Configuration difference between ipv6 and ipv4
Download as DOC, PDF1 like1,268 views
The document discusses the configuration differences between IPv6 and IPv4 on Huawei networking equipment. It describes that the main differences are in access control lists (ACLs), security features like anti-IP spoofing, and multicast protocols for IPTV. Specific configuration commands are provided for ACLs, security, and multicast services on the OLT, ONU, and ONT to implement IPv6 versus IPv4.
Configuration difference between ipv6 and ipv4
- 1. Configuration Difference Between IPv6 and IPv4 The main configuration difference between the IPv6 and IPv4 services lies in the configurations on the OLT, MDU, and ONT. Configuration Differences Between IPv6 and IPv4 on the Huawei OLT Configurations between IPv6 and IPv4 on the OLT vary in the ACL, security feature, and IPTV multicast service. Configuration Difference in Each Scenario Table 1lists the configuration difference between IPv6 and IPv4 on the OLT in each scenario. For details about the commands, see the later section. Table 1Configuration difference between IPv6 and IPv4 on the OLT Service Scheme Configuration Difference Between IPv6 and IPv4 HSI IPv4/IPv6 DS +NAT+PPPoE The ACL and anti-IP spoofing configurations are different for the two services. IPv4/IPv6 DS +NAT+IPoE The ACL, anti-IP spoofing, and DHCP option configurations are different for the two services. DS-Lite+PPPoE The ACL and anti-IP spoofing configurations are different for the two services. IPTV IPv4/IPv6 DS +IPoE The ACL, anti-IP spoofing, DHCP option, and multicast IGMP protocol configurations are different for the two services. ACL ACL configurations on the OLT are different for IPv6 and IPv4 on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. When configuring basic and advanced IPv6 ACLs, ensure that the keyword "ipv6" is included in the configuration command. For details, see Table 2 Table 2Commands for configuring IPv4 and IPv6 ACL on the OLT 1
- 2. IPv4 Ipv6 IPv6 ACL Supported or Not acl acl ipv6 Supported packet-filter { inbound | outbound } packet-filter { inbound | outbound } ipv6 Supported rule rule Supported NOTE After IPv6 is introduced, the protocol parameter in the rule command is extended to support the IPv6 protocols. Security Feature Anti-IP spoofing configurations for IPv6 and IPv4 are different on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. If the IPoE and DHCP protocols are used, DHCP option configurations for IPv6 and IPv4 are also different. For details, see Table 3. 1 The IP addresses in anti-IP spoofing configurations are different for the two services. 2 In the IPv4 configuration, DHCP option is DHCPv4 option 82. In the IPv6 configuration, DHCP option is DHCPv6 option 18/37. The DHCP option function is used together with the RAIO function, which enables the OLT to include physical information (including RID and CID) of the user, such as the subrack/slot/port. In this way, the BRAS or DHCP server is able to perform user authentication and tracing. When DHCPv4 is in use, the OLT includes RID and CID to the option 82 field. When DHCPv6 is in use, the OLT includes the RID to the option 37 field in the DHCPv6 packet and the CID to the option 18 field. The sub option 7 and sub option 9 functions of DHCPv4 option 82 are not supported by DHCPv6. Table 3 Commands for configuring IPv4 and IPv6 security features on the OLT IPv4 Ipv6 IPv6 Security Supported or Not DHCP Option raio-mode mode dhcpoption82 raio-mode mode dhcpv6- option Supported dhcp option82 dhcpv6 option Supported dhcp-option82 permitforwarding service-port dhcpv6-option permitforwarding Supported raio sub-option - Supported 2
- 3. dhcp sub-option7 - Not Supported - raio dhcpv6-option37 enterprise-num Not Supported display dhcp option82 display dhcpv6 option Supported display dhcp config display dhcpv6 config Supported Anti-IP spoofing security anti-ipspoofing security anti-ipv6spoofing Supported display security bind ip display security bind ipv6 Supported IPTV Multicast Service The IGMP protocol configurations (used to implement the IPTV multicast service) for IPv6 and IPv4 on the OLT are different. IPv4 uses the IGMP protocol while IPv6 uses the MLD protocol (the IGMP protocol for IPv6). The IPv4 multicast service can share VLANs with the IPv6 multicast service; therefore, you can deploy the IPv6 multicast service in existing IPv4 MVLANs only by adding IPv6 multicast programs in the IPv4 MVLANs and in right profiles. The configured parameters such as the bound right profiles and MVLANs can remain unchanged. For details about the difference of the IGMP commands between the two services, see Table 4. Table 4 Commands for configuring the IPv4 and IPv6 multicast services on the OLT 3
- 4. 4
- 5. 5
- 6. NOTE The multicast commands that are not listed in this table are the commands shared by the IPv4 multicast and IPv6 multicast. 6
- 7. Configuration Differences Between IPv6 and IPv4 on the ONU Configurations between IPv6 and IPv4 on the ONU vary in the ACL, security feature, and IPTV multicast service. Configuration Difference in Each Scenario Table 5 lists the configuration difference between IPv6 and IPv4 on the ONU in each scenario. For details about the commands, see the later section. Table 5 Configuration difference between IPv6 and IPv4 on the ONU Service Scheme Configuration Difference Between IPv6 and IPv4 HSI IPv4/IPv6 DS +NAT+PPPoE The ACL and anti-IP spoofing configurations are different for the two services. IPv4/IPv6 DS +NAT+IPoE The ACL, anti-IP spoofing, and DHCP option configurations are different for the two services. DS-Lite+PPPoE The ACL and anti-IP spoofing configurations are different for the two services. IPTV IPv4/IPv6 DS +IPoE The ACL, anti-IP spoofing, DHCP option, and multicast IGMP protocol configurations are different for the two services. ACL ACL configurations on the ONU are different for IPv6 and IPv4 on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. When configuring basic and advanced IPv6 ACLs, ensure that the keyword "ipv6" is included in the configuration command. For details, see Table 6. Table 6 Commands for configuring IPv4 and IPv6 ACL on the ONU IPv4 Ipv6 IPv6 ACL Supported or Not acl acl ipv6 Supported packet-filter { inbound | packet-filter { inbound | Supported 7
- 8. outbound } outbound } ipv6 rule rule Supported NOTE After IPv6 is introduced, the protocol parameter in the rule command is extended to support the IPv6 protocols. Security Anti-IP spoofing configurations for IPv6 and IPv4 are different on the network which runs both IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation schemes. If the IPoE and DHCP protocols are used, DHCP option configurations for IPv6 and IPv4 are also different. 1 The IP addresses in anti-IP spoofing configurations are different for the two services. 2 In the IPv4 configuration, DHCP option is DHCPv4 option 82. In the IPv6 configuration, DHCP option is DHCPv6 option 18/37. In the IPv6 configuration, the DHCP option function is used together with the RAIO function, which enables the ONU to include physical information (including RID and CID) of the user, such as the subrack/slot/port. In this way, the BRAS or DHCP server is able to perform user authentication and tracing. When DHCPv4 is in use, the ONU includes RID and CID to the option 82 field. When DHCPv6 is in use, the ONU includes the RID to the option 37 field in the DHCPv6 packet and the CID to the option 18 field. The sub option 7 and sub option 9 functions of DHCPv4 option 82 are not supported by DHCPv6. Table 7 Commands for configuring IPv4 and IPv6 security features on the ONU 8
- 9. IPTV Multicast Service The IGMP protocol configurations (used to implement the IPTV multicast service) for IPv6 and IPv4 on the ONU are different. IPv4 uses the IGMP protocol while IPv6 uses the MLD protocol (the IGMP protocol for IPv6). The IPv4 multicast service can share VLANs with the IPv6 multicast service; therefore, you can deploy the IPv6 multicast service in existing IPv4 MVLANs only by adding IPv6 multicast programs in the IPv4 MVLANs and in right profiles. The configured parameters such as the bound right profiles and MVLANs can remain unchanged. For details about the difference in the IGMP commands for the two services, see Table 8. Table 8 Commands for configuring the IPv4 and IPv6 multicast services on the ONU 9
- 10. 10
- 11. NOTE The multicast commands that are not listed in this table are the commands shared by IPv4 and IPv6 multicast services. Configuration Difference Between IPv6 and IPv4 on the ONT For the bridging ONT, configurations for IPv6 and IPv4 are the same. For the gateway ONT, the HSI service configurations for IPv6 and IPv4 are different. Configuring the IPv6 WAN Port on the Gateway ONT 11
- 12. For IPv6 IPTV multicast service, no extra configuration is required. For the IPv6 HSI service, the Internet WAN port on the gateway ONT must be configured (only Internet WAN port supports IPv6). If the gateway ONT uses the IPv6/IPv4 DS scheme, select IPv4/IPv6 for Protocol Type. If the gateway ONT uses the DS-Lite scheme, select IPv6 for Protocol Type. For details, see Figure 1. Figure 1 Configuring the IPv6 WAN port Configuring the IPv6 Address of the LAN Side on the Gateway ONT The gateway ONT can be configured to allocate IPv6 addresses to the terminals after IPv6 is introduced. For details, see Figure 2. Figure 2 Configuring the IPv6 address on the LAN side 12
- 13. Configuring the Static IPv6 Route on the Gateway ONT The gateway ONT can be configured with the static IPv6 route after IPv6 is introduced. For details, see Figure 3. Figure 3 Configuring the IPv6 static route It is referred from www.huawei.com More related: What is GPON HG8245A VS HG8245: Wifi Signal Strength GPON vs EPON: a cost comparision The Main Differences between HG8245 SC UPC and HG8245 SC APC Huawei ONT Classification More Huawei products and Reviews you can visit: http://www.huanetwork.com/blog Huanetwork.com is a world leading Huawei networking products distributor, we wholesale original new Huawei networking equipments, including Huawei switches, Huawei routers, 13
- 14. Huaweisymantec security products, Huawei IAD, Huawei SFP and other Huawei networking products. Our customers include telecom operators, Huawei resellers, ISP and system integrators. Right now most of our sales are contributed by regular customers. And in our Huanetwork Lab, we have below products ready for test: • Huawei OLT Optical Line Terminal MA5600T Series • Huawei MDU Multiple Dwelling Unit MA5620 • Huawei ONT Optical Network Terminal HG8245A, HG8245, HG8010H • Huawei DSLAM MA5616 • Huawei AC-DC Power Converter System EPS30-4815AF • Huawei Optical Splitter 1:32 • Huawei X700 Series GE Switch S5700-28C-EI with 10G Uplink Module • Huawei X700 Series Access Layer Switch S2700-9TP-EI-AC • Huawei X300 Series Layer 3 Full Optical DC Switch S3328TP-EI-24S-DC • Huawei SFP, SFP+, XFP Module, GPON B+ C+ Module • Huawei Routers AR1200 Series • Huawei U2000 Network Management System • Huawei eSight Network Management System • Cisco WS-C3560X-24P-L Switch (for compatible test purpose) Now with Huanetwork Lab, customers can do below test: 1. FTTx System Test 2. ADSL2+ System Test 3. Campus LAN/WAN Test 4. Optical Transceiver Test 5. Network Management Test 6. Compatible Test 7. Software Upgrade Test 8. Products Test For customers interested in Huanetwork products, please feel free to contact your sales request for test arrangement. Kindly note, Huanetwork Lab is not open to public, it is just available for Huanetwork customers. Huanetwork reserve the right to reject any test/login requirement. Our website: http://www.huanetwork.com Telephone: +852-30501940 Email: [email protected] Address: 23/F Lucky Plaza, 315-321 Lockhart Road, Wanchai, Hongkong 14