Rick Graziani Cabrillo College Fall 2013

2 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada IPv6 Addresses

3 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada IPv6 Addressing Multicast Unicast Anycast AssignedSolicited Node Global Unicast Unspecified Loopback Embedded IPv4 Link-Local Unique Local FF00::/8 FF02::1:FF00:0000/104 ::/128 ::1/ ::/3 3FFF::/3 FE80::/10 FEBF::/10 FC00::/7 FDFF::/7 ::/80

4 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Global Unicast IPv6 Addresses

5 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Interface ID Subnet ID Global Routing Prefix Global Unicast Address (GUA) 001 Range: 2000::/ :: to 3FFF::/ :: Global unicast addresses are similar to IPv4 addresses Routable Unique IANA’s allocation of IPv6 address space in 1/8 th sections

6 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1(config)#interface gigabitethernet 0/1 R1(config-if)#ipv6 address 2001:db8:acad:2::1/64 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface serial 0/0/0 R1(config-if)#ipv6 address 2001:db8:acad:3::1/64 R1(config-if)#clock rate R1(config-if)#no shutdown

7 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada show running-config command on router R1 R1# show running-config interface GigabitEthernet0/0 no ip address duplex auto speed auto ipv6 address 2001:DB8:ACAD:1::1/64 !

8 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada show ipv6 interface brief command on router R1 R1# show ipv6 interface brief GigabitEthernet0/0 [up/up] FE80::FE99:47FF:FE75:C3E0 2001:DB8:ACAD:1::1 Global unicast address Link-local unicast address Link-local address automatically created when (before) the global unicast address is. We will discuss link-local addresses next.

9 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada PC1: Static Global Unicast Address 2001:db8:acad:1:: :db8:acad:1::1 64

10 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Global Unicast Manual IPv6 Unnumbered IPv6 Address Stateless Autoconfiguration DHCPv6 Static EUI-64 Dynamic

11 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada DHCP Server

12 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada The Router Advertisement (RA) tells hosts how it will receive IPv6 Address Information. Sent periodically by an IPv6 router or… When the router receives a Router Solicitation message from a host.

13 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Router Advertisement/Solicitation Messages Part of ICMPv6 (Internet Control Message Protocol for IPv6) Router Advertisements are sent by an “IPv6 router” – ipv6 unicast-routing command Forwards IPv6 Packets Can be enabled for IPv6 static and dynamic routing Sends ICMPv6 Router Advertisements Routers can be configured with IPv6 addresses without being an IPv6 router DHCPv6 Server R1(config)# ipv6 unicast-routing

14 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada DHCPv6 Server R1(config)# ipv6 unicast-routing Option 1 (Default on Cisco routers) “I’m everything you need (Prefix, Prefix-length, Default Gateway)” Option 2 (Discussed in CCNA Switching) “Here is my information but you need to get other information such as DNS addresses from a DHCPv6 server.” Option 3 (Discussed in CCNA Switching) “I can’t help you. Ask a DHCPv6 server for all your information.” RA DHCPv6 Option 1 and 2: Stateless Address Autconfiguration – DHCPv6 Server does not maintain state of addresses Option 3: Stateful Address Configuration – Address received from DHCPv6 Server

15 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Option 1 – RA Message To: FF02::1 (All IPv6 devices multicast) From: FE80::1 (Link-local address) Prefix: 2001:DB8:ACAD:1:: Prefix-length: /64 RA 1 1 MAC: B-8C-E0-80 Prefix: 2001:DB8:ACAD:1:: Prefix-length: /64 Default Gateway: FE80::1 Global Unicast Address: 2001:DB8:ACAD:1: + Interface ID 2001:DB8:ACAD:1::/64 EUI-64 Process or Random 64-bit value 2 2 DHCPv6 Server 3 3

16 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Interface ID Subnet ID Global Routing Prefix /48 / bits EUI-64 ProcessRandomly Generated Number SLAAC Router Advertisement 2001:DB8:ACAD:1::/64 Windows operating systems, Windows XP and Server 2003 use EUI-64. Windows Vista and newer; hosts create a random 64-bit Interface ID. Linux: Mostly use random 64-bit number Mac OSX: use EUI-64 (on my Macs) DHCPv6 Server

17 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Option 1 – RA Message To: FF02::1 (All-hosts multicast) From: FE80::1 (Link-local address) Prefix: 2001:DB8:ACAD:1:: Prefix-length: /64 RA 1 1 MAC: B-E9-D4-80 Prefix: 2001:DB8:ACAD:1:: Prefix-length: /64 Default Gateway: FE80::1 Global Unicast Address: 2001:DB8:ACAD:1: + Interface ID 2001:DB8:ACAD:1::/64 EUI-64 Process or Random 64-bit value 2 2 DHCPv6 Server

18 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Hexadecimal OUI 24 bits Device Identifier 24 bits Binary Step 1: Split the MAC address Binary Step 2: Insert FFFE Binary Step 3: Flip the U/L bit Binary Modified EUI-64 Interface ID in Hexadecimal Notation BE9D480 FFFE 00036B E9D F F F E

19 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada PC1> ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix. : IPv6 Address : 2001:db8:acad:1: b-ff-fe-e9-d4-80 Link-local IPv6 Address..... : fe80:: b-ff-fe-e9-d4-80 Default Gateway : fe80::1 PC1: Global Unicast Address A 64-bit Interface ID and the EUI-64 process accommodate the IEEE specification for a 64-bit MAC address. Router Advertisement EUI-64

20 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada DHCPv6 DHCPv6 is similar to DHCPv4. Host operating systems “may” include the option of ignoring the Router Advertisement from the router and only use the stateful services of a DHCPv6 server. Note: All addresses should be checked before use with DAD (Duplicate Address Detection), similar to gratuitous ARP in IPv4. DHCPv6 Server

21 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Link-Local Unicast IPv6 Addresses

22 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada IPv6 Addressing Multicast Unicast Anycast AssignedSolicited Node Global Unicast Unspecified Loopback Embedded IPv4 Link-Local Unique Local FF00::/8 FF02::1:FF00:0000/104 ::/128 ::1/ ::/3 3FFF::/3 FE80::/10 FEBF::/10 FC00::/7 FDFF::/7 ::/80

23 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Interface ID / xx xxxx FE80::/10 Remaining 54 bits 10 bits 64 bits EUI-64, Random or Manual Configuration Link-local Unicast Range: FE80::/ :: to FEBF::/ ::

24 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Used to communicate with other devices on the link. Are NOT routable off the link (network). Only have to be unique on the link. Are not included in the IPv6 routing table. An IPv6 device must have at least a link-local address. Used by: Hosts to communicate to the IPv6 network before it has a global unicast address. Router’s link-local address is used by hosts as the default gateway address. Adjacent routers to exchange routing updates Link-local unicast Link-Local Communications

25 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1 G0/0 G0/1 S0/0/0 R1#show interface gigabitethernet 0/0 GigabitEthernet0/0 is up, line protocol is up Hardware is CN Gigabit Ethernet, address is fc c3e0 (bia fc c3e0) R1#show ipv6 interface brief GigabitEthernet0/0 [up/up] FE80::FE99:47FF:FE75:C3E0 2001:DB8:ACAD:1::1 GigabitEthernet0/1 [up/up] FE80::FE99:47FF:FE75:C3E1 2001:DB8:ACAD:2::1 Serial0/0/0 [up/up] FE80::FE99:47FF:FE75:C3E0 2001:DB8:ACAD:3::1 R1# EUI-64 Serial interfaces will use a MAC address of an Ethernet interface. FF:FE = EUI-64 (most likely) Wait! Two Link-Locals are the same!

26 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada PC1> ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix.: IPv6 Address : 2001:db8:acad:1:3496:1c51:3f57:fe89 Link-local IPv6 Address... : fe80::3496:1c51:3f57:fe89 Default Gateway : fe80::1 PC1: Link-Local Unicast Address Many operating systems will use a random 64-bit Interface IDs for GUA and Link- Local IPv6 Addresses.

27 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1 G0/0 FE80::1 G0/1 FE80::1 S0/0/0 FE80::1 R1(config)#interface gigabitethernet 0/0 R1(config-if)#ipv6 address fe80::1 ? link-local Use link-local address R1(config-if)#ipv6 address fe80::1 link-local R1(config-if)#exit R1(config)#interface gigabitethernet 0/1 R1(config-if)#ipv6 address fe80::1 link-local R1(config-if)#exit R1(config)#interface serial 0/0/0 R1(config-if)#ipv6 address fe80::1 link-local R1(config-if)# Link-Local Addresses only have to be unique on the link! Static addresses are more easily remembered and recognizable.

28 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada ipv6 enable command Router(config)# interface gigabitethernet 0/1 Router(config-if)# ipv6 enable Router(config-if)# end Router# show ipv6 interface brief GigabitEthernet0/1 [up/up] FE80::20C:30FF:FE10:92E1 Router# Link-local addresses are automatically created whenever a global unicast address is configured The ipv6 enable command will: Create a link-local address when there is no global unicast address Maintain the link-local address even when the global unicast address is removed Link-local unicast address only

29 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1# ping fe80::2 Output Interface: ser 0/0/0 % Invalid interface. Use full interface name without spaces (e.g. Serial0/1) Output Interface: serial0/0/0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to FE80::2, timeout is 2 secs: !!!!! Must include exit-interface G0/0 FE80::1 2001:0DB8:ACAD:2::/64 Ser 0/0/0 :1 Ser 0/0/0 :2 R2R1 FE80::1 FE80::2 2001:0DB8:ACAD:1::/64

30 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Multicast IPv6 Addresses

31 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada IPv6 Addressing Multicast Unicast Anycast AssignedSolicited Node FF00::/8 FF02::1:FF00:0000/104

32 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Group ID Flag 1111 FF00::/8 8 bits 112bits 4 bits Scope Similar to Multicast addresses for IPv4. Used to send a packet to a group of devices. Two types: 1. Assigned 2. Solicited Node

33 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada FF02::1 – All IPv6 Devices All IPv6 devices, including the router, belong to this group. Every IPv6 device will listen and process packets to this address.

34 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1(config)# ipv6 unicast-routing FF02::2 – All IPv6 Routers All IPv6 routers belong to this group. Used to communicate with an IPv6 Router ( ipv6 unicast routing ) FF02::2 FE80::0123:456:789A:BCDE

35 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1# show ipv6 interface gigabitethernet 0/0 FastEthernet0/0 is up, line protocol is up IPv6 is enabled, link-local address is FE80::FE99:47FF:FE75:C3E0 Global unicast address(es): 2001:DB8:ACAD:1::1, subnet is 2001:DB8:ACAD:1::/64 Joined group address(es): FF02::1 FF02::2 FF02::1:FF00:1 FF02::1:FF75:C3E0 All-IPv6 devices on this link All-IPv6 routers on this link: IPv6 routing enabled Solicited-node multicast address for Link-local Unicast Address Solicited-node multicast address for Global Address Member of these Multicast Groups FF02 – “2” means link-local scope What is Solicited node?

36 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Solicited Node Multicast Address Used as a destination address when don’t know the unicast address. Typically used as the destination IPv6 address with: Address Resolution (“IPv4 ARP”) Duplicate Address Detection (“Gratuitous ARP”) Same intent as a broadcast but more efficient. Devices process packets with their solicited node multicast address as the destination address: IP and MAC. PC2 PC1 Destination: Solicited-node Multicast “Who ever has the IPv6 address 2001:DB8:ACAD:1::10 please send me your Ethernet MAC address”

37 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Interface ID FF FF Global Routing Prefix 104 bits 24 bits Global Unicast Address Solicited-Node Multicast Address Copy Subnet ID 2001:0DB8:ACAD :0000:0000:0010 IPv6 Global Unicast Address: 2001:0DB8:ACAD:0001:0000:0000:0000:0010 IPv6 Solicited Node Multicast Address: FF02::1:FF00: bits The ugly The simple The last 24 bits match.

38 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada PC2 PC1 Destination: Solicited-node Multicast FF02::1:FF00:0010 “Who ever has the IPv6 address 2001:DB8:ACAD:1::10 please send me your Ethernet MAC address” I listen for several IPv6 addresses! All IPv6 Devices Multicast: FF02::1 Link-Local Address: FE80:: B-FF-FE-8C-E0-80 Global Unicast Address: 2001:DB8:ACAD:1::10 Solicited Node Multicast Address: FF02::1:FF00:0010 Note (beyond CCNA): Solicited Node Multicast addresses are also mapped to a special multicast MAC address: FF

39 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada A Brief look at ICMPv6 (Internet Control Message Protocol for IPv6)

40 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Described in RFC 4443 Much more robust than ICMP for IPv4 Contains new functionality and improvements. More than just “messaging” but “how IPv6 conducts business”. General message similar to ICMP for IPv4 Also uses Type and Code fields like in ICMPv 4. IPv6 Next Header Value: 58 decimal or 3A hexadecimal IPv6 Header Next Header 58 ICMPv6 Header ICMPv6 Message Body IPv6 Data

41 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada ICMPv6 informational messages used by Neighbor Discovery (RFC 4861): Router Solicitation Message Router Advertisement Message Neighbor Solicitation Message Neighbor Advertisement Message Redirect Message (Similar to ICMPv4) Router-Device Messaging Device-Device Messaging

42 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Used by SLAAC (Stateless Address Autoconfiguration) Router Advertisement Message Here is one of three options: 1.I have everything you need. 2.I have mostly what you need, but you will need to contact a DHCPv6 server for other information like a DNS address. 3.I have nothing for you. Contact a DHCPv6 serverl Router Advertisement Message Here is one of three options: 1.I have everything you need. 2.I have mostly what you need, but you will need to contact a DHCPv6 server for other information like a DNS address. 3.I have nothing for you. Contact a DHCPv6 serverl FF02::1 All IPv6 Devices FF02::1 All IPv6 Devices Router Solicitation Message I need IPv6 address information. Router Solicitation Message I need IPv6 address information. FF02::2 All IPv6 Routers FF02::2 All IPv6 Routers PC1 DHCPv6 Server

43 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Address Resolution - A device knows the IPv6 address but needs the Layer 2 MAC address. Unlike ARP, ICMPv6 Neighbor Solicitation/Advertisement messages are encapsulated in IPv6. Information is stored in the Neighbor Cache. Neighbor Solicitation Message Whoever has the IPv6 Address 2001:DB8:ACAD:1::10 please send me your Ethernet MAC address. Neighbor Solicitation Message Whoever has the IPv6 Address 2001:DB8:ACAD:1::10 please send me your Ethernet MAC address. Solicited Node Multicast Neighbor Advertisement Message I have the IPv6 Address 2001:DB8:ACAD:1::10. Here is my Ethernet MAC address: 0021:9bd9:c644. Neighbor Advertisement Message I have the IPv6 Address 2001:DB8:ACAD:1::10. Here is my Ethernet MAC address: 0021:9bd9:c644. Unicast PC2 PC

44 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Neighbor Cache – Maps IPv6 addresses with Ethernet MAC addresses Similar to ARP Cache for IPv4 5 States (2 noticeable and 3 transitory): Reachable: Packets have recently been received providing confirmation that this device is reachable. Stale: A certain time period has elapsed since a packet has been received from this address. Transitory States: INCOMPLETE, DELAY, PROBE (I will point you to more information) PC1 Neighbor Cache IPv6 Address MAC Address 2001:DB8:ACAD:1:: bd9.c644 Neighbor Cache IPv6 Address MAC Address 2001:DB8:ACAD:1:: bd9.c644 Neighbor Cache IPv :DB8:ACAD:1::10 MAC bd9.c644

45 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada R1# show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface FE80::50A5:8A35:A5BB:66E bd9.c644 STALE Fa0/0 2001:DB8:ACAD:1:: bd9.c644 STALE Fa0/0 R1# ping 2001:db8:aaaa:1::100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:AAAA:1::100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R1# show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface FE80::50A5:8A35:A5BB:66E bd9.c644 STALE Fa0/0 2001:DB8:ACAD:1:: bd9.c644 REACH Fa0/0 R1# Windows: netsh interface ipv6 show neighbor Linux/MAC: ip neighbor show

46 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Why IPv6? (briefly and quickly) Format of an IPv6 Address IPv6 Address Types Global Unicast IPv6 Address Link-Local Unicast IPv6 Address Multicast IPv6 Addresses ICMPv6 – Neighbor Discovery Protocol Teach it and use it, and it will all make sense!

47 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Chapter 1: Routing Concepts Chapter 2: Static Routing Chapter 3: Routing Dynamically Chapter 4: EIGRP Chapter 5: Advanced EIGRP Chapter 6: Single Area OSPF Chapter 7: Advanced Single Area OSPF Chapter 8: Multi-Area OSPF Chapter 9: Access Control Lists Chapter 10: IOS File Management

48 © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. Cisco Networking Academy, US/Canada Rick Graziani - PowerPoints for CCNA, CCNP, IPv6 Username = cisco Password = perlman Shameless plug! Quality time with my two nieces…