Federal IPv6 Initiative: NIST Supporting Material Stephen Nightingale, NIST November 8, 2010

USGv6-v1.0 Profile: Vocabulary for Requirements 2 Capabilities Checklist Node Requirements USGv6 Profile UsersVendors V6 Product

USGv6-v1.0 Profile The USGv6-v1.0 profile was published in July It is effective since July It is an acquisition profile, not a deployment profile. It covers IPv6 nodes incorporating 12 functional categories: Basic Capabilities, Routing, QoS, Transition Mechs, Link Specs, Addressing, IP Security, Network Management, Multicast, Mobility, Application Reqts, Network Protection.

USGv6-v1.0 Profile In some cases your transition will involve acquisition. In some cases: turn-on, configure and secure. In support of deployment I would emphasize these three areas first: Network Protection, Addressing and Transition Mechanisms.

USGv6-v1.0 Profile Network Protection: Firewalls and ID/PS –Securing the network is always Job 1. –Firewall and ID/PS products are coming available. –See Test lab refs. for the latter. Addressing: All nodes must support address architecture and scoping mechanisms. Your address allocation is a separate administrative step conducted through ARIN. Addresses are configure for use through DHCPv6 or SLAAC autoconfiguration. Address resolution occurs through DNS using AAAA records for IPv6 and A records for IPv4. So be cognizant of your application’s need to use DNS results for either. Transition Mechanisms: The safest method is Dual Stack. –May need software update to your Windows or Linux boxes. –May need new acquisitions. –Configured tunnels may also be used.

USGv6-v1.0 Profile From the Acquisitions perspective: –The profile is part of a dialogue between Users and Vendors, representing User expectation of Vendor provision. –The Node Requirements Table details the technical expectations. –The Capabilities Checklist summarizes them. This can be, and is expected to be, tailored by Agencies for specific acquisitions.

Capabilities Checklist/Product Specs USGv6 Profile Users Vendors Test Labs V6 ProductTest Results Vendor’s SDOC USGv6-v1.0 Testing Program Corroboration

USGv6-v1.0 Testing Program What you as a buyer are looking for is a Vendor’s SDOC (Suppliers Declaration of Conformity). You can compare these against your tailored (or generic) Capabilities Checklist. This helps determine who supports most closely your stated requirements. Vendors are required to test their products in accredited test labs. –For Conformance and Interoperability, –And report results in the SDOC. –Agencies can corroborate SDOC claims with the relevant test lab. –The USGv6 testing website identifies accredited test labs. Each lab lists the products tested. See: We can discuss this in greater detail at subsequent meetings and over the mailgroup: