1. IPv6 The Internet’s new Chassis for Global Online Inclusion Carl Gibbons Network Security Engineer University Technology Services University of Denver

2. Overview Courtesy of ARIN (American Registry of Internet Numbers) – https://www.arin.net/knowledge/deploying_ipv6/ https://www.arin.net/knowledge/deploying_ipv6/

3. Richard Jimmerson’s tale Inclusion: the “Killer App?”

4. IP “network layers” model (over simplified): 4 through 7: Application – E-mail, web browser, chat, phone, video, etc. Data encryption, translations, aggregations, etc. 3: Network – routers, gateways the “chassis” metaphor 2: Link – switches 1: Physical Medium – cables, radio waves, etc.

5. DU’s layer 3 network: 130.253.xxx.xxx – One of the earlier “Class B” IPv4 allocations – Approx. 65,000 possible addresses 2001:468:500:8::/48 – Part of IPv6 allocation to Front Range GigaPOP (FRGP) – Approx. 65,000 possible end-user networks, each one billions of times larger than entire v4 Internet.

6. ~ cgibbons$ ifconfig en1 en1: flags=8863 mtu 1500 ether 78:ca:39:b2:ed:66 inet6 fe80::7aca:39ff:feb2:ed66%en1 prefixlen 64 scopeid 0x6 inet 10.2.0.126 netmask 0xffff0000 broadcast 10.2.255.255 inet6 2001:428:3804::7aca:39ff:feb2:ed66 prefixlen 64 autoconf media: autoselect status: active ~ cgibbons$ ping6 2001:468:500:8::2 PING6(56=40+8+8 bytes) 2001:428:3804::7aca:39ff:feb2:ed66 --> 2001:468:500:8::2 16 bytes from 2001:468:500:8::2, icmp_seq=0 hlim=59 time=86.395 ms 16 bytes from 2001:468:500:8::2, icmp_seq=1 hlim=59 time=86.981 ms 16 bytes from 2001:468:500:8::2, icmp_seq=2 hlim=59 time=90.071 ms 16 bytes from 2001:468:500:8::2, icmp_seq=3 hlim=59 time=86.760 ms 16 bytes from 2001:468:500:8::2, icmp_seq=4 hlim=59 time=87.752 ms 16 bytes from 2001:468:500:8::2, icmp_seq=5 hlim=59 time=86.570 ms 16 bytes from 2001:468:500:8::2, icmp_seq=6 hlim=59 time=89.762 ms 16 bytes from 2001:468:500:8::2, icmp_seq=7 hlim=59 time=88.647 ms 16 bytes from 2001:468:500:8::2, icmp_seq=8 hlim=59 time=89.396 ms ^C --- 2001:468:500:8::2 ping6 statistics --- 9 packets transmitted, 9 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 86.395/88.037/90.071/1.375 ms DU’s border router is v6 reachable!

7. Next steps for DU: Supporting infrastructure: – Secure DNS – resolves www.du.edu to “130.253.2.7”www.du.edu – resolve: www.du.edu to “2001:468:500:8::????”www.du.edu Network and Security infrastructure – Core routers, Firewalls, etc. Deployment plans – Network planning with future troubleshooting in mind up front rather than as afterthought