implementing ip addressing services

Implementing IP Addressing Services

Accessing the WAN – Chapter 7

Objectives

Configuring DHCP in an enterprise branch network

Configuring NAT on a Cisco router

Configure new generation RIP (RIPng) to use IPv6

BOOTP and DHCP Differences

Using DHCP Relay when server and client are not on the same segment

Benefits of using private and public IP addressing

NAT OVERLOAD

http://www.firewall.cx/nat-overload-part1.php

Configuring port forwarding

Verifying and troubleshoot NAT and NAT overload configurations

Configure New Generation RIP (RIPng) to use IPv6

Based on figures as recent as January 2007, about 2.4 billion of the available IPv4 addresses are already assigned to end users or ISPs.

That leaves roughly 1.3 billion addresses still available from the IPv4 address space.

Despite this seemingly large number, IPv4 address space is running out.

Shrinking IP Address Space

Where Are the IP Addresses Going?

Population growth

Mobile users

Transportation

Consumer electronics

IPv4 and IPv6 Addresses

IPV6 Address Representation

From Wikipedia, the free encyclopedia

Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session.

IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite. It can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host).[1]

Some other Internet security systems in widespread use, such as Secure Sockets Layer (SSL), Transport Layer Security (TLS) and Secure Shell (SSH), operate in the upper layers of the TCP/IP model. Hence, IPsec protects any application traffic across an IP network. Applications do not need to be specifically designed to use IPsec. The use of TLS/SSL, on the other hand, must be designed into an application to protect the application protocols.

IPsec is a successor of the ISO standard Network Layer Security Protocol (NLSP). NLSP was based on the SP3 protocol that was published by NIST, but designed by the Secure Data Network System project of the National Security Agency (NSA).

IPsec is officially specified by the Internet Engineering Task Force (IETF) in a series of Request for Comment documents addressing various components and extensions. It specifies the spelling of the protocol name to be IPsec.[2]

IPv4 and IPv6 Headers

IPv6 Address Representation

IPv6 Addresses

IPv6 Addressing

IPv6 Global Unicast Address

range of addresses that start with binary value 001 (2000::/3), which is 1/8 of the total IPv6 address space and is the largest block of assigned addresses.

Reserved Addresses

represent 1/256th of the total IPv6 address space.

Private AddressesSite-local addresses (these addresses start with "FEC", "FED", "FEE", or "FEF“)

Link-local addresses (these addresses start with "FE8", "FE9", "FEA", or "FEB“)

Loopback Addresses (loopback address is 0:0:0:0:0:0:0:1) or (::1)

Unspecified Address (0:0:0:0:0:0:0:0) or (“”)is named the "unspecified" address

Assigning IPv6 Addresses

EUI-64

Stateless Autoconfiguration

DHCPv6 (Stateful)

EUI-64 to IPv6 Interface Identifier

Tunneling

Tunneling (beyond scope of this class)

IPv6 Routing Considerations

RIPng Routing Protocol

Enabling IPv6 on Cisco Routers

IPv6 Address Configuration Example

Cisco IOS IPv6 Name Resolution

Configuring RIPng for IPv6

RIPng IPv6 Configuration

Verify and troubleshoot IPv6

Troubleshooting Commands

Summary

Dynamic Host Control Protocol (DHCP)This is a means of assigning IP address and other configuration information automatically.

DHCP operation–3 different allocation methods

•Manual

•Automatic

•Dynamic

–Steps to configure DHCP

•Define range of addresses

•Create DHCP pool

•Configure DHCP pool specifics

Summary

DHCP RelayConcept of using a router configured to listen for DHCP messages from DHCP clients and then forwards those messages to servers on different subnets

Troubleshooting DHCP–Most problems arise due to configuration errors

–Commands to aid troubleshooting

•Show ip dhcp

•Show run

•debug

Summary Private IP addresses

–Class A = 10.x.x.x

–Class B = 172.16.x.x – 172.31.x.x

–Class C = 192.168.x.x

Network Address Translation (NAT)–A means of translating private IP addresses to public IP addresses

–Type s of NAT

•Static

•Dynamic

–Some commands used for troubleshooting

•Show ip nat translations

•Show ip nat statistics

•Debug ip nat

Summary

IPv6–A 128 bit address that uses colons to separate entries

–Normally written as 8 groups of 4 hexadecimal digits

Cisco IOS Dual Stack–A way of permitting a node to have connectivity to an IPv4 & IP v6 network simultaneously

IPv6 Tunneling–An IPV6 packet is encapsulated within another protocol

Summary

Configuring RIPng with IPv61st globally enable IPv6

2nd enable IPv6 on interfaces on which IPv6 is to be enabled

3rd enable RIPng using either

ipv6 rotuer rip name

ipv6 router name enable

implementing ip addressing services

Documents

ip addressing. ip addressing decimal equivalents of bit...

implementing ip addressing services · ite i chapter 6 ©...

ip addressing - ipofficeinfo.com ip addressing.pdf · –...

ip addressing

ip addressing & subnetting ip addressing subnetting vlsm ...

chapter 7 implementing ip addressing services

introduction to ipv6 presented by: minal mishra. agenda ip...

ip addressing

implementing ip addressing services accessing the wan –...

ip addressing

implementing ip addressing services