280 Understanding IPv6,Second Edition Note Hosts running Windows Vista with no service packs on the IPv6-enabled portion of the intranet,by default,have ISATAP enabled and automatically configure link-local ISATAP addresses on their ISATAP tunneling interfaces.It is possible for these ISATAP hosts on the ISATAP subnet to communicate directly with native IPv6 hosts on the IPv6-capable portion of the intranet through host-to-host tunneling by using link-local ISATAP addresses.However, because link-local addresses are not registered in DNS,ISATAP hosts would have to manually specify the destination link-local ISATAP address and interface index to reach a host on the IPv6-capable portion of the intranet without first tunneling the traffic to the ISATAP router. This type of communication is not practical or commonly used and is not described further in this chapter. To prevent the hosts on the IPv6-capable portion of the intranet from using ISATAP you can disable ISATAP with the DisabledComponents registry value as previously described. An ISATAP router is an IPv6 router with an ISATAP tunneling interface that does the following: Forwards packets between ISATAP hosts on ISATAP subnets and IPv6 hosts on IPv6-capable subnets. Advertises address prefixes to ISATAP hosts on the ISATAP subnet.ISATAP hosts use the advertised address prefixes to configure global or unique local ISATAP addresses. Acts as a default router for ISATAP hosts.When an ISATAP host receives a router adver- tisement from an ISATAP router that is advertising itself as a default router,the ISATAP host adds a default route(:/0)using the ISATAP tunneling interface with next-hop address set to the link-local ISATAP address of the ISATAP router.When ISATAP hosts send packets destined to locations beyond their ISATAP subnet,the packets are tun- neled to the IPv4 address of the ISATAP router corresponding to the ISATAP router's interface on the ISATAP subnet.The ISATAP router then forwards the IPv6 packet to the appropriate next-hop on the IPv6-capable portion of the intranet. An IPv6-capable portion of an intranet is optional,in which case the ISATAP router is only functioning as an advertising router and not a forwarding or default router.This is the case for an initial ISATAP deployment in which there are no IPv6-capable subnets. Router Discovery for ISATAP Hosts To receive a Router Advertisement message from the ISATAP router,the ISATAP host must send the ISATAP router a Router Solicitation message.On an Ethernet subnet,a native IPv6 host sends a multicast Router Solicitation message and the routers on the subnet respond with a multicast Router Advertisement message.Because ISATAP does not use IPv4 multicast traffic or require an IPv4 multicast-capable infrastructure,the ISATAP host must unicast the Router Solicitation message to the ISATAP router.To unicast the Router Solicitation message to the ISATAP router,the ISATAP host must first determine the unicast IPv4 address of the ISATAP router's interface on the ISATAP subnet
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`PI@L@AB?C?DPFKHEITIJMIKLEFGHIELUMIE\ HJKIaI@HSEFaL@AB?C?DEFGHIEHPLHJKLUMIEHJKJ@RJHKIQSLKLUISLGQHEFGHIEbHPIAB?C?D PFKHLUUKLUISLGQHEFGHIcVVdefGKJ@RHPIAB?C?DHG@@IQJ@RJ@HIESLTIOJHP@I^H\PFY LUUEIKKKIHHFHPIQJ@Z\QFTLQAB?C?DLUUEIKKFSHPIAB?C?DEFGHIE]`PI@AB?C?DPFKHK KI@UYLTZIHKUIKHJ@IUHFQFTLHJF@K[IgF@UHPIJEAB?C?DKG[@IHbHPIYLTZIHKLEIHG@\ @IQIUHFHPIADMhLUUEIKKFSHPIAB?C?DEFGHIETFEEIKYF@UJ@RHFHPIAB?C?DEFGHIEiK J@HIESLTIF@HPIAB?C?DKG[@IH]CPIAB?C?DEFGHIEHPI@SFEOLEUKHPIADMNYLTZIHHFHPI LYYEFYEJLHI@I^H\PFYF@HPIADMN\TLYL[QIYFEHJF@FSHPIJ@HEL@IH] ?@ADMN\TLYL[QIYFEHJF@FSL@J@HEL@IHJKFYHJF@LQbJ@OPJTPTLKIHPIAB?C?DEFGHIEJKF@Qg SG@THJF@J@RLKL@LUMIEHJKJ@REFGHIEL@U@FHLSFEOLEUJ@RFEUISLGQHEFGHIE]CPJKJKHPITLKISFE L@J@JHJLQAB?C?DUIYQFgaI@HJ@OPJTPHPIEILEI@FADMN\TLYL[QIKG[@IHK] jklmnopqrsktnouvkowxyzy{|krmr CFEITIJMIL}FGHIE?UMIEHJKIaI@HaIKKLRISEFaHPIAB?C?DEFGHIEbHPIAB?C?DPFKHaGKH KI@UHPIAB?C?DEFGHIEL}FGHIEBFQJTJHLHJF@aIKKLRI]~@L@HPIE@IHKG[@IHbL@LHJMIADMN PFKHKI@UKLaGQHJTLKH}FGHIEBFQJTJHLHJF@aIKKLRIL@UHPIEFGHIEKF@HPIKG[@IHEIKYF@U OJHPLaGQHJTLKH}FGHIE?UMIEHJKIaI@HaIKKLRI]ITLGKIAB?C?DUFIK@FHGKIADMhaGQHJTLKH HELSSJTFEEI_GJEIL@ADMhaGQHJTLKH\TLYL[QIJ@SELKHEGTHGEIbHPIAB?C?DPFKHaGKHG@JTLKHHPI }FGHIEBFQJTJHLHJF@aIKKLRIHFHPIAB?C?DEFGHIE]CFG@JTLKHHPI}FGHIEBFQJTJHLHJF@aIKKLRI HFHPIAB?C?DEFGHIEbHPIAB?C?DPFKHaGKHSJEKHUIHIEaJ@IHPIG@JTLKHADMhLUUEIKKFSHPI AB?C?DEFGHIEiKJ@HIESLTIF@HPIAB?C?DKG[@IH]
Chapter 12 ISATAP 281 For the IPv6 protocol for Windows Server 2008 and Windows Vista,an ISATAP host obtains the unicast IPv4 address of the ISATAP router through one of the following methods: The successful resolution of the host name "ISATAP"to an IPv4 address The netsh interface isatap set router command Resolving the Name "ISATAP" When the IPv6 protocol for Windows Server 2008 or Windows Vista starts,it attempts to resolve the host name "ISATAP"to an IPv4 address using normal Windows-based TCP/IP host name resolution techniques.If it is successful,the host unicasts an IPv4-encapsulated Router Solicitation message to the ISATAP router at the resolved address.The ISATAP router responds with an IPv4-encapsulated unicast Router Advertisement message that contains pre- fixes to use for autoconfiguration of additional ISATAP addresses and,optionally,indicates that the ISATAP router is a default router Normal Windows-based host name resolution techniques for resolving the name"ISATAP" include the following: 1.Checking the local host name. 2.Checking the DNS client resolver cache,which includes the entries in the Hosts file in the %SystemRoot%/system32\drivers\etc folder. 3.Forming a fully qualified domain name(FODN),and sending a DNS name query.For example,if the computer is a member of the example.microsoft.com domain(and exam- ple.microsoft.com is the only domain name in the search list),the computer sends a DNS name query to resolve the FQDN isatap.example.microsoft.com. 4.Converting the host name"ISATAP"into the NetBIOS name "ISATAP <00>" and checking the NetBIOS name cache. 5.Sending a NetBIOS name query for the NetBIOS name "ISATAP <00s" to the configured Windows Internet Name Service(WINS)servers. 6.Sending NetBIOS name query broadcasts for the NetBIOS name "ISATAP <00s" on the local IPv4 subnet. 7.Checking the Lmhosts file in the SystemRoot\system32\drivers\etc folder for an entry with the name“ISATAP To ensure that at least one of these attempts is successful,you can do one of the following: If the ISATAP router is a computer running Windows Server 2008 or Windows Vista, name the computer"ISATAP"and it will automatically register the appropriate records in DNS and WINS
!"#$%&'())*+#$!"#$%&,"&+-+#'./.&0+"#& 1#" +&2+$$&& './.113# %"#34$&5 6 /&1 && 1 & 1"# &#+47'./.8+#2+$$&& 6 /9:;<=>9;:?@AB:><A;AC<:;?DE;:? 44+#$ FGHIJKLMNOP Q !# !"#$%&'())*!"#$%&,"&+&+&-"+4 & & &#+47'./.8+#2+$$&&1&"#3#4+ !"#$%&R0+&$/ST &#+4& 1"# #"U1&V ""&&1 && 1 -&1#" +&&+#2R# + &1 +$ W1' " "+"#4&&+3'./.1+& $+$$&&V/'./.1 & #$&%"+#2R# + &1 +$1#" +&W1.$"&4#4&&+3+ #+"#& R "X&1& +1 # "31+"# +$$""#+ './.+$$&&&+#$- "#+ Y-"#$" +& +'./.1"&+$ +1 1V Z4+ !"#$%&R0+&$&#+4& 1"# #"U1& & "#3#+47'./.8 "# 1$ %"#35 [\ S ]"#3 + &#+4V ^\ S ]"#3_Z' "#& + -%" "# 1$&#"&"#`&& " "# abcdefghiieaT&Y&4j(k$"&k $V l\ 4"#3+ 1 YU1+ " "$$4+"##+4mn_Zo-+#$&#$"#3+_Z'#+4U1YV X+4 -" 4 1"&+440 X+4 V4" & V 4$4+"#m+#$X+4R V4" & V 4"&# Y$4+"##+4"#&+ "&o- 4 1&#$&+ _Z'#+4U1Y& n_Z"&++ VX+4 V4" & V 4V p\ S#"#3&#+47'./.8"#Zqr'#+4stuvwvxyzz{s +#$ ]"#3Zqr'#+4 + V |\ '#$"#3+Zqr'#+4U1Y Zqr'#+4stuvwvxyzz{s # "31$!"#$%&##Z+4'" m!Z'o&&V }\ '#$"#3Zqr'#+4U1Y0+$ +&& Zqr'#+4stuvwvxyzz{s # + 2&10#V ~\ S ]"#34&& " "#bcdefghiiek&Y&4j(k$"&k $ +##Y %"#+47'./.8V /#&1++ +&# &+4 &"&&1 && 1 -Y1 +#$# %"#35 6 './.1"&+ 4 11##"#3!"#$%&'())*!"#$%&,"&+- #+4 4 17'./.8+#$"%" +14+" + Y3"&+ "+ $& "#_Z'+#$!Z'V
282 Understanding IPv6,Second Edition Manually create an address(A)record for the name "ISATAP"in the appropriate domains in DNS.For example,for the example.microsoft.com domain,create an A record for isatap.example.microsoft.com. Manually create a static WINS record in WINS for the NetBIOS name "ISATAP <00>" Add the following entry to the Hosts file of the computers that need to resolve the name ISATAP: IPv4Address ISATAP Add the following entry to the Lmhosts file of the computers that need to resolve the name ISATAP: IPv4Address ISATAP Note Computers running Windows XP with no service packs installed attempt to resolve the name "ISATAP"to determine the IPv4 address of the ISATAP router. Figure 12-3 shows how an ISATAP host obtains the IPv4 address of the ISATAP router through a DNS name query and performs router discovery with an ISATAP router. DNS Server ISATAP Router IPv4-Only】 IPv6-Capable ISATAP Host ②③ 1.DNS Query for "ISATAP" IPv4 Traffic 2.IPv4-Encapsulated Router Solicitation IPv6 Tunneled with IPv4 ISATAP Host 3.IPv4-Encapsulated Router Advertisement Figure 12-3 Performing router discovery with an ISATAP router ISATAP hosts on the ISATAP subnet send their DNS name queries over IPv4,rather than IPv6, because the ISATAP hosts do not have native IPv6 connectivity.By default,an ISATAP host running Windows Server 2008 or Windows Vista will attempt to register global and unique local ISATAP addresses in DNS using DNS dynamic update
! "" ## $%& ' " (' !) * +,-%.%/0 1 !) 22 '2 1! "'*1# 1 34-5 6' 7*2 8 (' !) 7*2 5*1 '#'(!5 '* "'*18 ! % ' " (' 1#!25 7*2 5*1 '#'(!5 '*5 ! #!!1 9,4- ' " 1 9,4- (' !) 4 !:,;- * <=>?@?A BCCD<5 %"" !) (' 'E1F ! !' !) G'#!# (1 '( !) '*2! # !)! " !' #' H !) * ,-%.%/I JKLMNOOPQRR ,-%.%/ %"" !) (' 'E1F ! !' !) S*)'#!# (1 '( !) '*2! # !)! " !' #' H !) * ,-%.%/I JKLMNOOPQRR ,-%.%/ T UVWXYZ[\] \Y^^_^` a_^bVc] de c_Zf ^V ][\g_h[ Xihj] _^]Zikk[b iZZ[WXZ ZV \[]Vkg[ Zf[ ^iW[ lmnopqper ZV b[Z[\W_^[ Zf[ negs ibb\[]] Vt Zf[ nopqpe \VYZ[\u 61F vwxy #)'E# )'E ,-%.%/ )'#! 'z!1# !) ,/H{ "" ## '( !) ,-%.%/ '! !) 'F) 34- * | " 2 (' *# '! "1# 'H E1!) ,-%.%/ '! 5 } ~ ,-%.%/ )'#!# ' !) ,-%.%/ #z ! # " !) 1 34- * | 1 # 'H ,/H{8 !) !) ,/H8 z # !) ,-%.%/ )'#!# "' '! )H !1H ,/H ' !1H1! 5 : " ( !8 ,-%.%/ )'#! 1F 91"'E# - H w ' 91"'E# 1#! E1 !! *2! !' F1#! F 'z " 1| ' ,-%.%/ "" ## # 1 34- #1F 34- " *1 2"! 5 ¡¢£¤¥¦ §¢¨©ª©«¥¬ ®¯°¯± ²³´µ¶· ¸¹ º»® ¼´¶·½ ¾³· ¿®¯°¯±À Á¹ ±ÂÃÄÅÆÇÈÉÊ´Ëȵ¶Ì ²³´µ¶· ®³ËÍÇÍµÈµÍ³Æ ®¯°¯± гʵ ι ±ÂÃÄÅÆÇÈÉÊ´Ëȵ¶Ì ²³´µ¶· ¯Ì¶·µÍʶ϶Ƶ ®¯°¯± гʵ º»® ®¶·Â¶· Ñ Ò Ó ±Âà °·È¾¾ÍÇ ±ÂÔ °´ÆÆ¶Ë¶Ì Õ굅 ±ÂÃ
Chapter 12 ISATAP 283 Network Monitor Capture Here is an example of the IPv4-encapsulated Router Solicitation message as displayed by Network Monitor 3.1 (frame 1 of capture 12_0l in the \NetworkMonitorCaptures folder on the companion CD-ROM): Frame: Ethernet:Etype Internet IP (IPv4) -Ipv4:Next Protocol■IPv6 over IPv4,Packet ID■56，Total IP Length■68 Versions:IPv4,Internet Protocol;Header Length =20 DifferentiatedServicesField:DSCP:0,ECN:0 TotalLength:68 (0x44) Identification:56 (0x38) FragmentFlags:0 (0x0) TimeToLive:128 (0x80) NextProtocol:IPv6 over IPv4,41(0x29) Checksum:9815 (0x2657) SourceAddress:10.0.0.2 DestinationAddress:10.0.0.1 Ipv6:Next Protocol ICMPv6,Payload Length =8 Versions:IPv6,Internet Protocol,DSCP 0 PayloadLength:8 (0x8) NextProtocol:ICMPv6,58(0x3a) HopLimit:255 (OxFF) SourceAddress:FE80:0:0:0:0:5EFE:A00:2 DestinationAddress:FE80:0:0:0:0:5EFE:A00:1 Icmpv6:Router Solicitation MessageType:Router Solicitation,133(0x85) RouterSolicitation: Code:0 (0x0) Checksum:43963 (0xABBB) Reserved:0 (0x0) Notice that the IPv4 address of the ISATAP router is 10.0.0.1.Also note the use of the unicast ISATAP address of the ISATAP router as the IPv6 destination address in the IPv6 header. Here is an example of the IPv4-encapsulated Router Advertisement message as displayed by Network Monitor 3.1 (in the \NetworkMonitorCaptures folder on the companion CD-ROM frame 2 of capture 12_01): Frame: Ethernet:Etype Internet IP (IPv4) Ipv4:Next Protocol IPv6 over IPv4,Packet ID 4011,Total IP Length 148 Versions:IPv4,Internet Protocol;Header Length =20 DifferentiatedServicesField:DSCP:0,ECN:0 TotalLength:148 (0x94) Identification:4011 (0xFAB) FragmentFlags:0 (0x0) TimeToLive:128 (Ox80) NextProtocol:IPv6 over IPv4,41(0x29) Checksum:5780 (0x1694) SourceAddress:10.0.0.1 DestinationAddress:10.0.0.2
! " #$% &'() *+,-. !/ $ 0% ( 12&0( 3&% / ( ( &!# 4 1 $% 5 165 7 (8& 9:&! (& ;<=>' # =&'/ $(0 =?@A= !() B7 (8& 9:&! (& C $(0 '&%1 &! () /&#$ ! &!CD.2E:FG HIJKLM N OPQLIRLPM OPSTLUVRPLIRLP VW XVWYZ[ \ VTYZM ]L^P WI_P_`_aUVWYb _YLI VWYZc WJ`dLP VeUfbc g_PJa VW hLRiPQUbj N kLIlm_RlM VWYZc VRPLIRLP WI_P_`_an oLJpLI hLRiPQUqr N emssLILRPmJPLptLIYm`LlHmLapM etuWM rc Ou]M r g_PJahLRiPQM bj Xr^ZZ[ VpLRPmsm`JPm_RM fb Xr^vj[ N HIJiKLRPHaJilMrXr^r[ gmKLg_hmYLM wqj Xr^jr[ ]L^PWI_P_`_aM VWYb _YLI VWYZc ZwXr^qx[ uQL`dlyKM xjwf Xr^qbfz[ t_yI`L{ppILllM wr|r|r|q eLlPmRJPm_R{ppILllM wr|r|r|w \ VTYbM ]L^P WI_P_`_aUVu}WYbc WJSa_Jp hLRiPQUj N kLIlm_RlM VWYbc VRPLIRLP WI_P_`_ac etuW r WJSa_JphLRiPQMjXr^j[ ]L^PWI_P_`_aM Vu}WYbc fjXr^vJ[ o_ThmKmPM qff Xr^HH[ t_yI`L{ppILllM HOjrMrMrMrMrMfOHOM{rrMq eLlPmRJPm_R{ppILllM HOjrMrMrMrMrMfOHOM{rrMw \ V`KTYbM ~_yPLI t_am`mPJPm_R }LllJiLgSTLM ~_yPLI t_am`mPJPm_Rc wvvXr^jf[ \ ~_yPLIt_am`mPJPm_RM u_pLMrXr^r[ uQL`dlyKM Zvxbv Xr^{[ ~LlLIYLpMrXr^r[ 7&( / () (() *+,- 11 &'() *3+ &0( =A<A<A<=<% &!&( () 0 &'() 0! / ( *3+ 11 &'() *3+ &0( () *+,1 ( ! ( &! 11 !() *+,) 1 < ! " #$% &'() *+,-. !/ $ 0% ( 12&0( 1, ( # !(# 4 1 $% 5 165 7 (8& 9:&! (& ;<=> !() B7 (8& 9:&! (& C $(0 '&%1 &!() /&#$ ! &!CD.2E: ' # ?&'/ $(0 =?@A=FG HIJKLM N OPQLIRLPM OPSTLUVRPLIRLP VW XVWYZ[ \ VTYZM ]L^P WI_P_`_aUVWYb _YLI VWYZc WJ`dLP VeUZrwwc g_PJa VW hLRiPQUwZj N kLIlm_RlM VWYZc VRPLIRLP WI_P_`_an oLJpLI hLRiPQUqr N emssLILRPmJPLptLIYm`LlHmLapM etuWM rc Ou]M r g_PJahLRiPQM wZj Xr^xZ[ VpLRPmsm`JPm_RM Zrww Xr^H{[ N HIJiKLRPHaJilMrXr^r[ gmKLg_hmYLM wqj Xr^jr[ ]L^PWI_P_`_aM VWYb _YLI VWYZc ZwXr^qx[ uQL`dlyKM fzjr Xr^wbxZ[ t_yI`L{ppILllM wr|r|r|w eLlPmRJPm_R{ppILllM wr|r|r|q
284 Understanding IPv6,Second Edition Ipv6:Next Protocol ICMPv6,Payload Length 88 Versions:IPv6,Internet Protocol,DSCP 0 PayloadLength:88 (0x58) NextProtocol:ICMPv6,58(0x3a) HopLimit:255 (0xFF) SourceAddress:FE80:0:0:0:0:5EFE:A00:1 DestinationAddress:FE80:0:0:0:0:5EFE:A00:2 Icmpv6:Router Advertisement MessageType:Router Advertisement,134(0x86) RouterAdvertisement: Code:0 (0x0) Checksum:46260 (OxB4B4) CurHopLimit:0 (Ox0) RouterAdvertisementFlag: : (0.......)Not managed address configuration Q. (.0......)Not other stateful configuration A: (..0.....)Not a Mobile IP Home Agent RouterPreference: (...00...)Medium,0(0x0) Reserved: (..000) RouterLifetime:65535 (0xFFFF) ReachableTime:0 (0x0) RetransTimer:0 (0x0) MTU: Type:MTU,5(0x5) Length:1,in unit of 8 octets Reserved:0 (Ox0) MTU:1280(0x500) PrefixInformation: Type:Prefix Information,3(0x3) Length:4,in unit of 8 octets PrefixLength:64 (0x40) -F1ags:192(0xC0) L: (1.......)On-Link determination allowed A: (.1......)Autonomous address-configuration R: (..0.....)Not router Address S: (...0....)Not a site prefix P: (....0...)Not a router prefix Rsv:(...000) ValidLifetime:4294967295 (0xFFFFFFFF) PreferredLifetime:4294967295 (OxFFFFFFFF) Reserved:0 (0x0) Prefi:×:2001:DB8:3C5A:21DA:0:0:0:0 PrefixInformation: Type:Prefix Information,3(0x3) Length:4,in unit of 8 octets PrefixLength:64 (0x40) -F1ags:192(0xC0) L: (1.......)On-Link determination allowed A: (.1......)Autonomous address-configuration R: (..0.....)Not router Address S: (...0....)Not a site prefix P: (....0...)Not a router prefix Rsv:(..000) ValidLifetime:4294967295 (OxFFFFFFFF) PreferredLifetime:4294967295 (OxFFFFFFFF) Reserved:0 (0x0) Prefix:FD31:2C00:8D33:21DA:0:0:0:0
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