8/9/2019 07- IPv6 and Security

1/2

R1#! Prep work:conf tdefault int fa 1/0default int fa 1/1int fa 1/0mac-address cc1e.6783.1111no ip addressduplex autospeed autono keepaliveint fa 1/1mac-address cc1e.6783.1111no ip addressduplex autospeed autono keepaliveexitno ipv6 router ospf 1end

-----------------------------------------

configure terminal

! Enable IPv6 routing. It is off by default

ipv6 unicast-routingdo show ipv6 int brief

! Configure an IPv6 address on the interface

interface FastEthernet1/0ipv6 address 2001:0DB8:0000:000B:0000:0000:0000:0001/64exit

do show ipv6 int brief

! Configure the other interface on R1interface FastEthernet1/1ipv6 address 2001:DB8:0:A::1/64

! Configure a routing protocol on R1! Note: no more "network" statements.

! OSPFv3 requires a 32 bit router-id! If we have any IPv4 addresses, it will use that

! If no IPv4 addresses, we must set the router-id

ipv6 router ospf 1router-id 1.1.1.1exit

! To enable OSPFv3 on the interfaces, we need to! go to each interface to tell them to participate in! OSPFv3, in the correct process #

8/9/2019 07- IPv6 and Security

2/2

interface FastEthernet1/0ipv6 ospf 1 area 0exit

interface FastEthernet1/1ipv6 ospf 1 area 0exit

configure terminalipv6 access-list NO_TELNETdeny tcp 2001:db8:0:a::/64 any eq 23permit any any

! Apply the ACL to the interface, inbound

int fa 1/1ipv6 traffic-filter NO_TELNET in

! Verify the ACLdo show access-lists