CloudLabBox
Try the free demo

IPv6 in practice lab 7 of 12

Transition: dual stack, 6in4 and GRE tunnels, and NAT64

IPv6 rarely arrives everywhere at once. Carry IPv6 across an IPv4-only provider with 6in4 and GRE tunnels and compare what each one costs, then let an IPv6-only PC reach an IPv4-only server through stateful NAT64 on IOS XE.

Run this lab

It needs Lite: its 6 nodes are set to 6 vCPU and 6,656 MB in total. That fits the free demo too.

In your workspace: Shared, then IPv6 in practice across vendors guided labs, then 07 - Transition - dual stack 6in4 and GRE tunnels and NAT64

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 90 minutes
Nodes need
6 vCPU, 6,656 MB
Smallest plan
Lite

The scenario

Kestrel Freight's office LAN is now IPv6-only, and the branch LAN is dual stack, but the ISP between them routes only IPv4. And an old stock server can't be upgraded: it speaks IPv4 and always will. You carry IPv6 across the ISP in tunnels, then give the office a way to reach that server.

SegmentIPv4IPv6
Office LAN (CSR1 Gi1, H1)none2001:db8:100:10::/64, H1 by SLAAC
Legacy LAN (CSR1 Gi3, H3)198.51.100.0/24, H3 .10none
CSR1 to ISP203.0.113.0/30, CSR1 .1, ISP .2none
ISP to BR1203.0.113.4/30, ISP .5, BR1 .6none
Branch LAN (BR1 Gi0/1, H2)192.168.20.0/24, H2 .102001:db8:100:20::/64, H2 by SLAAC
Tunnel0, 6in42001:db8:100:f0::/64, CSR1 ::1, BR1 ::2
Tunnel1, GRE2001:db8:100:f1::/64, CSR1 ::1, BR1 ::2
NAT64 prefix64:ff9b::/96, pool 198.51.100.100–110
DeviceRunsHow to log in
CSR1Cisco CSR 1000v (IOS XE 17.3)The console opens at >; enable has no password. It takes about 5 minutes to boot.
ISP, BR1Cisco IOSv 15.9The console opens at >; enable has no password.
H1, H3, H2Alpine Linuxroot, no password.

What you’ll practise

  • Explain dual stack and how a host chooses between IPv4 and IPv6
  • Build 6in4 and GRE tunnels across an IPv4-only network, and compare their MTUs
  • Route IPv6 between sites over a tunnel
  • Configure stateful NAT64 on IOS XE and work out an embedded address by hand
  • Explain DNS64 and DS-Lite, and where each fits

The tasks

  1. Start the Linux hosts
  2. Dual stack
  3. A 6in4 tunnel
  4. A GRE tunnel, and what it costs
  5. NAT64
  6. DNS64 and DS-Lite (concepts)

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Transition - dual stack 6in4 and GRE tunnels and NAT646 nodes, 5 links. Every link is listed as text below the diagram.CSR1ISPBR1H1H3H2Gi0/1eth0Gi2Gi0/0Gi0/1Gi0/0Gi1eth0Gi3eth0
6 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • CSR1 Gi2 to ISP Gi0/0
  • ISP Gi0/1 to BR1 Gi0/0
  • CSR1 Gi1 to H1 eth0
  • CSR1 Gi3 to H3 eth0
  • BR1 Gi0/1 to H2 eth0
Nodes in Transition: dual stack, 6in4 and GRE tunnels, and NAT64, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
CSR1Cisco CSR 1000vcsr1000vng-universalk9.17.03.08a-serial1 vCPU, 4,096 MB
ISPCisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
BR1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
H1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
H3Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
H2Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder IPv6 in practice across vendors guided labs.

  3. Open 07 - Transition - dual stack 6in4 and GRE tunnels and NAT64 and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More IPv6 in practice labs

All IPv6 in practice labs

Related labs in other courses

CloudLabBox is independent of Cisco, CompTIA, Juniper Networks and MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.