1. IPv6 Advantages Ted Peng ted_peng@email.syscom.com.tw

2. IPv6 Forum May 2000 Agenda  IPv4 - Limiting factors  IPv6 Base Technology  The power of IPv6 Addressing Addressing Management Management Security Security Other IPv6 goodies Other IPv6 goodies  Summary

3. IPv4 - Limiting factors

4. IPv6 Forum May 2000 IPv4 issues (1)  Out of Internet addresses Address Shortages Address Shortages Limits Internet growth for existing users Limits Internet growth for existing users Hinders use of the Internet for new users Hinders use of the Internet for new users Internet Routing today is inefficient Internet Routing today is inefficient Forces users to use NAT Forces users to use NAT  System Management Costs Managing addresses manually is costly Managing addresses manually is costly –and error-prone Inconsistent level of DHCP support in clients Inconsistent level of DHCP support in clients –Lowest common denominator wins Networks are having to Renumber Networks are having to Renumber –Caused by address space shortage –When choosing a more competitive ISP Mobile IP Mobile IP –Complicated to manage

5. IPv6 Forum May 2000 IPv4 issues (2)  Optional Security IPv4 was never designed to be secure IPv4 was never designed to be secure –Originally designed for an isolated military network –Then adapted for a public educational & research network IPv4 security is retrofitted and many solutions defined IPv4 security is retrofitted and many solutions defined –SSL, SHTTP, IPSEC v4 –No ONE standard Security features are optional Security features are optional –CANNOT count on their availability  Support for 21st century applications New applications are more demanding, they will require New applications are more demanding, they will require Guaranteed on-time delivery ; Guaranteed availability of bandwidth; Guaranteed security Difficult to add to the base IPv4 technology; adding it on is very high overhead Difficult to add to the base IPv4 technology; adding it on is very high overhead

6. IPv6 Forum May 2000 Will IPv4 last forever?  How long can we ignore these problems? IPv4 address space will run out IPv4 address space will run out There is an engineering limit to the amount of retrofitting that can be applied to IPv4 There is an engineering limit to the amount of retrofitting that can be applied to IPv4  A natural evolution from IPv4 is required Designed with extensibility and scalability in mind Designed with extensibility and scalability in mind

7. IPv6 Base Technology Wins

8. IPv6 Forum May 2000 0 bits31 VerIHLTotal Length IdentifierFlagsFragment Offset 32 bit Source Address 32 bit Destination Address 482416 Service Type Options and Padding Time to LiveHeader ChecksumProtocol RemovedChanged IPv4 Header 20 octets + options : 13 fields, including 3 flag bits

9. IPv6 Forum May 2000 031 VersionClassFlow Label Payload LengthNext HeaderHop Limit 128 bit Source Address 128 bit Destination Address 4122416 IPv6 Header 40 Octets, 8 fields

10. IPv6 Forum May 2000 IPv6 Header Next = TCP TCP Header IPv6 Header Next = Routing TCP HeaderRouting Hdr Next = TCP IPv6 Header Next = Security TCP HeaderSecurity Hdr Next = Frag Application Data Fragment Hdr Next = TCP Data Frag IPv6 Extension Headers  IP options have been moved to a set of optional Extension Headers  Extension Headers are chained together

11. IPv6 Forum May 2000 Performance Wins  Fixed Size IPv6 Header Unlike IPv4 - Options not limited at 40 bytes Unlike IPv4 - Options not limited at 40 bytes  Fewer fields in basic header faster processing of basic packets faster processing of basic packets no checksum no checksum  64 Bit Alignment Header/Options  Efficient option processing option fields processed only when the option present option fields processed only when the option present Processing of most options limited performed only at destination Processing of most options limited performed only at destination  No Fragmentation in the network More router cycles available for forwarding packets More router cycles available for forwarding packets

12. The power of IPv6 Addressing

13. IPv6 Forum May 2000 IPv6 - Addressing Model  Addresses are assigned to interfaces No change from IPv4 Model No change from IPv4 Model  Interface can have multiple addresses  Addresses have scope Link Local Link Local Site Local Site Local Global Global  Addresses have lifetime Valid and Preferred lifetime Valid and Preferred lifetime Link-Local Site-LocalGlobal

14. IPv6 Forum May 2000 3FFE:0301:DEC1:: Prefix 0A00:2BFF:FE36:701E Interface ID Prefix Representation 3FFE:0301:DEC1::/64 IPv6 Address Structure  Formed from a combination of the:  Separation of “who you are” from “where you are connected to” Routing Prefix Routing Prefix –Routing Topology Node Identification Node Identification –Interface Identifier

15. The power of IPv6 Management

16. IPv6 Forum May 2000 Network Management  Auto configuration Plug-and-Play. Plug-and-Play. Automate network address renumbering Automate network address renumbering DHCP support is mandated DHCP support is mandated –Every host can download their network configurations from a server at startup time Address changes are automated Address changes are automated –Stateless ; –Stateless ; Routers advertise prefixes that identify the subnet(s) associated with a link ; Hosts generate an "interface token" that uniquely identifies an interface on a subnet ; An address is formed by combining the two. –Stateful ; –Stateful ; Clients obtain address and / or configuration from a DHCP server ; DHCP server maintains the database and has a tight control over address assignments.

17. IPv6 Forum May 2000 Automatic Renumbering  Renumbering IPv6 Hosts is easy Add a new Prefix to the Router Add a new Prefix to the Router Reduce the Lifetime of the old prefix Reduce the Lifetime of the old prefix As nodes depreciate the old prefix the new Prefix will start to be used for new connections As nodes depreciate the old prefix the new Prefix will start to be used for new connections  Renumbering in IPv6 is designed to happen!  An end of ISP “lock in”! Improved competition Improved competition

18. IPv6 Forum May 2000 Putting the IT Director back in control  IPv6 Address Scope Some addresses are GLOBAL Some addresses are GLOBAL Others are Link or Site LOCAL Others are Link or Site LOCAL Addressing Plan also controls network access Addressing Plan also controls network access  Configuration Policy Control Stateless Stateless Stateful (DHCPv6) Stateful (DHCPv6)  Routers Dictate the Configuration Policy Router Managers are “in control” of the network Router Managers are “in control” of the network Routers also dictate MTU size for the Link Routers also dictate MTU size for the Link

19. IPv6 Forum May 2000 Mobile IPv6  IPv6 Mobility is based on core features of IPv6 The base IPv6 was designed to support Mobility The base IPv6 was designed to support Mobility Mobility is not an “Add-on” features Mobility is not an “Add-on” features –All IPv6 Networks are IPv6-Mobile Ready –All IPv6 nodes are IPv6-Mobile Ready –All IPv6 LANs / Subnets are IPv6 Mobile Ready  IPv6 Neighbor Discovery and Address Autoconfiguration allow hosts to operate in any location without any special support  No single point of failure (Home Agent)  More Scalable : Better Performance Less traffic through Home Link Less traffic through Home Link Less redirection / re-routing (Traffic Optimisation) Less redirection / re-routing (Traffic Optimisation)

20. The power of IPv6 Security

21. IPv6 Forum May 2000 IPv6 - Mandates Security  Security features are standardized and mandated All implementations must offer them All implementations must offer them No Change to applications No Change to applications  Authentication (Packet signing)  Encryption (Data Confidentiality)  End-to-End security Model Protects DHCP Protects DHCP Protects DNS Protects DNS Protects IPv6 Mobility Protects IPv6 Mobility Protects End-to-End traffic over IPv4 networks Protects End-to-End traffic over IPv4 networks

22. IPv6 Forum May 2000 Enables Next Generation Applications  IPv6 Flow Labels provide Support for Data Flows Allows Packet Prioritizing Allows Packet Prioritizing Ensures that high priority traffic (voice, data, real-time manufacturing, etc.) is not interrupted by less critical data Ensures that high priority traffic (voice, data, real-time manufacturing, etc.) is not interrupted by less critical data  IPv6 Multicast & Anycast Multicast delivers data simultaneously to all hosts that sign up to receive it Multicast delivers data simultaneously to all hosts that sign up to receive it –Makes conferencing more efficient Anycast delivers data to one host in the group Anycast delivers data to one host in the group –Could be used to implement fault tolerant client/server applications more efficiently

23. IPv6 Forum May 2000 IPv6 Features and Advantages  Larger Address Space  Efficient and Extensible IP datagram  Efficient Route Computation and Aggregation  Improved Host and Router Discovery  Mandated New Stateless and Stateful Address Autoconfiguration  Mandated Security for IP datagrams  Easy renumbering

24. IPv6 Transition Scenarios Getting Started with IPv6 `

25. IPv6 Forum May 2000 Outline  ASCI & IPv6  Review of Transition Mechanisms  Planning for IPv6  Transition Scenario Examples  Summary  Information Resources

26. IPv6 Forum May 2000

52. Service Pr Service Providers are Key  Starting Edge upgrades (only) enable IPv6 service offerings` IPv4 Enterprise IPv6 Enterprise Service Provider MPLS Backbone Translating Gateway MPLS LSPs PE Router CE Router CE Router IPv6 over MPLS:- IPv6 Enterprise Service Provider IPv4 Backbone Translating Gateways IPv6 over IPv4 Internet:- Mobile Data Translating Gateways

53. IPv6 Forum May 2000 Service Providers & Phases of Integration IPv6 over MPLS  Why?! Market has voted, Multi-Protocol Label Switching (MPLS) - backbone technology of choice Market has voted, Multi-Protocol Label Switching (MPLS) - backbone technology of choice IPv6 Control Plane, MPLS Data Plane means No Forklifts IPv6 Control Plane, MPLS Data Plane means No Forklifts Leverages VPN Support - scalable, customer-by-customer, site-by-site. Leverages VPN Support - scalable, customer-by-customer, site-by-site. Traffic Engineering capabilities - e.g. route via translating gateways Traffic Engineering capabilities - e.g. route via translating gateways Services Transparency - e.g. Provisioning, QoS, Security. Services Transparency - e.g. Provisioning, QoS, Security.  Providers can therefore readily offer IPv6 Addresses while preserving investment

54. IPv6 Forum May 2000 The The Cisco IOS IPv6 Roadmap  IPv6 Phase I - Currently in Beta, FCS IOS 12.1(5)T (October 2000) (October 2000) RIPv6, Multi-protocol BGP, ICMPv6, ND, Tunnel Support, 6to4, 6over4, Ping, Trace, Telnet, FTP, Access Lists etc. RIPv6, Multi-protocol BGP, ICMPv6, ND, Tunnel Support, 6to4, 6over4, Ping, Trace, Telnet, FTP, Access Lists etc.  IPv6 Phase II CEFv6, IPv6 over MPLS, Protocol Translation IPv6 IPv4, Additional Routing Protocols (e.g. i/IS-IS), DiffServ etc. CEFv6, IPv6 over MPLS, Protocol Translation IPv6 IPv4, Additional Routing Protocols (e.g. i/IS-IS), DiffServ etc.  IPv6 Phase III Mobility, IP Multicast, VoIPv6, Security etc. Mobility, IP Multicast, VoIPv6, Security etc.  Hardware support designed in for future platforms

55. BGP Multiprotocol Extensions

56. IPv6 Forum May 2000 Summary  New BGP optional attributes: MP_REACH_NLRI MP_REACH_NLRI MP_UNREACH_NLRI MP_UNREACH_NLRI  Protocol independent NEXT_HOP and NLRI attributes.  Subnetwork Point of Attachment (SNPA) for the NEXT_HOP.

57. IPv6 Forum May 2000 MP_REACH_NLRI Address Family IdentifierSub-AFINEXTHOP len NEXTHOP Address Num SNPAs1st SNPA len1st SNPA... Remaining SNPAs... NLRI lengthNLRI information...

58. IPv6 Forum May 2000 IPv6 Considerations  Rules for constructing the NEXTHOP attribute: When two peers share a common subnet the NEXTHOP information is formed by a global address and a link local address. When two peers share a common subnet the NEXTHOP information is formed by a global address and a link local address. Redirects in IPv6 are restricted to the usage of link local addresses. Redirects in IPv6 are restricted to the usage of link local addresses. Redistribution from and to protocols that use link local nexthops only (like RIPng). Redistribution from and to protocols that use link local nexthops only (like RIPng).

59. IPv6 Forum May 2000 Routing Information  Independent operation. One RIB per protocol. One RIB per protocol. –e.g. IPv6 has its own BGP table. Distinct policies per protocol. Distinct policies per protocol.  Peering sessions can be shared when the topology is congruent.

60. IPv6 Forum May 2000 6bone Deployment IPv6 over IPv4 Tunnel TCP over IPv6 peering session  Small number of BGP speaking routers (~20-30).  Highly meshed topology.

61. Home Networking with IPv6

62. IPv6 Forum May 2000 Why Home Networking?  43.1 million U.S. homes have a PC 9.4 million have 2 PCs 9.4 million have 2 PCs 3 million have 3 or more PCs 3 million have 3 or more PCs  Telecommuting is on the rise 30% growth from 1995 to 1997 30% growth from 1995 to 1997 40% growth in 1998 40% growth in 1998  13 million households contain a business

63. IPv6 Forum May 2000 Why Home Networking?  Smart devices PDAs PDAs Phones Phones Set top boxes Set top boxes  In 1999, non-PC CPU devices outsold PCs  IP is the means for devices to communicate!

64. IPv6 Forum May 2000 Home Networking Goals  Simple to setup Plug-and-play Plug-and-play Quick Quick  Maintenance-free  Sophisticated functionality in a simple system  IT SHOULD JUST WORK!

65. IPv6 Forum May 2000 Home Networking Today

66. IPv6 Forum May 2000 Home Networking Tomorrow

67. IPv6 Forum May 2000 Limitations  IPv4 cumbersome to put on low memory devices (cell phone, PDA, etc.)  What about IPv4-capable devices? Usually requires NAT Usually requires NAT Not easy to setup and maintain Not easy to setup and maintain Not quick Not quick Not simple! Not simple!

68. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

69. IPv6 Forum May 2000 Multitudes of Media  Ethernet  PPP  Wireless  Cable Data  IEEE 1394

70. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

71. IPv6 Forum May 2000 IPv6 Stateless Autoconfiguration  Local communication with no intervention Generate link-local address Generate link-local address Perform Duplicate Address Detection Perform Duplicate Address Detection Start sending data Start sending data  Global communication with no stateful server Example later… Example later…  Facilitate site renumbering

72. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

73. IPv6 Forum May 2000 Multihoming  Adds reliability Multiple routes in/out of network Multiple routes in/out of network  Nodes generate a global address for each prefix heard  OS or IP stack determines which address to use

74. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

75. IPv6 Forum May 2000 Neighbor Discovery  Finds adjacent nodes on shared link  Learns optimal gateway  Performs address resolution  Aids autoconfiguration  Announces addressing changes

76. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

77. IPv6 Forum May 2000 Security  IP Security support built-in Authentication header Authentication header Encapsulated Security Payload header Encapsulated Security Payload header  Privacy extensions to Autoconfiguration Prevents mapping of addresses to particular nodes Prevents mapping of addresses to particular nodes

78. IPv6 Forum May 2000 What IPv6 Offers  Media Flexibility  Stateless Autoconfiguration  Multihoming  Neighbor Discovery  Built-in Security  Mobility

79. IPv6 Forum May 2000 Mobility  Wireless mobility 802.11 wireless LAN 802.11 wireless LAN Bluetooth (radio technology) Bluetooth (radio technology) Infrared Infrared  Roaming Laptop plugged into remote network Laptop plugged into remote network PDA accessing via satellite PDA accessing via satellite

80. IPv6 Forum May 2000 IPv6 Home Networking Example  In IPv4 Get single IPv4 address from provider Get single IPv4 address from provider May need to configure all devices : May need to configure all devices : –Private address –Default gateway Setup and configure NAT/router Setup and configure NAT/router –Address mappings –Application Layer Gateways (ALGs) –Needs global IPv4 address from provider

81. IPv6 Forum May 2000 IPv6 Home Networking Example  In IPv6 Get IPv6 prefix from provider Get IPv6 prefix from provider Add prefix to gateway/router Add prefix to gateway/router

82. IPv6 Forum May 2000 Example IPv6 Prefix RA w/ prefix Global IPv6 Address

83. IPv6 Forum May 2000 IPv6 Home Networking  Simple Plug-and-play Plug-and-play  Quick No host configuration No host configuration No NATs or private addressing No NATs or private addressing  No network maintenance  Regain end-to-end transparency!