Dual-Stack Architecture with Ipv6
Total Page:16
File Type:pdf, Size:1020Kb
Concepts & Examples ScreenOS Reference Guide Dual-Stack Architecture with IPv6 Release 6.3.0, Rev. 02 Published: 2012-12-10 Revision 02 Copyright © 2012, Juniper Networks, Inc. Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. JunosE is a trademark of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785. Copyright © 2009, Juniper Networks, Inc. All rights reserved. Revision History December 2012—Revision 02 Content subject to change. The information in this document is current as of the date listed in the revision history. SOFTWARE LICENSE The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the extent applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this software, you indicate that you understand and agree to be bound by those terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses. The software license may state conditions under which the license is automatically terminated. You should consult the license for further details. For complete product documentation, please see the Juniper Networks Website at www.juniper.net/techpubs. END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii Copyright © 2012, Juniper Networks, Inc. Abbreviated Table of Contents About This Guide . xvii Part 1 Dual-Stack Architecture with IPv6 Chapter 1 Internet Protocol Version 6 Introduction . 3 Chapter 2 IPv6 Configuration . 11 Chapter 3 Connection and Network Services . 35 Chapter 4 Static and Dynamic Routing . 53 Chapter 5 Address Translation . 81 Chapter 6 IPv6 in an IPv4 Environment . 95 Chapter 7 IPsec Tunneling . 107 Chapter 8 IPv6 XAuth User Authentication . 127 Part 2 Appendix Appendix A Switching . 163 Part 3 Index Index . 167 Copyright © 2012, Juniper Networks, Inc. iii Dual-Stack Architecture with IPv6 iv Copyright © 2012, Juniper Networks, Inc. Table of Contents About This Guide . xvii Document Conventions . xviii Document Feedback . xx Requesting Technical Support . xx Part 1 Dual-Stack Architecture with IPv6 Chapter 1 Internet Protocol Version 6 Introduction . 3 Overview . 3 IPv6 Addressing . 4 Notation . 4 Prefixes . 4 Address Types . 4 Unicast Addresses . 5 Anycast Addresses . 5 Multicast Addresses . 5 IPv6 Headers . 6 Basic Header . 6 Extension Headers . 7 IPv6 Packet Handling . 8 IPv6 Router and Host Modes . 9 IPv6 Tunneling Guidelines . 9 Chapter 2 IPv6 Configuration . 11 Overview . 11 Address Autoconfiguration . 11 Extended Unique Identifier . 12 Router Advertisement Messages . 12 Router Solicitation Messages . 12 Prefix Lists . 12 Neighbor Discovery . 13 Neighbor Cache Table . 13 Neighbor Unreachability Detection . 14 Neighbor Entry Categories . 14 Neighbor Reachability States . 14 How Reachability State Transitions Occur . 15 Enabling an IPv6 Environment . 18 Enabling IPv6 at the Device Level . 18 Disabling IPv6 at the Device Level . 19 Copyright © 2012, Juniper Networks, Inc. v Dual-Stack Architecture with IPv6 Configuring an IPv6 Host . 19 Binding the IPv6 Interface to a Zone . 19 WebUI . 19 CLI . 19 Enabling IPv6 Host Mode . 20 WebUI . 20 CLI . 20 Setting an Interface Identifier . 20 WebUI . 20 CLI . 20 Configuring Address Autoconfiguration . 20 WebUI . 20 CLI . 20 Configuring Neighbor Discovery . 21 WebUI . 21 CLI . 21 Configuring an IPv6 Router . 21 Binding the IPv6 Interface to a Zone . 21 WebUI . ..