Microsoft Official Course ® Module 8 Implementing IPv6 Module Overview • Overview of IPv6 • IPv6 Addressing • Coexistence with IPv4 • IPv6 Transition Technologies Lesson 1: Overview of IPv6 • Benefits of IPv6 • Differences Between IPv4 and IPv6 • IPv6 Address Format Benefits of IPv6 Benefits of IPv6 include: • Larger address space • Hierarchical addressing and routing infrastructure • Stateless and stateful address configuration • Required support for IPsec • End-to-end communication • Required support for QoS • Improved support for single-subnet environments • Extensibility Differences Between IPv4 and IPv6 Feature Fragmentation IPv4 Performed by routers and sending host Broadcast ARP Request frames A records IPv6 Performed only by sending host Placeholder to ensure the table Multicast Neighbor gets published correctly. This Solicitation messages should sit behind the table and not be visible. Multicast listener discovery ICMPv6 Router Solicitation and Router Advertisement (required) AAAA records IN-ADDR.ARPA IP6.ARPA 576 bytes 1280 bytes Address Resolution Manage multicast IGMP group membership Router Discovery DNS host records DNS reverse lookup zones Minimum packet size ICMP Router Discovery (optional) IPv6 Address Format [0010][1111][0011][1011] • 128-bit address in binary: 8 4 2 10010000000000001000011011011100000000000000000000010111 [0 0 1 0]1001110110000001010101010000000001111111111111110001010 001001110001011010 0+0+2+0=2 • 128-bit address divided into 16-bit blocks: [1 1 1 1]0010000000000001 0010111100111011 8+4+2+1=F 0000110110111000 0000000000000000 0000001010101010 0000000011111111 1111111000101000 1001110001011010 [0 0 1 1] • Each 16-bit block converted to HEX (base 16): 0+0+2+1=3 2001:0DB8:0000:2F3B:02AA:00FF:FE28:9C5A [1 •0 Further 1 1] simplify by removing leading zeros: 8+0+2+1=B 2001:DB8:0:2F3B:2AA:FF:FE28:9C5A = 2F3B Lesson 2: IPv6 Addressing • IPv6 Address Structure • Global Unicast Addresses • Unique Local Unicast Addresses • Link-Local Unicast Addresses • Autoconfiguring IPv6 Addresses • Demonstration: Configuring IPv6 Client Settings IPv6 Address Structure • The number of network bits is defined by the prefix • Each host has 64-bits allocated to the interface identifier Type of address IPv4 address IPv6 address 0.0.0.0 :: 127.0.0.1 ::1 169.254.0.0/16 FE80::/64 Broadcast 255.255.255.255 Uses multicasts instead Multicast 224.0.0.0/4 FF00::/8 Unspecified Loopback Autoconfigured Global Unicast Addresses • Are routable on the Ipv6 Internet • Allocate 16 bits for internal subnetting • Begin with 2 or 3 (2000::/3) 48 bits 45 bits 001 Global Routing Prefix Prefix managed by IANA Prefix assigned to top-level ISPs 16 bits 64 bits Subnet ID Interface ID Subnet bits for organizations Client interface ID Unique Local Unicast Addresses • Are equivalent to IPv4 private addresses • Require the organization ID to be randomly generated • Allocates 16 bits for internal subnetting 8 bits 40 bits 16 bits 64 bits 11111101 Organization ID Subnet ID Interface ID FD00::/8 Link-Local Unicast Addresses • Are automatically generated on all IPv6 hosts • Are similar to IPv4 APIPA addresses • Are sometimes used in place of broadcast messages • Include a zone ID that identifies the interface Examples: • fe80::2b0:d0ff:fee9:4143%3 • fe80::94bd:21cf:4080:e612%2 10 bits 54 bits 64 bits 1111 1110 10 000 . . . 000 Interface ID FE80::/8 Autoconfiguring IPv6 Addresses Check for router on theset, Check for aaddress conflicts IfAdd Managed or Other flag Check the router for prefixes 3 prefixes Derive Link-Local Address 2 4 1 5 6 check network usingDHCPv6 neighbor solicitation Autoconfigured IP Timeline IPv6 Client Valid Tentative Preferred Deprecated Invalid Time Preferred Lifetime Valid Lifetime fe80::d593:e1e:e612:53e4%10 Router configuration information Additional router prefixes IPv6 Router IPv6 DHCP Server DHCPv6 information received Demonstration: Configuring IPv6 Client Settings In this demonstration, you will see how to: • View IPv6 configuration by using IPconfig • Configure server • Verify IPv6 on a domain controller and a IPv6 communication is functional Lesson 3: Coexistence with IPv4 • What Are Node Types? • IPv4 and IPv6 Coexistence • Demonstration: Configuring DNS to Support IPv6 • What Is IPv6 Over IPv4 Tunneling? What Are Node Types? IPv6-Only Node IPv4/IPv6 Node IPv4-Only Node IPv4 Network IPv6 Network IPv4 and IPv6 Coexistence Windows Server 2012 uses a dual IP layer architecture that supports IPv4 and IPv6 in a single protocol stack DNS records required for coexistence are: • Host (A) resource records for IPv4 nodes • IPv6 host (AAAA) resource records • Reverse lookup pointer (PTR) resource records for IPv4 and IPv6 nodes Demonstration: Configuring DNS to Support IPv6 In this demonstration, you will see how to: • Configure an IPv6 host (AAAA) resource record for an IPv6 address • Verify name resolution for an IPv6 host (AAAA) resource record What Is IPv6 Over IPv4 Tunneling? IPv4 IPv6 Packet Packet IPv6 IPv4 IPv6 over IPv4 tunneling allows IPv6 to communicate through an IPv4 network IPv6 Packet Upper layer IPv6 Extension protocol data header headers unit Upper layer IPv4 IPv6 Extension protocol data header header headers unit IPv4 Packet Lesson 4: IPv6 Transition Technologies • What Is ISATAP? • What Is 6to4? • What Is Teredo? • What Is PortProxy? • Process for Transitioning to IPv6 What Is ISATAP? • Allows IPv6 communication over an IPv4 intranet • Can be enabled by configuring an ISATAP host record • Connects all nodes to a single IPv6 network • Uses the IPv4 address as part of the IPv6 address Private address: FD00::0:5EFE:192.168.137.133 Public address: 2001:db8::200:5EFE:131.107.137.133 ISATAP Host ISATAP Host IPv4-only intranet ISATAP Router IPv6capable network What Is 6to4? • • • • Provides IPv6 connectivity over the IPv4 Internet Works between sites or from host to site Is not suitable for scenarios using NAT Uses the following network address format: • 2002:WWXX:YYZZ:Subnet_ID::/64 6to4 router To enable Windows IPv6/IPv4 Server 2012 as a 6to4 router: IPv4 Internet • Enable ICS 6to4 router • Use Windows IPv6/IPv4 PowerShell IPv6/IPv4 IPv6/IPv4 What Is Teredo? Teredo: • Enables IPv6 connectivity over the IPv4 Internet through NAT • Requires a Teredo server to initiate communication • Can be configured with the cmdlet Set-NetTeredoConfiguration Windows Server 2012: • Can be configured as a client, server, or relay • Is configured as a client by default • Must be an enterprise client on domain networks Teredo server NAT IPv4 Internet NAT Teredo client What Is PortProxy? Use PortProxy to: • Provide IPv6-only hosts with access to IPv4-only applications • Provide access between IPv4-only and IPv6-only hosts Limitations of PortProxy: • Only TCP applications • Cannot change embedded address information Process for Transitioning to IPv6 To transition from IPv4 to IPv6 you must: • Update applications to support IPv6 • Update routing infrastructure to support IPv6 • Update devices to support IPv6 • Update DNS with records for IPv6 • Upgrade hosts to IPv4/IPv6 nodes Lab: Implementing IPv6 • Exercise 1: Configuring an IPv6 Network • Exercise 2: Configuring an ISATAP Router Logon Information Virtual machines User name Password 20410B-LON-DC1 20410B-LON-RTR 20410B-LON-SVR2 Adatum\Administrator Pa$$w0rd Estimated Time: 30 minutes Lab Scenario A. Datum Corporation has an IT office and data center in London, which support the London location and other locations. They have recently deployed a Windows Server 2012 infrastructure with Windows 8 clients. You now need to configure the infrastructure service for a new branch office. The IT manager at A. Datum has been briefed by several application vendors about newly added support for IPv6 in their products. A. Datum does not have IPv6 support in place at this time. The IT manager would like you to configure a test lab that uses IPv6. As part of the test lab configuration, you also need to configure ISATAP to allow communication between an IPv4 network and an IPv6 network. Lab Review • Did you configure IPv6 statically or dynamically in this lab? • Why did you not need to configure LON-DC1 with the IPv4 address of the ISATAP router? Module Review and Takeaways • Review Questions • Best Practice