ISATAP Router LAB
1- Create DNS Resource Record for ISATAP Router in your DNS .
2- Configure TCP/IP for both DC + WIN7 [Disable V4 / V6] .
3- Create 2 inbound firewall rules on both [DC+7] to allow ping ICMPV4 / ICMPV6 .
4- Enable RRAS --- LAN Routing
Run --- Regedit --- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters --- R.click --- New --- DWORD IPEnableRouter Value [1] – then Restart our Router .
Execute these command on the router ----
netsh interface ipv6 set interface "v6" forwarding=enabled advertise=enabled
netsh interface ipv6 set interface "v4" forwarding=enabled advertise=enabled
netsh interface ipv6 add route fc01:db9:0:1::/64 "v6" publish=yes
** Notice windows 7 get 2 IPV6 addresses because Privacy is ON
Privacy Extensions for Stateless Address Auto configuration in IPv6. The use of temporary addresses with random and changing interface IDs embedded in the address makes it more difficult for eavesdropping software to correlate independent transactions that use different IPv6 addresses that were automatically configured but that involve the same z/OS system.
** To Disable Privacy --- netsh interface ipv6 set privacy state=disable then restart
On the router --------- netsh interface ipv6 isatap set router 192.168.1.2
To know your NIC GUID :-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID} وهذا مهم لكى يساعدنا فى اختيار الرقم المناسب للأمر التالى
VIP : Choose GUID for NIC facing IPV4 clients to enable them later to get IP for ISATAP adapter
netsh interface ipv6 set interface "isatap.{XXXXX}" forwarding=enabled advertise=enabled
netsh interface ipv6 add route fc01:db9:0:10::/64 "isatap.{XXXXXX}" publish=yes
on DC : netsh interface isatap set router 192.168.1.2
NOW : on DC ---- ipconfig ---- you will notice ISATAP Adapter Got an IP
Then Test on both directions
ليست هناك تعليقات:
إرسال تعليق