1. Introduction to IPv6 Working Connections Winter Retreat Frisco, TX Sam Bowne City College San Francisco Twitter: @sambowne Web: samsclass.info Last modified 6 am 12-12-10

2. iClicker Survey

3. What do you know now about IPv6? A. Never heard of it B. Heard of it but never used it C. I understand the address format D. I browse the Web with IPv6 E. I have deployed IPv6 on servers, routers, etc.

4. What plans do you have to use IPv6? A. I don't care about IPv6 at all B. I'll implement IPv6, but not for years C. Planning to implement it within a year D. Planning to implement it sooner than a year E. I am already using IPv6

5. Motivation Last modified 10 am 12-9-10

6. IPv4 Exhaustion TheEndOfTheWorld!

7. IPv4 Addresses: 32 Bits IPv4 address: 192.168.1.10 IPv4 address: 192.168.1.10 Four bytes Four bytes In Binary: In Binary: 11000000 10101000 00000001 00001010 11000000 10101000 00000001 00001010 2^32 total addresses 2^32 total addresses 4 billion 4 billion

8. IPv4 Address Depletion Link Baythreat-8 Link Baythreat-8

9. IPv4 Address Space 0123456789101112131415 16171819202122232425262728293031 32333435363738394041424344454647 48495051525354555657585960616263 64656667686970717273747576777879 80818283848586878889909192939495 96979899100101102103104105106107108109110111 112113114115116117118119120121122123124125126127 128129130131132133134135136137138139140141142143 144145146147148149150151152153154155156157158159 160161162163164165166167168169170171172173174175 176177178179180181182183184185186187188189190191 192193194195196197198199200201202203204205206207 208209210211212213214215216217218219220221222223 224225226227228229230231232233234235236237238239 240241242243244245246247248249250251252253254255 Class A Class B Class C Class D & E

10. Jan 21, 2010 Available Blocks: 24 0123456789101112131415 16171819202122232425262728293031 32333435363738394041424344454647 48495051525354555657585960616263 64656667686970717273747576777879 80818283848586878889909192939495 96979899100101102103104105106107108109110111 112113114115116117118119120121122123124125126127 128129130131132133134135136137138139140141142143 144145146147148149150151152153154155156157158159 160161162163164165166167168169170171172173174175 176177178179180181182183184185186187188189190191 192193194195196197198199200201202203204205206207 208209210211212213214215216217218219220221222223 224225226227228229230231232233234235236237238239 240241242243244245246247248249250251252253254255

11. April 10, 2010 Available Blocks: 20 0123456789101112131415 16171819202122232425262728293031 32333435363738394041424344454647 48495051525354555657585960616263 64656667686970717273747576777879 80818283848586878889909192939495 96979899100101102103104105106107108109110111 112113114115116117118119120121122123124125126127 128129130131132133134135136137138139140141142143 144145146147148149150151152153154155156157158159 160161162163164165166167168169170171172173174175 176177178179180181182183184185186187188189190191 192193194195196197198199200201202203204205206207 208209210211212213214215216217218219220221222223 224225226227228229230231232233234235236237238239 240241242243244245246247248249250251252253254255

12. May 8, 2010 Available Blocks: 13 0123456789101112131415 16171819202122232425262728293031 32333435363738394041424344454647 48495051525354555657585960616263 64656667686970717273747576777879 80818283848586878889909192939495 96979899100101102103104105106107108109110111 112113114115116117118119120121122123124125126127 128129130131132133134135136137138139140141142143 144145146147148149150151152153154155156157158159 160161162163164165166167168169170171172173174175 176177178179180181182183184185186187188189190191 192193194195196197198199200201202203204205206207 208209210211212213214215216217218219220221222223 224225226227228229230231232233234235236237238239 240241242243244245246247248249250251252253254255

13. Nov 30, 2010 Available Blocks: 7 0123456789101112131415 16171819202122232425262728293031 32333435363738394041424344454647 48495051525354555657585960616263 64656667686970717273747576777879 80818283848586878889909192939495 96979899100101102103104105106107108109110111 112113114115116117118119120121122123124125126127 128129130131132133134135136137138139140141142143 144145146147148149150151152153154155156157158159 160161162163164165166167168169170171172173174175 176177178179180181182183184185186187188189190191 192193194195196197198199200201202203204205206207 208209210211212213214215216217218219220221222223 224225226227228229230231232233234235236237238239 240241242243244245246247248249250251252253254255

14. 2011: The End Link BayThreat-7 Link BayThreat-7

15. Internet Registry Regions http://www.iana.org/numbers/

16. No Reprieve IANA will not re-purpose class D or E addresses for general use People who ask for IPv4 addresses after exhaustion will not get them Hoarding, scalping, and simple direct sale of used IPv4 addresses will begin soon

17. IPv6 The Solution

18. IPv6 Addresses: 128 Bits IPv6 address IPv6 address 2001:05c0:1000:000b:0000:0000:0000:66fb 2001:05c0:1000:000b:0000:0000:0000:66fb Omitting unnecessary zeroes; Omitting unnecessary zeroes; 2001:5c0:1000:b::66fb 2001:5c0:1000:b::66fb Eight fields, each 16 bits long Eight fields, each 16 bits long 4 hexadecimal characters 4 hexadecimal characters 2^128 total addresses 2^128 total addresses 340 billion billion billion billion 340 billion billion billion billion Enough for a while Enough for a while

19. Link BayThreat-10 Link BayThreat-10

20. Federal IPv6 Transition Timeline From Cisco (link BayThreat-11)

21. Executive Summary Thus Far

22. IPv4 is Full Image from zinyaw.files.wordpress.com

24. Migration to IPv6

25. Methods of IPv6 Migration Ignore IPv6: Stay on IPv4-only Gateways: Devices that convert IPv6 to IPv4 Tunnel: IPv6 over IPv4 Dual-Stack: IPv4 and IPv6 together Nirvana: IPv6-only

26. IPv6 Tunnels Fast and easy to set up--best for n00bs Not the best for security or performance Free IPv4-to-IPv6 Tunnels Gogo6.com Sixxs.net Tunnelbroker.com

27. GoGo6 Easiest

28. Demonstration

29. Companies Already on IPv6 ipv6.google.com ipv6.google.com www.v6.facebook.com www.v6.facebook.com comcast6.net comcast6.net ipv6.cnn.com ipv6.cnn.com More at link Baythreat-12 More at link Baythreat-12

30. IPv6 Certifications Fun, realistic projects He.net Link BayThreat-13

31. IPv6 Sages As of 12-9-10 Link BayThreat-18

32. IPv6 Sages at CCSF 22 IPv6 Sages at CCSF so far (12-9-10) Link BayThreat-19

33. T-Shirt #1 motivator for IPv6 Certification #1 motivator for IPv6 Certification Link Baythreat-9 Link Baythreat-9

34. Security Problems

35. Used by Ethernet

36. Privacy Risk Anyone who has your IP address also has your MAC address! There is a "Privacy Extensions" technique to avoid this, enabled by default in Vista and Windows 7

37. ICMPv6 Required for all networks Cannot be blocked Replaces ARP "Neighbor Discovery" is trivial

38. THC-IPv6 Hacker's Toolkit Runs fine on Ubuntu, even in VMware on Windows 7 Instructions: link BayThreat-14

39. Other Risks Many security appliances are not ready for IPv6, so it often bypasses them Torrents run over IPv6 Link BayThreat-15 Some VPN appliances are not ready, so IPv6 connections must bypass them Packet Amplification Attacks Routing Header Zero Ping-pong Links BayThreat-16 and 17

40. iClicker Survey

41. What do you think of Wikileaks? A. It's heroic and improving the world B. It does more good than harm C. It's unimportant D. It does more harm than good E. It's awful and must be eliminated

42. What do you think of Anonymous? A. It's heroic and improving the world B. It does more good than harm C. It's unimportant D. It does more harm than good E. It's awful and must be eliminated

43. What plans do you have to use IPv6? A. I don't care about IPv6 at all B. I'll implement IPv6, but not for years C. Planning to implement it within a year D. Planning to implement it sooner than a year E. I am already using IPv6

44. Contact Sam Bowne Sam Bowne Computer Networking and Information Technology, City College San Francisco Computer Networking and Information Technology, City College San Francisco Email: sbowne@ccsf.edu Email: sbowne@ccsf.edu Twitter: @sambowne Twitter: @sambowne This whole talk and all the referenced links are on my Web site: samsclass.info This whole talk and all the referenced links are on my Web site: samsclass.info In the "" section In the " Winter Break 2010-2011 Events " section

45. Class Overview

46. Projects > Lectures Lectures: 25% Lectures: 25% Hands-on projects: 75% Hands-on projects: 75% Every student should be a Certified IPv6 Guru by the end of the class Every student should be a Certified IPv6 Guru by the end of the class If you have more time, and Cisco skills, you can do IPv6 dynamic routing If you have more time, and Cisco skills, you can do IPv6 dynamic routing In Packet Tracer In Packet Tracer On real routers On real routers

47. Hurricane Electric IPv6 Certification (Part 1) 1. Registering at Hurricane Electric 2. Newb Test Demonstrate basic knowledge of IPv6 Demonstrate basic knowledge of IPv6 Become an IPv6 Newbie Become an IPv6 Newbie 3. Connecting as an IPv6 Client with the Gogo6 Tunnel IPv6 over UDP over IPv4 IPv6 over UDP over IPv4 Connect to a Web server as a client over IPv6 Connect to a Web server as a client over IPv6 Become an IPv6 Explorer Become an IPv6 Explorer

48. Hurricane Electric IPv6 Certification (Part 1) 4. IPv6 Web Server You need to buy a domain name from GoDaddy ($2.17) You need to buy a domain name from GoDaddy ($2.17) Apache will NOT work on Windows--use IIS instead Apache will NOT work on Windows--use IIS instead DNS: Creating an AAAA Record DNS: Creating an AAAA Record Become an IPv6 Enthusiast Become an IPv6 Enthusiast

49. Hurricane Electric IPv6 Certification (Part 1) 5. IPv6 Email Server Use the Apache James Java SMTP server Use the Apache James Java SMTP server Adding an MX Record to your DNS Zone Adding an MX Record to your DNS Zone Installing the Thunderbird Email Client Installing the Thunderbird Email Client Becoming an IPv6 Administrator Becoming an IPv6 Administrator

50. Hurricane Electric IPv6 Certification (Part 2) DNS Configurations Reverse DNS Servers Reverse DNS Servers Routing Advertisements Routing Advertisements Getting your own public IPv6 address block Getting your own public IPv6 address block Forward DNS Zone at Hurricane Electric Forward DNS Zone at Hurricane Electric Reverse DNS Zone at Hurricane Electric Reverse DNS Zone at Hurricane Electric Authoritative DNS Servers Authoritative DNS Servers Passing the Reverse DNS Test Passing the Reverse DNS Test

51. Hurricane Electric IPv6 Certification (Part 2) Becoming an IPv6 Professional Becoming an IPv6 Professional Becoming an IPv6 Guru Becoming an IPv6 Guru Becoming an IPv6 Sage Becoming an IPv6 Sage Get the T-Shirt Get the T-Shirt Fame, Fortune, Glory Fame, Fortune, Glory