Beruflich Dokumente
Kultur Dokumente
Igor Giangrossi
igor.giangrossi@cisco.com
B R K R S T -1 3 0 0 1 3 7 4 5 _ 0 5 _ 2 0 0 7 _ c 2
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
W h y IP v 6 ?
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
IP is everyw h ere
T h e rising of I nt e rne t conne ct e d d e v ice and ap p l iance w il l e v e nt ual l y d e p l e t e t h e I P v 4 ad d re ss sp ace D at a, v oice , aud io and v id e o int e grat ion is a re al it y R e gional re gist rie s ap p l y a st rict al l ocat ion cont rol
W h y Not NAT
It w as c reated as a tem p solu tion N AT break s th e end-to-end m odel
Grow th of N AT h as slow ed dow n grow th of transp arent ap p lic ations N o easy w ay to m aintain states of N AT in c ase of node f ailu res N AT break sec u rity
N AT c om p lic ates m ergers, dou ble N ATing is needed f or devic es to c om m u nic ate w ith eac h oth er
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
I P v 6 Te c h n o l o g y
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
IP v 6 H e ad e r
T raf f i c C l as s Fl o w L ab el N ex t H ead er
H ead er C h ec k s u m
P ay l o ad L ength
H o p L i mi t
O p ti o ns
D es ti nati o n A d d res s
S o u rc e A d d res s
P ad d i ng
S ou rc e Address
Legend
IP v 4 to IP v 6
N a m e a n d P o s it io n C h a n g ed in I P v 6 N ew
Destination Address
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
F i el dF l ow
L a b el
F l ow L ab el
N ex t H ead er H o p L i mi t
P ay l o ad L ength
S o u rc e A d d res s
W ith f l ow l ab el , eac h sou rc e c h ooses its ow n f l ow l ab el v al u es; rou ters u se sou rc e addr + f l ow l ab el to identif y distinc t f l ow s
D es ti nati o n A d d res s
E x t en s i on H ea ders
Base header N ex t H eader = 0 1st E x t en si o n H eader N ex t H eader = 4 3 L ast E x t en si o n H eader N ex t H eader = 17
IPv6 Pa c k e t
Next Header = 17
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
M T U
Is s u es
M inim u m link M TU f or IPv6 is 1 2 8 0 oc tets ( vs. 68 oc tets f or IPv4 ) Im p lem entations are ex p ec ted to p erf orm p ath M TU disc overy to send p ac k ets bigger th an 1 2 8 0 M inim al im p lem entation c an om it PM TU long as all p ac k ets k ep t 1 2 8 0 oc tets
=> on l ink s w it h M T U < 1 2 8 0, l ink -sp e cif ic f ragme nt at ion and re asse mb l y must b e use d
disc overy as
A h op -by-h op op tion su p p orts transm ission of j u m bogram s w ith u p to 2 3 2 oc tets of p ayload; p ayload is norm ally 2 1 6
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
11
IP v 6 A d d r e s s in g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
13
IPv6 Addres s i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
14
Addres s i n g F orm a t
2 001 : 0d b 8 : 0: 1 3 0F : : 8 7 C : 1 4 0B
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
16
Addres s i n g
V 6 address is rep resented th e sam e w ay: O nly leading z eros are om itted. Trailing z eros are not om itted
2 001 : 0d b 8 : 001 2 : : / 4 8 = 2 001 : d b 8 : 1 2 : : / 4 8 2 001 : d b 8 : 1 2 0 0 : : / 4 8 2 001 : d b 8 : 1 2 : : / 4 8
C is c o C o n fid e n tia l
2 001 : d b 8 : 1 2 : : / 4 8
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
17
IPv6Addres s i n g M odel
Addresses are assigned to interf ac es Interf ac e ex p ec ted to h ave m u ltip le addresses Addresses h ave sc op e
U niq ue L ocal L ink L ocal G l ob al C h ange f rom I P v 4 mod e :
Gl ob al
U niq u e L oc al
L ink L oc al
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
19
T y p es of IPv6 Addres s es
U nic ast
A d d re ss of a singl e int e rf ace . O ne -t o-one d e l iv e ry t o singl e int e rf ace
A d d re ss of a se t of int e rf ace s. O ne -t o-many d e l iv e ry t o al l int e rf ace s in t h e se t A d d re ss of a se t of int e rf ace s. O ne -t o-one -of -many d e l iv e ry t o a singl e int e rf ace in t h e se t t h at is cl ose st
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
21
Ag g reg a t a b l e G l ob a l U n i c a s t Addres s es
Pr o vi d e r 3 4 5 Bi t s
G l o b al R o u ti n g P ref i x
0 0 1
S ite 1 6 Bi t s
S L A
H o s t 64 Bi t s
I n terf ac e I D
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
U n i q u e-L oc a l
1 2 8 Bi t s
G l o b al I D 4 0 B i ts 1111 110 F C 0 0 ::/ 7 S u b n et I D 16 B i ts I n terf ac e I D
7 Bi t s
N ot rout ab l e on t h e I nt e rne t
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
23
L i n k -L oc a l
1 2 8 Bi t s
R em ai n i n g 5 4 B i ts 1111 1110 10 F E 8 0 ::/ 10 I n terf ac e I D
Link-Lo c a l A d d r e s s e s U s e d f o r :
1 0 Bi t s
M andatory Address f or C om m u nic ation b etw een tw o I P v 6 dev ic e ( l ik e AR P b u t at L ay er 3 ) Au tom atic al l y assig ned b y R ou ter as soon as I P v 6 is enab l ed Al so u sed f or N ex t-H op c al c u l ation in R ou ting P rotoc ol s O nl y L ink S p ec if ic sc op e
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
24
IPv6 M u l t i c a s t Addres s
IP m u ltic ast address h as a p ref ix FF00: : / 8 ( 1 1 1 1 1 1 1 1 ) ; th e sec ond oc tet def ines th e lif etim e and sc op e of th e m u ltic ast address
8-b i t 4-b i t 4-b i t 112-b i t
1 1 1 1 1 1 1 1 L if e t ime
0 1
L if e t ime
I f P erm anent I f T em p orary
S cop e S cop e
1 2 5 E 8
O rg aniz ation G l ob al
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
25
S om e W el l K n ow n M u l t i c a s t Addres s es
Address F F 0 1: : 1 F F 0 2: : 1 F F 0 1: : 2 F F 0 2: : 2 F F 0 5: : 2 F F 0 2: : 1: F F X X : X X X X S c op e N ode-L oc al L ink -L oc al L ink -L oc al S ite-L oc al L ink -L oc al N ode-L oc al M eaning Al l N odes Al l N odes Al l R ou ters Al l R ou ters Al l R ou ters S ol ic ited-N ode
N ot e t h at 02 me ans t h at t h is is a p e rmane nt ad d re ss and h as l ink scop e M ore d e t ail s at h t t p : / / w w w .iana.org/ assignme nt s/ ip v 6 -mul t icast ad d re sse s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
26
S ol i c i t ed-Node M u l t i c a s t Addres s
T h is is sp ec ial l y u sed f or tw o p u rp ose, f or th e rep l ac em ent of AR P , and DAD U sed in neig h b or sol ic itation m essag es M u l tic ast address w ith a l ink -l oc al sc op e F or eac h u nic ast and any c ast address c onf ig u red th ere is a c orresp onding sol ic ited-node m u l tic ast
u nic ast,
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
28
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
33
Assig ned v ia DH C P
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
34
T o mak e sure t h at t h e ch ose n ad d re ss is f rom a uniq ue E t h e rne t M A C ad d re ss, t h e univ e rsal / l ocal (u b it ) is se t t o 1 f or gl ob al scop e and 0 f or l ocal scop e
F F F F
F E F E
W h e re U = 2 7 F F F E
1 =U n iq u e
0 =N o t U n iq u e 1 7 F C 0 F
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
35
IC M P v 6 a n d N e ig h b o r D is c o v e r y
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
36
IC M Pv6
Internet C ontrol M essage Protoc ol version 6 R FC M odif ic ation of IC M P f rom 2 4 63 IPv4
M essage typ es are sim ilar ( bu t dif f erent typ es/ c odes)
P ack e t t oo b ig (t y p e 2 )
P arame t e r p rob l e m (t y p e 4 )
E ch o re q ue st / re p l y (t y p e 1 2 8 and 1 2 9 )
C is c o C o n fid e n tia l
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
37
Nei g h b or D i s c overy
N eigh bor disc overy u ses IC M Pv6 m essages, originated f rom node on link loc al w ith h op lim it of 2 5 5
C onsists of IPv6 h eader, IC M Pv6 h eader, neigh bor disc overy h eader, and neigh bor disc overy op tions Five neigh bor disc overy m essages
1 . R out e r sol icit at ion (I C M P v 6 t y p e 1 3 3 )
4 . N e igh b or ad v e rt ise me nt (I C M P v 6 t y p e 1 3 6 )
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
4 0
R ou t er S ol i c i t a t i on a n d Advert i s em en t
1 . R S
1I C M P T y p e = 133 ( R S )
2 . R A
2I C M P T y p e = 134 ( R A )
S rc = l i n k -l o c al addres s ( F E 8 0 ::2/ 10 )
Q u ery = p l eas e s en d R A
R out e r sol icit at ions (R S ) are se nt b y b oot ing nod e s t o re q ue st R A s f or conf iguring t h e int e rf ace s
4 1
Nei g h b or S ol i c i t a t i on a n d Advert i s em en t
A B
Neighbor Solicitation I C M P ty p e = 1 3 5 Src = A D s t = Solicited -nod e m u lticas t of B D ata = link -lay er ad d res s of A Q u ery = w hat is y ou r link ad d res s ? Neighbor A d v ertis em ent I C M P ty p e = 1 3 6 Src = B D s t = A D ata = link -lay er ad d res s
of
Aa n d Bc a n n o w e x c h a n g e p a c k e ts o n th is lin k
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
4 2
D u p l i c a t e Addres s D et ec t i on
A B
I C M P ty p e = 1 3 5 Src = 0 ( : : ) D s t = Solicited -nod e m u lticas t of A D ata = link -lay er ad d res s of A Q u ery = w hat is y ou r link ad d res s ?
D u p lic ate Address D etec tion ( D AD ) u ses neigh bor solic itation to verif y th e ex istenc e of an address to be c onf igu red
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
4 3
Au t oc on fi g u ra t i on
M a c Ad d r e s s : 0 0 :2 c :0 4 :0 0 :F E :5 6 H o s t Au t o c o Ad d r e s Pr e f i x R e c L i n k -L a y e r n fig u r e d s Is : e i ve d + Ad d r e s s S e n d s N e t w o r k -T y p e In f o r m a t i o n ( Pr e f i x , D e f a u l t R o u t e , )
La r g e r A d d r e s s S p a c e E na b l e s :
T h e use of l ink -l ay e r ad d re sse s insid e t h e ad d re ss sp ace A ut oconf igurat ion w it h no col l isions O f f e rs p l ug and p l ay
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
4 5
R en u m b eri n g
M a c Ad d r e s s : 0 0 :2 c :0 4 :0 0 :F E :5 6 H o s t Au t o c o n f i g u r e d Ad d r e s s Is : N e w Pr e f i x R e c e i ve d + L i n k -L a y e r Ad d r e s s S e n d s N e w N e t w o r k -T y p e In f o r m a t i o n ( Pr e f i x , D e f a u l t R o u t e , ) D a ta =T w o p r e fix e s : C u r r e n t p r e fix (to b e d e p r e c a t e d ), w i t h s h o r t life tim e s N e w p r e f i x ( t o b e u s e d ), w i t h n o r m a l life tim e s
La r g e r A d d r e s s S p a c e E na b l e s :
R e numb e ring, using aut oconf igurat ion and mul t ip l e ad d re sse s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
4 6
D H C P a n d D N S fo r IP v 6
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
4 7
D NS B a s i c s
D N S is a d at ab ase managing R e source R e cord s (R R )
S to c k a g e o f R R fro m N a m e S e rv e r S t a r t o f A u t h o r i t y (S o A ) v a r i o u s t y p e s I P V 4 a n d I P V 6 :
P o i n t e r P T R
A d d r e s s A a n d A A A A
It u s e s e ith e r U D P o r T C P o n to p o f IP v 4o r IP v 6 R F C 3 59 6 : D N S Ex t e n s i o n s t o S u p p o r t I P V e r s i o n 6
R F C 3 3 6 4: T r a d e o f f s i n D o m a i n N a m e S y s t e m P r o t o c o l v e r s i o n 6 (I P v 6 )
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
R F C 3 3 6 3 : R e p r e s e n tin g In te r n e t P r o to c o l V e r s io n 6 N a m e s y s t e m (D N S )
A d d r e s s e s in D o m a in
(D N S ) S u p p o r t f o r I n t e r n e t
4 8
IPv6 a n d D NS
IPv4 IPv6
H o s tn a m e to IP a d d r e s s
www.abc.test. A 192.168.30.1
A rec o rd:
A A A A rec o rd:
IP a d d r e s s t o h o s tn a m e
PT R
rec o rd:
PT R
rec o rd:
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
4 9
D H C Pv6
U p dated version of D H C P f or IPv4 S u p p orts new C an be u sed f or renu m bering addressing
C lient f irst detec t th e p resenc e of rou ters on th e link If f ou nd, th en ex am ines rou ter advertisem ents to determ ine if D H C P c an be u sed If no rou ter f ou nd or if D H C P c an be u sed, th en
U sing t h e l ink -l ocal ad d re ss as t h e source ad d re ss
C is c o C o n fid e n tia l
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
D H C Pv6 O p era t i on
C lient
S o lic it
R elay
S erver
R e l a y -R e p l y w / Ad ve r t i s e
R e l a y -F w d w /S o lic it Ad ve r t i s e
R e q u e s t
R e l a y -F w d w /R e q u e s t R e p ly
R e l a y -R e p l y w /R e p ly
51
IP v 6 C o n fig u r a tio n s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
52
IO S IPv6 Addres s i n g E x a m p l es ( 1 )
M anu al Interf ac e Identif ier
F a s t0 /0
ic a s t -r o u t in g c e r e s a a u d d n a d d F a s t E t s s 1 0 . 1 pa r s e -m u t o t o r e s s 2 0 b l e r a -in t e pr e f ix h e r n e t 0 / 0 5 1 . 1 . 1 2 5 5 . 2 5 5 . 2 5 5 . 0 o d e 0 6: 1 : : 1 / 64 r va l 3 0 2 0 0 6: 1 : : / 64 3 0 0 3 0 0
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
53
IO S IPv6 Addres s i n g E x a m p l es ( 1 )
M anu al Interf ac e Identif ier
r1#sh ipv6 int fast0/0 F astE the rne t0/0 is u p, l ine pro to c o l is u p I P v6 is e nab l e d , l ink -l o c al ad d re ss is F E 8 0 : : 2 0 7 : 5 0 F F : F E 5 E : 9 4 6 0 G l o b al u nic ast ad d re ss( e s) : 2 0 0 6 : 1 : : 1 , su b ne t is 2 006: 1: : /64 J o ine d g ro u p ad d re ss( e s) : F F 02 : : 1 F F 02 : : 2 F F 02 : : 1: F F 00: 1 MAC Address : 0007.505e.9460 F F 02 : : 1: F F 5 E : 9 4 60 M T U is 15 00 b y te s I C M P e rro r m e ssag e s l im ite d to o ne e ve ry 100 m il l ise c o nd s I C M P re d ire c ts are e nab l e d N D D r1#sh int nab l e d , nu m b e r o f D A D atte m pts: 1 A D is e fast0/0 F ac the e tim l ine ro c N D reastE hab l rne t0/0e is u p 3 , 0000 m p il l to iseo l c o is u sp is nd E , . 9 N D ad H veard w are d is A acd F hab l ade d re ss is 0007 m . il 05l e ise 4 c 6 o 0nd( b sia 0007 . 5 05 e . 9 4 6 0) rtise re m tim e is 0 5 N D ad ve rtise d re transm it inte rval is 0 m il l ise c o nd s N D ro u te r ad ve rtise m e nts are se nt e ve ry 3 0 se c o nd s N D ro u te r ad ve rtise m e nts l ive fo r 18 00 se c o nd s H o sts u se state l e ss au to c o nfig fo r ad d re sse s. r1#
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
54
IO S IPv6 Addres s i n g E x a m p l es ( 2 )
EU I-64 Interf ac e Identif ier
F a s t0 /0
ic a s t -r o u t in g c e F r e s s s pa a u t a u t o d d r e n a b l d r a d pr a s t E t h e r n e t 0 / 0 1 0 . 1 5 1 . 1 . 1 2 5 5 . 2 5 5 . 2 5 5 . 0 r s e -m o d e o s s e 2 0 0 6: 1 : : / 64 e u i-64 3 0 0 3 0 0
-in t e r va l 3 0 e f ix 2 0 0 6: 1 : : / 64
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
55
IO S IPv6 Addres s i n g E x a m p l es ( 2 )
EU I-64 Interf ac e Identif ier
r1#sh ipv6 int fast0/0 F astE the rne t0/0 is u p, l ine pro to c o l is u p I P v6 is e nab l e d , l ink -l o c al ad d re ss is F E 8 0 : : 2 0 7 : 5 0 F F : F E 5 E : 9 4 6 0 G l o b al u nic ast ad d re ss( e s) : 2 0 0 6 : 1 : : 2 0 7 : 5 0 F F : F E 5 E : 9 4 6 0 , su b ne t is 2 006: 1: : /64 J o ine d g ro u p ad d re ss( e s) : F F 02 : : 1 MAC Address : 0007.505e.9460 F F 02 : : 2 F F 02 : : 1: F F 5 E : 9 4 60 M T U is 15 00 b y te s I C M P e rro r m e ssag e s l im ite d to o ne e ve ry 100 m il l ise c o nd s I C M P r1#sh ire c fast0/0 e nab l e d re d int ts are the nab l e ine p l is p N D D F AastE is e rne t0/0d , is nuu p m , b e l r o f roD A toD c o atte m upts: 1 D E d re m is 0007 05 N D re H acard w aree is A e m d Fis, 3 ad0000ss il l ise c . o 5 nd es. 9 4 6 0 ( b ia 0007 . 5 05 e . 9 4 6 0) hab l tim N D ad ve rtise d re ac hab l e tim e is 0 m il l ise c o nd s N D ad ve rtise d re transm it inte rval is 0 m il l ise c o nd s N D ro u te r ad ve rtise m e nts are se nt e ve ry 3 0 se c o nd s N D ro u te r ad ve rtise m e nts l ive fo r 18 00 se c o nd s H o sts u se state l e ss au to c o nfig fo r ad d re sse s. r1#
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
56
I P v 6 Ro u t i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
57
S t a t i c Ro u t i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
58
S t a t i c R ou t i n g
ipv6 route ipv6-pref ix / prefix-l en g t h { ipv 6 -a d d res s | in t erfa c e-t y pe in t erfa c e-n u m b er [ ipv 6 -a d d res s ] } [ a d m in is t ra t iv e-d is t a n c e] [ a d m in is t ra t iv e-m u l t ic a s t -d is t a n c e | un ic a s t | m ul tic a s t] [ ta g t a g ]
Ex am p les:
F orw ard p ack e t s f or ne t w ork 2 001 : D B 8 : : 0/ 3 2 t h rough 2 001 : D B 8 : 1 : 1 : : 1 w it h an ad minist rat iv e d ist ance of 1 0 D e f aul t rout e t o 2 001 : D B 8 : 1 : 1 : : 1
R o u te r( c o nfig ) # ipv6 ro u te R o u te r( c o nfig ) # ipv6 ro u te 2 001: D B 8 : : 0/3 2 2 001: D B 8 : 1: 1: : 1 10
: : /0 2 001: D B 8 : 1: 1: : 1
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
59
RI P n g ( RF C
20 8 0 )
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
60
ro u te ta g
p ref ix l en
m etric
D ist ance -v e ct or, h op l imit of 1 5 , sp l it -h oriz on, mul t icast b ase d (F F 02 : : 9 ) , U D P p ort (5 2 1 ) e t c.
S p ec ial H andling f or th e N H
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
is al l 0. M e t ric w il l h av e 0x F F ;
61
E th ern et1
RT 0 eui -6 4 eui -6 4
M u lt ic a s t A ll R I P -R o u t er s
C is c o C o n fid e n tia l
L in k -L o c a l s r c A ddr es s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
62
D e p lo y m e n t O p tio n s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
66
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
67
D u a l S t a c k Ap p roa c h
A p p l i c ati o n I P v 6 -E n ab l e A p p l i c ati o n
T C P
U D P
T C P
U D P
Pr M e Ap p S
e f th lic e r
e rre d o d o n a t i o n s ve r s F ra m e Pr o t o c o l ID
IP v 4
IP v 6
IP v 4
IP v 6
0 x 0 8 0 0
0 x 8 6d d
0 x 0 8 0 0
0 x 8 6d d
D a t a L in k ( E t h er n et )
D a t a L in k ( E t h er n et )
D u a l S t a c k N o d e M e a ns :
Ap p l ic ations c an tal k to b oth
68
C i s c o IO S D u a l S t a c k C on fi g u ra t i on
D u a l -S t a c k R o u te r
ro u te r# ip v 6 u nic ast-ro u ting inte rfac e E the rne t0 ip ad d re ss 19 2. 16 8 . 9 9 . 1 25 5 . 25 5 . 25 5 . 0 ip v 6 ad d re ss 2001:d b 8 :213:1::/6 4 e u i-6 4
IPv6 a n d IPv4 N e tw o rk
I P v 4 : 19 2. 16 8 . 9 9 . 1
I P v 6 : 20 0 1:db 8 :213:1::/ 6 4 eu i -6 4
C is c o I O S
I f I P v 4 and I P v 6 are c onf ig u red on one interf ac e, th e rou ter is du al -stac k ed T el net, P ing , T rac erou te, S S H , DN S c l ient, T F T P , etc .
I s I P v 6 -E na b l e :
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
70
Tu n n e l i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
71
T u n n el i n g
M any Ways to D o Tu nneling S om e ideas sam e as bef ore N ative IP over data link layers S om e new tec h niq u es
G R E , M P L S , IP
A T M P V C , d W D M L amb d a, F rame R e l ay P V C , S e rial , S one t / S D H , E t h e rne t A ut omat ic t unne l s using I P v 4 , comp at ib l e I P v 6 ad d re ss, 6 t o4 , I S A T A P
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
72
IP v 6 n etw o rk
IP v 6 n etw o rk
IPv4 : 1 9 2 . 1 68 . 9 9 . 1 IPv6: 2 0 0 1 : d b 8 : 8 0 0 : 1 : : 3
ro u te r1# inte rfac e T u nne l 0 ip v 6 e nab l e ip v 6 ad d re ss 2001:d b 8 :c 18 :1::3/127 tu nne l so u rc e 19 2. 16 8 . 9 9 . 1 tu nne l d e stinatio n 19 2. 16 8 . 30. 1 tu nne l m o d e ip v 6 ip
IPv4 : 1 9 2 . 1 68 . 30 . 1 IPv6: 2 0 0 1 : d b 8 : 8 0 0 : 1 : : 2
ro u te r2# inte rfac e T u nne l 0 ip v 6 e nab l e ip v 6 ad d re ss 2001:d b 8 :c 18 :1::2/127 tu nne l so u rc e 19 2. 16 8 . 30. 1 tu nne l d e stinatio n 19 2. 16 8 . 9 9 . 1 tu nne l m o d e ip v 6 ip
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
74
6 t o 4 Tu n n e l i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
75
Au t om a t i c 6t o4 T u n n el ( R F C
IPv6 H o s t A 6t o 4 R o u t e r IPv6 N e tw o rk IPv4
3 0 5 6)
IPv6 N e tw o rk IPv6 H o s t B
6t o 4 R o u t e r
N e t w o r k Pr e f i x :
1 9 2 . 1 68 . 9 9 . 1 =
1 9 2 . 1 68 . 30 . 1 =
2 0 0 2 : c 0 a 8 : 630 1 : : / 4 8
2 0 0 2 :c 0 a 8 :1 e 0 1 ::/4 8
N e t w o r k Pr e f i x :
6to4 :
G iv e s a p re f ix t o t h e at t ach e d I P v 6 ne t w ork
Pu b l i c IPv4 Ad d r e s s S L A
/4 8
C is c o C o n fid e n tia l
In t e r f a c e ID
/6 4
77
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
Au t om a t i c 6t o4 T u n n el ( R F C
IPv6 H e a d e r IPv6 H o s t A S =2 0 0 2 : c 0 a 8 : 630 1 : : 1 D =2 0 0 2 : c 0 a 8 : 1 e 0 1 : : 2 IPv6 D a t a 6t o 4 R o u t e r IPv4
3 0 5 6)
S =2 0 0 2 : c 0 a 8 : 630 1 : : 1 D =2 0 0 2 : c 0 a 8 : 1 e 0 1 : : 2 IPv6 D a t a IPv6 H o s t B
IPv6 H e a d e r 6t o 4 R o u t e r
IPv6 N e tw o rk
IPv6 N e tw o rk
2 0 0 2 : c 0 a 8 8 : 630 1 : : 1
1 9 2 . 1 68 . 9 9 . 1
IPv4 H e a d e r
1 9 2 . 1 68 . 30 . 1
2 0 0 2 :c 0 a 8 :1 e 0 1 ::2
IPv6 D a t a
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
78
Au t om a t i c 6t o4 C on fi g u ra t i on
IPv6 N e tw o rk N e t w o r k Pr e f i x :
E 0
6t o 4 R o u te r1
IPv4
6t o 4 R o u te r2
E 0
1 9 2 . 1 68 . 9 9 . 1 =
IPv6 N e tw o rk N e t w o r k Pr e f i x :
1 9 2 . 1 68 . 30 . 1 =
2 0 0 2 : c 0 a 8 : 630 1 : : / 4 8
2 0 0 2 :c 0 a 8 :1 e 0 1 ::/4 8
router1 # i n terf a c e E th ern et0 i p v 6 a d d res s 2002: c 0a 8 : 6 3 01 : 1 : : / 6 4 eui -6 4 I n terf a c e E th ern et1 i p a d d res s 1 9 2. 1 6 8 . 9 9 . 1 25 5 . 25 5 . 0. 0 i n terf a c e T un n el 0 i p v 6 un n um b ered E th ern et0 tun n el s ourc e E th ern et1 tun n el m od e i p v 6 i p 6 to4 i p v 6 route 2002: : / 1 6 T un n el 0
router2# i n terf a c e E th ern et0 i p v 6 a d d res s 2002: c 0a 8 : 1 e01 : 1 : : / 6 4 eui -6 4 I n terf a c e E th ern et1 i p a d d res s 1 9 2. 1 6 8 . 3 0. 1 25 5 . 25 5 . 0. 0 i n terf a c e T un n el 0 i p v 6 un n um b ered E th ern et0 tun n el s ourc e E th ern et1 tun n el m od e i p v 6 i p 6 to4 i p v 6 route 2002: : / 1 6 T un n el 0
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
79
Au t om a t i c 6t o4 R el a y
6 to 4 R o u ter1 6 to 4 R el ay IP v 6 I n tern et
IP v 6 Netw o rk
IPv4
I P v 6 S i te Netw o rk
N e t w o r k Pr e f i x :
1 9 2 . 1 68 . 9 9 . 1 =
1 9 2 . 1 68 . 30 . 1 =
2 0 0 2 : c 0 a 8 : 630 1 : : / 4 8
2 0 0 2 :c 0 a 8 :1 e 0 1 ::/4 8
N e t w o r k Pr e f i x :
6to4 R elay:
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
81
Au t om a t i c 6t o4 R el a y C on fi g u ra t i on
IP v 6 Netw o rk
E 0
6 to 4 R o u ter1
IPv4
6 to 4 R el ay
IP v 6 I n tern et IP v 6 Netw o rk
N e t w o r k Pr e f i x : 2 0 0 2 : c 0 a 8 : 630 1 : : / 4 8
1 9 2 . 1 68 . 9 9 . 1 =
IPv6 Ad d r e s s : 2 0 0 2 :c 0 a 8 :1 e 0 1 ::1
router1 # i n terf a c e E th ern et0 i p v 6 a d d res s 2002: c 0a 8 : 6 3 01 : 1 : : / 6 4 eui -6 4 I n terf a c e E th ern et1 i p a d d res s 1 9 2. 1 6 8 . 9 9 . 1 25 5 . 25 5 . 0. 0 i n terf a c e T un n el 0 n o i p a d d res s i p v 6 un n um b ered E th ern et0 tun n el s ourc e E th ern et1 tun n el m od e i p v 6 i p 6 to4 i p v 6 i p v 6 route 2002: : / 1 6 T un n el 0 route : : / 0 2002: c 0a 8 : 1 e01 : : 1
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
82
I S A TA P Tu n n e l i n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
84
In t ra s i t e Au t om a t i c T u n n el Addres s Prot oc ol
R FC To dep loy a rou ter is identif ied th at c arries IS ATAP servic es 4 2 1 4
IS ATAP rou ters need to h ave at least one IPv4 interf ac e and 0 or m ore IPv6 interf ac e
D N S entries are c reated f or eac h of th e IS ATAP rou ters IPv4 addresses H osts w ill au tom atic ally disc over IS ATAP rou ters and c an get ac c ess to global IPv6 netw ork H ost c an ap p ly th e IS ATAP servic e bef ore all th is op eration bu t its interf ac e w ill only h ave a link loc al v6 address u ntil th e f irst rou ter ap p ears
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
86
In t ra s i t e Au t om a t i c T u n n el Addres s Prot oc ol
U se IAN As O U I 00-00-5 E and Enc ode IPv4 Address as Part of EU I-64
64 -b i t U n i c a s t Pr e f i x 0 0 0 0 :5 E F E :
32-b i t
IPv4 Ad d r e s s In t e r f a c e Id e n t i f i e r ( 64 b i t s )
32-b i t
IS ATAP is u sed to tu nnel IPv4 w ith in as adm inistrative dom ain ( a site) to c reate a virtu al IPv6 netw ork over a IPv4 netw ork S u p p orted in Window s X P Pro S P1 and oth ers
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
87
IPv6 C a m p u s IS AT AP C on fi g u ra t i on
S u p p orted in Window s X P Pro S P1 and oth ers IS ATAP c onnec tions look lik e one f lat netw ork C reate D N S A rec ord f or IS ATAP = 1 0. 1 . 1 . 1
U se S tatic C onf ig if D N S u se is not desired: C:\>n e t s h i n t e r f a c e i p v 6 i s a t a p s e t r o u t e r 1 0 . 1 . 1 . 1 C u rrently IS ATAP does not su p p ort m u ltic ast! !
6 4 -b it U n ic a s t P r ef ix I S A T A P A ddr es s Fo r m a t : 0 0 0 0 : 5 E FE : 3 2 -b it
I P v 4 A ddr es s I n t er f a c e I D 3 2 -b it
2 0 0 1 : D B8 : C 0 0 3: 1 1 1 F : 0 : 5 E F E : 1 0 . 1 . 2 . 1 0 0
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d . C is c o C o n fid e n tia l
88
C l i en t C on fi g u ra t i on ( L i n u x ) : IS AT AP T u n n el s
L in u x C lien t IP v 6 L 3 L 3 S w it c h I P v 6 N o t S u p p o r t ed S w it c h / R o u t er
I P v 6 -e nab l e d
M od if ie d I P rout e p ack age U S A G I M ust conf igure I S A T A P rout e rnot aut omat ic
H o s t IP
# ip # ip tu nne l ad d is0 m o d e l ink se t is0 u p isatap 10. 1. 1. 100 v 4 any
R o u t e r IP
30. 1. 1. 1 ttl 6 4
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
89
Au t om a t i c Advert i s em en t of IS AT AP Prefi x
I S A T A P Ho s t A I P v 4 Netw o rk I S A T A P T u n n el E 0 I S A T A P R o u ter 1 IP v 6 Netw o rk
IC IP IP IP IP S
M P v 6 T y p e 133 ( R S ) v 4 S o u rc e: 20 6 . 123. 20 . 10 0 v 4 D es ti n ati o n : 20 6 . 123. 31. 20 0 v 6 S o u rc e: f e8 0 ::5 ef e:c e7 b :14 6 4 v 6 D es ti n ati o n : f e8 0 ::5 ef e:c e7 b :1f c 8 en d m e I S A T A P P ref i x
IC IP IP IP IP IS
M P v 4 v 4 v 6 v 6 A T
v 6 T y p e 134 ( R A ) S o u rc e: 20 6 . 123. 31. 20 0 D es ti n ati o n : 20 6 . 123. 20 . 10 0 S o u rc e: f e8 0 ::5 ef e:c e7 b :1f c 8 D es ti n ati o n : f e8 0 ::5 ef e:c e7 b :14 6 4 A P P ref i x: 20 0 1:db 8 :f f f f :2::/ 6 4
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
90
Au t om a t i c Addres s As s i g n m en t of H os t a n d R ou t er
I S A T A P Ho s t A I P v 4 Netw o rk I S A T A P T u n n el 20 6 . 123. 20 . 10 0 f e8 0 ::5 ef e:c e7 b :14 6 4 20 0 1:db 8 :f f f f :2::5 ef e:c e7 b :14 6 4 E 0 I S A T A P R o u ter 1 IP v 6 Netw o rk
n I S A T A P h ost A w ant s t o se nd I P v 6 p ack e t s t o : d b 8 : f f f f : 2 : : 5 e f e : ce 7 b : 1 f c8 , I S A T A P h ost A e ncap sul at e s p ack e t s in I P v 4 . T h e I P v 4 p ack e t s of t h e I P v 6 e ncap sul at e d e t s use I P v 4 source and d e st inat ion ad d re ss.
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
91
Au t om a t i c C on fi g u ri n g IS AT AP
I S A T A P Ho s t A I P v 4 Netw o rk I S A T A P T u n n el 20 6 . 123. 20 . 10 0 f e8 0 ::5 ef e:c e7 b :14 6 4 20 0 1:db 8 :f f f f :2::5 ef e:c e7 b :14 6 4
I S A T A P -router1 # ! i n terf a c e E th ern et0 i p a d d res s 206 . 1 23 . 3 1 . 200 25 5 . 25 5 . 25 5 . 0 ! i n terf a c e T un n el 0 i p v 6 a d d res s 2001 : d b 8 : f f f f : 2: : / 6 4 eui -6 4 n o i p v 6 n d s up p res s -ra tun n el s ourc e E th ern et0 tun n el m od e i p v 6 i p i s a ta p
E 0
I S A T A P R o u ter 1
IP v 6 Netw o rk
C o n fig u r e th e IS A T A P IP v 6 a d d r e s s , a n d p r e fix e s to b e a d v e r tis e d ju s t a s y o u w o u ld w ith a n a tiv e IP v 6 in te r fa c e T h e a s a b its th e IP v 6 a d d re s n E U I -6 4 a d in th e in te r fa IP v 4 d e s tin a s h d re c e tio n a s s s id e a d to b e s in c e n tifie d re s c o n fig u r e d th e la s t 3 2 r is u s e d a s
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
92
C on c l u s i on
I P v 6 is real ! S tart now rath er th an l ater
Purchase for the future S tart m ov i n g l eg acy ap p l i cati on tow ard s I Pv 6 sup p ort T est, test an d then test som e m ore!
I nteg ration c an b e done p er Ap p l ic ation ( Du al S tac k or T u nnel ed) M ic rosof t V ista and L ong h orn h av e I P v 6 enab l ed b y def au l t and p ref erred ov er I P v 4 T h ing s to c onsider:
D on t assum e y our fav ori te v en d or/ ap p / g ear has an I Pv 6 p l an F ul l p ari ty b etw een I Pv 4 an d I Pv 6 i s sti l l a w ay s off W atch the stan d ard s an d p ol i ci es: http : / / w w w . i etf. org & http : / / w w w . ari n . n et/ p ol i cy / p rop osal s/ 2 0 0 6 _ 4 . htm l I S P I Pv 6 D ep l oy m en t S cen ari os i n B road b S cen ari os an d A n al y si s for I n trod uci n g I Pv I Pv 6 E n terp ri se N etw ork S cen ari os ( R F C 4 Proced ures for R en um b eri n g an I Pv 6 N etw
C is c o C o n fid e n tia l
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
a n d A
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
10 0
R ec om m en ded R ea di n g
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
10 1
M ore In form a t i on
C C O IPv6 e-L earning [ req u ires C C O IPv6 Ac c ess S ervic es
h ttp : / / w w w . c isc o. c om / ip v 6
IPv6
h ttp : / / w w w . c isc o. c om / w arp / p u b l ic / 7 3 2/ T ec h / ip v 6 / doc s/ ip v 6 _ ac c ess_ w p _ v 2. p df h ttp : / / w w w . c isc o. c om / w arp / c u stom er/ 10 5/ ic m p v 6 c odes. h tm l
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
10 2
2 0 0 7 C is c o S y s te m s , In c . A ll r ig h ts r e s e r v e d .
C is c o C o n fid e n tia l
10 3