basic ipv6 - ripe ncc · pdf file4 overview •ipv4? •ipv6 address basics...
TRANSCRIPT
![Page 1: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/1.jpg)
September 2017
Training Course
Basic IPv6
![Page 2: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/2.jpg)
2
Schedule
09:00 - 09:30 Coffee, Tea
11:00 - 11:15 Break
13:00 - 14:00 Lunch
15:30 - 15:45 Break
17:30 End
![Page 3: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/3.jpg)
3
Introductions
• Name
• Number in the list
• Experience with IPv6
• Goals
![Page 4: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/4.jpg)
4
Overview
• IPv4?
• IPv6 Address Basics
• Getting it
• Exercise: Making Assignments
• IPv6 Protocol Basics
• Exercise: Addressing Plan
• Deploying
• Exercise: Configuring IPv6
• Transition Mechanisms
• Real Life IPv6 Deployment
• Tips
![Page 5: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/5.jpg)
IPv4?Section 1
![Page 6: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/6.jpg)
6
Reaching the next billion
• Around 3,739 billion Internet users now
- around 49,6 % of all people in the world
• Mobile phones are Internet devices
• The Internet of Things
- How will the Internet look like in 5 - 10 years?
![Page 7: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/7.jpg)
7
The Internet of Things
http://www.libelium.com/top_50_iot_sensor_applications_ranking© Libelium Comunicaciones Distribuidas S.L.
Libelium Smart World
![Page 8: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/8.jpg)
0%
10%
20%
30%
40%
2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011
8
IANA IPv4 Pool
![Page 9: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/9.jpg)
9
IPv4 Exhaustion
“On 14 September 2012, the RIPE NCC ran out of their regular pool of IPv4”
![Page 10: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/10.jpg)
• Extends the capacity of the IPv4 address spaceby sharing an IPv4 address between clients
• Fairly common technology, used everywhere
• Breaks the end to end connectivity model
• It doesn’t allow communication with IPv6!
• You are probably going to need it in some form
10
Network Address Translation
![Page 11: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/11.jpg)
11
Large Scale NAT
PROVIDERCUSTOMER INTERNET
NAT44 Box
IPv4 InternetPrivate
IPv4
NAT44 BoxNAT44 Box
NAT44 Box
Home Userprivate IPv4
Home Userprivate IPv4
Home Userprivate IPv4
![Page 12: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/12.jpg)
IPv6 Address BasicsSection 2
![Page 13: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/13.jpg)
13
IP Address Distribution
IPv6 ADDRESS SPACE How much has been allocated to the RIRs?
Internet Number Resource Report Sept 2014
Source: https://www.nro.net/statistics Number Resource Organisation
![Page 14: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/14.jpg)
14
IP Address Distribution
Allocation PA Assignment PI Assignment
IANA
End User
LIR
RIR
/3
/32
/12
/56/48 /48
![Page 15: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/15.jpg)
15
IPv6 Address Basics
• IPv6 address: 128 bits - 32 bits in IPv4
• Every subnet should be a /64
• Customer assignments (sites) between: - /64 (1 subnet) - /48 (65,536 subnets)
• Minimum allocation size /32 - 65,536 /48s - 16,777,216 /56s
![Page 16: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/16.jpg)
16
Address Notation
2001:0db8:003e:ef11:0000:0000:c100:004d
2001: db8: 3e:ef11: 0: c100:0 00 000 000 004d0:
2001:db8:3e:ef11:0:0:c100:4d
0 0 0 11 1 1 11 1 1 0 0 0 0 1
![Page 17: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/17.jpg)
17
IPv6 Subnetting
2001:0db8:0000:0000:0000:0000:0000:000064 bits interface ID
/64
/60 = 16 /64
/56 = 256 /64
/52 = 4096 /64
/48 = 65536 /64
/32 = 65536 /48
![Page 18: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/18.jpg)
Addresses Range Scope
Unspecified ::/128 n/a
Loopback ::1 host
IPv4-Embedded 64:ff9b::/96 n/a
Discard-Only 100::/64 n/a
Link Local fe80::/10 link
Global Unicast 2000::/3 global
Unique Local fc00::/7 global
Multicast ff00::/8 variable
18
Multiple address types
![Page 19: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/19.jpg)
IPv6 Address NotationExercise
![Page 20: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/20.jpg)
20
IPv6 Notation - RFC 5952
• For more information, please read RFC 5952“A Recommendation for IPv6 Address Text Representation”http://tools.ietf.org/html/rfc5952
![Page 21: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/21.jpg)
Questions
![Page 22: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/22.jpg)
Getting ItSection 3
![Page 23: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/23.jpg)
23
Getting an IPv6 allocation
• To qualify, an organisation must:
- Be an LIR
- Have a plan for making assignments within two years
• Minimum allocation size /32
- Up to a /29 without additional justification
- More if justified by customer numbers and network extension
- Additional bits based on hierarchical and geographical structure, planned longevity and security levels
![Page 24: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/24.jpg)
24
Customer Assignments
• Give your customers enough addresses - Minimum /64 - Up to /48
• More than /48, send in request form - alternatively, make a sub-allocation
• Every assignment must be registered in theRIPE Database
![Page 25: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/25.jpg)
25
Comparison IPv4 and IPv6 status
IPv4 IPv6
ALLOCATED PA Allocation ALLOCATED-BY-RIR
ASSIGNED PAAssignment ASSIGNED
Group of Assignments AGGREGATED-BY-LIR
SUB-ALLOCATED PA Sub-Allocation ALLOCATED-BY-LIR
ASSIGNED PI PI Assignment ASSIGNED PI
![Page 26: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/26.jpg)
• One single network
• An individual customer
• Your own infrastructure
26
Examples ASSIGNED
One assignment =
ASSIGNED
![Page 27: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/27.jpg)
27
Using ASSIGNED
• Represents one assignment
• Minimum assignment size is a /64
• For more than a /48, send a request form
ASSIGNED /48/56 /64
ALLOCATED-BY-RIR
ASSIGNED ASSIGNED
![Page 28: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/28.jpg)
28
Using ASSIGNED - Example Object
inet6num: 2001:db8:1000::/48netname: CUSTOMER-NETcountry: NLadmin-c: ADM321-RIPEtech-c: NOC123-RIPEstatus: ASSIGNEDmnt-by: LIR-MNTcreated: 2015-05-31T08:23:35Zlast-modified: 2015-05-31T08:23:35Zsource: RIPE
![Page 29: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/29.jpg)
29
Examples AGGREGATED-BY-LIR
• Group of customers
• Same assignment size
![Page 30: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/30.jpg)
30
Using AGGREGATED-BY-LIR
• Can be used to group customers
- example: residential broadband customers
• “assignment size:” = assignment of each customer
/36
ALLOCATED-BY-RIR
/56 /56 /56/56 /56
AGGREGATED-BY-LIRassignment-size: 56
![Page 31: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/31.jpg)
31
Using AGGREGATED-BY-LIR - Example
inet6num: 2001:db8:1000::/36netname: DSL-Broadband-Poolcountry: NLadmin-c: ADM321-RIPEtech-c: NOC123-RIPEstatus: AGGREGATED-BY-LIRassignment-size: 56mnt-by: LIR-MNTnotify: [email protected]: 2015-05-31T08:23:35Zlast-modified: 2015-05-31T08:23:35Zsource: RIPE
![Page 32: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/32.jpg)
32
Examples ALLOCATED-BY-LIR
• Reservation for a large customer
• Branch office or department
Branch OfficeLarge Customer
/48 /46Reservation
/48 /36Delegation
/48
![Page 33: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/33.jpg)
33
Using ALLOCATED-BY-LIR
• Can be used for customers with potential for growth
- or for your own infrastructure
- or to delegate address space to a downstream ISP
ALLOCATED-BY-RIR
/36ALLOCATED-BY-LIR
ASSIGNED ASSIGNED /48/52
![Page 34: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/34.jpg)
34
Using ALLOCATED-BY-LIR - Example
inet6num: 2001:db8:50::/44netname: Branch-Office-Networkcountry: NLadmin-c: ADM321-RIPEtech-c: NOC123-RIPEstatus: ALLOCATED-BY-LIRmnt-by: LIR-MNTmnt-lower: BRANCH-OFFICE-MNTnotify: [email protected]: 2015-05-31T08:23:35Zlast-modified: 2015-05-31T08:23:35Zsource: RIPE
![Page 35: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/35.jpg)
ASSIGNED /48
/44ALLOCATED-BY-LIR /36AGGREGATED-BY-LIRassignment-size: 56ASSIGNED /56
35
Overview
ALLOCATED-BY-RIR
![Page 36: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/36.jpg)
36
Getting IPv6 PI address space
• To qualify, an organisation must:
- Meet the contractual requirements for provider independent resources
- LIRs must demonstrate special routing requirements
• Minimum assignment size: /48
• PI space can not be used for sub-assignments
- not even 1 IP address!
![Page 37: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/37.jpg)
37
Unique Local Addresses
• Prefixes from fc00::/7 - Only from the fd00::/8 block
• Should not be routed on the Internet
• Generate a random 40-bit Global ID and insert it into fdxx:xxxx:xxxx
Global ID: da24154e1dPrefix: fdda:2415:4e1d::/48
![Page 38: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/38.jpg)
Making AssignmentsExercise
![Page 39: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/39.jpg)
39
Smart Home 6!
Making Assignments Exercise
• 20 minutes preparation time
• 10 minutes discussion
![Page 40: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/40.jpg)
LIR / ISP 2001:db8::/32
40
Smart Home 6 Network Diagram
How much do you assign tothe whole smart home network?
/64
/64
/64/64
/64
/644G wireless point-to-point
/64
/64
???/64
IPv6 Internet
![Page 41: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/41.jpg)
41
Solution RIPE Database object inet6num: 2001:db8:1000::/36 netname: SMART-HOME-6 descr: Smart Home 6 network country: NL admin-c: RM1204-RIPE tech-c: RM1204-RIPE status: AGGREGATED-BY-LIR assignment-size: 56 mnt-by: LIR-MNT notify: [email protected] created: 2015-05-31T12:34:01Z last-modified: 2015-05-31T12:34:01Z source: RIPE
![Page 42: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/42.jpg)
42
Solution RIPE Database object
inet6num: 2001:db8:1000::/36 netname: SMART-HOME-6 descr: Smart Home 6 network country: NL admin-c: RM1204-RIPE tech-c: RM1204-RIPE status: ALLOCATED-BY-LIR mnt-by: LIR-MNT mnt-lower: SMART-CASA-MNT notify: [email protected] created: 2015-05-31T12:34:01Z last-modified: 2015-05-31T12:34:01Z source: RIPE
![Page 43: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/43.jpg)
IPv6 Protocol BasicsSection 4
![Page 44: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/44.jpg)
44
IPv6 Protocol Functions
• Address Autoconfiguration - Supported by Neighbor Discovery
- Stateless - with SLAAC
- Stateful - with DHCPv6
• Neighbor Discovery Protocol - Replaces ARP from IPv4
- Uses ICMPv6 and Multicast
- Finds the other IPv6 devices on the link
- Keeps track of reachability
![Page 45: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/45.jpg)
45
The Autoconfiguration Process
1. Make a Link-Local address
2. Check for duplicates on the link
3. Search for a router
4. Make a Global Unicast address
![Page 46: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/46.jpg)
46
Making a Link-Local Address
48 bits - MAC Address
FF FE
Interface IDfe80::
• Interface ID is made from the MAC address
• fe80:: + Interface ID = Link-Local address for the host
![Page 47: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/47.jpg)
47
Checking for Duplicates
If nobody replies to the Neighbor Solicitation, the host uses the generated link-local address
A
BNeighbor Advertisement
Hello! Yes, I’m using that IPv6 address. My MAC address is 72:D6:0C:2F:FC:01
B
AHello! Is this IPv6 address in use? Can you tell me your MAC address?
Neighbor Solicitation
![Page 48: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/48.jpg)
48
Solicited Node Multicast Address
• Used in Neighbor Discovery Protocol for obtainingthe layer 2 link-layer (MAC) addresses
128 bits
0
Interface IDPrefix Lower 24 bits
Lower 24 bitsff02 1 ff
IPv6 unicast address
Solicited-node multicast addresssame bits
![Page 49: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/49.jpg)
49
Solicited Node Multicast Address
Hey! This message is for ff02::1:ffd9:aa6f
Yes! That is for me!
![Page 50: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/50.jpg)
50
Searching for Routers
The Router Advertisement gives the host more information to get an IPv6 address and set up a connection
A AHello! Is there a router out there?
Router Solicitation
Router Advertisement
Hello! I’m a router and I have some information for you…
![Page 51: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/51.jpg)
• The Router Advertisement message tells the host: - Router’s address
- Zero or more link prefixes
- SLAAC allowed (yes/no)
- DHCPv6 options
- MTU size (optional)
51
Stateless Address Auto-Configuration
Interface IDLink Prefix
Global Unicast IPv6 Address
![Page 52: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/52.jpg)
52
Interfaces will have multiple addresses
• Unicast
- Link Local fe80::5a55:caff:fef6:bdbf/64
- Global Unicast 2001::5a55:caff:fef6:bdbf/64 (multiple)
• Multicast
- All Nodes ff02::1 (scope: link)
- Solicited Node ff02::1:fff6:bdbf (scope: link)
• Routers
- All Routers ff02::2 (scope: link)
![Page 53: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/53.jpg)
53
Verifying Reachability
If the target does not reply to the Neighbor Solicitation, the sender removes the MAC address from the cache
Neighbor Advertisement
Hello! Yes, I’m still online. My MAC address is 72:D6:0C:2F:FC:01
B
AHello! Are you still out there? Is your MAC address still valid?
Neighbor Solicitation
![Page 54: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/54.jpg)
54
Redirects
• Hosts can be redirected to a better first-hop router
• They can also be informed that the destination is a neighbor on the link
AThis packet is for an IPv6 host.
IPv6 Packet
Redirect
Hello! That destination you wanted? I know a better way to reach it.
![Page 55: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/55.jpg)
Questions
![Page 56: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/56.jpg)
Addressing PlansSection 5
![Page 57: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/57.jpg)
57
Why Create an IPv6 Addressing Plan?
• Mental health during implementation(!)
• Easier implementation of security policies
• Efficient addressing plans are scalable
• More efficient route aggregation
![Page 58: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/58.jpg)
58
IPv6 Address Management
• Your spreadsheet might not scale - There are 65.536 /64s in a /48
- There are 65.536 /48s in a /32
- There are 524.288 /48s in a /29
- There are 16.777.216 /56s in a /32
- There are 134.217.728 /56s in a /29
• Find a suitable IPAM solution
![Page 59: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/59.jpg)
Addressing PlanExercise
![Page 60: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/60.jpg)
60
Addressing Plan Exercise
• Things to consider - administrative ease!
- use assignments on 4 bit boundary
- 2 possible scenarios for network
- 5 possible scenarios for customer assignments
• 20 minutes preparation time
• 10 minutes discussion
![Page 61: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/61.jpg)
61
Network Diagram - POPs
Exercise description:You are a small colocation and broadband provider and you are an LIR. You received a /32 allocation: 2001:db8::/32
You currently have 2 Point-to-Point customers and 500 colocation customers. 250 colocation customers are connected on each switch. Also, you provide e-mail, www, proxy, usenet, VoIP and DNS services to them.
Step 1: Assign the /48 per POPStep 2: Decide the size of the assignments per device Step 3: Decide the size of the customer assignments Step 4: Fill in the addressing plan accordingly
Some things to consider: • The most important goal with IPv6 is aggregation.• You can assign a /48 per POP without sending a request to the RIPE NCC. • For your most important connections/equipment, use the easiest to remember addresses. (loopbacks
etc.) • For administrative ease (DNS and your mind), it is recommended you assign on 4-bit boundary
7YLÄ_ Number of /64 subnets
/48 65.536
/52 4096
/56 256
/60 16
/64 1
cr2.pop1
AR2
cr1.pop2
cr2.pop2
www
proxy
usenet
voip
DNS
colocatedcustomer
vlans
colo 1
colo 2
cr1.pop1
sw 2
sw 1
POP1 POP2
switch layer 3 switch routerPoint-to-Point
customer 1Point-to-Point
customer 2
![Page 62: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/62.jpg)
62
Network Diagram - POP1
Exercise description:You are a small colocation and broadband provider and you are an LIR. You received a /32 allocation: 2001:db8::/32
You currently have 2 Point-to-Point customers and 500 colocation customers. 250 colocation customers are connected on each switch. Also, you provide e-mail, www, proxy, usenet, VoIP and DNS services to them.
Step 1: Assign the /48 per POPStep 2: Decide the size of the assignments per device Step 3: Decide the size of the customer assignments Step 4: Fill in the addressing plan accordingly
Some things to consider: • The most important goal with IPv6 is aggregation.• You can assign a /48 per POP without sending a request to the RIPE NCC. • For your most important connections/equipment, use the easiest to remember addresses. (loopbacks
etc.) • For administrative ease (DNS and your mind), it is recommended you assign on 4-bit boundary
7YLÄ_ Number of /64 subnets
/48 65.536
/52 4096
/56 256
/60 16
/64 1
cr2.pop1
AR2
cr1.pop2
cr2.pop2
www
proxy
usenet
voip
DNS
colocatedcustomer
vlans
colo 1
colo 2
cr1.pop1
sw 2
sw 1
POP1 POP2
switch layer 3 switch routerPoint-to-Point
customer 1Point-to-Point
customer 2
![Page 63: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/63.jpg)
63
Network Diagram - POP2
Exercise description:You are a small colocation and broadband provider and you are an LIR. You received a /32 allocation: 2001:db8::/32
You currently have 2 Point-to-Point customers and 500 colocation customers. 250 colocation customers are connected on each switch. Also, you provide e-mail, www, proxy, usenet, VoIP and DNS services to them.
Step 1: Assign the /48 per POPStep 2: Decide the size of the assignments per device Step 3: Decide the size of the customer assignments Step 4: Fill in the addressing plan accordingly
Some things to consider: • The most important goal with IPv6 is aggregation.• You can assign a /48 per POP without sending a request to the RIPE NCC. • For your most important connections/equipment, use the easiest to remember addresses. (loopbacks
etc.) • For administrative ease (DNS and your mind), it is recommended you assign on 4-bit boundary
7YLÄ_ Number of /64 subnets
/48 65.536
/52 4096
/56 256
/60 16
/64 1
cr2.pop1
AR2
cr1.pop2
cr2.pop2
www
proxy
usenet
voip
DNS
colocatedcustomer
vlans
colo 1
colo 2
cr1.pop1
sw 2
sw 1
POP1 POP2
switch layer 3 switch routerPoint-to-Point
customer 1Point-to-Point
customer 2
![Page 64: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/64.jpg)
64
Addressing plans
• /64 for each subnet
• Number of hosts in a /64 is irrelevant
• Multiple /48s per pop can be used - separate blocks for infrastructure and customers
- document address needs for allocation criteria
• Use one /64 block per site for loopbacks
![Page 65: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/65.jpg)
65
More on Addressing Plans
• For private networks, consider ULA
• For servers you want a manual configuration
• Use port numbers for addresses
- pop server 2001:db8:1::110
- dns server 2001:db8:1::53
- etc…
![Page 66: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/66.jpg)
Questions
![Page 67: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/67.jpg)
Deploying IPv6Section 6
![Page 68: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/68.jpg)
68
Assigning Addresses
• Routers influence how hosts connect to network
• Several options:
- Manual configuration
- Router Advertisement only (SLAAC)
- RA + DHCPv6 (‘M’ flag on)
- RA + DHCPv6 (‘O’ flag on)
- RA (‘A’ flag off) + DHCPv6 (‘M’ flag on)
• Gateway is always provided by the RA
![Page 69: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/69.jpg)
69
Router Advertisement Options
• RA message is used to provide configuration info - Default gateway address
- Which prefix(es) to use on the link? Prefix length?
- Is SLAAC allowed?
- Is DHCPv6 available? For address/options? Only options?
- What is the preference of a router on the link?
- DNS servers / Domain (optional)
- MTU size (optional)
RA: Network Configuration
![Page 70: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/70.jpg)
• Provides privacy for users
• Changes the interface ID over time
• Duplicate Address Detection ensures uniqueness
• In case of collision, a new random address is generated
70
Privacy Extensions for SLAAC
Random Interface IDLink Prefix
Global Unicast IPv6 Address
64 bits stay the same 64 bits change over period of time
Maybe group Privacy Extensions and Crypto-Generated Addresses on one slide?
![Page 71: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/71.jpg)
71
DHCPv6
DHCPv6Server
Router
Hello Router! Please provide IPv6 configuration.
Here you go! There is also DHCPv6 for you.
Hello DHCPv6 Server! Please provide IPv6 information.
Here is an IPv6 address, DNS servers, NTP server and Domain!
Now I have enough info to configure the IPv6 connection!
Host
![Page 72: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/72.jpg)
72
DHCPv6
• Used to give additional information like DNS serversor to manage the address pool
• Router Advertisement message contains hints
- If “managed” flag = ‘1’ ⇒ can use DHCPv6 to get an address
- Optionally provide the address of a DNS server (RFC 8106)
• Using additional flags, the network admin can disable
SLAAC and force DHCPv6
![Page 73: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/73.jpg)
73
DNS in IPv6 is difficult?
• DNS is not IP layer dependent
• A record for IPv4
• AAAA record for IPv6
• Don't answer based on incoming protocol
• Only challenges are for translations
- NAT64, proxies
![Page 74: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/74.jpg)
3e:ef11:
74
Reverse DNS
2001:db8: :c100:4d
![Page 75: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/75.jpg)
.ip6.arpa.
0 00 0000:0000 003e:ef11:
75
Reverse DNS
2001: db8: :c100: 4d8bd01002
. . . . . . .
d.4.0.0.0.0.1.c.0.0.0.0.0.0.0.0.1.1.f.e.e.3.0.0.8.b.d.0.1.0.0.2.ip6.arpa. PTR
yourname.domain.tld. d.4.0.0.0.0.1.c.0.0.0.0.0.0.0.0.1.1.f.e.e.3.0.0.8.b.d.0.1.0.0.2.ip6.arpa. PTR yourname.domain.tld.
![Page 76: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/76.jpg)
domain: 8.b.d.0.1.0.0.2.ip6.arpadescr: rDNS for my whole IPv6 networkadmin-c: NOC12-RIPEtech-c: NOC12-RIPEzone-c: NOC12-RIPEnserver: pri.example.netnserver: sns.company.orgds-rdata: 45062 8 2 275d9acbf3d3fec11b6d6…mnt-by: EXAMPLE-LIR—MNTcreated: 2015-01-21T13:52:29Zlast-modified: 2016-02-07T15:09:46Zsource: RIPE
76
IPv6 and Domain Objects
• IPv6 prefix: 2001:db8::/32
• Domain object:
![Page 77: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/77.jpg)
77
IPv6 in the Routing Registry
route6: 2001:db8::/32 origin: AS65550
aut-num: AS65550 mp-import: afi ipv6.unicast from AS64496 accept ANY mp-export: afi ipv6.unicast to AS64496 announce AS65550
Aut-num object:
Route6 object:
![Page 78: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/78.jpg)
78
Security Considerations
• Everybody can claim to be a router - Use RA Guard to filter unauthorised RAs
- RFC 6105
- Secure Neighbour Discovery (SEND) - RFC 3971
- Neighbour Solicitation/Advertisement spoofing
- DoS Attack
- Router Solicitation and Advertisement Attacks
![Page 79: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/79.jpg)
79
Security Considerations
• Leaking router advertisements - Cisco enables RA by default
- Windows, OS X and others will default accept
- A machine can easily get IPv6 unnoticed
• Big threat today in IPv6 is human error - lack of knowledge / training
- typos
- Maintaining two IP protocols
![Page 80: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/80.jpg)
Configuring IPv6Exercise
![Page 81: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/81.jpg)
81
Assigning Addresses
• R1 will send the RAs and act as DHCPv6 Relay Agent
• R2 will get IPv6 configuration info in three ways:
- RA + SLAAC only
- RA + SLAAC + ‘O’ flag (DHCPv6 Other Configuration)
- RA + no SLAAC + ‘M’ flag (DHCPv6 Managed)
• The DHCPv6 server is already configured
![Page 82: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/82.jpg)
82
Network Diagram
R1
e0/0 e0/1 e0/0
R2
DHCPv6Server
R1: Default gateway router DHCPv6 relay agent
R2: Client device SLAAC DHCPv6 client
Router roles:
![Page 83: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/83.jpg)
83
Exercise: Configuring IPv6
• Make sure you have connectivity
• Go to: workbench.ripe.net
• Choose the lab (ask the trainers)
• Your login is your number on participants list
• The trainers will provide the password
• Choose “RA and DHCPv6” from the menu
![Page 84: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/84.jpg)
84
Check R2
• Verify that the interface e0/0 has no address yet
show ipv6 interface brief
![Page 85: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/85.jpg)
85
Basic IPv6 Settings
• Before configuring IPv6 on your router interfaces,the basic IPv6 settings must be enabled
• On both R1 and R2
ipv6 unicast-routing ipv6 cef
configure terminal
![Page 86: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/86.jpg)
86
1st Case: SLAAC only (Router)
• On R1 we will configure an IPv6 address from a /64
prefix on interface e0/1
interface e0/1
ipv6 address 2001:ffxx:1::a/64
Where xx is your number on the attendee list! 1 = 01 2 = 02
10 = 10 11 = 11
![Page 87: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/87.jpg)
87
1st Case: SLAAC only (Client)
• On R2 we will configure SLAAC on the interface e0/0
interface e0/0
ipv6 address autoconfig default
![Page 88: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/88.jpg)
88
Check R2
• Verify that the interface e0/0 has an IPv6 address
• And a default route
end (exits config mode)
show ipv6 interface e0/0
show ipv6 route
![Page 89: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/89.jpg)
89
Check R2
• Unfortunately, R2 has no DNS name servers
• This information was not provided in the RA from R1
show ip dns view
![Page 90: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/90.jpg)
90
2nd Case: SLAAC + O flag (Router)
• On R1 we will configure the ‘O’ flag for the RAs on
interface e0/1
interface e0/1
ipv6 nd other-config-flag
![Page 91: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/91.jpg)
91
2nd Case: SLAAC + O flag (Client)
• On R2 we will first bring down the interface e0/0
• And then bring it back up…
configure terminal
interface e0/0
shutdown
no shutdown
![Page 92: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/92.jpg)
92
2nd Case: SLAAC + O flag (Client)
• Verify that the interface e0/0 has an IPv6 address and
other configuration
end (exits config mode)
show ipv6 interface e0/0
show ip dns view
show ipv6 dhcp interface e0/0
![Page 93: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/93.jpg)
93
3rd Case: RA + M flag (Router)
• On R1 we will configure the ‘M’ flag for the RAs on
interface e0/1
interface e0/1
no ipv6 nd other-config-flag
ipv6 nd managed-config-flag
![Page 94: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/94.jpg)
94
3rd Case: RA + M flag (Client)
• On R2 we will first bring down the interface e0/0
• Remove the SLAAC configuration
configure terminal
interface e0/0
shutdown
no ipv6 address autoconfig default
![Page 95: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/95.jpg)
95
3rd Case: RA + M flag (Client)
• On R2, configure the DHCP client
• And then bring the interface back up…
ipv6 address dhcp
ipv6 enable
ipv6 nd autoconfig default-route
no shutdown
![Page 96: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/96.jpg)
96
3rd Case: RA + M flag (Client)
• Verify that the interface e0/0 has an IPv6 address and other configuration
end (exits config mode)
show ipv6 interface e0/0
show ipv6 dhcp interface e0/0
![Page 97: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/97.jpg)
Questions
![Page 98: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/98.jpg)
Transition MechanismsSection 7
![Page 99: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/99.jpg)
99
Transitioning: Solving Two Problems
• Maintaining connectivity to IPv4 hosts by sharing IPv4 addresses between clients
- Extending the address space with NAT/CGN/LSN
- Translating between IPv6 and IPv4
• Provide a mechanism to connect to the emerging IPv6-only networks
- Tunnelling IPv6 packets over IPv4-only networks
![Page 100: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/100.jpg)
100
6in4
• Manually configured tunnels towards a fixed tunnel broker like Hurricane Electric or your own system
• Stable and predictable but not easily deployed to the huge residential markets
• MTU might cause issues
![Page 101: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/101.jpg)
101
6in4
PROVIDERCUSTOMER INTERNET
Home UserIPv4 Infrastructure
IPv4
Tunnel Broker IPv6 Internet
TunnelServer
![Page 102: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/102.jpg)
102
6RD
• Encodes the IPv4 address in the IPv6 prefix
• Uses address space assigned to the operator
• The operator has full control over the relay
• Traffic is symmetric across a relay - Or at least stays in your domain
• Can work with both public and private IPv4 space
• Needs additional software for signalling
![Page 103: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/103.jpg)
103
6RD
PROVIDERCUSTOMER INTERNET
IPv6 Internet
6RD Tunnel Server
IPv4 Internet
Home UserIPv4 Infrastructure
IPv4
![Page 104: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/104.jpg)
104
NAT64 / DNS64
• Single-stack clients will only have IPv6
• Translator box will strip all headers and replace them with IPv4
• Requires some DNS “magic” - Capture responses and replace A with AAAA - Response is crafted based on target IPv4 address
• Usually implies address sharing on IPv4
![Page 105: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/105.jpg)
105
NAT64 / DNS64
PROVIDERCUSTOMER INTERNET
Home Userpublic IPv6
IPv6 Internet
NAT64 Box
IPv4 Internet
DNS64
Infrastructurepublic IPv6
![Page 106: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/106.jpg)
106
464XLAT
• Extension to NAT64 to access IPv4-only applications (like Skype or Whatsapp)
• Handset pretends there is an IPv4 address (CLAT) and sends IPv4 packets in UDP over IPv6
![Page 107: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/107.jpg)
107
464XLAT
PROVIDERCUSTOMER INTERNET
IPv6 Internet
Mobile UserIPv6 only
PLAT Box
IPv4 Internet3G/4G NetworkIPv6 only
GGSN
464XLATClient
IPv6 UDP IPv4 UDP
![Page 108: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/108.jpg)
108
DS-lite
• Tunnelling IPv4 over IPv6
• Allows clients to use RFC1918 addresseswithout doing NAT themselves
• NAT is centrally located at the provider
• Client’s IPv6 address is used to maintain stateand to keep clients apart
- Allows for duplicate IPv4 ranges
![Page 109: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/109.jpg)
109
DS-lite
PROVIDERCUSTOMER INTERNET
IPv6 InternetNAT44 Box
IPv4 Internet
Home Userpublic IPv6private IPv4
InfrastructureIPv6
InfrastructureIPv4
![Page 110: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/110.jpg)
110
MAP-E / MAP-T
• IPv4 over IPv6 - Encapsulated or Translated
• Clients get private IPv4 and public IPv6
• IPv4 address/port mapped into IPv6 address
• Stateless NAT44 allows traffic to flow asymmetrically in and out of MAP domain
![Page 111: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/111.jpg)
111
MAP-E / MAP-T
PROVIDERCUSTOMER INTERNET
InfrastructureIPv6
IPv6 Internet
IPv4 Internet
public IPv6private IPv4
CE
BorderRouter
public IPv6private IPv4
CE
public IPv6private IPv4
CE
![Page 112: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/112.jpg)
112
Dual Stack
Best Transition Mechanism?
IPv6
IPv4
![Page 113: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/113.jpg)
Real Life IPv6 DeploymentSection 8
![Page 114: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/114.jpg)
114
Colocation Provider
• 30 staff
• Routing - Dual Stack!
- Possible IGP combinations were:
- OSPFv2 for IPv4, IS-IS for IPv6 (only)
- OSPFv2 for IPv4, OSPFv3 for IPv6
- IS-IS for IPv4, OSPFv3 for IPv6
- IS-IS for both IPv4 and IPv6 (their solution)
- Check internal routing before going external!
![Page 115: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/115.jpg)
115
Colocation Provider
• Checklist - set access lists on network equipment - set up monitoring (SNMP) - have working DNS
• Subnetting tools - sipcalc, IPv6calc, apps
• Every customer gets a /48 assignment - and a /64 for the connection
![Page 116: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/116.jpg)
116
Colocation Provider
• Points of attention:
- stateless auto configuration can assign a subnet “unexpectedly”
- not all firewalls support IPv6
- be careful with statement “IPv6 ready”
![Page 117: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/117.jpg)
117
ISP xDSL
• 200 staff
• 2 /32 prefixes (due to merger)
- not enough
- make a plan before requesting allocation
• /48 per POP
• /56 per router
• /64 per customer vlan
![Page 118: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/118.jpg)
118
ISP xDSL
• Servers
- no EUI-64
- no autoconfig
- port number for services (i.e. POP3 at ::110)
- default gateway manually set to, for example:
- 2001:db8::1/64 (usually)
![Page 119: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/119.jpg)
119
ISP xDSL
• Network links (point-to-point) - core
- /64 per link - ::1 - ::2 - no auto configuration - easy to remember
• You don’t want your router link at: - 2001:db8:cf9d:7631:cd01:fe55:4532:ae60/64
• You want your router link at: - 2001:db8:1:1::/64
![Page 120: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/120.jpg)
120
Large Enterprise
• Approx. 550 IT staff
• Several locations worldwide
• Most of their business processes rely heavilyon the Internet
• Driven to IPv6 by need to continue doingbusiness as usual
![Page 121: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/121.jpg)
121
Large Enterprise
• Make an inventory of IT needs - Hardware / Software / Services - Talk to your ISPs early during preparation
• Evaluate the current IPv6 offerings - Don’t trust your vendor on “full IPv6 support” - Basic network functions are not the issue - Check cloud solutions
• Train your IT staff - Make them understand the WHY of IPv6 - Focus on the people responsible for applications
![Page 122: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/122.jpg)
122
Large Enterprise
• Build a testlab (and start testing!)
• Make an IPv6 Roadmap - Dedicated IT group approves roadmap and tracks status
- “IPv6 Readiness” required for all new purchases
- Plan replacement of solutions that don’t do IPv6
- Point out the risks of apps not doing IPv6
• Phased Approach to Deployment - Phase 1: dual stack all external facing services
- Phase 2: datacenter and internal network
![Page 123: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/123.jpg)
TipsSection 9
![Page 124: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/124.jpg)
124
How to get started
• Change purchasing procedure (feature parity)
• Check your current hardware and software
• Plan every step and test
• One service at a time
- face first
- core
- customers
![Page 125: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/125.jpg)
125
RIPE-554 Document
• “Requirements for IPv6 in ICT Equipment”
- Best Current Practice describing what to ask for when requesting IPv6 Support
- Useful for tenders and RFPs
- Originated by the Slovenian Government
- Adopted by various others (Germany, Sweden)
https://www.ripe.net/ripe/docs/ripe-554
![Page 126: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/126.jpg)
126
Troubleshooting for ISP Helpdesks
• Most ISP connectivity problems are not IPv6 related
• Helpdesks can get confused!
- IPv6 is new for them
- They don’t have experience with IPv6 issues
• A generic troubleshooting guide can help!
• Based on the open source testipv6.com tool
• Customisable
https://www.ripe.net/ripe/docs/ripe-631
![Page 127: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/127.jpg)
127
IPv6 Ripeness
• Rating system:
- One star if the LIR has an IPv6 allocation
- Additional stars if:
- IPv6 Prefix is announced on router
- A route6 object is in the RIPE Database
- Reverse DNS is set up
- A list of 4 star LIRs:
- http://ripeness.ripe.net
![Page 128: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/128.jpg)
128
IPv6 RIPEness: 16527 LIRs
4 stars20%
3 stars15%
2 stars10%
1 star29%
No IPv626%
![Page 129: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/129.jpg)
129
IPv6 RIPEness: the 5th star
• You already earned 4 stars…
• Actual IPv6 deployment is the 5th star!
• Two ways to get it:
- Provide content over IPv6
- Provide IPv6 access to users
• Ask for your t-shirt!!!
![Page 130: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/130.jpg)
130
Customers And Their /48
• Customers have no idea how to handle65536 subnets!
• Provide them with information
- https://www.ripe.net/support/training/material/basicipv6-addressing-plan-howto.pdf
![Page 131: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/131.jpg)
131
Also useful
• Websites
- http://www.getipv6.info
- http://www.ipv6actnow.org
- http://datatracker.ietf.org/wg/v6ops/
- http://www.ripe.net/ripe/docs/ripe-554.html
• Mailing lists
- http://lists.cluenet.de/mailman/listinfo/ipv6-ops
- http://www.ripe.net/mailman/listinfo/ipv6-wg
![Page 132: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/132.jpg)
132
Don'ts
• Don't separate IPv6 features from IPv4
• Don't do everything in one go
• Don't appoint an IPv6 specialist
- do you have an IPv4 specialist?
• Don't see IPv6 as a product
- the Internet is the product!
![Page 133: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/133.jpg)
Questions
![Page 134: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/134.jpg)
134
RIPE NCC Academy
http://academy.ripe.net
Graduate to the next level!
![Page 135: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/135.jpg)
135
Feedback!
https://www.ripe.net/training/basic-ipv6/survey
![Page 136: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/136.jpg)
136
Follow us!
@TrainingRIPENCC
![Page 137: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/137.jpg)
137
Title Text
Fin
Ende
KpajKonec
Son
Fine
Pabaiga
Einde
Fim
Finis
Koniec
Lõpp
Kрай
SfârşitКонeц
KrajVége
Kiнець
Slutt
Loppu
Τέλος
Y Diwedd
Amaia Tmiem
Соңы
Endir
Slut
Liðugt
An Críoch
Fund
הסוף
Fí
ËnnFinvezh
The End!
Beigas
![Page 138: Basic IPv6 - RIPE NCC · PDF file4 Overview •IPv4? •IPv6 Address Basics •Getting it •Exercise: Making Assignments •IPv6 Protocol Basics •Exercise: Addressing Plan •Deploying](https://reader031.vdocument.in/reader031/viewer/2022021818/5aa36cc07f8b9aa0108e906a/html5/thumbnails/138.jpg)
138
Fin
Ende
KpajKonec
Son
Fine
Pabaiga
Einde
Fim
Finis
Koniec
Lõpp
Kрай
Sfârşit
Конeц
KrajVége
Kiнець
Slutt
Loppu
Τέλος
Y Diwedd
Amaia Tmiem
Соңы
Endir
Slut
Liðugt
An Críoch
Fund
הסוף
Fí
ËnnFinvezh
The End!
Beigas
Канeц
English
Catalan
Welsh
Latin
Ukrainian
ArmenianKazakh
Breton
Portuguese
Georgian
BasqueMaltese
NorwegianSwedish, Danish
French Greek
IrishHungarian
Hebrew
Arabic
Persian
RomanianItalian
Dutch Russian
Turkish
German
Finnish
Estonian
Polish, Slovak
Lithuanian
Latvian
CroatianSerbian
Czech
Icelandic
Bulgarian
Belorussian
Faroese
Letzeburgisch(LUX) Albanian
(An-Nahaya)
(Kraj)
(Payan)
(Kinec))
(Dasasruli))
(Kanec))(Telos))
(Ha-sof))
(Verj)
(Kraj)
(Konec))