1. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Chapter 13

2. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Objectives Discuss the fundamental concepts of IPv6 Describe IPv6 practices Implement IPv6 in a TCP/IP network

3. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Overview

4. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Introduction to IPv6 Internet Protocol version 4 (IPv4) –Created around 1979 –32-bit IP address space – ~4 billion addresses –Allocation methods wasted addresses Internet Protocol version 6 (IPv6) –128-bit addresses –Improved security, routing, other features

5. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Three parts to Chapter 13 IPv6 basics Using IPv6 Moving to IPv6

6. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 basics

7. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 address notation –128 bits written in hexadecimal –2001:0000:0000:3210:0800:200C:00CF:1234 –A pair of colons represents a string of consecutive groups of zeroes –2001::3210:0800:200C:00CF:1234 –Only one set of colon pairs per address –FEDC:0000:0000:0000:00CF:0000:BA98:1234 –FEDC::CF:0:BA98:1234

8. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 address notation (cont.) –IPv6 loopback address –::1 –0000:0000:0000:0000:0000:0000:0000:0001

9. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Link-local address –Self-generated (in manner of IPv4 APIPA) –First 64 bits always FE80::/64 –Second 64 bits EUI-64 Generated with calculation using MAC address Most operating systems use EUI-64 Extra steps in Windows Vista and Windows 7 Guaranteed unique Link-local address works on private networks

10. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.1 Link-local address

11. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 subnet masks –Function like IPv4 subnet masks –Represented with /x CIDR naming –FEDC::CF:0:BA98:1234/64 –No subnet is ever longer than /64 –IANA gives out /32 subnets to big ISPs –ISPs pass out /48 and /64 subnets –Most IPv6 subnets are between /48 & /64

12. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.2 Link-local address in Windows Vista

13. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Multicasting –Multicasts have been around for a while –Existed in IPv4 and in IPv6 In IPv4 used Class D addresses (224.0.0.0/4) Only specific applications used multicast –Works differently in IPv6 Several IPv6-only multicast addresses added Used by specific services (for example, router messages)

14. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. The end of broadcast –Each link-local is a unicast address –Multicast addresses replace broadcast FF02::2 only read by routers FF02::1 all nodes address FF02::1:FFxx:xxxx solicited-node address –Anycast addresses Used in DNS Looks like a unicast to sending computer

15. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.3 Multicast to routers

16. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Multicast Addresses AddressFunction FF02::1All Nodes Address FF02::2All Routers Address FF02::FFXX:XXXXSolicited-Node Address Table 13.1

17. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Global address –Global unicast address –Required for Internet access –IPv6-capable gateway router gives to hosts –Router configured to do this –2001:470:B8F9:1/64 Router provides prefix NIC generates the rest (using EUI-64) –2001:470:B8F9:1:20C:29FF:FE53:45CA

18. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.4 Getting a global address

19. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.5 IPv6 configuration on Macintosh OS X

20. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation –Current problem with tier-1 routers No default routes Huge routing table (30,000-50,000 routes)

21. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.6 No-default routers

22. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation (cont.) –Every router uses a subnet of the next higher router’s routes –Reduces size and complexity of tables –Gives detailed geographic picture –IP address shows location –Part of IPv6

23. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. How aggregation works –Gateway gives first 64 bits of IP address to computers –Gateway gets its 48-bit prefix from upstream –2001:d0be:7922:1:fc2d:aeb2:99d2:e2b4 –Network prefix is 2001:dObe:7922:1 /64 –ISP’s network prefix 2001:D0BE /32 –ISP adds 16-bit subnet: 2001:d0be:7922/48 –At your gateway, tech adds 16-bit subnet –Result: 2001:d0be:7922:1 /64

24. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.7 Aggregation

25. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.8 An IPv6 group of routers

26. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.9 Adding the first prefix

27. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.10 Adding the second prefix

28. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Aggregation and router changes –From ISP1 to ISP2 –New 32-bit prefix: 2ab0:3c05/32 –Downstream routers make an “all nodes” multicast –All clients get new IP addresses –IPv6 address changes rare but normal

29. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.11 New IP address updated downstream

30. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Using IPv6

31. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Enabling IPv6 –Table 13.2 lists IPv6 status of operating systems –Check to see if IPv6 is running ipconfig in Windows ifconfig in Linux or Mac OS X

32. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 Adoption by IS Operating SystemIPv6 Status Windows 2000Windows 2000 came with “developmental” IPv6 support. Microsoft does not recommend using Windows 2000 for IPv6. Windows XPOriginal Windows XP came with a rudimentary but fully functional IPv6 stack that had to be installed from the command prompt. SP1 added the ability to add the same IPv6 stack under the Install | Protocols menu. Windows Vista/Windows 7Complete IPv6 support. IPv6 is active on default installs. Windows Server 2003Complete IPv6 support. IPv6 is not installed by default but is easily installed via the Install | Protocols menu. Windows Server 2008Complete IPv6 support. IPv6 is active on default installs. LinuxComplete IPv6 support from kernel 2.6. IPv6 is active on default installs. Macintosh OS XComplete IPv6 support on all versions. IPv6 is active on default installs. Table 13.2

33. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. NAT in IPv6 –NAT not used in IPv6 –All IP addresses exposed to the Internet –Huge address space makes IP scanning nearly impossible –IPSec important for security –Security options beyond IPv6 Encryption Firewall

34. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.12 IPv6 enabled in Windows Vista

35. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.13 IPv6 enabled in Ubuntu 8.10

36. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.14 Angry IP scanner at work

37. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. DHCP in IPv6 –DHCPv6 –Works differently than in IPv4 –IP address and subnet received from gateway router –Need DCHPv6 for other IP information –Two modes of DHCPv6 Stateful – works like DHCP in IPv4 Stateless – only passes out optional information Stateless is the norm

38. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.15 DHCPv6 server in action

39. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. DNS in IPv6 –Trivial –Most DNS servers now support IPv6 addresses –DNS servers supporting IPv6 use AAAA records –DNSv6 details not finalized –For now, manually add DNS server information to IPv6 clients

40. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.16 IPv6 addresses on DNS server

41. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.17 Manually adding an IPv6 DNS server in Vista

42. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Moving to IPv6

43. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv4 and IPv6 –What is not ready for IPv6? Most home routers Some Internet routers –What is ready for IPv6? Most recent operating systems All root DNS servers All tier-1 ISP routers

44. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.18 IPv4 and IPv6 on one computer

45. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.19 The IPv6 gap

46. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Tunnels –IPv4-to-IPv6 tunnels bridge the gap Encapsulate IPv6 traffic into an IPv4 tunnel Endpoints at IPv6 client and IPv6 router

47. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.20 The IPv4-to-IPv6 tunnel

48. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. 6to4 tunnels –6to4 dominant tunneling protocol Does not require a tunnel broker Usually connects two routers Normally requires public IPv4 address Uses public relay routers 192.88.9.1 is 6to4 anycast address Challenging to set up

49. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. 6in4 tunnels –6in4 Most popular tunneling protocol One of only two that is NAT traversal

50. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Teredo tunnels –Teredo NAT-traversal IPv6 tunneling protocol Built into Microsoft Windows Addresses start with 2001:0000 /32 Many people use third-party tool

51. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. ISATAP –Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) –Works within an IPv4 network –Adds IPv4 address to an IPv6 prefix for endpoints –2001:db8::98ca:200:131.107.28.9.

52. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Tunnel brokers –Someone must act as far endpoint –Must know tunneling standard and how to connect to endpoint –Create tunnel –Usually offers custom-made endpoint client –May use automatic configuration protocols Tunnel Setup Protocol (TSP) Tunnel Information and Control protocol (TIC)

53. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. URL Hexago/Freenet/Go6 www.go6.net SixXs www.sixxs.net Hurricane Electric www.tunnelbroker.net (no TSP/TIC) AARNet broker.aarnet.net.au Tunnel Broker

54. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Setting up a tunnel –Each tunnel broker has its own setup –Read instructions carefully –Figure 13.21 uses Hexago client Join and download at www.go6.netwww.go6.net Install client Enter Gateway 6 address, user name, password You are now on the IPv6 Internet

55. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.21 Gateway6 Client Utility

56. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 13.22 Gateway6 Client Utility Status tab

57. Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N10-005 ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. IPv6 is here, really! –IPv6 will happen very soon –IPv4 addresses are running out –“The Big Switchover” coming soon –Knowing IPv6 is important to your future