Beruflich Dokumente
Kultur Dokumente
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 1
Who am I?
• Rick Graziani - graziani@cabrillo.edu
• CS/CIS instructor at Cabrillo College, Santa
Cruz, California
• Working in IT since 1980
• Cisco Networking Academy instructor since 1997
• Practice what I preach…
• Implementing native IPv6 at Cabrillo College
• Home: Run native IPv6 (& IPv4) to the Internet
• Curriculum Development Team for Cisco
Networking Academy
• When not working, hopefully I’m surfing.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 2
Topics
• Why IPv6? (briefly and quickly)
• Format of an IPv6 Address
• IPv6 Address Types
• Global Unicast IPv6 Address
• Link-Local Unicast IPv6 Address
• Multicast IPv6 Addresses
• ICMPv6 – Neighbor Discovery Protocol
• A lot of stuff, but don’t be intimidated!
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 3
So we can finish, please hold questions until the end….
I will be available afterward!
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 4
Why are they making me learn IPv6?
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 5
The Internet of Things, The Internet of Everything
• Monday, January 31, 2011 IANA allocated two blocks of IPv4 address space to
APNIC, the RIR for the Asia Pacific region
• This triggered a global policy to allocate the remaining IANA pool of 5 /8’s equally
between the five RIRs.
• So, basically…
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 7
“All of
this
could
have all
been
avoided
with
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential.
IPv6.” 8
When do I have to go to IPv6?
IPv4 IPv6
• IPv4 and IPv6 will coexist for the foreseeable future.
• Dual-stack – Device running both IPv4 and IPv6.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 9
Various transition strategies
Tunneling – IPv6 packets
encapsulated inside IPv4 packets.
• IETF does not support the concept of translating a “private IPv6” address
to a “public” IPv6 address.
• NAT for IPv4 breaks many things.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 11
IPv4 and IPv6
• Routers do not fragment IPv6 packets unless it is the source of the packet.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 13
Understanding the format of IPv6 Address
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 14
IPv6 Address Notation
2001:0DB8:AAAA:1111:0000:0000:0000:0100/64
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 16
This isn’t the first time
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 17
Rule 1: Leading 0’s
Two rules for reducing the size of written IPv6 addresses.
The first rule is: Leading zeroes in any 16-bit segment do not have to be
written.
FE80::1
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 19
Rule 2: Double colon :: equals 0000…0000
Only a single contiguous string of all-zero segments can be represented
with a double colon.
Both of these are correct…
FE80 :: 14 : 0 : 0 : 95
OR
FE80 : 0 : 0 : 0 : 14 :: 95
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 20
Rule 2: Double colon :: equals 0000…0000
Using the double colon more than once in an IPv6 address can create
ambiguity because of the ambiguity in the number of 0’s.
FE80::14::95
FE80:0000:0000:0000:0014:0000:0000:0095
FE80:0000:0000::0014:0000:00000000:0095
FE80:0000:0014:0000:0000:0000:0000:0095
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 21
Network Prefixes
IPv4, the prefix—the network portion of the address—can be identified
by a dotted decimal netmask or bitcount.
255.255.255.0 or /24
16 32 48 64 bits
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 22
IPv6 Addresses
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 23
IPv6 Addressing
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 25
Global Unicast Address (GUA)
Global Routing Prefix Subnet ID Interface ID
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 26
Global Unicast Address (GUA)
Global Routing Prefix Subnet ID Interface ID
32 bits
128 bits
• 64-bit Interface ID = 18 quintillion (18,446,744,073,709,551,616) devices/subnet
• 16-bit Subnet ID = 65,536 subnets
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 28
/64 Global Unicast Addresses and the 3-1-4 rule
/48 /64
16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits 16 bits
3 + 1 = 4 (/64) : 4
2001:0DB8:AAAA:1111:0000:0000:0000:0100/64
2001:0DB8:AAAA:1111::100/64
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 29
Subnetting IPv6 and Why Our Students Will Love IPv6
Prefix Interface ID
/68 Prefix
/70 Prefix
Global Unicast
Manual Dynamic
IPv6 Stateless
IPv6 Address Unnumbered Autoconfiguration DHCPv6
Static EUI-64
CCNA or CCNP Routing
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 35
Topology
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 36
R1(config)#interface gigabitethernet 0/0
R1(config-if)#ipv6 address 2001:db8:acad:1::1/64
R1(config-if)#no shutdown
R1(config-if)#exit
No space
• Exactly the same as an IPv4 address only different.
• No space between IPv6 address and Prefix-length.
• IOS commands for IPv6 are very similar to their IPv4 counterpart.
• All 0’s and all 1’s are valid IPv6 host IPv6 addresses.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 37
R1(config)#interface gigabitethernet 0/1
R1(config-if)#ipv6 address 2001:db8:acad:2::1/64
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface serial 0/0/0
R1(config-if)#ipv6 address 2001:db8:acad:3::1/64
R1(config-if)#clock rate 56000
R1(config-if)#no shutdown
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 38
show running-config command on router R1
R1# show running-config
<output omitted for brevity>
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address 2001:DB8:ACAD:1::1/64
!
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 39
show ipv6 interface brief command on router R1
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 40
PC1: Static Global Unicast Address
2001:db8:acad:1::10
64
2001:db8:acad:1::1
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 41
PC1: Static Global Unicast Address
PC1> ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:db8:acad:1::10
Link-local IPv6 Address . . . . . : fe80::50a5:8a35:a5bb:66e1%11
Default Gateway . . . . . . . . . : 2001:db8:acad:1::1
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 42
Pinging a Global Unicast IPv6 Addresses
Ping uses ICMPv6 Echo Request and Echo Reply messages similar to ICMPv4.
PC1> ping 2001:db8:acad:1::1
PC1>
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 43
Configuring Dynamic IPv6 Addresses
Global Unicast
Manual Dynamic
IPv6 Stateless
IPv6 Address Unnumbered Autoconfiguration DHCPv6
Static EUI-64
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 44
IPv4 Dynamic Addresses
DHCP Server
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 45
With IPv6 it begins with the Router Advertisement
• The Router Advertisement (RA) tells hosts how it will receive IPv6 Address
Information.
• Sent periodically by an IPv6 router or…
Option 1 DHCPv6
Server
“I’m everything you need (Prefix, Prefix-length, Default Gateway)”
1
Option 1 – RA Message
2
To: FF02::1 (All IPv6 devices
multicast) Prefix: 2001:DB8:ACAD:1::
RA Prefix-length: /64
From: FE80::1 (Link-local address)
Prefix: 2001:DB8:ACAD:1:: Default Gateway: FE80::1
3 EUI-64 Process or
DHCPv6 Server Random 64-bit value
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 49
Dynamic Interface ID
SLAAC
EUI-64 Process Randomly Generated Number
1
Option 1 – RA Message
2
To: FF02::1 (All-hosts multicast)
Prefix: 2001:DB8:ACAD:1::
From: FE80::1 (Link-local address) RA Prefix-length: /64
Prefix: 2001:DB8:ACAD:1::
Default Gateway: FE80::1
Prefix-length: /64
Global Unicast Address:
2001:DB8:ACAD:1: + Interface ID
EUI-64 Process or
DHCPv6 Server Random 64-bit value
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 51
EUI-64 OUI Device Identifier
24 bits 24 bits
Hexadecimal 00 03 6B E9 D4 80
Step 1: Split the MAC address
Binary 0000 0000 0000 0011 0110 1011 1110 1101 0100 1000 0000
1001
Binary 0000 0010 0000 0011 0110 1011 1111 1111 1111 1110 1110 1101 0100 1000 0000
1001
Binary 02 03 6B FF FE E9 D4 80
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 52
PC1: Global Unicast
Address
Router Advertisement EUI-64
PC1> ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:db8:acad:1:02-03-6b-ff-fe-e9-d4-80
Link-local IPv6 Address . . . . . : fe80::02-03-6b-ff-fe-e9-d4-80
Default Gateway . . . . . . . . . : fe80::1
• DHCPv6 is similar to
DHCPv4. DHCPv6
• Host operating systems
DHCPv6
“may” include the option of
Server
ignoring the Router
Advertisement from the
router and only use the
stateful services of a
DHCPv6 server.
• Note: All addresses should
be checked before use with
DAD (Duplicate Address
Detection), similar to
gratuitous ARP in IPv4.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 54
Link-Local Unicast IPv6 Addresses
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 55
IPv6 Addressing
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 57
Link-local unicast
Link-Local Communications
PC1> ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix .:
IPv6 Address. . . . . . . . . : 2001:db8:acad:1:3496:1c51:3f57:fe89
Link-local IPv6 Address . . . : fe80::3496:1c51:3f57:fe89
Default Gateway . . . . . . . : fe80::1
• Many operating systems will use a random 64-bit Interface IDs for GUA and Link-
Local IPv6 Addresses.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 60
Configuring Static G0/0
S0/0/0
Link-Local Addresses FE80::1
FE80::1
G0/1 R1
Static addresses are more easily remembered FE80::1
and recognizable.
R1(config)#interface gigabitethernet 0/0
R1(config-if)#ipv6 address fe80::1 ?
link-local Use link-local address
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 64
IPv6 Multicast
IPv6 Addressing
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 65
IPv6 Multicast
8 bits 4 bits 4 bits 112bits
FF00::/8
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 67
Assigned
FE80::0123:456:789A:BCDE FF02::2
Multicast
Addresses
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 68
Multicast Groups of a Router
R1# show ipv6 interface gigabitethernet 0/0
FastEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::FE99:47FF:FE75:C3E0
Global unicast address(es):
2001:DB8:ACAD:1::1, subnet is 2001:DB8:ACAD:1::/64
Joined group address(es): Member of these Multicast Groups
FF02::1 All-IPv6 devices on this link
FF02::2 All-IPv6 routers on this link: IPv6 routing enabled
FF02::1:FF00:1
Solicited-node multicast address for Global Address
FF02::1:FF75:C3E0
Solicited-node multicast address for Link-local Unicast
<output omitted for brevity> Address
• Devices process packets with their solicited node multicast address as the
destination address: IP and MAC.
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 70
Solicited Node Multicast – It’s not pretty but it’s simple
Global Unicast Address
Global Routing Prefix Subnet ID Interface ID
104 bits 24 bits
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 71
Solicited Node Multicast – Used in Address Resolution
• All IPv6 Devices Multicast: FF02::1
I listen for • Link-Local Address: FE80::02-03-6B-FF-FE-8C-E0-80
several IPv6
• Global Unicast Address: 2001:DB8:ACAD:1::10
addresses!
• Solicited Node Multicast Address: FF02::1:FF00:0010
Note (beyond CCNA): Solicited Node Multicast addresses are also mapped to a
special multicast MAC address: 33-33-FF-00-00-10
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 72
A Brief look at ICMPv6
(Internet Control Message Protocol for IPv6)
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 73
Internet Control Message Protocol (ICMPv6)
IPv6 Next Header Value: 58 decimal or 3A hexadecimal
IPv6 Header
IPv6 Data
Device-Device
• Neighbor Solicitation Message Messaging
• Neighbor Advertisement Message
1
FF02::2 Router Solicitation Message PC1
All IPv6 Routers I need IPv6 address information.
DHCPv6 Server
Router Advertisement Message
Here is one of three options:
1. I have everything you need. 2
2. I have mostly what you need, but you will need
FF02::1
FF02::1
to contact a DHCPv6 server for other All IPv6 Devices
information like a DNS address.
3. I have nothing for you. Contact a DHCPv6
serverl
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 76
Neighbor Solicitations and Neighbor Advertisements
• Address Resolution - A device knows the IPv6 address but needs the Layer 2 MAC address.
R1#
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 79
What we covered…
• Why IPv6? (briefly and quickly)
• Format of an IPv6 Address Teach it and
• IPv6 Address Types use it, and it
• Global Unicast IPv6 Address will all make
• Link-Local Unicast IPv6 Address sense!
• Multicast IPv6 Addresses
• ICMPv6 – Neighbor Discovery Protocol
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 80
My Afternoon Presentation:
IPv6 in CCNA 2 – Routing Protocols
• Chapter 1: Routing Concepts
• Chapter 2: Static Routing
• Chapter 3: Routing Dynamically
• Chapter 4: EIGRP
• Chapter 5: Advanced EIGRP
• Chapter 6: Single Area OSPF
• Chapter 7: Advanced Single Area OSPF
• Chapter 8: Multi-Area OSPF
• Chapter 9: Access Control Lists
• Chapter 10: IOS File Management
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 81
Shameless plug!
Web Site, Book, Etc.
• Rick Graziani - graziani@cabrillo.edu
• PowerPoints for CCNA, CCNP, IPv6
• www.cabrillo.edu/~rgraziani
• Username = cisco
• Password = perlman
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 82
And…… Thank you very much!
Rick Graziani - graziani@cabrillo.edu
www.cabrillo.edu/~rgraziani
Username = cisco
Password = perlman
Cisco Networking Academy, US/Canada © 2013 Cisco Systems, Inc. All rights reserved. Cisco confidential. 83