SlideShare ist ein Scribd-Unternehmen logo
1 von 42
Implementation of IPv6 
Syed Arshad 
Network Security Engineer
What we are going to do 
• IPv6 Overview 
• IPv6 Features 
• IPv6 Addressing Modes 
• IPv6 Address Types 
• IPv6 Special Address 
• IPv6 Headers 
• IPv6 Communication 
• IPv6 Routing 
• IPv6 Implementation 
• IPv6 Summary
IPv4 Recall
IPv6 Overview 
• Internet Protocol version 6 (IPv6), is a new addressing protocol 
designed to incorporate whole sort of requirement of future internet 
known to us as Internet version 2. 
• IPv6 is a 128 bit address 
• It is represented as 32 hexadecimal numbers arranged in 8 quartets of 
4 hexadecimal digit separated by a “ : ” 
• Ex: 2001:ABCD:25687:EFCD:ABCD:25687:EFCD:3458 
• Case insensitive for A, B, C, D, E and F 
• IPv6 is currently a flat addressing scheme i.e, it is not divided into 
classes. 
Prefix Host
Why new IP version? 
• IPv4 has proven itself as a robust routable addressing protocol and has 
served human being for decades on its best-effort-delivery mechanism. 
• It was designed in early 80‟s and did not get any major change afterward. 
• At the time of its birth, Internet was limited only to a few Universities for 
their research and to Department of Defense. 
• IPv4 is 32 bits long which offers around 4,294,967,296 (232) addresses. This 
address space was considered more than enough that time.
Below are the few points for IPv6 birth 
• Internet has grown exponentially and the address space allowed by IPv4 is 
saturating. 
• IPv4 on its own does not provide any security feature which makes data 
vulnerable on Internet 
• Data prioritization in IPv4 is not up to date.
Wait
Where is IPv5 ? 
• Till date, Internet Protocol has been recognized has IPv4 only. 
• Version 0 to 3 were used while the protocol was itself under 
development and experimental process. 
• So, we can assume lots of background activities remain active before 
putting a protocol into production. 
• Similarly, protocol version 5 was used while experimenting with 
stream protocol for internet. 
• It is known to us as Internet Stream Protocol which used Internet 
Protocol number 5 to encapsulate its datagram. 
• Though it was never brought into public use, but it was already used.
IPv6 Features 
• Larger Address Space 
• Simplified Header 
• End-to-end Connectivity 
• Auto-configuration 
• Faster Forwarding/Routing 
• IPSec 
• No Broadcast 
• Anycast Support 
• Mobility 
• Enhanced Priority support 
• Smooth Transition 
• Extensibility
• Larger Address Space: 
• IP Version 6 is a 128 bit address 
• 2128 = 3.4 x1038 [Approx 340 Trillion Trillion Trillion IP addresses] 
• According to an estimate, 1564 addresses can be allocated to every square meter of this 
earth. 
• Simplified Header: 
• IPv6 header has been simplified by moving all unnecessary information and options 
(which are present in IPv4 header) to the end of the IPv6 header. 
• End-to-end Connectivity: 
• Every system now has unique IP address and can traverse through the internet without 
using NAT or other translating components 
• Auto-configuration: 
• IPv6 supports both stateful and stateless auto configuration mode of its host devices. 
This way absence of a DHCP server does not put halt on inter segment communication.
• Faster Forwarding/Routing: 
• Simplified header puts all unnecessary information at the end of the header. 
• All information in first part of the header are adequate for a Router to take routing 
decision thus making routing decision as quickly as looking at the mandatory header. 
• IPSec: 
• Initially it was decided for IPv6 to must have IPSec security, making it more secure than 
IPv4. This feature has now been made optional. 
• No Broadcast: 
• IPv6 does not have any Broadcast support anymore left with it. It uses multicast to 
communicate with multiple hosts.
IPv6 Addressing Modes 
1. Unicast 
• Global Unicast (Public IP addresses) 
• Link-Local Unicast (Private IP addresses) 
• Loopback Address (Virtual IPs) 
2. Multicast 
3. Anycast
1. Unicast 
• In unicast mode of addressing, an IPv6 interface (host) is uniquely identified in 
a network segment. 
• The IPv6 packet contains both source and destination IP addresses. A host 
interface is equipped with an IP address which is unique in that network 
segment. 
• A network switch or router when receives a unicast IP packet, destined to 
single host, sends out to one of its outgoing interface which connects to that 
particular host.
Unicast
• Global Unicast Address 
• This address type is equivalent to IPv4‟s public address. Global Unicast addresses in IPv6 
are globally identifiable and uniquely addressable. 
• Global Routing Prefix: The most significant 48-bits are designated as Global Routing 
Prefix which is assigned to specific Autonomous System. Three most significant bits of 
Global Routing Prefix is always set to 001. 
• Link-Local Address 
• Auto-configured IPv6 address is known as Link-Local address. This address always starts 
with FE80. First 16 bits of Link-Local address is always set to 1111 1110 1000 0000 
(FE80). Next 48-bits are set to 0 
• Link-Local addresses are used for communication among IPv6 hosts on a link (broadcast 
segment) only. These addresses are not routable so a Router never forwards these 
addresses outside the link.
• Unique-Local Address 
• This type of IPv6 address which is though globally unique, but it should be used in local 
communication. This address has second half of Interface ID and first half is divided 
among Prefix, Local Bit, Global ID and Subnet ID. 
• Prefix is always set to 1111 110. L bit, which is set to 1 if the address is locally assigned. 
So far the meaning of L bit to 0 is not defined. Therefore, Unique Local IPv6 address 
always starts with „FD‟.
Multicast 
• The IPv6 multicast mode is same as that of IPv4. 
• The packet destined to multiple hosts is sent on a special multicast 
address. 
• All hosts interested in that multicast information, need to join that 
multicast group first. 
• All interfaces which have joined the group receive the multicast 
packet and process it, while other hosts not interested in multicast 
packets ignore the multicast information.
Multicast Example
Anycast 
• IPv6 has introduced a new type of addressing, which is called Anycast 
addressing. 
• In this addressing mode, multiple interfaces (hosts) are assigned same 
Anycast IP address. 
• When a host wishes to communicate with a host equipped with an Anycast IP 
address, sends a Unicast message. 
• With the help of complex routing mechanism, that Unicast message is 
delivered to the host closest to the Sender, in terms of Routing cost.
Anycast Example
Special Addresses
IPv6 Address Type 
• Before introducing IPv6 Address format, we shall look into Hexadecimal 
Number System. 
• Hexadecimal is positional number system which uses radix (base) of 16. 
• To represent the values in readable format, this system uses 0-9 symbols to 
represent values from zero to nine and A-F symbol to represent values from 
ten to fifteen. 
• Every digit in Hexadecimal can represent values from 0 to 15.
Address Structure 
• An IPv6 address is made of 128 bits divided into eight 16-bits blocks. Each 
block is then converted into 4-digit Hexadecimal numbers separated by colon 
symbol. 
• For example, the below is 128 bit IPv6 address represented in binary format 
and divided into eight 16-bits blocks: 
• 0010000000000001 0000000000000000 0011001000110100 
1101111111100001 0000000001100011 0000000000000000 
0000000000000000 1111111011111011 
• Each block is then converted into Hexadecimal and separated by „:‟ symbol: 
2001:0000:3238:DFE1:0063:0000:0000:FEFB
Cont.. 
• Even after converting into Hexadecimal format, IPv6 address remains long. 
IPv6 provides some rules to shorten the address. 
• These rules are: 
• Rule:1 Discard leading Zero(es): 
• In Block 5, 0063, the leading two 0s can be omitted, such as (5th block): 
2001:0000:3238:DFE1:63:0000:0000:FEFB 
• Rule:2 If two of more blocks contains consecutive zeroes, omit them all and 
replace with double colon sign ::, such as (6th and 7th block): 
2001:0000:3238:DFE1:63::FEFB Consecutive blocks of zeroes can be replaced 
only once by :: so if there are still blocks of zeroes in the address they can be 
shrink down to single zero, such as (2nd block): 2001:0:3238:DFE1:63::FEFB
IPv6 Header 
An Internet Protocol version 6 (IPv6) data packet comprises of two main parts: the header and the payload. The 
first 40 bytes/octets (40x8 = 320 bits) of an IPv6 packet comprise of the header 
31
IPv6 – IPv4 to IPV6 
• One problem in transition from IPv4 to IPv6 completely is that IPv6 is not 
backward compatible. 
• This results in a situation where either a site is on IPv6 or it is not. 
• Unlike an implementation of new technology where the newer one is 
backward compatible so the older system can still work with the newer 
without any additional changes. 
• To overcome this short-coming, there exist few technologies which can be used 
in slow and smooth transition from IPv4 to IPv6:
Dual Stack Routers 
It's a process of configuring IPv4 and IPv6 address on the same interface.
Tunneling 
• In a scenario where different IP versions exist on intermediate path or transit 
network, tunneling provides a better solution where user's data can pass 
through a non-supported IP version. 
• The above diagram depicts how two remote IPv4 networks can communicate 
via Tunnel, where the transit network was on IPv6. Vice versa is also possible 
where transit network is on IPv6 and remote sites which intends to 
communicate, are on IPv4.
NAT Protocol Translation 
• This is another important method of transition to IPv6 by means of a NAT-PT 
(Network Address Translation – Protocol Translation) enabled device. With 
help of NAT-PT device, actual conversion happens between IPv4 and IPv6 
packets and vice versa. See the diagram below:
IPv6 Routing Protocols 
• RIPng (Routing Information Protocol Next Generation) 
• OSPFv3 
• BGPv4 
• EIGRPv6 
• Other Protocols like 
• ICMPv6 
• DHCPv6 
• DNS
Configuring with IPv6 
Router(config)#ipv6 unicast-routing 
Router(config-if)#ipv6 enable 
38
Future of IPv6 
• IPv6 enabled Internet version 2 will replace todays IPv4 enabled Internet. 
• When Internet was launched with IPv4, developed countries like US and Europe took the 
larger space of IPv4 for deployment of Internet in their respective countries keeping future 
need in mind. But Internet exploded everywhere reaching and connecting every country of 
the world increasing the requirement of IPv4 address space. 
• As a result, till this day US and Europe have many IPv4 address space left with them and 
countries like India and China are bound to address their IP space requirement by means 
of deployment of IPv6. 
• Most of the IPv6 deployment is being done outside US, Europe. India and China are 
moving forward to change their entire space to IPv6. 
• China has announced a five year deployment plan named China Next Generation Internet. 
After June 06, 2012 all major ISPs were shifted to IPv6 and rest of them are still moving. 
IPv6 provides ample of address space and is designed to expand today‟s Internet services. 
Feature-rich IPv6 enabled Internet version 2 may deliver more than expected.
Questions / Suggestions 
Please! 
40
Thank you 
41
Arsh Networks 
Syed Arshad 
Cisco (R&S, Security and Wireless) | Checkpoint | UTMs | Linux |Microsoft | VMware 
E-Mail : arshnetwors@gmail.com 
Blog : http://arshnetworks.blogspot.com/ 
Skype : arshnetworks 
42

Weitere ähnliche Inhalte

Was ist angesagt?

Internet Protocol Version 6
Internet Protocol Version 6Internet Protocol Version 6
Internet Protocol Version 6sandeepjain
 
Network address translation
Network address translationNetwork address translation
Network address translationVarsha Honde
 
Arp (address resolution protocol)
Arp (address resolution protocol)Arp (address resolution protocol)
Arp (address resolution protocol)tigerbt
 
Unicast multicast & broadcast
Unicast multicast & broadcastUnicast multicast & broadcast
Unicast multicast & broadcastNetProtocol Xpert
 
Internet protocol v6
Internet protocol v6Internet protocol v6
Internet protocol v6Pramith P
 
Internet control message protocol
Internet control message protocolInternet control message protocol
Internet control message protocolasimnawaz54
 
Address resolution protocol (ARP)
Address resolution protocol (ARP)Address resolution protocol (ARP)
Address resolution protocol (ARP)NetProtocol Xpert
 
CCNA Advanced Routing Protocols
CCNA Advanced Routing ProtocolsCCNA Advanced Routing Protocols
CCNA Advanced Routing ProtocolsDsunte Wilson
 
Open shortest path first (ospf)
Open shortest path first (ospf)Open shortest path first (ospf)
Open shortest path first (ospf)Respa Peter
 
BGP (border gateway routing protocol)
BGP (border gateway routing protocol)BGP (border gateway routing protocol)
BGP (border gateway routing protocol)Netwax Lab
 

Was ist angesagt? (20)

IPv6
IPv6IPv6
IPv6
 
Internet Protocol Version 6
Internet Protocol Version 6Internet Protocol Version 6
Internet Protocol Version 6
 
Network address translation
Network address translationNetwork address translation
Network address translation
 
Ipv4 vs Ipv6 comparison
Ipv4 vs Ipv6 comparisonIpv4 vs Ipv6 comparison
Ipv4 vs Ipv6 comparison
 
IPv6
IPv6IPv6
IPv6
 
Cn ipv4 addressing
Cn ipv4 addressingCn ipv4 addressing
Cn ipv4 addressing
 
Ip addressing classful
Ip addressing classfulIp addressing classful
Ip addressing classful
 
Dynamic routing protocols (CCNA)
Dynamic routing protocols (CCNA)Dynamic routing protocols (CCNA)
Dynamic routing protocols (CCNA)
 
Arp (address resolution protocol)
Arp (address resolution protocol)Arp (address resolution protocol)
Arp (address resolution protocol)
 
Presentation on arp protocol
Presentation on arp protocolPresentation on arp protocol
Presentation on arp protocol
 
ipv6 ppt
ipv6 pptipv6 ppt
ipv6 ppt
 
Unicast multicast & broadcast
Unicast multicast & broadcastUnicast multicast & broadcast
Unicast multicast & broadcast
 
Internet protocol v6
Internet protocol v6Internet protocol v6
Internet protocol v6
 
Internet control message protocol
Internet control message protocolInternet control message protocol
Internet control message protocol
 
Address resolution protocol (ARP)
Address resolution protocol (ARP)Address resolution protocol (ARP)
Address resolution protocol (ARP)
 
CCNA Advanced Routing Protocols
CCNA Advanced Routing ProtocolsCCNA Advanced Routing Protocols
CCNA Advanced Routing Protocols
 
Open shortest path first (ospf)
Open shortest path first (ospf)Open shortest path first (ospf)
Open shortest path first (ospf)
 
Static Routing
Static RoutingStatic Routing
Static Routing
 
BGP (border gateway routing protocol)
BGP (border gateway routing protocol)BGP (border gateway routing protocol)
BGP (border gateway routing protocol)
 
BGP protocol presentation
BGP protocol  presentationBGP protocol  presentation
BGP protocol presentation
 

Andere mochten auch

IPv4 to IPv6
IPv4 to IPv6IPv4 to IPv6
IPv4 to IPv6mithilak
 
IPv6 introduction
IPv6 introductionIPv6 introduction
IPv6 introductionGuider Lee
 
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]APNIC
 
IPv6 Autoconfig
IPv6 AutoconfigIPv6 Autoconfig
IPv6 AutoconfigFred Bovy
 
Applying IPv6 to LTE Networks
Applying IPv6 to LTE NetworksApplying IPv6 to LTE Networks
Applying IPv6 to LTE NetworksAPNIC
 
IPv6 Deployment: Case of Sudan/SudREN
IPv6 Deployment: Case of Sudan/SudRENIPv6 Deployment: Case of Sudan/SudREN
IPv6 Deployment: Case of Sudan/SudRENAPNIC
 
IPV6 Hands on Lab
IPV6 Hands on Lab IPV6 Hands on Lab
IPV6 Hands on Lab Cisco Canada
 
Nat presentation
Nat presentationNat presentation
Nat presentationhassoon3
 
Ipv6 the next generation protocol
Ipv6 the next generation protocolIpv6 the next generation protocol
Ipv6 the next generation protocolPRADEEP Cheekatla
 

Andere mochten auch (20)

Paper on IPV6 & LTE
Paper on IPV6 & LTEPaper on IPV6 & LTE
Paper on IPV6 & LTE
 
Ipv6
Ipv6Ipv6
Ipv6
 
IPV6 INTRODUCTION
IPV6 INTRODUCTIONIPV6 INTRODUCTION
IPV6 INTRODUCTION
 
IPv4 to IPv6
IPv4 to IPv6IPv4 to IPv6
IPv4 to IPv6
 
I Pv6
I Pv6I Pv6
I Pv6
 
IPv6 introduction
IPv6 introductionIPv6 introduction
IPv6 introduction
 
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]
Cisco IPv6 Deployment Statics, by Shishio Tsuchiya [APRICOT 2015]
 
IP VERSION 6
IP VERSION 6IP VERSION 6
IP VERSION 6
 
IPv6 Autoconfig
IPv6 AutoconfigIPv6 Autoconfig
IPv6 Autoconfig
 
Applying IPv6 to LTE Networks
Applying IPv6 to LTE NetworksApplying IPv6 to LTE Networks
Applying IPv6 to LTE Networks
 
IPv6 Overview
IPv6 OverviewIPv6 Overview
IPv6 Overview
 
IPv6 Deployment: Case of Sudan/SudREN
IPv6 Deployment: Case of Sudan/SudRENIPv6 Deployment: Case of Sudan/SudREN
IPv6 Deployment: Case of Sudan/SudREN
 
IPV6 Hands on Lab
IPV6 Hands on Lab IPV6 Hands on Lab
IPV6 Hands on Lab
 
Nat presentation
Nat presentationNat presentation
Nat presentation
 
Cognitive computing 2016
Cognitive computing 2016Cognitive computing 2016
Cognitive computing 2016
 
What is Network Address Translation (NAT)
What is Network Address Translation (NAT)What is Network Address Translation (NAT)
What is Network Address Translation (NAT)
 
IPV6 ppt
IPV6 pptIPV6 ppt
IPV6 ppt
 
IPv6 theoryfinalx
IPv6 theoryfinalxIPv6 theoryfinalx
IPv6 theoryfinalx
 
Ipv6
Ipv6Ipv6
Ipv6
 
Ipv6 the next generation protocol
Ipv6 the next generation protocolIpv6 the next generation protocol
Ipv6 the next generation protocol
 

Ähnlich wie IPv6 Implementation Guide

Ähnlich wie IPv6 Implementation Guide (20)

Introduction to ipv6 v1.3
Introduction to ipv6 v1.3Introduction to ipv6 v1.3
Introduction to ipv6 v1.3
 
Ipv6 routing
Ipv6 routingIpv6 routing
Ipv6 routing
 
IPv6 The Big Move
IPv6 The Big MoveIPv6 The Big Move
IPv6 The Big Move
 
UNIT-2.pptx
UNIT-2.pptxUNIT-2.pptx
UNIT-2.pptx
 
IPv6 By Vipin
IPv6 By VipinIPv6 By Vipin
IPv6 By Vipin
 
6421 b Module-04
6421 b Module-046421 b Module-04
6421 b Module-04
 
ipv4 to 6
ipv4 to 6ipv4 to 6
ipv4 to 6
 
IPv6
IPv6IPv6
IPv6
 
I pv4 vs ipv6
I pv4 vs ipv6I pv4 vs ipv6
I pv4 vs ipv6
 
Compatibility between IPv4 and IPv6
Compatibility between IPv4 and IPv6Compatibility between IPv4 and IPv6
Compatibility between IPv4 and IPv6
 
IPv6
IPv6IPv6
IPv6
 
Ipv6 presentation
Ipv6 presentation Ipv6 presentation
Ipv6 presentation
 
I pv6
I pv6I pv6
I pv6
 
8-Lect_8 Addressing the Network.tcp.pptx
8-Lect_8 Addressing the Network.tcp.pptx8-Lect_8 Addressing the Network.tcp.pptx
8-Lect_8 Addressing the Network.tcp.pptx
 
IPv6 on the Interop Network
IPv6 on the Interop NetworkIPv6 on the Interop Network
IPv6 on the Interop Network
 
Mobile ipv6
Mobile ipv6Mobile ipv6
Mobile ipv6
 
IPv6.pptx
IPv6.pptxIPv6.pptx
IPv6.pptx
 
Introduction to IPv6
Introduction to IPv6Introduction to IPv6
Introduction to IPv6
 
I pv6(internet protocol version 6)
I pv6(internet protocol version 6)I pv6(internet protocol version 6)
I pv6(internet protocol version 6)
 
Tutorial: IPv6-only transition with demo
Tutorial: IPv6-only transition with demoTutorial: IPv6-only transition with demo
Tutorial: IPv6-only transition with demo
 

Kürzlich hochgeladen

Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxLoriGlavin3
 
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxA Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxLoriGlavin3
 
React Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkReact Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkPixlogix Infotech
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxLoriGlavin3
 
Zeshan Sattar- Assessing the skill requirements and industry expectations for...
Zeshan Sattar- Assessing the skill requirements and industry expectations for...Zeshan Sattar- Assessing the skill requirements and industry expectations for...
Zeshan Sattar- Assessing the skill requirements and industry expectations for...itnewsafrica
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPathCommunity
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch TuesdayIvanti
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxLoriGlavin3
 
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfGenerative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfIngrid Airi González
 
Top 10 Hubspot Development Companies in 2024
Top 10 Hubspot Development Companies in 2024Top 10 Hubspot Development Companies in 2024
Top 10 Hubspot Development Companies in 2024TopCSSGallery
 
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Farhan Tariq
 
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesMuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesManik S Magar
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfNeo4j
 
Landscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfLandscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfAarwolf Industries LLC
 
Generative AI - Gitex v1Generative AI - Gitex v1.pptx
Generative AI - Gitex v1Generative AI - Gitex v1.pptxGenerative AI - Gitex v1Generative AI - Gitex v1.pptx
Generative AI - Gitex v1Generative AI - Gitex v1.pptxfnnc6jmgwh
 
Testing tools and AI - ideas what to try with some tool examples
Testing tools and AI - ideas what to try with some tool examplesTesting tools and AI - ideas what to try with some tool examples
Testing tools and AI - ideas what to try with some tool examplesKari Kakkonen
 
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better StrongerModern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better Strongerpanagenda
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersNicole Novielli
 
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...BookNet Canada
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...Wes McKinney
 

Kürzlich hochgeladen (20)

Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
 
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxA Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
 
React Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App FrameworkReact Native vs Ionic - The Best Mobile App Framework
React Native vs Ionic - The Best Mobile App Framework
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
 
Zeshan Sattar- Assessing the skill requirements and industry expectations for...
Zeshan Sattar- Assessing the skill requirements and industry expectations for...Zeshan Sattar- Assessing the skill requirements and industry expectations for...
Zeshan Sattar- Assessing the skill requirements and industry expectations for...
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to Hero
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch Tuesday
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
 
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfGenerative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdf
 
Top 10 Hubspot Development Companies in 2024
Top 10 Hubspot Development Companies in 2024Top 10 Hubspot Development Companies in 2024
Top 10 Hubspot Development Companies in 2024
 
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...
 
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotesMuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
MuleSoft Online Meetup Group - B2B Crash Course: Release SparkNotes
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdf
 
Landscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdfLandscape Catalogue 2024 Australia-1.pdf
Landscape Catalogue 2024 Australia-1.pdf
 
Generative AI - Gitex v1Generative AI - Gitex v1.pptx
Generative AI - Gitex v1Generative AI - Gitex v1.pptxGenerative AI - Gitex v1Generative AI - Gitex v1.pptx
Generative AI - Gitex v1Generative AI - Gitex v1.pptx
 
Testing tools and AI - ideas what to try with some tool examples
Testing tools and AI - ideas what to try with some tool examplesTesting tools and AI - ideas what to try with some tool examples
Testing tools and AI - ideas what to try with some tool examples
 
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better StrongerModern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
Modern Roaming for Notes and Nomad – Cheaper Faster Better Stronger
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software Developers
 
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
 

IPv6 Implementation Guide

  • 1. Implementation of IPv6 Syed Arshad Network Security Engineer
  • 2. What we are going to do • IPv6 Overview • IPv6 Features • IPv6 Addressing Modes • IPv6 Address Types • IPv6 Special Address • IPv6 Headers • IPv6 Communication • IPv6 Routing • IPv6 Implementation • IPv6 Summary
  • 4. IPv6 Overview • Internet Protocol version 6 (IPv6), is a new addressing protocol designed to incorporate whole sort of requirement of future internet known to us as Internet version 2. • IPv6 is a 128 bit address • It is represented as 32 hexadecimal numbers arranged in 8 quartets of 4 hexadecimal digit separated by a “ : ” • Ex: 2001:ABCD:25687:EFCD:ABCD:25687:EFCD:3458 • Case insensitive for A, B, C, D, E and F • IPv6 is currently a flat addressing scheme i.e, it is not divided into classes. Prefix Host
  • 5. Why new IP version? • IPv4 has proven itself as a robust routable addressing protocol and has served human being for decades on its best-effort-delivery mechanism. • It was designed in early 80‟s and did not get any major change afterward. • At the time of its birth, Internet was limited only to a few Universities for their research and to Department of Defense. • IPv4 is 32 bits long which offers around 4,294,967,296 (232) addresses. This address space was considered more than enough that time.
  • 6. Below are the few points for IPv6 birth • Internet has grown exponentially and the address space allowed by IPv4 is saturating. • IPv4 on its own does not provide any security feature which makes data vulnerable on Internet • Data prioritization in IPv4 is not up to date.
  • 8. Where is IPv5 ? • Till date, Internet Protocol has been recognized has IPv4 only. • Version 0 to 3 were used while the protocol was itself under development and experimental process. • So, we can assume lots of background activities remain active before putting a protocol into production. • Similarly, protocol version 5 was used while experimenting with stream protocol for internet. • It is known to us as Internet Stream Protocol which used Internet Protocol number 5 to encapsulate its datagram. • Though it was never brought into public use, but it was already used.
  • 9. IPv6 Features • Larger Address Space • Simplified Header • End-to-end Connectivity • Auto-configuration • Faster Forwarding/Routing • IPSec • No Broadcast • Anycast Support • Mobility • Enhanced Priority support • Smooth Transition • Extensibility
  • 10. • Larger Address Space: • IP Version 6 is a 128 bit address • 2128 = 3.4 x1038 [Approx 340 Trillion Trillion Trillion IP addresses] • According to an estimate, 1564 addresses can be allocated to every square meter of this earth. • Simplified Header: • IPv6 header has been simplified by moving all unnecessary information and options (which are present in IPv4 header) to the end of the IPv6 header. • End-to-end Connectivity: • Every system now has unique IP address and can traverse through the internet without using NAT or other translating components • Auto-configuration: • IPv6 supports both stateful and stateless auto configuration mode of its host devices. This way absence of a DHCP server does not put halt on inter segment communication.
  • 11. • Faster Forwarding/Routing: • Simplified header puts all unnecessary information at the end of the header. • All information in first part of the header are adequate for a Router to take routing decision thus making routing decision as quickly as looking at the mandatory header. • IPSec: • Initially it was decided for IPv6 to must have IPSec security, making it more secure than IPv4. This feature has now been made optional. • No Broadcast: • IPv6 does not have any Broadcast support anymore left with it. It uses multicast to communicate with multiple hosts.
  • 12. IPv6 Addressing Modes 1. Unicast • Global Unicast (Public IP addresses) • Link-Local Unicast (Private IP addresses) • Loopback Address (Virtual IPs) 2. Multicast 3. Anycast
  • 13. 1. Unicast • In unicast mode of addressing, an IPv6 interface (host) is uniquely identified in a network segment. • The IPv6 packet contains both source and destination IP addresses. A host interface is equipped with an IP address which is unique in that network segment. • A network switch or router when receives a unicast IP packet, destined to single host, sends out to one of its outgoing interface which connects to that particular host.
  • 15. • Global Unicast Address • This address type is equivalent to IPv4‟s public address. Global Unicast addresses in IPv6 are globally identifiable and uniquely addressable. • Global Routing Prefix: The most significant 48-bits are designated as Global Routing Prefix which is assigned to specific Autonomous System. Three most significant bits of Global Routing Prefix is always set to 001. • Link-Local Address • Auto-configured IPv6 address is known as Link-Local address. This address always starts with FE80. First 16 bits of Link-Local address is always set to 1111 1110 1000 0000 (FE80). Next 48-bits are set to 0 • Link-Local addresses are used for communication among IPv6 hosts on a link (broadcast segment) only. These addresses are not routable so a Router never forwards these addresses outside the link.
  • 16. • Unique-Local Address • This type of IPv6 address which is though globally unique, but it should be used in local communication. This address has second half of Interface ID and first half is divided among Prefix, Local Bit, Global ID and Subnet ID. • Prefix is always set to 1111 110. L bit, which is set to 1 if the address is locally assigned. So far the meaning of L bit to 0 is not defined. Therefore, Unique Local IPv6 address always starts with „FD‟.
  • 17.
  • 18. Multicast • The IPv6 multicast mode is same as that of IPv4. • The packet destined to multiple hosts is sent on a special multicast address. • All hosts interested in that multicast information, need to join that multicast group first. • All interfaces which have joined the group receive the multicast packet and process it, while other hosts not interested in multicast packets ignore the multicast information.
  • 20. Anycast • IPv6 has introduced a new type of addressing, which is called Anycast addressing. • In this addressing mode, multiple interfaces (hosts) are assigned same Anycast IP address. • When a host wishes to communicate with a host equipped with an Anycast IP address, sends a Unicast message. • With the help of complex routing mechanism, that Unicast message is delivered to the host closest to the Sender, in terms of Routing cost.
  • 23.
  • 24.
  • 25.
  • 26. IPv6 Address Type • Before introducing IPv6 Address format, we shall look into Hexadecimal Number System. • Hexadecimal is positional number system which uses radix (base) of 16. • To represent the values in readable format, this system uses 0-9 symbols to represent values from zero to nine and A-F symbol to represent values from ten to fifteen. • Every digit in Hexadecimal can represent values from 0 to 15.
  • 27.
  • 28. Address Structure • An IPv6 address is made of 128 bits divided into eight 16-bits blocks. Each block is then converted into 4-digit Hexadecimal numbers separated by colon symbol. • For example, the below is 128 bit IPv6 address represented in binary format and divided into eight 16-bits blocks: • 0010000000000001 0000000000000000 0011001000110100 1101111111100001 0000000001100011 0000000000000000 0000000000000000 1111111011111011 • Each block is then converted into Hexadecimal and separated by „:‟ symbol: 2001:0000:3238:DFE1:0063:0000:0000:FEFB
  • 29. Cont.. • Even after converting into Hexadecimal format, IPv6 address remains long. IPv6 provides some rules to shorten the address. • These rules are: • Rule:1 Discard leading Zero(es): • In Block 5, 0063, the leading two 0s can be omitted, such as (5th block): 2001:0000:3238:DFE1:63:0000:0000:FEFB • Rule:2 If two of more blocks contains consecutive zeroes, omit them all and replace with double colon sign ::, such as (6th and 7th block): 2001:0000:3238:DFE1:63::FEFB Consecutive blocks of zeroes can be replaced only once by :: so if there are still blocks of zeroes in the address they can be shrink down to single zero, such as (2nd block): 2001:0:3238:DFE1:63::FEFB
  • 30.
  • 31. IPv6 Header An Internet Protocol version 6 (IPv6) data packet comprises of two main parts: the header and the payload. The first 40 bytes/octets (40x8 = 320 bits) of an IPv6 packet comprise of the header 31
  • 32.
  • 33. IPv6 – IPv4 to IPV6 • One problem in transition from IPv4 to IPv6 completely is that IPv6 is not backward compatible. • This results in a situation where either a site is on IPv6 or it is not. • Unlike an implementation of new technology where the newer one is backward compatible so the older system can still work with the newer without any additional changes. • To overcome this short-coming, there exist few technologies which can be used in slow and smooth transition from IPv4 to IPv6:
  • 34. Dual Stack Routers It's a process of configuring IPv4 and IPv6 address on the same interface.
  • 35. Tunneling • In a scenario where different IP versions exist on intermediate path or transit network, tunneling provides a better solution where user's data can pass through a non-supported IP version. • The above diagram depicts how two remote IPv4 networks can communicate via Tunnel, where the transit network was on IPv6. Vice versa is also possible where transit network is on IPv6 and remote sites which intends to communicate, are on IPv4.
  • 36. NAT Protocol Translation • This is another important method of transition to IPv6 by means of a NAT-PT (Network Address Translation – Protocol Translation) enabled device. With help of NAT-PT device, actual conversion happens between IPv4 and IPv6 packets and vice versa. See the diagram below:
  • 37. IPv6 Routing Protocols • RIPng (Routing Information Protocol Next Generation) • OSPFv3 • BGPv4 • EIGRPv6 • Other Protocols like • ICMPv6 • DHCPv6 • DNS
  • 38. Configuring with IPv6 Router(config)#ipv6 unicast-routing Router(config-if)#ipv6 enable 38
  • 39. Future of IPv6 • IPv6 enabled Internet version 2 will replace todays IPv4 enabled Internet. • When Internet was launched with IPv4, developed countries like US and Europe took the larger space of IPv4 for deployment of Internet in their respective countries keeping future need in mind. But Internet exploded everywhere reaching and connecting every country of the world increasing the requirement of IPv4 address space. • As a result, till this day US and Europe have many IPv4 address space left with them and countries like India and China are bound to address their IP space requirement by means of deployment of IPv6. • Most of the IPv6 deployment is being done outside US, Europe. India and China are moving forward to change their entire space to IPv6. • China has announced a five year deployment plan named China Next Generation Internet. After June 06, 2012 all major ISPs were shifted to IPv6 and rest of them are still moving. IPv6 provides ample of address space and is designed to expand today‟s Internet services. Feature-rich IPv6 enabled Internet version 2 may deliver more than expected.
  • 42. Arsh Networks Syed Arshad Cisco (R&S, Security and Wireless) | Checkpoint | UTMs | Linux |Microsoft | VMware E-Mail : arshnetwors@gmail.com Blog : http://arshnetworks.blogspot.com/ Skype : arshnetworks 42

Hinweis der Redaktion

  1. A host with IPv4 address sends a request to IPv6 enabled Server on Internet which does not understand IPv4 address. In this scenario, NAT-PT device can help them communicate. When IPv4 host sends a request packet to IPv6 Server, NAT-PT device/router, strips down the IPv4 packet, removes IPv4 header and adds IPv6 header and passes it through the Internet. When a response from IPv6 Server comes for IPv4 host, the router does vice versa.