Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Chapter 13

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Objectives Discuss the fundamental concepts of IPv6 Describe IPv6 practices Implement IPv6 in a TCP/IP network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Overview

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Introduction to IPv6 Internet Protocol version 4 (IPv4) –Created around 1979 –32-bit IP address space – ~4 billion addresses –Allocation methods wasted addresses Internet Protocol version 6 (IPv6) –128-bit addresses –Improved security, routing, other features

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Three parts to Chapter 13 IPv6 basics Using IPv6 Moving to IPv6

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 basics

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 address notation –128 bits written in hexadecimal –2001:0000:0000:3210:0800:200C:00CF:1234 –A pair of colons represents a string of consecutive groups of zeroes –2001::3210:0800:200C:00CF:1234 –Only one set of colon pairs per address –FEDC:0000:0000:0000:00CF:0000:BA98:1234 –FEDC::CF:0:BA98:1234

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 address notation (cont.) –IPv6 loopback address –::1 –0000:0000:0000:0000:0000:0000:0000:0001

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Link-local address –Self-generated (in manner of IPv4 APIPA) –First 64 bits always FE80::/64 –Second 64 bits EUI-64 Generated with calculation using MAC address Most operating systems use EUI-64 Extra steps in Windows Vista and Windows 7 Guaranteed unique Link-local address works on private networks

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.1 Link-local address

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 subnet masks –Function like IPv4 subnet masks –Represented with /x CIDR naming –FEDC::CF:0:BA98:1234/64 –No subnet is ever longer than /64 –IANA gives out /32 subnets to big ISPs –ISPs pass out /48 and /64 subnets –Most IPv6 subnets are between /48 & /64

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.2 Link-local address in Windows Vista

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Multicasting –Multicasts have been around for a while –Existed in IPv4 and in IPv6 In IPv4 used Class D addresses ( /4) Only specific applications used multicast –Works differently in IPv6 Several IPv6-only multicast addresses added Used by specific services (for example, router messages)

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. The end of broadcast –Each link-local is a unicast address –Multicast addresses replace broadcast FF02::2 only read by routers FF02::1 all nodes address FF02::1:FFxx:xxxx solicited-node address –Anycast addresses Used in DNS Looks like a unicast to sending computer

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.3 Multicast to routers

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Multicast Addresses AddressFunction FF02::1All Nodes Address FF02::2All Routers Address FF02::FFXX:XXXXSolicited-Node Address Table 13.1

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Global address –Global unicast address –Required for Internet access –IPv6-capable gateway router gives to hosts –Router configured to do this –2001:470:B8F9:1/64 Router provides prefix NIC generates the rest (using EUI-64) –2001:470:B8F9:1:20C:29FF:FE53:45CA

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.4 Getting a global address

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.5 IPv6 configuration on Macintosh OS X

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation –Current problem with tier-1 routers No default routes Huge routing table (30,000-50,000 routes)

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.6 No-default routers

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation (cont.) –Every router uses a subnet of the next higher router’s routes –Reduces size and complexity of tables –Gives detailed geographic picture –IP address shows location –Part of IPv6

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. How aggregation works –Gateway gives first 64 bits of IP address to computers –Gateway gets its 48-bit prefix from upstream –2001:d0be:7922:1:fc2d:aeb2:99d2:e2b4 –Network prefix is 2001:dObe:7922:1 /64 –ISP’s network prefix 2001:D0BE /32 –ISP adds 16-bit subnet: 2001:d0be:7922/48 –At your gateway, tech adds 16-bit subnet –Result: 2001:d0be:7922:1 /64

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.7 Aggregation

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.8 An IPv6 group of routers

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.9 Adding the first prefix

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Adding the second prefix

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation and router changes –From ISP1 to ISP2 –New 32-bit prefix: 2ab0:3c05/32 –Downstream routers make an “all nodes” multicast –All clients get new IP addresses –IPv6 address changes rare but normal

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure New IP address updated downstream

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Using IPv6

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Enabling IPv6 –Table 13.2 lists IPv6 status of operating systems –Check to see if IPv6 is running ipconfig in Windows ifconfig in Linux or Mac OS X

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Adoption by IS Operating SystemIPv6 Status Windows 2000Windows 2000 came with “developmental” IPv6 support. Microsoft does not recommend using Windows 2000 for IPv6. Windows XPOriginal Windows XP came with a rudimentary but fully functional IPv6 stack that had to be installed from the command prompt. SP1 added the ability to add the same IPv6 stack under the Install | Protocols menu. Windows Vista/Windows 7Complete IPv6 support. IPv6 is active on default installs. Windows Server 2003Complete IPv6 support. IPv6 is not installed by default but is easily installed via the Install | Protocols menu. Windows Server 2008Complete IPv6 support. IPv6 is active on default installs. LinuxComplete IPv6 support from kernel 2.6. IPv6 is active on default installs. Macintosh OS XComplete IPv6 support on all versions. IPv6 is active on default installs. Table 13.2

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. NAT in IPv6 –NAT not used in IPv6 –All IP addresses exposed to the Internet –Huge address space makes IP scanning nearly impossible –IPSec important for security –Security options beyond IPv6 Encryption Firewall

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure IPv6 enabled in Windows Vista

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure IPv6 enabled in Ubuntu 8.10

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Angry IP scanner at work

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. DHCP in IPv6 –DHCPv6 –Works differently than in IPv4 –IP address and subnet received from gateway router –Need DCHPv6 for other IP information –Two modes of DHCPv6 Stateful – works like DHCP in IPv4 Stateless – only passes out optional information Stateless is the norm

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure DHCPv6 server in action

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. DNS in IPv6 –Trivial –Most DNS servers now support IPv6 addresses –DNS servers supporting IPv6 use AAAA records –DNSv6 details not finalized –For now, manually add DNS server information to IPv6 clients

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure IPv6 addresses on DNS server

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Manually adding an IPv6 DNS server in Vista

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Moving to IPv6

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv4 and IPv6 –What is not ready for IPv6? Most home routers Some Internet routers –What is ready for IPv6? Most recent operating systems All root DNS servers All tier-1 ISP routers

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure IPv4 and IPv6 on one computer

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure The IPv6 gap

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Tunnels –IPv4-to-IPv6 tunnels bridge the gap Encapsulate IPv6 traffic into an IPv4 tunnel Endpoints at IPv6 client and IPv6 router

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure The IPv4-to-IPv6 tunnel

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. 6to4 tunnels –6to4 dominant tunneling protocol Does not require a tunnel broker Usually connects two routers Normally requires public IPv4 address Uses public relay routers is 6to4 anycast address Challenging to set up

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. 6in4 tunnels –6in4 Most popular tunneling protocol One of only two that is NAT traversal

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Teredo tunnels –Teredo NAT-traversal IPv6 tunneling protocol Built into Microsoft Windows Addresses start with 2001:0000 /32 Many people use third-party tool

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. ISATAP –Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) –Works within an IPv4 network –Adds IPv4 address to an IPv6 prefix for endpoints –2001:db8::98ca:200:

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Tunnel brokers –Someone must act as far endpoint –Must know tunneling standard and how to connect to endpoint –Create tunnel –Usually offers custom-made endpoint client –May use automatic configuration protocols Tunnel Setup Protocol (TSP) Tunnel Information and Control protocol (TIC)

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. URL Hexago/Freenet/Go6 SixXs Hurricane Electric (no TSP/TIC) AARNet broker.aarnet.net.au Tunnel Broker

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Setting up a tunnel –Each tunnel broker has its own setup –Read instructions carefully –Figure uses Hexago client Join and download at Install client Enter Gateway 6 address, user name, password You are now on the IPv6 Internet

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Gateway6 Client Utility

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Gateway6 Client Utility Status tab

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 is here, really! –IPv6 will happen very soon –IPv4 addresses are running out –“The Big Switchover” coming soon –Knowing IPv6 is important to your future