untitled

Size: px

Start display at page:

Download "untitled"

ゆきよどぎみ
6 years ago
Views:

1 NTT 1 1.DHCPv Web IPv6 IPv6 IP 2

2 DHCPv6 3 DHCPv6 DHCPv6 IPv6 stateless RA : statefull DHCPv6 : 4

3 DHCPv4 DHCPv4 DHCPv6 IPv4 DNS NTP, SIP, WINS MAC DHCPv6 IPv6 DNS NTP, SIP, WINS DUID DHCPv6 Router Advertisement RA 5 DHCPv6 RA Router Advertisement RA RA prefix information option RA RA : m/o flags Managed RA IPv6 DNSDHCPv6 Otherconfig RA IPv6 DNS DHCPv6 6

4 client stateless-dhcpv6 RFC3736 server INFORMATION-REQUEST REPLAY DNS, SIP, NTP, DNS, SIP, NTP 7 DHCPv6 Linux IPv6 IPv6 PC AX3600S IP88/S3600 Vista PC 8

5 stateless-dhcpv6 AX3600S, IP88/S3600 # DNSIPv6 (config)# ipv6 dhcp pool Group1 (config-dhcp)# dns-server 2001:db8::53 (config-dhcp)# domain-name mycompany.com (config-dhcp)# exit # (config)# interface vlan 100 (config-if)# ipv6 dhcp server Group1 (config-if)# exit vlan 100 DNS 2001:db8::53 9 RA RA Otherconfig (config)# interface vlan 100 (config-if)# ipv6 nd other-config-flag vlan 100 DNS 2001:db8::53 RA with O flag RA Managed (config)# interface vlan 100 (config-if)# ipv6 nd managed-config-flag 10

Windows Vista C: >ipconfig /all more : DNS... : mycompany.com IPv6........... : 2001:db8::adca:a5b:eb0b:4ac6() IPv6.

255.255.0..... : fe80::220:e0ff:fe60:4144%9 192.168.0.1 DHCP.......... : 10.0.24.1 DNS........... : 192.168.0.53 2001:db8::53 11 ipconfig.

6 Windows Vista C: >ipconfig /all more : DNS... : mycompany.com IPv : 2001:db8::adca:a5b:eb0b:4ac6() IPv : 2001:db8::e59b:d5eb:9caa:e8b() IPv6.... : fe80::adca:a5b:eb0b:4ac6%9() IPv : () : : fe80::220:e0ff:fe60:4144% DHCP : DNS : :db8::53 11 ipconfig.exe IPv6 IPv6 C: >ipconfig /release6 IPv6 C: >ipconfig /renew6 Router Solicitation RADHCPv6 Windows Vista 12

7 DHCPv6 DHCPv6 DHCPv6 DHCPv6 13 DHCPv6 /etc/sysconfig/dhcp6s - DHCP interface eth0 { option dns_servers 2001:db8::53 mydomain.com; link AAA { range 2001:db8::1000 to 2001:db8::2000/64; }; }; /etc/sysconfig/dhcp6s # specify the interface for dhcp6s DHCP6SIF=eth0 # Command line options here DHCP6SARGS= netstat an ff02::1:2 ff05::1:3 14

Windows Server 2008 DHCPv6 15 DHCPv6 Cisco interface

interface 100 ipv6 nd managed-config-flag CiscoRA

8 Windows Server 2008 DHCPv6 15 DHCPv6 Cisco interface GigabitEthernet0/0.100 ipv6 enable ipv6 address 2001:db8:1000::1/64 ipv6 dhcp relay destination 2001:db8::547 CiscoRA Managed interface GigabitEthernet0/0.100 ipv6 nd managed-config-flag CiscoRA OtherConfig interface GigabitEthernet0/0.100 ipv6 nd other-config-flag 16

9 DHCPv6 DUID Nov/06/ :18:12 get DHCP option option request, len 8 requested option: domain search list requested option: DNS_SERVERS Nov/06/ :18:12 client ID 00:01:00:01:0d:bb:81:ae:00:16:41:ac:d3:36 Nov/06/ :18:12 request address is 2001:db8:1::1000/0 Nov/06/ :18:12 lease address is 2001:db8:1::1000/0 Nov/06/ :18:12 status code: success DUID : ID IPv6 17 DUID DHCP Unique IDentifier DHCPv6 non-ethernet MAC DUID Type 1: 00:01:00:01:tt:tt:tt:tt:mm:mm:mm:mm:mm:mm 1=Ethernet Type 2: ID 00:02:EE:EE:NN:NN:NN:NN:NN:. ID MAC Type 3: 00:03:00:01:mm:mm:mm:mm:mm:mm. 1=Ethernet ID MAC 18

10 m/o IETF m/o Windows Vista Windows XP Linux/FreeBSD 19 20

11 IPv6 google chrome Microsoft Office Microsoft Office IPv6 ult.mspx 21 IPv6 Linux/FreeBSD, Windows Server BIND IPv6 IPv6 IPv6 DNS DNS AAAA dns= IPv4 kame IPv6 IPv4IPv6 DNS IPv6 dns=2001:db8 ::53 IPv6 kame IPv6 IPv6IPv6 IPv4/IPv6 22

12 BIND IPv6AAAA 2. IPv6 BIND /var/named/data/mycompany.com.zones DB www IN AAAA 2001:db8::80 cifs IN AAAA 2001:db8::80 nagios IN AAAA 2001:db8::80 /etc/named.conf options { listen-on port 53 { ; }; listen-on-v6 port 53 { :: }; allow-query { /24; # 2001:db8::/32; # }; }; 23 Linux # /etc/initd/named restart named : [ OK ] named : [ OK ] Linux # netstat an grep 53 tcp : :* LISTEN tcp :db8::80:53 :::* LISTEN udp : :* udp :db8::80:53 :::* /var/log/messages Nov 4 16:58:05 localhost named[3462]: exiting Nov 4 16:58:05 localhost named: /etc/named.conf:18: missing ';' before '}' 24

13 Vista C: >nslookup :db8::80 : UnKnown Address: 2001:db8::80 : Addresses: 2001:db8::80 Linux # ; ANSWER SECTION: IN AAAA 2001:db8::80 25 Link Local Multicast Name Resolution LLMNR Windows Vista NetBIOS over TCP/IPv4 PnP DNS C: >ping VISTA-v6-PC VISTA-v6-PC [fe80::abcd%9] ping fe80::abcd%9 32 : fe80::abcd%9 : <1ms fe80::abcd%9 : <1ms 26

14 Web 27 Web Web IPv6 HTTP IPv6 Windows IIS, Apache ACL4 IPv4 IPv4 IPv4 ACL6 IPv6 IPv6 IP <A HREF= > </A> <A HREF= > </A> 28

15 Apache 2.2.x - /etc/httpd/conf/httpd.conf Listen Listen 80 # 80 # # Listen [::]:80 # # IPv6[] # Listen :80 Allow, Deny <Directory /var/www/html> Order Deny,Allow Deny from all Allow from / Allow from 2001:db8::/32 </Directory> 29 Apache 2.2.x /etc/init.d/httpd restart httpd : [ OK ] httpd : [ OK ] Linux netstat an grep 80 tcp : :* LISTEN tcp :db8::80:80 :::* LISTEN IPv4, IPv6 30

16 Apache 2.2.x Vista 31 32

17 Common Internet File System CIFS Web Windows Server 2008 Samba 3.2 IPv Windows, Samba CIFS IPv6/IPv4 IPv6/IPv4 33 [share] Samba 3.2.x - /etc/samba/smb.conf comment = shared folder browseable = yes writable = yes path = /data/shared hosts deny = ALL hosts allow = / :db8::/32 IPv6 34

18 Samba # /etc/init.d/smb restart # /etc/init.d/nmb restart SMB/NMB : [ OK ] SMB/NMB : [ OK ] IPv6/IPv4 IPv4 IPv LLMNR netstat 35 Vista cifs share - UNC UNC cifs.mycompany.com share share 2001:db8::135 share [2001:db8::135] share IPv4 IPv6 IPv6 36

19 Windows Server

20 IPv6 - nagios Web L3L4 ping, smtp, telnet, ssh, ftp, http, pop, imap, dns, CPU,,, Windows, Mac,, UPS, RDBMS 39 nagios ,, or 40

21 nagios RRDtools, MRTG SNMP nrpe: Nagios Remote Plugin Executor push nagios push NSCA: NetSaint Service Check Acceptor nagios NSCA nagios 41 mycompany.com ipv6-router ns www Web cifs ns external fw ipv6-router www cifs vista-pc 42

22 nagios 43 /etc/nagios/servers.cfg #1 #1 #1 on #1 #2 on #1 #2 #1 on #2 #2 on #2 #2 44

23 define host{ name generic-host ; } define host{ use generic-host ; name linux-server ; Linux } define host{ use linux-server ; Linux host_name web-server alias www address 2001:db8::80 } 45, Web, name-server, web-server, cifs-server define hostgroup { hostgroup_name Servers alias hanbai-ka-servers members name-server,web-server,cifs-server } 46

24 Web ping, Apachehttpd define service{ use server-service ; host_name web-server ; service_description PING check_command check_ping!100.0,20%!500.0,60% } 100ms 20% WARING 500ms 60% CRITICAL define service{ use server-service WARING host_name web-server service_description WEB check_command check_http!/index.html!1!5 } /index.html GET 1WARING 47 DNS, CIFS BIND define service{ use server-service host_name name-server CRITICAL service_description DNS check_command check_dns! } TCP 139 define service{ use server-service host_name cifs-server 5CRTICAL service_description CIFS check_command check_tcp!139!2!5 } TCP 139 2WARING 48

25 host detail 49 service detail

26 Web # /etc/init.d/httpd stop Stopping httpd: [ OK ] Web PING IPv6OK 51 IPv6 # ifconfig eth0 inet6 del 2001:db8::80/64 IPv6 52

27 Contact Pager To: From: ***** Nagios ***** Notification Type: PROBLEM Host: web-server State: DOWN Address: 2001:db8::80 Info: CRITICAL - Plugin timed out after 10 seconds Date/Time: Mon Nov 10 10:43:16 JST 2008 To: noc-admins@mycompany.com From: nagios@mycompany.com ***** Nagios ***** Notification Type: RECOVERY Host: web-server State: UP Address: 2001:db8::80 Info: PING OK - Packet loss = 0%, RTA = 0.83 ms Date/Time: Mon Nov 10 11:03:39 JST nagios DB nagios process CGI DB check_xxx nsca Nagios CGI polling nrpe nsca http, mail, pop, dns, nrpe Web nrpe: Nagios Remote Plugin Executor nsca: NetSaint Service Check Acceptor nsca 54

nsca NSCA NSCA CMS Nagios NSCA CMS NSCA IPv4 IPv6 Nagios NSCA Nagios http://nagios.sourceforge.net/docs/1_0/distributed.

28 nsca NSCA NSCA CMS Nagios NSCA CMS NSCA IPv4 IPv6 Nagios NSCA Nagios 55 nagios host hostextinfo hostgroup hostgroupescalation hostdependency service serviceextinfo serviceescalation servicedependncy contact contactgroup command timeperiod GUIhost hosthost GUIservice host contactgroup 24365, 9:00 17:00 56

29 nagios hostgroup host IP servicegroup service service host IP hostextinfo GUI host IP serviceextinfo GUI service hostgroupescalation hostgroup host, host,. contactgroup conatct, contact,. serviceescalation service contactgroup conatct, contact,. command /usr/local/libexec/nagios/check_xxxx $1 $2 timepriod 24x7 24 workinghour: 9:00 17:00 contactgroup contact contact pager pager contact pager 57 Web nagios Web DB DB DB.mycompany.com servicedependency Web :DB DB.mycompany.com Web Web servicedependency DBWeb DB Web Web 58

IPv6 トラブルシューティングホームネットワーク／SOHO編

IPv6 トラブルシューティングホームネットワーク／SOHO編 IPv6 SOHO NTT fujisaki@nttv6.com 2010 NTT Information Sharing Platform Laboratories IPv6 IPv6 IPv6 IPv4 IPv6 IPv4/IPv6 MTU IPv6 2 2010 NTT Information Sharing Platform Laboratories IPv6 SOHO (NTT /) SOHO