IPv6

CCNA Exploration version 4.0

PDF created with pdfFactory trial version www.pdffactory.com

 Overview

• IP version 6 (IPv6) was developed to overcome the limitations of the

current standard, IP version 4 (IPv4). IPv4 allows end systems to
communicate and forms the foundation of the Internet as we know it
today. However, one of the major shortcomings of IPv4 is its limited
amount of address space. The explosion of new IP-enabled devices
and the growth of undeveloped regions have fueled the need for more
addresses.
• In the United States, the Department of Defense (DoD) is a primary
driver for the adoption of IPv6.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 2

PDF created with pdfFactory trial version www.pdffactory.com

 Introducing IPv6

• IP version 6 (IPv6) combines expanded addressing with a

more efficient and feature-rich header to meet the
demands for scalable networks in the future.
• One key benefit is that IPv6 can recreate end-to-end
communications without the need for Network Address
Translation (NAT)
• Cisco Systems currently supports IPv6 in Cisco IOS
Software Release 12.2(2)T and later.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 3

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Features

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 4

PDF created with pdfFactory trial version www.pdffactory.com

 Large Address Space

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 5

PDF created with pdfFactory trial version www.pdffactory.com

 • IPv6 routers do not perform fragmentation. Instead, a
discovery process determines the optimum maximum
transmission unit (MTU) to use during a given session.
• Link-layer technologies already perform checksum and
error control. Because link-layer technologies are relatively
reliable, an IP header checksum is considered to be
redundant.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 6

PDF created with pdfFactory trial version www.pdffactory.com

 Comparing IPv4 and IPv6 Headers

Traffic class: ToS

Payload Length
Next Header: Tcp, Udp…
Hop Limit: TTL
No Checksum

• Flow Label: 20-bit field that allows a particular flow of traffic to be labeled. It
can be used for multilayer switching techniques and faster packet-switching
performance.
• Extension Headers: Follows the previous eight fields. The number of
extension headers is not fixed, so the total length of the extension header
chain is variable.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 7

PDF created with pdfFactory trial version www.pdffactory.com

 Extension Header

Extension Header

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 8

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Extension Headers

• IPv6 Header: Basic header described in the previous figure.

• Hop-by-hop options header
• Destination options header (when the routing header is used)
• Routing header: Used for source routing and mobile IPv6 (value =
43).
• Fragment header: Used when a source must fragment a packet that is
larger than the MTU for the path between itself and a destination
device.
• Authentication header and Encapsulating Security Payload
header: Used within IPsec to provide authentication, integrity, and
confidentiality of a packet. The authentication header (value = 51) and
the ESP header (value = 50)
• Upper-layer header: Typical headers used inside a packet to transport
the data. The two main transport protocols are TCP (value = 6) and
UDP (value = 17).

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 9

PDF created with pdfFactory trial version www.pdffactory.com

 Defining Address Representation

• Leading zeros in a field are optional, so 09C0 = 9C0 and 0000 = 0.

• Successive fields of zeros can be represented as “::” only once in an
address.
• An unspecified address is written as “::” because it contains only zeros.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 10

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Address types
• Unicast address
– Link local: FE80::/10, Scope is configured to single link. The
address is unique only on this link, and it is not routable off the link.
(similar to 169.254.x.x private address)
– Site local: FEC0::/10 (similar to private address)
– Global: Globally unique, so it can be routed globally with no
modification. A global address has an unlimited scope on the
worldwide Internet. Packets with global source and destination
addresses are routed to their target destination by the routers on
the Internet.
• Multicast address: IPv6 does not have broadcast addresses. The
range of multicast addresses in IPv6 is larger than in IPv4. For the
foreseeable future, allocation of multicast groups is not being limited.
• Anycast address: An anycast address identifies a list of devices or
nodes; therefore, an anycast address identifies multiple interfaces. A
packet sent to an anycast address is delivered to the closest interface,
as defined by the routing protocols in use.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 11

PDF created with pdfFactory trial version www.pdffactory.com

 Special Address

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 12

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Global Unicast and Anycast address

• Global unicast addresses are defined by a global routing prefix, a subnet ID,
and an interface ID. The current global unicast address assignment by the
Internet Assigned Numbers Authority (IANA) uses the range of addresses that
start with binary value 001 (2000::/3), which is one-eighth of the total IPv6
address space and is the largest block of assigned block addresses.
• Addresses with a prefix of 2000::/3 (001) through E000::/3 (111), with the
exception of the FF00::/8 (1111 1111) multicast addresses, are required to
have 64-bit interface identifiers in the extended universal identifier (EUI)-64
format.
• When a unicast address is assigned to more than one interface, thus turning it
into an anycast address, the nodes to which the address is assigned must be
explicitly configured to use and recognize the anycast address.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 13

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Global Unicast and Anycast address

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 14

PDF created with pdfFactory trial version www.pdffactory.com

 Defining Host Interface Addresses

• An IPv6 address has two parts:

– A subnet prefix representing the network to which the interface is
connected. The subnet prefix is a fixed 64-bit length for all current
definitions.
– A local identifier, sometimes called a token, which uniquely
identifies the host on the local network. The local identifier is always
64 bits and is dynamically created based on Layer 2 media and
encapsulation. In the simple case of an Ethernet medium, the local
identifier is usually derived from the EUI-48 MAC address.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 15

PDF created with pdfFactory trial version www.pdffactory.com

 Link Local Address

• The address is unique only on this link, and it is not

routable off the link. Packets with a link-local destination
must stay on the link where they were generated
• Link-local addresses are dynamically created using a link-
local prefix of FE80::/10 and a 64-bit interface identifier in a
process called stateless autoconfiguration.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 16

PDF created with pdfFactory trial version www.pdffactory.com

 Stateless Autoconfiguration

• Phase 1: MAC 00-0C-29-C2-52-FF -> 00-0C-29-FF-FE-C2-

52-FF
• Phase 2: well-known link-local prefix fe80::/64 is added ->
fe80::00c:29ff:fec2:52ff
• Phase 3: Verify the address’s uniqueness on the link,
called duplicate address detection (DAD). Send ICMPv6.
• Phase 4: Assigned

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 17

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Multicast Address

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 18

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Multicast Address

• FF02::1:FFXX:XXXX — Solicited-node multicast on link, where

XX:XXXX is the rightmost 24 bits of the corresponding unicast or
anycast address of the node. (Neighbor solicitation messages are sent
on a local link when a node wants to determine the link-layer address
of another node on the same local link, similar to Address Resolution
Protocol [ARP] in IPv4.)

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 19

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 Routing

• Similar to IP version 4 (IPv4) classless inter-domain routing

(CIDR), IPv6 uses longest-prefix match routing.
• Routing protocol: RIPng, OSPFv3, EIGRP, ISIS, MP-BGP
• Static routing: A router must be able to determine the link-
local address of each of its neighboring routers to ensure
that the target address of a redirect message identifies the
neighbor router by its link-local address.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 20

PDF created with pdfFactory trial version www.pdffactory.com

 RIPng

• Based on IPv4 RIP version 2 (RIPv2) and similar to RIPv2

• Uses IPv6 for transport
• IPv6 prefix, next-hop IPv6 address
• Uses the multicast group FF02::9, the all-RIP-routers
multicast group, as the destination address for RIP updates
• Updates sent on UDP port 521
• Command:
– Router(config)#ipv6 router rip bkacad
– Router(config-router)#maximum-paths 2
– Router(config)#interface fa0/0
– Router(config-if)ipv6 rip bkacad enable

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 21

PDF created with pdfFactory trial version www.pdffactory.com

 IPv6 to IPv4 Transition Mechanism

• The two most common techniques to transition from IPv4

to IPv6 are as follows:
– Dual stack
– IPv6-over-IPv4 (6to4) tunnels
• For communication between IPv4 and IPv6 networks, IPv4
addresses can be encapsulated in IPv6 addresses.
Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 22

PDF created with pdfFactory trial version www.pdffactory.com

 Cisco IOS Dual Stack

• Using IPv6 on a Cisco IOS router requires that you use the global configuration
command ipv6 unicast-routing. This command enables the forwarding of
IPv6 datagrams.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 23

PDF created with pdfFactory trial version www.pdffactory.com

 • A dual-stack node chooses which stack to use based on
the destination address. A dual-stack node prefers IPv6
when available.
• A new application programming interface (API) is defined
to support both IPv4 and IPv6 addresses and Domain
Name System (DNS) requests.
• Past experience in porting IPv4 applications to IPv6
suggests that for most applications it is a minimal change
in some localized places inside the source code.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 24

PDF created with pdfFactory trial version www.pdffactory.com

 Overlay Tunnels

• Tunneling IPv6 traffic over an IPv4 network requires one

edge router to encapsulate the IPv6 packet inside an IPv4
packet and another router to de-encapsulate it.
• Tunneling is an integration method where an IPv6 packet is
encapsulated within another protocol, such as IPv4.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 25

PDF created with pdfFactory trial version www.pdffactory.com

 • This method of encapsulation is IPv4 protocol 41 and has the following
characteristics:
• Includes a 20-byte IPv4 header with no options and an IPv6 header
and payload.
• Considered dual stacking, which enables the connection of IPv6
islands without converting an intermediary network to IPv6.
• Tunneling presents these issues:
– The MTU is decreased by 20 octets (if the IPv4 header does not
contain any optional field).
– Difficult to troubleshoot.
Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 26

PDF created with pdfFactory trial version www.pdffactory.com

 • Encapsulation can be done by edge routers between hosts or between
a host and a router.
• Tunneling does not work if an intermediary node between the two end
points of the tunnel, such as a firewall, filters out IPv4 protocol 41,
which is the IPv6-over-IPv4 encapsulation.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 27

PDF created with pdfFactory trial version www.pdffactory.com

 Example of Configure

192.168.30.1

• The command that enables the IPv6 overlay tunnel is

tunnel mode ipv6ip.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 28

PDF created with pdfFactory trial version www.pdffactory.com

 6to4 tunneling

• The 6to4 tunneling method automatically establishes the connection of

IPv6 islands through an IPv4 network.
• Each 6to4 site receives a /48 prefix, which is the concatenation of
0x2002 and the hexadecimal IPv4 address of the edge router.
• In Figure , the IPv4 address of the edge router is 192.168.99.1. As a
result, the prefix of its IPv6 network is 2002:c0a8:6301::/48 because
c0a86301 is the hexadecimal representation of 192.168.99.1. The IPv6
network can substitute any IP address in the space after the first 16-bit
section (0x2002).

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 29

PDF created with pdfFactory trial version www.pdffactory.com

 NAT-Protocol Translation (NAT-PT)

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 30

PDF created with pdfFactory trial version www.pdffactory.com

 • Several other automatic tunneling transition mechanisms
exist, including these:
– 6to4: Uses the reserved prefix 2002::/16 to allow an
IPv4 Internet-connected site to create and use a /48
IPv6 prefix based on a single globally routable or
reachable IPv4 address.
– Intra-Site Automatic Tunnel Addressing Protocol
(ISATAP): Allows an IPv4 private intranet (which may or
may not be using RFC 1918 addresses) to
incrementally implement IPv6 nodes without upgrading
the network.

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 31

PDF created with pdfFactory trial version www.pdffactory.com

 LAB

2003::1/64 2004::1/64 2004::2/64 2005::2/64

L0 R1 S1/0 R2 L0
F0/0 S1/1
2fff::1/64 ipv6 unicast-routing ipv6 unicast-routing
interface lo0 Ipv6 route ::/0 lo0
ipv6 address 2003::1/64 interface lo0
2fff::2/64 ipv6 rip bkacad enable ipv6 address 2003::1/64
interface f0/0 ipv6 rip bkacad enable
ipv6 address 2fff::1/64 interface f0/0
ipv6 rip bkacad enable ipv6 address 2fff::1/64
interface s1/0 ipv6 rip bkacad enable
ipv6 address 2004::1/64 interface s1/0
ipv6 rip bkacad enable ipv6 address 2004::1/64
ipv6 rip bkacad enable
ipv6 router rip bkacad
ipv6 install redistribute static
netsh interface ipv6 add address "Local Area Connection" 2fff::2

Học viện mạng Cisco Bách Khoa - Website: www.ciscobachkhoa.com 32

PDF created with pdfFactory trial version www.pdffactory.com