
      
  5. 配置面向 IPv6 的接口。
    content_copy zoom_out_map
    user@host# set interfaces ge-mpc-number/logical-interface-number/port unit unit-number family inet6 address ipv6-address
    

    例如:

    content_copy zoom_out_map
    user@host# set interfaces ge-0/2/8 unit 0 family inet6 address 2001:db8:1:1::1/16
    

配置软线集中器和规则

定义用于封装和解封装 IPv6 over IPv4 数据包以进行 CE 的软线集中器和规则。

要定义软线集中器:

  1. 指定第 6 个软线集中器及其地址。
    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd concentrator-name softwire-address ip-address
    

    例如:

    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd swire01-rd1 softwire-address 10.30.30.1
    
  2. 为客户边缘网络配置 IPv4 地址前缀,为第 6 个域配置 IPv6 地址前缀。
    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd concentrator-name ipv4-prefix ipv4-prefix v6rd-prefix v6rd-prefix
    

    例如:

    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd swire01-rd1 ipv4-prefix 10.10.0.0/16 v6rd-prefix 2001:db8:3040::0/48
    
  3. 配置 IPv4 封装的 IPv6 数据包的最大传输单位 mtu-ipv4 的大小(以字节为单位)。将此计算为最大预期 IPv4 数据包大小加上 20。
    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd concentrator-name set mtu-ipv4 number-of-bytes
    

    例如:

    content_copy zoom_out_map
    user@host# set services softwire softwire-concentrator v6rd swire01-rd1 set mtu-ipv4 9192
    

要配置软线规则,请执行以下操作:

  • 指定软线规则,指定要通过隧道传输的流量方向以及要使用的第 6 个软线集中器。

    content_copy zoom_out_map
    user@host# set services softwire rule softwire-rule-name match-direction match-direction term rule-term-number then v6rd concentrator-name
    

    例如:

    content_copy zoom_out_map
    user@host# set services softwire rule swire01-r1 match-direction input term t1 then v6rd swire01-rd1
    

配置服务集

要为第 6 次处理配置接口样式或下一跃点服务集,请执行以下操作:

  • 指定接口样式服务集。
    content_copy zoom_out_map
    user@host# set services service-set service-set-name softwire-rules softwire-rule-name service-interface interface-name
    

    例如:

    content_copy zoom_out_map
    user@host# set services service-set vrf-intf-service-set softwire-rules swire01-r1 service-interface si-0/0/0.0
    

  • 配置下一跃点服务集。
    content_copy zoom_out_map
    user@host# set services service-set service-set-name softwire-rules softwire-rule-name 
    user@host# set services service-set service-set-name next-hop-service inside-service-interface inside-interface outside-service-interface outside-interface
    
    content_copy zoom_out_map
    user@host# set services service-set vrf-nh-service-set softwire-rules swire01-r1 
    user@host# set services service-set vrf-nh-service-set next-hop-service inside-service-interface si-0/0/0.1 outside-service-interface si-0/0/0.2
    

配置路由实例

要配置路由实例:

  1. 指定路由实例及其服务的每个接口。
    content_copy zoom_out_map
    user@host# set routing-instance routing-instance-name instance-type vrf interface interface-name
    

    例如:

    content_copy zoom_out_map
    user@host# set routing-instance v6rd-vrf instance-type vrf interface si-0/0/0.1 
    user@host# set routing-instance v6rd-vrf instance-type vrf interface interface ge-0/2/7.0
    
  2. 指定路由识别符和 vrf 目标。
    content_copy zoom_out_map
    user@host# set routing-instance v6rd-vrf route-distinguisher 10.1.1.1:1
    user@host# set routing-instance v6rd-vrf vrf-target target:100:100
    

示例:第 6 和 6to4 配置

注意:

M 系列路由器上的多服务 100、400 和 500 PIC 以及配备多服务 DPC 的 MX 系列路由器支持 6rd 和 6to4 功能。带有 MS-MPC 或 MS-MIC 的 MX 系列路由器支持内联第 6 和内联 6to4 功能。

示例:具有界面样式服务集配置的第 6 个

content_copy zoom_out_map
chassis {
    fpc 0 {
        pic 0 {
            inline-services {
                bandwidth 10g;
            }
        }
    }
}
services {
    service-set vrf-intf-service-set {
        softwire-rules swire01-r1;
        interface-service {
            service-interface si-0/0/0.0;
        }
    }
    softwire {
        softwire-concentrator {
            v6rd swire01-rd1 {
                softwire-address 10.30.30.1;
                ipv4-prefix 10.10.0.0/16;
                v6rd-prefix 2001:db8::/32;
                mtu-v4 9192;
            }
        }
        rule swire01-r1 {
            match-direction input;
            term t1 {
                then {
                    v6rd swire01-rd1;
                }
            }
        }
    }
}
interfaces {
    si-0/0/0 {
        unit 1 {
            family inet;
            family inet6;
            service-domain inside;
        }
        unit 2 {
            family inet;
            family inet6;
            service-domain outside;
        }
    }
    
    ge-0/2/7 {
        unit 0 {
            family inet {
                address 10.10.10.1/16;
            }
        }
    }
    ge-0/2/8 {
        unit 0 {
            family inet6 {
                address 2001:db8:3abc::1/64;
            }
        }
    }
}
routing-instances {
    v6rd-vrf {
        instance-type vrf;
        interface si-0/0/0.1;
        interface ge-0/2/7.0;
        route-distinguisher 10.1.1.1:1;
        vrf-target target:100:100;
    }
}

示例:具有下一跃点样式服务集配置的第 6 个

content_copy zoom_out_map
chassis {
    fpc 0 {
        pic 0 {
            inline-services {
                bandwidth 10g;
            }
        }
    }
}
services {
    service-set vrf-nh-service-set {
        softwire-rules swire01-r1;
        next-hop-service {
            inside-service-interface si-0/0/0.1;
            outside-service-interface si-0/0/0.2;
        }
    }
    softwire {
        softwire-concentrator {
            v6rd swire01-rd1 {
                softwire-address 10.30.30.1;
                ipv4-prefix 10.10.0.0/16;
                v6rd-prefix 2001:db8:3040::0/48;
                mtu-v4 9192;
            }
        }
        rule swire01-r1 {
            match-direction input;
            term t1 {
                then {
                    v6rd swire01-rd1;
                }
            }
        }
    }
}
interfaces {
    si-0/0/0 {
        unit 1 {
            family inet;
            family inet6;
            service-domain inside;
        }
        unit 2 {
            family inet;
            family inet6;
            service-domain outside;
        }
    }
    
    ge-0/2/7 {
        unit 0 {
            family inet {
                address 10.10.10.1/16;
            }
        }
    }
    ge-0/2/8 {
        unit 0 {
            family inet6 {
                address 2001:db8:3abc::1/64;
            }
        }
    }
}
routing-instances {
    v6rd-vrf {
        instance-type vrf;
        interface si-0/0/0.1;
        interface ge-0/2/7.0;
        route-distinguisher 10.1.1.1:1;
        vrf-target target:100:100;
    }
}

示例:第 6 个任播配置

content_copy zoom_out_map
chassis {
    fpc 0 {
        pic 0 {
            inline-services {
                bandwidth 10g;
            }
        }
        pic 2 {
            inline-services {
                bandwidth 1g;
            }
        }
    }
}
services {
    service-set anycast-nh-set1 {
        softwire-rules swire01-r1;
        next-hop-service {
            inside-service-interface si-0/0/0.1;
            outside-service-interface si-0/0/0.2;
        }
    }
    service-set anycast-nh-set2 {
        softwire-rules swire01-r1;
        next-hop-service {
            inside-service-interface si-0/2/0.1;
            outside-service-interface si-0/2/0.2;
        }
    }
    softwire {
        softwire-concentrator {
            v6rd swire01-rd1 {
                softwire-address 10.30.30.1;
                ipv4-prefix 10.10.0.0/16;
                v6rd-prefix 2001:db8:3040::0/48;
                mtu-v4 9192;
            }
        }
        rule swire01-r1 {
            match-direction input;
            term t1 {
                then {
                    v6rd swire01-rd1;
                }
            }
        }
    }
}
interfaces {
    si-0/0/0 {
        unit 0 {
            family inet;
            family inet6;
        }
        unit 1 {
            family inet;
            family inet6;
            service-domain inside;
        }
        unit 2 {
            family inet;
            family inet6;
            service-domain outside;
        }
    }
    si-0/2/0 {
        unit 0 {
            family inet;
            family inet6;
        }
        unit 1 {
            family inet;
            family inet6;
            service-domain inside;
        }
        unit 2 {
            family inet;
            family inet6;
            service-domain outside;
        }
    }
    ge-0/2/7 {
        unit 0 {
            family inet {
                address 10.10.10.1/16;
            }
        }
    }
    ge-0/2/8 {
        unit 0 {
            family inet6 {
                address 2001:db8:3abc::1/64;
            }
        }
    }
}

示例:第 6 个域配置之间的发夹

此示例使用接口服务集和下一跃点服务集作为发夹域。

content_copy zoom_out_map
chassis {
    fpc 0 {
        pic 0 {
            inline-services {
                bandwidth 10g;
            }
        }
    }
}
services {
    service-set hairpin-intf-service-set {
        softwire-rules swire01-r1;
        interface-service {
            service-interface si-0/0/0.0;
        }
    }
    service-set hairpin-nh-service-set {
        softwire-rules swire01-r2;
        next-hop-service {
            inside-service-interface si-0/0/0.1;
            outside-service-interface si-0/0/0.2;
        }
    }
    softwire {
        softwire-concentrator {
            v6rd swire01-rd1 {
                softwire-address 30.30.30.1;
                ipv4-prefix 10.10.0.0/16;
                v6rd-prefix 2001:db8:3040::0/48;
                mtu-v4 9192;
            }
            v6rd swire01-rd2 {
                softwire-address 10.60.60.1;
                ipv4-prefix 10.40.40.0/24;
                v6rd-prefix 2001:db8:3050::0/48;
                mtu-v4 9192;
            }
        }
        rule swire01-r1 {
            match-direction input;
            term t1 {
                then {
                    v6rd swire01-rd1;
                }
            }
        }
        rule swire01-r2 {
            match-direction input;
            term t1 {
                then {
                    v6rd swire01-rd2;
                }
            }
        }
    }
}
interfaces {
    si-0/0/0 {
        unit 0 {
            family inet;
            family inet6;
        }
        unit 1 {
            family inet;
            family inet6;
            service-domain inside;
        }
        unit 2 {
            family inet;
            family inet6;
            service-domain outside;
        }
    }
    ge-0/2/7 {
        unit 0 {
            family inet {
                service {
                    input {
                        service-set hairpin-intf-service-set;
                    }
                    output {
                        service-set hairpin-intf-service-set;
                    }
                }
                address 10.10.10.1/16;
            }
        }
    }
    ge-0/2/8 {
        unit 0 {
            family inet {
                address 10.40.40.1/24;
            }
        }
    }
}

示例:6to4 配置

content_copy zoom_out_map
chassis {
    fpc 0 {
        pic 0 {
            inline-services {
                bandwidth 10g;
            }
        }
    }
}
services {
    service-set 6to4-intf-service-set {
        softwire-rules shenick01-r1;
        interface-service {
            service-interface si-0/0/0.0;
        }
    }
    interfaces {
        si-0/0/0 {
            unit 0 {
                family inet;
                family inet6;
            }
            unit 1 {
                family inet;
                family inet6;
                service-domain inside;
            }
            unit 2 {
                family inet;
                family inet6;
                service-domain outside;
            }
        }
        ge-0/2/7 {
            unit 0 {
                family inet {
                    service {
                        input {
                            service-set 6to4-intf-service-set;
                        }
                        output {
                            service-set 6to4-intf-service-set;
                        }
                    }
                    address 10.10.10.1/16;
                }
            }
        }
        ge-0/2/8 {
            unit 0 {
                family inet6 {
                    address 2001:db8:3abc::1/64;
                }
            }
        }
    }
external-footer-nav