IPv6 Tunnel Commands

This chapter contains the following sections:

interface tunnel

To enter into the Interface Configuration (Tunnel) mode, use the interface tunnel command in Global Configuration mode.

Syntax

interface tunnel number

Parameters

  • number—Specifies the tunnel number.

Command Mode

Global Configuration mode

Example

The following example enters the Interface Configuration (Tunnel) mode.

switchxxxxxx(config)# interface tunnel 1
switchxxxxxx(config-if)# tunnel source auto
switchxxxxxx(config-if)# exit

tunnel destination

To specify the destination IPv4 address for the manual tunnel interface, use the tunnel destination command in Interface (Tunnel) Configuration mode. To remove the destination IPv4 address, use the no form of this command.

Syntax

tunnel destination {host-name | ip-address}

no tunnel destination

Parameters

  • host-name—DNS name of the remote host.

  • ip-address—IPv4 address of the remote host.

Default Configuration

No tunnel interface destination is specified.

Command Mode

Interface (Tunnel) Configuration mode

User Guidelines

You cannot configure two tunnels to use the same encapsulation mode with exactly the same source and destination address.

Example

The following example shows how to configure the tunnel destination address for Manual IPv6 tunnel:

switchxxxxxx(config)# interface vlan 1
switchxxxxxx(config-if)# ip address 10.0.0.1 255.255.255.0
switchxxxxxx(config-if)# exit
switchxxxxxx(config)# interface tunnel1
switchxxxxxx(config-if)# ipv6 address 3ffe:b00:c18:1::3/127
switchxxxxxx(config-if)# tunnel source vlan1
switchxxxxxx(config-if)# tunnel destination 192.168.30.1
switchxxxxxx(config-if)# tunnel mode ipv6ip
switchxxxxxx(config-if)# exit

tunnel isatap solicitation-interval

To set the time interval between unsolicited router solicitation messages, use the tunnel isatap solicitation-interval command in Global Configuration mode. To restore the default configuration, use the no form of this command.

Syntax

tunnel isatap solicitation-interval seconds

no tunnel isatap solicitation-interval

Parameters

  • seconds—Specifies the time interval in seconds between ISATAP router solicitation messages. (Range: 10–3600).

Default Configuration

The default time interval between ISATAP router solicitation messages is 10 seconds.

Command Mode

Global Configuration mode

User Guidelines

This command determines the interval between unsolicited router solicitation messages sent to discovery an ISATAP router.

Example

The following example sets the time interval between ISATAP router solicitation messages to 30 seconds.

switchxxxxxx(config)# tunnel isatap solicitation-interval 30

tunnel isatap robustness

To configure the number of router solicitation refresh messages that the device sends, use the tunnel isatap robustness command in Global Configuration mode. To restore the default configuration, use the no form of this command.

Syntax

tunnel isatap robustness number

no tunnel isatap robustness

Parameters

  • number—Specifies the number router solicitation refresh messages that the device sends. (Range: 1–20).

Default Configuration

The default number of router solicitation refresh messages that the device sends is 3.

Command Mode

Global Configuration mode

User Guidelines

The router solicitation interval (when there is an active ISATAP router) is the minimum-router-lifetime that is received from the ISATAP router, divided by (Robustness + 1).

Example

The following example sets the number of router solicitation refresh messages that the device sends to 5.

switchxxxxxx(config)# tunnel isatap robustness 5

tunnel isatap router

To configure a global string that represents a specific automatic tunnel router domain name, use the tunnel isatap router command in Interface (Tunnel) Configuration mode. To remove this router name and restore the default configuration, use the no form of this command.

Syntax

tunnel isatap router router-name

no tunnel isatap router

Parameters

  • router-name—Specifies the router’s domain name.

Default Configuration

The automatic tunnel router's default domain name is ISATAP.

Command Mode

Interface (Tunnel) Configuration mode

User Guidelines

This command determines the string that the host uses for automatic tunnel router lookup in the IPv4 DNS procedure. By default, the string ISATAP is used for the corresponding automatic tunnel types.

Only one string can represent the automatic tunnel router name per tunnel. Using this command, therefore, overwrites the existing entry.

The empty string means that automatic lookup is not applied.

Example

The following example configures the global string ISATAP2 as the automatic tunnel router domain name.

switchxxxxxx(config)# interface tunnel 1
switchxxxxxx(config-if)# tunnel isatap router ISATAP2
switchxxxxxx(config-if)# exit

tunnel mode ipv6ip

To configure a static IPv6 tunnel interface, use the tunnel mode ipv6ip command in Interface (Tunnel) Configuration mode. To remove an IPv6 tunnel interface, use the no form of this command.

Syntax

tunnel mode ipv6ip [6to4 | isatap]

no tunnel mode ipv6ip

Parameters

  • 6to4—(Optional) Specifies IPv6 automatic tunneling mode using a 6to4 address.

  • isatap—(Optional) Specifies IPv6 automatic tunneling mode as ISATAP to connect IPv6 nodes (hosts and routers) within IPv4 networks.

Default Configuration

IPv6 tunnel interfaces are not configured.

Command Mode

Interface (Tunnel) Configuration mode

User Guidelines

IPv6 tunneling consists of encapsulating IPv6 packets within IPv4 packets for transmission across an IPv4 routing infrastructure.

The IPv6 interface is automatically enabled on a tunnel when it is configured as an IPv6 tunnel by the tunnel mode ipv6ip command and the local IPv4 is defined by the tunnel source command.

When the IPv6 tunnel mode is changed the IPv6 interface on the tunnel is re-enabled that causes removing static IPv6 configuration on the tunnel (for example, global IPv6 addresses, static IPv6 routes via the tunnel, etc.).

The IPv6 interface on an IPv6 tunnel is disabled if the tunnel stops to be an IPv6 tunnel or the tunnel local IPv4 address is removed and the new IPv4 cannot be chosen.

Manually Configured Tunnels

Using this command without keywords specifies an IPv6-configured tunnel where the tunnel endpoints is determined by two manually configured unique IPv4 addresses by the tunnel source and tunnel destination commands. Only the ipv6 address eui-64 command can be used to configured a global unicast IPv6 on a manual tunnel. Any correct global 64-bits IPv6 prefix can be configured.

The interface identifier of tunnel is 0:0:WWXX:YYZZ, where WWXX:YYZZ is the tunnel local IPv4 address (RFC 4213).

6to4 Tunnels

Using this command with the 6to4 keyword specifies automatic 6to4 tunneling where only the local tunnel endpoint is determined by manually configured unique IPv4 address.

During the 6to4 tunnel creation the switch automatically creates on the 6to4 tunnel:

  • IPv6 interface

  • Unicast global IPv6 address 2002:WWXX:YYZZ::WWXX:YYZZ/64, where WWXX:YYZZ is 32 bits of the local tunnel IPv4 address (RFC 3056).

  • On-link route 2002::/16

A global unicast IPv6 address cannot be configured manually on a 6to4 tunnel.

The unique IPv4 address is used as the network-layer address in the 6to4 address prefix. A unicast global 64-bits 6to4 IPv6 prefix (RFC 3056) 2002:WWXX:YYZZ:SSI::/64 (SSI - 16 bits of Site Subnet Identifier.) can be used for definition unicast global 6to4 IPv6 addresses on native IPv6 the in-band interfaces on switch.

ISATAP Tunnels

Using this command with the isatap keyword specifies an automatic ISATAP tunnel. ISATAP tunnels enable transport of IPv6 packets within network boundaries. ISATAP tunnels allow individual IPv4/IPv6 dual-stack hosts within a site to connect to an IPv6 network using the IPv4 infrastructure.

ISATAP IPv6 addresses can use any initial Unicast /48 prefix. The final 64 bits are an interface identifier. Of these, the leading 32 bits are the fixed pattern 0000:5EFE; the last 32 bits carry the tunnel endpoint IPv4 address.

Only the ipv6 address eui-64 command can be used to configured a global unicast IPv6 on an ISATAP tunnel.

Example 1—The following example configures an ISATAP tunnel:

switchxxxxxx(config)# interface vlan 1
switchxxxxxx(config-if)# ip address 1.1.1.1 255.255.255.0
switchxxxxxx(config-if)# exit
switchxxxxxx(config)# interface vlan 1
switchxxxxxx(config-if)# tunnel mode ipv6ip isatap
switchxxxxxx(config-if)# tunnel source 1.1.1.1
switchxxxxxx(config-if)# ipv6 address 3ffe:b00:c18:1::/64 eui-64
switchxxxxxx(config-if)# exit

Example 2—The following example configures a manual IPv6 tunnel. In the example, tunnel interface 1 is manually configured with a global IPv6 address. The tunnel source and destination are also manually configured:

switchxxxxxx(config)# interface tunnel 1
switchxxxxxx(config-if)# tunnel source vlan 1
switchxxxxxx(config-if)# tunnel destination 192.168.30.1
switchxxxxxx(config-if)# tunnel mode ipv6ip
switchxxxxxx(config-if)# exit

Example 3—The following example configures a 6to4 tunnel:

switchxxxxxx(config)# interface vlan 100
switchxxxxxx(config-if)# ip address 192.168.99.1 255.255.255.0
switchxxxxxx(config-if)# exit
switchxxxxxx(config)# interface tunnel 1
switchxxxxxx(config-if)# tunnel source vlan 100
switchxxxxxx(config-if)# tunnel mode ipv6ip 6to4
switchxxxxxx(config-if)# exit
switchxxxxxx(config)# interface vlan 101
switchxxxxxx(config-if)# ipv6 address 2002:c0a8:6301:1::/64 eui-64
switchxxxxxx(config-if)# exit
switchxxxxxx(config)# interface vlan 102
switchxxxxxx(config-if)# ipv6 address 2002:c0a8:6301:2::/64 eui-64
switchxxxxxx(config-if)# exit

tunnel source

To set the local (source) IPv4 address of a tunnel interface, use the tunnel source command in Interface (Tunnel) Configuration mode. To delete the tunnel local address, use the no form of the command.

Syntax

tunnel source {auto | ipv4-address | interface-id}

no tunnel source

Parameters

  • auto—The system minimum IPv4 address is used as the local IPv4 address (IPv4 address of the local tunnel endpoint).

  • ip4-address—Specifies the IPv4 address to use as the local IPv4 address (IPv4 address of the local tunnel endpoint).

  • interface-id—Interface which the minimum IPv4 address is used as the local IPv4 address (IPv4 address of the local tunnel endpoint).

Default

No source address is defined.

Command Mode

Interface (Tunnel) Configuration mode

User Guidelines

If the auto or interface-id option is configured once time chosen IPv4 is used as the tunnel local IPv4 address until it is defined. A new IPv4 interface is only chosen in the following cases:

  • After reboot.

  • The used IPv4 is removed from the switch configuration.

  • The tunnel mode is changed.

When the tunnel local IPv4 address is changed the IPv6 interface on the tunnel is re-enabled that causes removing static IPv6 configuration on the tunnel (for example, global IPv6 addresses, static IPv6 routes via the tunnel, etc.).

If the auto option is configured then the IP addresses defined on OOB do not take part in the choosing of the minimal IPv4 address.

If the ip4-address option is configured then the IPv4 addresses defined on OOB cannot be configured.

If the interface-id option is configured then OOB cannot be configured.

Example

switchxxxxxx(config)# interface tunnel 1
switchxxxxxx(config-if)# tunnel source 120.12.3.4
switchxxxxxx(config-if)# exit

show ipv6 tunnel

To display information on IPv6 tunnels, use the show ipv6 tunnel command in User EXEC mode.

Syntax

show ipv6 tunnel [all]

Parameters

  • all—(Optional) The switch displays all parameters of the tunnel. If the keyword is not configured only the tunnel parameters corresponding to its type are displayed.

Command Mode

User EXEC mode

Example 1. The following example displays information on the ISATAP tunnel, when the all keyword is not configured:

switchxxxxxx# show ipv6 tunnel
Tunnel 1
  Tunnel type                      : Manual
  Tunnel status                    : UP
  Tunnel Local address type        : VLAN 100
  Tunnel Local Ipv4 address        : 192.1.3.4
  Tunnel Remote Ipv4 address       : 192.3.4.5
Tunnel 2
  Tunnel type                      : ISATAP
  Tunnel status                    : UP
  Tunnel Local address type        : auto
  Tunnel Local Ipv4 address        : 192.1.3.4
  Router DNS name                  : ISATAP
  Router IPv4 addresses
    1.1.1.1          Detected
    100.1.1.1        Detected
    14.1.100.1       Not Detected
  Router Solicitation interval     : 10 seconds
Robustness : 2
Tunnel 3
  Tunnel type                      : 6to4
  Tunnel status                    : UP
  Tunnel Local address type        : auto
  Tunnel Local Ipv4 address        : 192.1.3.4

Example 2. The following example displays information when the all keyword is configured:

switchxxxxxx# show ipv6 tunnel all
Tunnel 1
  Tunnel type                      : Manual
  Tunnel status                    : UP
  Tunnel Local address type        : VLAN 100
  Tunnel Local Ipv4 address        : 192.1.3.4
  Manual parameters
    Tunnel Remote Ipv4 address     : 192.3.4.5
  ISATAP Parameters
    Router DNS name                : ISATAP
    Router Solicitation interval   : 10 seconds
 Robustness : 2
Tunnel 2
  Tunnel type                      : Manual
  Tunnel status                    : DOWN
  Tunnel Local address type        : auto
  Manual parameters
    Tunnel Remote Ipv4 address     : 0.0.0.0
  ISATAP Parameters
    Tunnel Local Ipv4 address      : 0.0.0.0
    Router DNS name                : ISATAP
    Router Solicitation interval   : 10 seconds
Robustness : 2
Tunnel 3
  Tunnel type                      : ISATAP
  Tunnel status                    : UP
  Tunnel Local address type        : auto
  Manual parameters
    Tunnel Remote Ipv4 address     : 0.0.0.0
  ISATAP Parameters
    Tunnel Local Ipv4 address      : 192.1.3.4
    Router DNS name                : ISATAP
    Router IPv4 addresses
      1.1.1.1          Detected
      100.1.1.1        Detected
      14.1.100.1       Not Detected
    Router Solicitation interval   : 10 seconds
 Robustness : 2