1. Workshop: IPv6 with Packet Tracer José Esquivel (joesquiv@cisco.com), Technical Manager- Latin America & the Caribbean joesquiv@cisco.com

2. © 2010 Cisco and/or its affiliates. All rights reserved. 2 Win7 in ITE – March 2011 Myths and Truths of IPv6 – Basic Concepts Understand the IPv6 addressing Apply the most comon techniques used for IPv6 host address assignment using Packet Tracer. Configure static and default routes on IPv6 Basic RIPng configuration on Packet Tracer Understand transition mechanisms from IPv4 to IPv6 Do an example of IPv4 to IPv6 transition

3. © 2010 Cisco and/or its affiliates. All rights reserved. 3 Win7 in ITE – March 2011

4. © 2010 Cisco and/or its affiliates. All rights reserved. 4 Win7 in ITE – March 2011 This is perhaps one of the biggest myths around IPv6 by the fact that most people can still connect to the Internet without IPv6 – at the moment. But IPv6 is obviously an option when an organization is running out of IPv4 address space. But more important IPv6 is a generator of opportunity and a platform for innovation.

5. © 2010 Cisco and/or its affiliates. All rights reserved. 5 Win7 in ITE – March 2011

6. © 2010 Cisco and/or its affiliates. All rights reserved. 6 Win7 in ITE – March 2011 Most of the registry organizations still have IP blocks available for the next few years but the APNIC ran out of blocks since last year IPv4 Address Report This report generated at 31-Aug-2011 07:59 UTC.  Source: http://www.potaroo.net/tools/ipv4/index.html

7. © 2010 Cisco and/or its affiliates. All rights reserved. 7 Win7 in ITE – March 2011  Source: http://www.potaroo.net/tools/ipv4/index.html

8. © 2010 Cisco and/or its affiliates. All rights reserved. 8 Win7 in ITE – March 2011 Address exhaustion is the most important reason for changing from a 32 bit to a 128 bit address. We need to also take into consideration the exponential growth of the routing table entries on the backbone Internet routers  Source: http://www.potaroo.net/tools/ipv4/index.html

9. © 2010 Cisco and/or its affiliates. All rights reserved. 9 Win7 in ITE – March 2011

10. © 2010 Cisco and/or its affiliates. All rights reserved. 10 Win7 in ITE – March 2011 There is not such protocol named IPv5. IETF assign numbers to all the protocols that are being develop for the Internet Regular IP is the protocol ID number 4 When a group of engineers and researchers start thinking in a alternative protocol for IP, this new protocol was assign the ID 6 because ID 5 was already assign to other protocol.

11. © 2010 Cisco and/or its affiliates. All rights reserved. 11 Win7 in ITE – March 2011

12. © 2010 Cisco and/or its affiliates. All rights reserved. 12 Win7 in ITE – March 2011 IPv4 has similar header elements to IPv6, intended to be used in similar ways The claim that IPv6 QoS is better than that in IPv4 is a myth.

13. © 2010 Cisco and/or its affiliates. All rights reserved. 13 Win7 in ITE – March 2011

14. © 2010 Cisco and/or its affiliates. All rights reserved. 14 Win7 in ITE – March 2011 The main security mechanism built into IPv6 is IPsec. IPsec is not new - it can be used with IPv4 as well, and this has been possible for years now. It is truth that IPsec is mandatory in some cases, but it is not automatically configured. IPsec in IPv6 needs a careful implementation and well educated network staff

15. © 2010 Cisco and/or its affiliates. All rights reserved. 15 Win7 in ITE – March 2011

16. © 2010 Cisco and/or its affiliates. All rights reserved. 16 Win7 in ITE – March 2011 NAT is not a problem-free solution. NAT introduces performance loss on networks NAT leads to complex solutions which are complex solely because of the requirement to work with NAT The flat address space that IPv6 offers will allow us to develop new options that will drive innovation.

17. © 2010 Cisco and/or its affiliates. All rights reserved. 17 Win7 in ITE – March 2011

18. © 2010 Cisco and/or its affiliates. All rights reserved. 18 Win7 in ITE – March 2011 This is a myth based on a myth - the real myth is that NAT increases security. NAT does not offer any meaningful security to networks. NAT exists to overcome a shortage of IPv4 address but do not provide real security to the hosts behind NAT.

19. © 2010 Cisco and/or its affiliates. All rights reserved. 19 Win7 in ITE – March 2011

20. © 2010 Cisco and/or its affiliates. All rights reserved. 20 Win7 in ITE – March 2011 In IPv6 there are only Unicast, Link local and Multicast address Multicast replaces the need of broadcasts as we use to have in IPv4.

21. © 2010 Cisco and/or its affiliates. All rights reserved. 21 Win7 in ITE – March 2011

22. © 2010 Cisco and/or its affiliates. All rights reserved. 22 Win7 in ITE – March 2011 It is truth that is different, but is not more complicated IPv6 is far more similar to IPv4 than it is different. There are some areas where IPv6 is greatly simpler: Autoconfiguration of IP address Multicast Subdivide IPv6 address block for address planning in a network

23. © 2010 Cisco and/or its affiliates. All rights reserved. 23 Win7 in ITE – March 2011

24. © 2010 Cisco and/or its affiliates. All rights reserved. 24 Win7 in ITE – March 2011 Format x:x:x:x:x:x:x:x, where each x represents a 16 bit blocks represented in hexadecimal format Zeros on the left of this blocks can be deleted Successive zeros can be represented with a pair of colons (::) once in the address Examples 2031:0000:130F:0000:0000:09C0:876A:130B Can be represented as 2031:0:130F::9C0:876A:130B But is not correct to do this: 2031::130F::9C0:876A:130B

25. © 2010 Cisco and/or its affiliates. All rights reserved. 25 Win7 in ITE – March 2011 2031:0000:130F:0000:0000:09C0:876A:130B 2031: 0:130F: 0: 0: 9C0:876A:130B 2031:0:130F::9C0:876A:130B

26. © 2010 Cisco and/or its affiliates. All rights reserved. 26 Win7 in ITE – March 2011 Address TypeDescriptionTopology Unicast “One to One” An address destined for a single interface. A packet sent to a unicast address is delivered to the interface identified by that address. Multicast “One to Many” An address for a set of interfaces (typically belonging to different nodes). A packet sent to a multicast address will be delivered to all interfaces identified by that address. Anycast “One to Nearest” (Allocated from Unicast) An address for a set of interfaces. In most cases these interfaces belong to different nodes. created “automatically” when a single unicast address is assigned to more than one interface. A packet sent to an anycast address is delivered to the closest interface as determined by the IGP.

27. © 2010 Cisco and/or its affiliates. All rights reserved. 27 Win7 in ITE – March 2011 An IPv6 address consists of two parts: A subnet prefix An interface ID IPv6 = 128 bits 11111111.11111111.11111111.11111111  Subnet prefix  Interface ID

28. © 2010 Cisco and/or its affiliates. All rights reserved. 28 Win7 in ITE – March 2011 Prefix Hex ValueUse 0000 to 00FFUnspecified Loopback IPv4-compatible 0100 to 01FFUnassigned (0.38 % of IPv6 space) 0200 to 03FFNSAP Network Service AP) 0400 to 1FFF Unassigned (~11% of IPv6 space) 2000 to 3FFFAggregatable global unicast (12.5%) 4000 to FE7F (Huge) Unassigned (~75% of IPv6 space) FE80 to FEBFLink-local FC00 to FCFFUnique-local FF00 to FFFFMulticast Note: IPv6 Internet uses 2001::/3 which is < 2% of IPv6 address space

29. IPv6 Intro – Part 2 29 © 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public IPv6 Global Unicast Address  The global unicast address consists of: A 48-bit global routing prefix A 16-bit subnet ID A 64-bit interface ID Global Routing Prefix Subnet ID Interface ID 2001 0010 000821B:D5FF:FE5B:A408 /24 Registry /32 ISP Prefix /48 Site Prefix /64 Subnet Prefix

30. © 2010 Cisco and/or its affiliates. All rights reserved. 30 Win7 in ITE – March 2011

31. © 2010 Cisco and/or its affiliates. All rights reserved. 31 Win7 in ITE – March 2011 IPv6 AddressDescription ::/0 All networks and used when specifying a default static route. It is equivalent to the IPv4 quad-zero (0.0.0.0) ::/128 Unspecified address and is initially assigned to a host when it first resolves its local link address ::1/128 Loopback address of local host Equivalent to 127.0.0.1 in IPv4 FE80::/10 Link-local unicast address Similar to the Windows autoconfiguration IP address of 169.254.x.x FF00::/8 Multicast addresses All other addressesGlobal unicast address

32. © 2010 Cisco and/or its affiliates. All rights reserved. 32 Win7 in ITE – March 2011 Link local addresses have a limited scope to the local network segment. Usually dynamic assigned using the prefix FF80::/10 It is used for automatic addressing, neighbor discovery and routing updates Could be used to communicate several devices that do not need a global address. Example: telemetry Local link addresses are not routable

33. © 2010 Cisco and/or its affiliates. All rights reserved. 33 Win7 in ITE – March 2011 IPv6 Unicast Address Assignment Link-local (FE80::/10) Address Assignment Static IPv6 Address Dynamic Automatically created (EUI-64 format) if a global unicast IPv6 address is configured Global Routable Address Assignment Static IPv6 Address Dynamic Stateless Autoconfiguration DHCPv6

34. © 2010 Cisco and/or its affiliates. All rights reserved. 34 Win7 in ITE – March 2011 This format extends the MAC address from 48 to 64 bits by inserting “FFFE” at the middle of the MAC address.  48-bit MAC Address  64-bit IPv6 EUI-64 Interface ID

35. © 2010 Cisco and/or its affiliates. All rights reserved. 35 Win7 in ITE – March 2011

36. © 2010 Cisco and/or its affiliates. All rights reserved. 36 Win7 in ITE – March 2011 URL http://cisco.webex.com/meet/joesquiv Select Files (Archivos) and download the PT files on the folder IPv6 Workshop

37. © 2010 Cisco and/or its affiliates. All rights reserved. 37 Win7 in ITE – March 2011 The command ipv6 unicast-routing is required to enable IPv6 on the router.

38. © 2010 Cisco and/or its affiliates. All rights reserved. 38 Win7 in ITE – March 2011

39. 39 © 2007 – 2010, Cisco Systems, Inc. All rights reserved. Cisco Public IPv6 Co-existence Solutions

40. © 2010 Cisco and/or its affiliates. All rights reserved. 40 Win7 in ITE – March 2011  R2  10.10.10.1  R1  R1(config)# interface fa0/0  R1(config-if)# ip address 10.10.10.1 255.255.255.0  R1(config-if)# ipv6 address 2001:12::1/64  R1(config-if)# ^Z  R1#  10.10.10.2  2001:12::1/64  2001:12::2/64

41. © 2010 Cisco and/or its affiliates. All rights reserved. 41 Win7 in ITE – March 2011 IPv4 is the transport protocol IPv6 is encapsulated in a IPv4 packet Is used whenever there is a IPv4 native network that is not transitioning to IPv6.

42. © 2010 Cisco and/or its affiliates. All rights reserved. 42 Win7 in ITE – March 2011 Translation of protocols This should be used as the last option

43. © 2010 Cisco and/or its affiliates. All rights reserved. 43 Win7 in ITE – March 2011 URL http://cisco.webex.com/meet/joesquiv Select Files (Archivos) and download the PT files on the folder IPv6 Workshop

44. Thank you