IPv6 – What You Need To Know Tom Hollingsworth CCNP,CCVP,CCSP, MCSE

What is IP? Internet Protocol version 4 – ARPANet Internet Protocol version 4 – ARPANet IPv4 Address – /24 IPv4 Address – /24 2^32 IPv4 addresses != 4 billion 2^32 IPv4 addresses != 4 billion Classful networking – later developed into CIDR Classful networking – later developed into CIDR Network Address Translation (NAT) used to extend life of IPv4 Network Address Translation (NAT) used to extend life of IPv4

IPv4 – Exit, Stage Right ICANN/IANA exhaustion occurred 2/3/2011 ICANN/IANA exhaustion occurred 2/3/2011 First RIR to reach depletion – APNIC (8/10/2011) First RIR to reach depletion – APNIC (8/10/2011) Last projected RIR depletion date – 7/23/2012 Last projected RIR depletion date – 7/23/2012 Rate of consumption at exhaustion was approx. 4 million addresses per day Rate of consumption at exhaustion was approx. 4 million addresses per day

How Did We Run Out? Every networked device needs an address Every networked device needs an address Explosion of networked devices Explosion of networked devices Desire for connection vs. Need for addressing Desire for connection vs. Need for addressing Bad /8 management – /8, /8, and Class E Bad /8 management – /8, /8, and Class E

Version 6? Where’s Version 5? Version 5 = Stream protocol – incorporated into IPv6 Version 5 = Stream protocol – incorporated into IPv6 Version 6 – In development since 1993 Version 6 – In development since 1993 Classless Networking Classless Networking 2^128 = 340,282,366,920,938,463,463,374,607, 2^128 = 340,282,366,920,938,463,463,374,607, 431,768,211,456 (340 undecillion) addresses

What Does It Look Like? IPv4 – IPv6 – 2001:470:1f0f:80c:beef:cafe:abcd:54 Link Local – fe80::beef:cafe:abcd:54

IPv6 – In Detail Hexadecimal (base 16) addressing – 0-9, a-f Hexadecimal (base 16) addressing – 0-9, a-f Removed unnecessary header fields Removed unnecessary header fields Removed broadcast in favor of multicast Removed broadcast in favor of multicast ARP is gone in favor of ICMPv6 and ND ARP is gone in favor of ICMPv6 and ND ::1 is the only loopback ::1 is the only loopback Much more reliance on DNS for hosts Much more reliance on DNS for hosts

Hands-Off Configuration IPv6 uses Stateless Autoconfiguration IPv6 uses Stateless Autoconfiguration EUI-64 standard using MAC address EUI-64 standard using MAC address Address hiding available for security needs Address hiding available for security needs Neighbor Solicitation to discover addresses Neighbor Solicitation to discover addresses Router Advertisement announces network Router Advertisement announces network DHCP available, but less needed (only for DNS resolution) DHCP available, but less needed (only for DNS resolution)

IPv6 Configuration – Dual Stack or Tunnels? 6to4 tunnel – each IPv4 has its own /48 – doesn’t work with NAT or RFC to4 tunnel – each IPv4 has its own /48 – doesn’t work with NAT or RFC 1918 Teredo - MS tunnel for use with NAT Teredo - MS tunnel for use with NAT ISATAP – allows v4 addresses to convert to v6, but very complicated and relies on DNS ISATAP – allows v4 addresses to convert to v6, but very complicated and relies on DNS Dual Stack – Running IPv4 and IPv6 simultaneously (expensive) Dual Stack – Running IPv4 and IPv6 simultaneously (expensive)

Host Readiness – Windows 7 Windows 7 – full IPv6 network stack Windows 7 – full IPv6 network stack Enabled by default Enabled by default Full IPv6 DNS record (AAAA) support Full IPv6 DNS record (AAAA) support

Host Readiness – Windows XP IPv6 supported in SP2 – Must be enabled IPv6 supported in SP2 – Must be enabled Does NOT support DNS lookups over IPv6 Does NOT support DNS lookups over IPv6

Host Readiness – OS X Supported in Jaguar (10.2.x) but much better in Snow Leopard (10.6.x) Supported in Jaguar (10.2.x) but much better in Snow Leopard (10.6.x) Issues with IPv6 networks being “broken” and not failing to IPv4 as well as DNS server issues Issues with IPv6 networks being “broken” and not failing to IPv4 as well as DNS server issues Make sure to be on or later for best results Make sure to be on or later for best results

Are My Servers IPv6-ready? Upgrade to Windows Server 2008 Upgrade to Windows Server 2008 Snow Leopard or later Snow Leopard or later Verify Linux Kernel support Verify Linux Kernel support For appliances, check vendor release notes For appliances, check vendor release notes

Router Readiness Older equipment doesn’t have support for IPv6 Older equipment doesn’t have support for IPv6 Ensure your network equipment is updated Ensure your network equipment is updated

IPv6 Firewalls IPv6 is a different protocol and requires different rules IPv6 is a different protocol and requires different rules No NAT66 means rules must be more detailed No NAT66 means rules must be more detailed Check your firewall vendor to find code level for IPv6 support Check your firewall vendor to find code level for IPv6 support Another good site: capable-security-products Another good site: capable-security-products capable-security-products capable-security-products

What Happens if I Don’t Use IPv6? Major sites are moving to IPv6 content Major sites are moving to IPv6 content Facebook, Google, Netflix, Yahoo Facebook, Google, Netflix, Yahoo When IPv4 is depleted, new websites will be IPv6-only When IPv4 is depleted, new websites will be IPv6-only Both protocols needed to access 100% of the Internet going forward Both protocols needed to access 100% of the Internet going forward

World IPv6 Day – June 8 Google, Yahoo, and many others are enabling IPv6 along with IPv4 for 24 hours as a test Google, Yahoo, and many others are enabling IPv6 along with IPv4 for 24 hours as a test About 0.05% of Internet users are expected to have IPv6 related issues About 0.05% of Internet users are expected to have IPv6 related issues Test things out to see how IPv6 works for you Test things out to see how IPv6 works for you

How can I be ready for IPv6 today? Talk to your ISP and find out their plans Talk to your ISP and find out their plans Ensure your network equipment is up to date Ensure your network equipment is up to date Document your network to make renumbering simple when D-Day comes Document your network to make renumbering simple when D-Day comes Talk to peers and colleagues to refine best recommendations Talk to peers and colleagues to refine best recommendations

Spread the Word Don’t let stories like this be the face of IPv6: Web developers have tried to compensate for this problem by creating IPv6 -- a system that recognizes six-digit IP addresses rather than four-digit ones. Read more: -run-ip-addresses-happens-anyones-guess/#ixzz1CFQVefc0http:// -run-ip-addresses-happens-anyones-guess/#ixzz1CFQVefc0

More Information World IPv6 Day - World IPv6 Day ARIN IPv6 Information - ARIN IPv6 Information Microsoft IPv6 Resources - us/network/bb Microsoft IPv6 Resources - us/network/bb us/network/bb us/network/bb530961

More Information Apple IPv6 Info - ogy/networking.html Apple IPv6 Info - ogy/networking.html ogy/networking.html ogy/networking.html IPv6 Wikipedia Page - IPv6 Wikipedia Page IPv6 enabled address page – IPv6 enabled address page – Renumbering a network without a flag day - Renumbering a network without a flag day -