IPv6

1
IPv6 What You Need To Know

• Tom Hollingsworth
• CCNP,CCVP,CCSP, MCSE

2
What is IP?

• Internet Protocol version 4 ARPANet
• IPv4 Address 192.0.2.22/24
• 232 IPv4 addresses ! 4 billion
• Classful networking later developed into CIDR
• Network Address Translation (NAT) used to extend
  life of IPv4

3
IPv4 Exit, Stage Right

• ICANN/IANA exhaustion occurred 2/3/2011
• First RIR to reach depletion APNIC (8/10/2011)
• Last projected RIR depletion date 7/23/2012
• Rate of consumption at exhaustion was approx. 4
  million addresses per day

4
How Did We Run Out?

• Every networked device needs an address
• Explosion of networked devices
• Desire for connection vs. Need for addressing
• Bad /8 management 1.0.0.0/8, 127.0.0.0/8, and
  Class E

5
Version 6? Wheres Version 5?

• Version 5 Stream protocol incorporated into
  IPv6
• Version 6 In development since 1993
• Classless Networking
• 2128 340,282,366,920,938,463,463,374,607,
• 431,768,211,456 (340 undecillion) addresses

6
What Does It Look Like?

• IPv4 10.10.1.1
• IPv6 20014701f0f80cbeefcafeabcd54
• Link Local fe80beefcafeabcd54

7
IPv6 In Detail

• Hexadecimal (base 16) addressing 0-9, a-f
• Removed unnecessary header fields
• Removed broadcast in favor of multicast
• ARP is gone in favor of ICMPv6 and ND
• 1 is the only loopback
• Much more reliance on DNS for hosts

8
Hands-Off Configuration

• IPv6 uses Stateless Autoconfiguration
• EUI-64 standard using MAC address
• Address hiding available for security needs
• Neighbor Solicitation to discover addresses
• Router Advertisement announces network
• DHCP available, but less needed (only for DNS
  resolution)

9
IPv6 Configuration Dual Stack or Tunnels?

• 6to4 tunnel each IPv4 has its own /48 doesnt
  work with NAT or RFC 1918
• Teredo - MS tunnel for use with NAT
• ISATAP allows v4 addresses to convert to v6,
  but very complicated and relies on DNS
• Dual Stack Running IPv4 and IPv6 simultaneously
  (expensive)

10
Host Readiness Windows 7

• Windows 7 full IPv6 network stack
• Enabled by default
• Full IPv6 DNS record (AAAA) support

11
Host Readiness Windows XP

• IPv6 supported in SP2 Must be enabled
• Does NOT support DNS lookups over IPv6

12
Host Readiness OS X

• Supported in Jaguar (10.2.x) but much better in
  Snow Leopard (10.6.x)
• Issues with IPv6 networks being broken and not
  failing to IPv4 as well as DNS server issues
• Make sure to be on 10.6.5 or later for best
  results

13
Are My Servers IPv6-ready?

• Upgrade to Windows Server 2008
• Snow Leopard 10.6.5 or later
• Verify Linux Kernel support
• For appliances, check vendor release notes

14
Router Readiness

• Older equipment doesnt have support for IPv6
• Ensure your network equipment is updated

15
IPv6 Firewalls

• IPv6 is a different protocol and requires
  different rules
• No NAT66 means rules must be more detailed
• Check your firewall vendor to find code level for
  IPv6 support
• Another good site https//www.icsalabs.com/techno
  logy-program/ipv6/ipv6-capable-security-products

16
What Happens if I Dont Use IPv6?

• Major sites are moving to IPv6 content
• Facebook, Google, Netflix, Yahoo
• When IPv4 is depleted, new websites will be
  IPv6-only
• Both protocols needed to access 100 of the
  Internet going forward

17
World IPv6 Day June 8

• Google, Yahoo, and many others are enabling IPv6
  along with IPv4 for 24 hours as a test
• About 0.05 of Internet users are expected to
  have IPv6 related issues
• Test things out to see how IPv6 works for you

18
How can I be ready for IPv6 today?

• Talk to your ISP and find out their plans
• Ensure your network equipment is up to date
• Document your network to make renumbering simple
  when D-Day comes
• Talk to peers and colleagues to refine best
  recommendations

19
Spread the Word

• Dont let stories like this be the face of IPv6
• Web developers have tried to compensate for this
  problem by creating IPv6 -- a system that
  recognizes six-digit IP addresses rather than
  four-digit ones.Read more http//www.foxnews.co
  m/scitech/2011/01/26/internet-run-ip-addresses-hap
  pens-anyones-guess/ixzz1CFQVefc0

20
More Information

• World IPv6 Day - http//isoc.org/wp/worldipv6day/
• ARIN IPv6 Information - https//www.arin.net/knowl
  edge/v4-v6.html
• Microsoft IPv6 Resources - http//technet.microsof
  t.com/en-us/network/bb530961

21
More Information

• Apple IPv6 Info - http//www.apple.com/server/maco
  sx/technology/networking.html
• IPv6 Wikipedia Page - http//en.wikipedia.org/wiki
  /IPv6
• IPv6 enabled address page http//ip6.me
• Renumbering a network without a flag day -
  http//tools.ietf.org/html/rfc4192