IPv6 Link Local address and Unique Local Address

IPv6 Unique Local Address ULA
  • link local addresses are only significant on a single link
  • link local addresses can overlap on the same router as long as defined on different interfaces
  • starts with FE80::/10
  • link local addresses are mainly used by Ipv6 routing protocol, on broadcast networks link local addresses are automatically revolved through ICMP ND (ICMP Neighbor Discovery) since on non-broadcast this can’t be done this has to be manually mapping
  • Link local addresses if not configured manually will be driven from the bia of the interface EUI Extended Unique Identifier 
For example if the bia of an interface is as follows
R2(config-if)#do sh interf f0/0 | in add
  Hardware is Gt96k FE, address is c201.42b8.0000 (bia c201.42b8.0000)
1- FFEE is inserted after the vendor ID (most significant 3 bytes)
C201.42FF.FEb8.0000
b- invert the 7th most significant bit, so 
0x C2 is 1100 0010 binary
invert the 1 to 0 , so this becomes 1100 0000 which is 0x C0
so our address is FE80:C001:42FF:FEB8:0
which can be verified by checking the ipv6 local link address for that interface
R2(config-if)#do sh ipv6 interface f0/0 | in lin
FastEthernet0/0 is up, line protocol is up
  IPv6 is enabled, link-local address is FE80::C001:42FF:FEB8:0
  No Virtual link-local address(es):

IPv6 Unique Local Address ULA
  • Unique Local Ipv6 address replaced previously used site local IPv6 address
  • ULA IPv6 addresses are equivalent to private IPv4 address, these addresses are not routable on the global routing table
  • ULA has the following format
FC00 (7bits) + Unique ID (41 bits) + link ID (16 bits) + Interface ID (64 bits)

Comments

Post a Comment

Popular posts from this blog

IPv6 EIGRP

Image
In this post we will try to configure IPv6 EIGRP see the different options for the protocol and how these options are almost identical to the IPv4 version of EIGRP configuration R1 ipv6 unicast-routing interface lo0 ipv6 address 2001:1:1::1/64 interface FastEthernet0/0   ipv6 address FE80::1 link-local   ipv6 address FC00:1:12::1/64 ! interface FastEthernet0/1   ipv6 address FE80::1 link-local   ipv6 address FC00:1:13::1/64 !          R2 ipv6 unicast-routing interface lo0 ipv6 address 2001:2:2::2/64 interface FastEthernet0/0   ipv6 address FE80::2 link-local   ipv6 address FC00:1:12::2/64 ! interface FastEthernet0/1   ipv6 address FE80::2 link-local   ipv6 address FC00:1:23::2/64 R3 ipv6 unicast-routing interface lo0 ipv6 address 2001:3:3::3/64 interface lo1 ipv6 address 2001:3:4::3/64 interface lo2 ipv6 address 2001:3:5::3/64 interface FastEthernet0/0   ipv6 address FE80::3 link-...
Read more

BPDU Filter vs BPDU Guard

        Today we will try to explore the difference between these 2 options, BPDU guard and BPDU filter We know that BPDU are used to communicate between switches in L2 networks  to ensure loop free topology. BPDU Guard is used to protect our access (or trunks incase of servers) ports from receiving undesired BPDU packets, this feature is helpful in enforcing your network boundary in access layer BPDU Guard can be enabled on global configuration as well as under the interface configuration BPDU Filter on the other hand is used to filter BPDU packets outbound when configured  in global configuration (after sending 11 BPDU out ) and will filter BPDU inbound/outbound when configured under the interface level To better understand these two features, let’s use this simple topology R1 is connected to SW1 through F0/0 to have R1 send and receive BPDU we will simple configure bridging group 1 on the router and we will join the bridge group when desired to...
Read more

Private VLANS and protected ports

Image
In this post we will try to learn two layer 2 technologies, private vlans and protected ports Private vlans is used to segregate the layer 2 domain within the same vlan so we don’t waste any IP addresses, think about as sub-vlans within the same vlan that share the same layer 3 address. These sub-vlans can be of two kinds                      1- Community 2- Isolated The difference between community and isolated sub-vlans that hosts within community vlan can communicate together however hosts within isolated vlans con’t communicate to each others, also note that hosts from different community vlans can’t communicate/isolated vlans can’t communicate together. The question is how these hosts in community/isolated vlans communicate to the outside world, and the answer is they communicate through the promiscuous port which is part of parent vlan but this port is allowed to communicat...
Read more