IPv6 SLAAC and DHCP Packet Tracer Lab | Cisco CCNA 200-301
ฝัง
- เผยแพร่เมื่อ 21 ส.ค. 2024
- 🏃🏼♀️🏃🏼♂️💨 In a hurry, timestamps (below) allow you to jump to the part you want to see now.
🆓 Free Packet Tracer Labs download: thekeithbarker...
🦘 Jump links:
01:05 Demo of how to download the PT lab (OGIT-2020-04-14)
01:35 Version of PT being used
04:28 Lab objectives explained
08:00 How to verify if IPv6 unicast-routing is enabled
09:12 How to verify IPv6 info on a client device at the CLI in Packet Tracer
10:05 How to create an IPv6 DHCP pool on a router
11:30 Enabling DHCPv6 service on a router interface
12:30 Enable the "O" bit to be set to on, in the Router Advertisements (RAs)
15:20 Attempting DNS resolution
15:35 Troubleshooting begins
16:05 Demo of the DNS tool NSLOOKUP
18:40 Verifying a problem between local network and default gateway
20:35 Summary and recommendations
Link for previous tutorial, on IPv6 SLAAC and DNS via DHCP. • IPv6 SLAAC and DNS Ove...
Enjoy, Like, and Subscribe. 😃
Free TH-cam Playlists from Keith:
▶ Master Playlist for Cisco CCNA 200-301 ogit.online/sloth
🔐 Cisco CCNA 200-301 Security ogit.online/20...
💻 Cisco CCNA 200-301 IPv4 Subnetting ogit.online/su...
💬 Join our Discord server ogit.online/Jo...
And…
🏫 Keith’s Content at CBT Nuggets ogit.online/Ke...
#KeithBarker #CCNA #200-301
Thanks for the lab. I appreciate the extra troubleshooting we have to do on top of the lab objectives. It really tests our end to end understanding and installs extra confidence after we solve it.
If we are not able solve it completely, there is always your walkthrough to help us understand, what we missed.
Thank you Vyas Gobinath!
Thanks a lot Keith, Amazing videos as always! will complete PT Lab by tomorrow .
Best of luck!
MAN THIS WAS ON A TEST AND UI COULDN'T FIND IT ANYWHERE THANK YOOOOUUU
Thank you @St1mi!
Thank you so much for the amazing content. Always inspired.
I appreciate that!
You might enjoy the Ip Configuration App on the desktop of end devices, you can see all the ipv4 and ipv6 info there in one click without having to bounce around the config tab as much, but you may have good reason to prefer doing it the way you do. Great video as always and thank you
Thanks for the tip!
This is gold, thank you, Keith.
Thank you Aziz!
Thank you for the easy explanation Keith, good job
Happy to do it, thanks for the feedback Aprilcraft.
Thanks. You are a really good teacher, I hope you can do your own full courses for CCNA&ENCOR.
Thank you. I am part of a team at CBT Nuggets which as full courses for CCNA, and soon ENCOR. Here on TH-cam my focus is to assist CCNA candidates with additional insights and support for the CCNA topics.
Happy studies and thanks for the comments!
Thanks Keith for all the content. Your labs are the best!
Awesome video again, Keith. Thanks so much.
Very welcome
hey Keith, do you have a playlist for all your IPv6 videos? be a lot cooler if you did. alright, alright, alright! ❤️❤️
Thank you for the suggestion Sujirou. Will add that to my list.
Thanks
Hey Keith thanks so much for your time. Just one question. Do you think I can use your video tutorials alone to prepare for exam? Just wondering...did you cover everything?
another great video, I'm going through Ipv6 self-training now and this videos are awesome. I had to replicate the lab in GNS3 tho, I keep experiencing issues with my old netacad account, is cisco letting anyone to create new accounts to download newer Packet Tracer versions?
If you are having difficulty with NetAcad, drop me a line at amosfeldman-at-gmail-dot-com and I'll help you out. Also, you can check out the Discord application and Keith's channel
I think it would be better to rename the labs for later. Not everyone is studying for the 200-301 when you showing lab and does not have the time. So I would like to come back to these labs in 2021 when I will go for CCNA and be able to find the lab without going back on your channel to find the livestream and see that its the SLAAC PT lab and then go back and download it.
Best would be to name the lab IPv6 SLAAC with DNS or something close to that. That goes for every other lab. I reckon in 1 year there will be a ton of labs there comparing to today.
Thank you Anders. Great feedback. I will give some time and thought to better naming, that will be more useful over time. Cheers, and thanks again.
Keith, I need your help...
Where does a stateful DHCPv6 client learn its network prefix length from???
I'm preparing for the CCNA exam with Cisco's Netacad CCNAv7 curriculum, Packet Tracer and your videos.
I've been trying to really understand DHCPv6+RA messages so I've been doing some experiments with PT 7.3.1 and lately PT 8.
In Cisco's trainning course they (barely) mention the "address prefix h:h:.../i" DHCPv6 pool config command to define the address block to be served by a stateful DHCPv6 server to single hosts in a network.
I should mention that Cisco's course does NOT go into prefix delegation, they just talk about this command to (absolutely) define the pool of addresses to be assigned to the clients (single IPv6 address asignment, not subnet asignment) by a router acting as a stateful DHCPv6 server and PCs acting as end-clients. I'm not sure but I guess that this could also apply when an ISP router delegates prefix to the customer's router but also (?) has to deliver a single IPv6 to the customers router interface connected to the ISP in a different network (?).
Anyway, the way I understand the "address prefix h:h:.../i" command in the context of single address assignment is that it defines a range of addresses (within the network) for dynamic addressing. So if my network is 2001:cafe:dead:beef::/64 the commands to define a pool could be:
ipv6 dhcp pool MYPOOL
address prefix 2001:cafe:dead:beef:caca::/80 lifetime 172800 86400
dns-server 2001::8
domain-name test.com
Where the range defined by 2001:cafe:dead:beef:caca::/80 is inside the 2001:cafe:dead:beef::/64 leaving the rest of addresses available for static use in that network. It makes sense.
BUT when simulating in Packet Tracer it surprised me that the DHCPv6 clients (PCs) correctly configure themselves with addresses in that block BUT they adopt a /80 prefix length placing them in a totally different subnet!!! I was even more surprised when I could not find (in simulation mode looking at the PDU details) any /80 reference in the DHCPv6 messages exchanged between clients and server. The /80 must have come from the DHCPv6 server but there is no trace of it in the DHCPv6 messages (?!).
As far as I know there is no command for excluding addresses from a DHCPv6 pool, so it makes sense that the "/i" in the "address prefix h:h:.../i" command defines a small block inside the network (the actual pool) but never the prefix length OF the network. Amazingly I haven't been able to find any good information about that command to verify my assumptions, google has failed me.
On the other hand, I don't know of any command to let a stateful DHCPv6 server in a Cisco router know what prefix length it has to report to the DHCPv6 clients (as one does in DHCPv4).
The same weird outcome results in a setting of two different routers, none of them with GUAs configured (of course that scenario is useless, I just tried to discard any other possible source of prefix length and expecting that it won't work) with one of the router acting only as RA messages sender and the other one acting only as stateful DHCPv6 server (with RA suppressed). In that particular setting the clients are still able to get the IPv6 address with the /80 prefix length. The same happens if both roles (RA emitter and server) are done by a single router (with or without GUA configured). The prefix length as is configured by the clients could only come from the stateful DHCPv6 server, especifically from the "address prefix h:h:.../i" command that I thought was suppose to define a block inside the network and not to define the network itself.
These experiments have raised all kind of questions in my head:
1. (a) Is a stateful DHCPv6 server supposed to also inform about the prefix length of the network (as DHCPv4 does with the mask) or (b) it is just supposed to deliver a GUA without any context?
2. If (b) is true, then a stateful DHCPv6 client can only learn the prefix length from the RA messages the same way it learns its default gateway.
3. But if (a) is true I could not find a single field in the exchanged DHCPv6 messages (PT simulation mode) where a prefix length is reported to the clients. Also, where is the command that configures the stateful server to report a specific prefix length? Or am I wrong with my interpretation of the "address prefix h:h:.../i" command? But if I´m wrong and "/i" is supposed to be THE prefix length, how can one exclude addresses from the pool instead of making the whole address space of the network available for dynamic assignment?
4. Or is it may be that the end-clients (e.g. PCs) should assume that if they receive a single IPv6 address (in contrast with a router receiving a delegated prefix) the prefix length should always be /64 and there is no need that this information comes from anywhere?
As you can see I have many doubts, but there are a couple of things I do know for sure: Packet Tracer SUCKS when it comes to IPv6, DHCPv6 and even NDP RA (for example the "ipv6 nd ra suppress" interface command does not always works or works very erratic in PT 7.3.1 or 8). And the Cisco CCNA's course is deliberately vague in this subject. So I've given up trying to get answers in this subject by experimenting with Packet Tracer, or searching the internet, therefore I'm in your hands.
thanksss
Welcome!
Other than enabling IPV6 on the router, and applying auto-configure on the IPV6 settings on the host, what else did you need to do to get SLAAC to work? I realize that you confirmed that IPv6 unicast-routing was already enabled on the router. (maybe for this lab it shouldn't have been already enabled, so that the practice of enabling it is on the learner / student)
Thank you Amos
Hello Keith,
I don't have a question about this Video but I want to ask you if you don't mind about AWS.
Do you have any plans on teaching a course on AWS Certified Advanced Networking Specialty Certification? I searched the CBT nuggets courses and none of the instructors teach it.
Thank you for the question Ahmed. I don't personally have any AWS training planned, but you may want to follow CloudBart on TH-cam. He is an AWS expert, has content on his Channel about AWS, and also has some content at CBT Nuggets as well, but I don't know the full extent. He would be a good one to check in on.
Cheers, and thanks for the question.
can you do the same lab using the new pt v8?
Many Thanks Keith! As always... I have a question I hope you will be able to see my message.
What if I don't want to use a DHCP Pool in the router, to have a DNS server for my client, Can I just use RDNNS set in the interface "ipv6 nd ra dns "?. I did this and my client got the DNS server.
Also by adding the O flag bit "ipv6 nd other-config-flag" then will this become a DHCPv6 Stateless? and not just SLAAC?
Also by adding the O flag bit "ipv6 nd other-config-flag" can this be combined with relay agent? "ipv6 dhcp relay destination 2001:DB8:BEE:111::111" - I tried doing this but the client can't get the DNS server. By the way, the DHCP server is external... that's the reason why I thought of RDNNS...
Can I combine M O A flags?
Many Thanks for your help...
*RDNSS
Thank you for the questions!
If your devices support RDNSS, then yes that is an option. For the config, you would need to check the Cisco docs for the version of sw being used. Don't remember the syntax off the top of my head.
I don't use IPv6 all that often, and would need to research a little to confirm your other answers. If you discover those answers and/or verify them in the lab, please let me know!
Happy studies!
@@KeithBarker Many Thanks! So yes the router supports the RDNSS and I used it instead and in IOS 16.12.1, then this is supported "ipv6 nd ra
dns-search-list domain" but since my test router doesn't support it then no choice but to use the dhcp pool to have the suffix for my client... Other says, the M and O flags are mostly advisory. Some operating systems don't try DHCPv6 unless those flags are set, some try anyway regardless of the flags, and some never try DHCPv6 at all (looking at you Android)
what tools do you use for writing on the screen?
Thank you for the question Willy Figueroa. I use Epic Pen. epic-pen.com/
Best wishes!