OSPFv3与思科路由器之间的OPNSense融合问题

Question

我一直在互联网上挖掘，并一直试图让IPv6在我的实验室运行。以下是我目前的布局：

我一直试图让OPNSense和Cisco1900路由器通过OSPFv3提供彼此的网络。DHCPv6正在将所有正确的前缀转发给家庭实验室，并且路由器正在正确地分发它们。OPNSense FW和家庭实验室可以互相交换。然而，他们似乎从来没有汇合和建立DR/BR关系。

以下是我的配置：

思科1900配置

ipv6 unicast-routing
ipv6 cef

! interface GigabitEthernet0/0 
 ip address 10.0.1.2 255.255.255.252
 ip ospf 1 area 0
 duplex auto
 speed auto
 ipv6 address autoconfig default
 ipv6 enable
 ipv6 dhcp client pd prefix-from-provider
 ipv6 ospf 1 area 0
 ipv6 ospf priority 2

! 
interface GigabitEthernet0/1
 no ip address
 duplex full
 speed auto 

! 
interface GigabitEthernet0/1.10
 description DMZ
 encapsulation dot1Q 10
 ip address 10.1.10.1 255.255.255.0
 ipv6 address prefix-from-provider ::1:0:0:0:1/64
 ipv6 enable 

! 
interface GigabitEthernet0/1.100
 description MGMT VLAN
 encapsulation dot1Q 100 native
 ip address 10.1.100.1 255.255.255.0
 ipv6 address prefix-from-provider ::2:0:0:0:1/64
 ipv6 enable
 
! 
router ospfv3 1
 router-id 2.2.2.2
 log-adjacency-changes detail
! 
 address-family ipv6 unicast
 area 0 normal
 exit-address-family 
! 
! 
router ospf 1 
 network 10.0.1.0 0.0.0.255 area 0
 network 10.1.0.0 0.0.255.255 area 0 
!

OPNSENSE配置

思科路由器诊断

EdgeRTR#sh ipv6 ospf
 Routing Process "ospfv3 1" with ID 2.2.2.2
 Supports NSSA (compatible with RFC 3101)
 Supports Database Exchange Summary List Optimization (RFC 5243)
 Event-log enabled, Maximum number of events: 1000, Mode: cyclic
 Router is not originating router-LSAs with maximum metric
 Initial SPF schedule delay 5000 msecs
 Minimum hold time between two consecutive SPFs 10000 msecs
 Maximum wait time between two consecutive SPFs 10000 msecs
 Minimum LSA interval 5 secs
 Minimum LSA arrival 1000 msecs
 LSA group pacing timer 240 secs
 Interface flood pacing timer 33 msecs
 Retransmission pacing timer 66 msecs
 Retransmission limit dc 24 non-dc 24
 EXCHANGE/LOADING adjacency limit: initial 300, process maximum 300
 Number of external LSA 0. Checksum Sum 0x000000
 Number of areas in this router is 1. 1 normal 0 stub 0 nssa
 Graceful restart helper support enabled
 Reference bandwidth unit is 100 mbps
 RFC1583 compatibility enabled
    Area BACKBONE(0) (Inactive)
        Number of interfaces in this area is 1
        SPF algorithm executed 4 times
        Number of LSA 3. Checksum Sum 0x00E61D
        Number of DCbitless LSA 0
        Number of indication LSA 0
        Number of DoNotAge LSA 0
        Flood list length 0

EdgeRTR#sh ipv6 ospf neigh

            OSPFv3 Router with ID (2.2.2.2) (Process ID 1)

Neighbor ID     Pri   State           Dead Time   Interface ID    Interface
3.3.3.3           1   INIT/DROTHER    00:00:38    3               GigabitEthernet0/0

EdgeRTR#sh ipv6 ospf int gi0/0
GigabitEthernet0/0 is up, line protocol is up
  Link Local Address FE80::B6DE:31FF:FEA3:AC60, Interface ID 3
  Area 0, Process ID 1, Instance ID 0, Router ID 2.2.2.2
  Network Type BROADCAST, Cost: 1
  Transmit Delay is 1 sec, State DR, Priority 2
  Designated Router (ID) 2.2.2.2, local address FE80::B6DE:31FF:FEA3:AC60
  No backup designated router on this network
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:06
  Graceful restart helper support enabled
  Index 1/1/1, flood queue length 0
  Next 0x0(0)/0x0(0)/0x0(0)
  Last flood scan length is 0, maximum is 0
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 1, Adjacent neighbor count is 0
  Suppress hello for 0 neighbor(s)

如果能对此提供任何帮助，我们将不胜感激。我知道我错过了什么，但这是什么？

干杯!

拉库勒

Answer 1

您在Cisco路由器上拥有的内容是不完整和不正确的。OSPFv3 for IPv6需要在每个接口上进行配置。您还可以使用OSPFv3对IPv4进行配置，并在每个接口上进行配置。请记住，网络语句只告诉OSPF进程中包含哪些接口，而不告诉要宣传哪些网络，OSPFv3通过让您在接口上配置而不是在OSPF路由器命令下进行配置，简化了这一点。

您还可以使用IPv4路由器下的IPv4地址系列，或者在接口上使用OSPFv2代替OSPFv2路由器下的网络语句，用相同的方式配置OSPFv3。

interface GigabitEthernet0/0 
 ip address 10.0.1.2 255.255.255.252
 ip ospf 1 area 0
 duplex auto
 speed auto
 ipv6 address autoconfig default
 ipv6 enable
 ipv6 dhcp client pd prefix-from-provider
 ipv6 ospf 1 area 0
 ipv6 ospf priority 2
 ospfv3 1 ipv6 area 0  !*** Add interface to OSPFv3  ***
! 
interface GigabitEthernet0/1.10
 description DMZ
 encapsulation dot1Q 10
 ip address 10.1.10.1 255.255.255.0
 ipv6 address prefix-from-provider ::1:0:0:0:1/64
 ipv6 enable 
 ospfv3 1 ipv6 area 0  !*** Add interface to OSPFv3  ***
! 
interface GigabitEthernet0/1.100
 description MGMT VLAN
 encapsulation dot1Q 100 native
 ip address 10.1.100.1 255.255.255.0
 ipv6 address prefix-from-provider ::2:0:0:0:1/64
 ipv6 enable
 ospfv3 1 ipv6 area 0  !*** Add interface to OSPFv3  ***
! 
router ospfv3 1
 router-id 2.2.2.2
 log-adjacency-changes detail
! 
 address-family ipv6 unicast
 area 0 normal
 exit-address-family 
! 

不幸的是，OPNSense制造商没有提供可选的、付费的支持，这是这里主题的一个要求。