IPv6 - The Networking Nerd

advertisement
IPv6 – What You Need
To Know
Tom Hollingsworth
CCNP,CCVP,CCSP, MCSE
What is IP?





Internet Protocol version 4 – ARPANet
IPv4 Address – 192.0.2.22/24
2^32 IPv4 addresses != 4 billion
Classful networking – later developed into
CIDR
Network Address Translation (NAT) used to
extend life of IPv4
IPv4 – Exit, Stage Right




ICANN/IANA exhaustion occurred 2/3/2011
First RIR to reach depletion – APNIC
(8/10/2011)
Last projected RIR depletion date – 7/23/2012
Rate of consumption at exhaustion was approx.
4 million addresses per day
How Did We Run Out?




Every networked device needs an address
Explosion of networked devices
Desire for connection vs. Need for addressing
Bad /8 management – 1.0.0.0/8, 127.0.0.0/8,
and Class E
Version 6? Where’s Version 5?
Version 5 = Stream protocol – incorporated into
IPv6
 Version 6 – In development since 1993
 Classless Networking
 2^128 = 340,282,366,920,938,463,463,374,607,
431,768,211,456 (340 undecillion) addresses

What Does It Look Like?
IPv4 – 10.10.1.1
IPv6 – 2001:470:1f0f:80c:beef:cafe:abcd:54
Link Local – fe80::beef:cafe:abcd:54
IPv6 – In Detail






Hexadecimal (base 16) addressing – 0-9, a-f
Removed unnecessary header fields
Removed broadcast in favor of multicast
ARP is gone in favor of ICMPv6 and ND
::1 is the only loopback
Much more reliance on DNS for hosts
Hands-Off Configuration


IPv6 uses Stateless Autoconfiguration
EUI-64 standard using MAC address




Address hiding available for security needs
Neighbor Solicitation to discover addresses
Router Advertisement announces network
DHCP available, but less needed (only for DNS
resolution)
IPv6 Configuration – Dual Stack
or Tunnels?




6to4 tunnel – each IPv4 has its own /48 –
doesn’t work with NAT or RFC 1918
Teredo - MS tunnel for use with NAT
ISATAP – allows v4 addresses to convert to v6,
but very complicated and relies on DNS
Dual Stack – Running IPv4 and IPv6
simultaneously (expensive)
Host Readiness – Windows 7



Windows 7 – full IPv6 network stack
Enabled by default
Full IPv6 DNS record (AAAA) support
Host Readiness – Windows XP


IPv6 supported in SP2 – Must be enabled
Does NOT support DNS lookups over IPv6
Host Readiness – OS X



Supported in Jaguar (10.2.x) but much better in
Snow Leopard (10.6.x)
Issues with IPv6 networks being “broken” and
not failing to IPv4 as well as DNS server issues
Make sure to be on 10.6.5 or later for best
results
Are My Servers IPv6-ready?




Upgrade to Windows Server 2008
Snow Leopard 10.6.5 or later
Verify Linux Kernel support
For appliances, check vendor release notes
Router Readiness


Older equipment doesn’t have support for IPv6
Ensure your network equipment is updated
IPv6 Firewalls




IPv6 is a different protocol and requires
different rules
No NAT66 means rules must be more detailed
Check your firewall vendor to find code level for
IPv6 support
Another good site:
https://www.icsalabs.com/technology-program/ipv6/ipv6capable-security-products
What Happens if I Don’t Use
IPv6?

Major sites are moving to IPv6 content



Facebook, Google, Netflix, Yahoo
When IPv4 is depleted, new websites will be
IPv6-only
Both protocols needed to access 100% of the
Internet going forward
World IPv6 Day – June 8



Google, Yahoo, and many others are enabling
IPv6 along with IPv4 for 24 hours as a test
About 0.05% of Internet users are expected to
have IPv6 related issues
Test things out to see how IPv6 works for you
How can I be ready for IPv6
today?




Talk to your ISP and find out their plans
Ensure your network equipment is up to date
Document your network to make renumbering
simple when D-Day comes
Talk to peers and colleagues to refine best
recommendations
Spread the Word
Don’t let stories like this be the face of IPv6:
Web developers have tried to compensate for this problem by
creating IPv6 -- a system that recognizes six-digit IP
addresses rather than four-digit ones.
Read
more: http://www.foxnews.com/scitech/2011/01/26/internet
-run-ip-addresses-happens-anyones-guess/#ixzz1CFQVefc0
More Information



World IPv6 Day http://isoc.org/wp/worldipv6day/
ARIN IPv6 Information https://www.arin.net/knowledge/v4-v6.html
Microsoft IPv6 Resources http://technet.microsoft.com/enus/network/bb530961
More Information




Apple IPv6 Info http://www.apple.com/server/macosx/technol
ogy/networking.html
IPv6 Wikipedia Page http://en.wikipedia.org/wiki/IPv6
IPv6 enabled address page – http://ip6.me
Renumbering a network without a flag day http://tools.ietf.org/html/rfc4192
Download