SlideShare ist ein Scribd-Unternehmen logo
1 von 26
Cisco Hands-On Training
                       IPv6 theory
                    Darrell Root Sep-09 www.ciscohandsontraining.com
                      This presentation will be posted in the episode
                                 comments on the website




Saturday, September 19, 2009
IPv4 address exhaustion
                   (www.potaroo.net)




Saturday, September 19, 2009
OSI layer review




    source: http://www.softpanorama.org/Net/Images/tcp_ip_layers.gif



Saturday, September 19, 2009
Ethernet frame format



                       Ethernet frame type 0x0800=IPv4
                      Ethernet frame type 0x86DD=IPv6
 source: http://cs.uccs.edu/~cs522/msgformat/hw1_ht1.gif


Saturday, September 19, 2009
TCP segment format (RFC 793)




Saturday, September 19, 2009
HTTP tcpdump is very
                          familiar




Saturday, September 19, 2009
UDP format (RFC 768)




Saturday, September 19, 2009
IPv4 and IPv6 header format
                      (source: h3c.com)




Saturday, September 19, 2009
IPv6 extension headers
                               (from www.cisco.com)




Saturday, September 19, 2009
IPv6 extension headers
                     (from wikipedia)




Saturday, September 19, 2009
IPv6 address example
                        and shortening rules
                               192.168.33.76
            2001:0db8:0032:0000:0000:5bf0:3f2d:8f8a
             2001:db8:32::5bf0:3f2d:8f8a



Saturday, September 19, 2009
IPv6 netmasks
                  2001:0db8:0032:48c3:4f21:5bfe:3f2d:8f8a

                       2001:0db8::/32    Typical small ISP allocation

                                            Typical allocation for
              2001:0db8:0032::/48       enterprise, building, or home

          2001:0db8:0032:48c3::/        Typical subnet (including p2p
                    64                              links)

          2001:0db8:0032:48c3:4             Loopback interface
          f21:5bfe:3f2d:8f8a/128

Saturday, September 19, 2009
IPv6 netmask sizes
                                        65536 sites each with
                                  /32
                                                 /48
                                        65536 subnets each of
                                  /48
                                               size /64
                                         One subnet with 16
                                  /64
                                         billion billion hosts
                                         Used for loopback
                                 /128
                                            interfaces


Saturday, September 19, 2009
subnet mask drill
      2345:6789:abcd:ef01:2345:6789:abcd:ef01
             2345:6789:abcd:ef00::/63
                  0x1=1 0001
                               /16 /32 /48 /64 /128
                                   /8 /44 /52 /60
                                /43 /45 /50 /62 /63

Saturday, September 19, 2009
2345:6789:abcd:ef01:2345:6789:abcd:ef01/128
       2345::/16     2345:6789:abcd::/48
    2345:6789::/32 2345:6789:abcd:ef01::/64
      2300::/8     2345:6789:abc0::/44
     2345:6789:abcd:e000::/52
      2345:6789:abcd:ef00::/60
       2345:6789:abc0::/43
       2345:6789:abc8::/45
      2345:6789:abcd:c000::/50
      2345:6789:abcd:ef00::/62
      2345:6789:abcd:ef00::/63
Saturday, September 19, 2009
IPv6 address types
                                  (www.iana.org)
                               2000::/3 through 3fff::/3     Global Unicast


                               fc00::/7 through fdff::/7   Unique local unicast


                         fe80::/10 through febf::/10        Link local unicast


                               ff00::/8 through ffff::/8        multicast


Saturday, September 19, 2009
IPv6 multicast addresses
                  (source: edge.networkworld.com)




Saturday, September 19, 2009
ipv6 well known
                               multicast addresses
                    • ff02::1 all hosts on local subnet
                    • ff02::2 all routers on local subnet
                    • ff02::5, ff02::6 OSPFv3
                    • ff02::9 RIPng

Saturday, September 19, 2009
IPv6 multicast to
                               ethernet multicast
                   (src: technet.microsoft.com)




Saturday, September 19, 2009
IPv6 neighbor solicitation
                               sudo tcpdump -e -n icmp6

   00:22:41:27:a4:0a > 33:33:ff:00:00:01, ethertype IPv6
(0x86dd), length 86: 2001:db8:1f05:2e5:222:41ff:fe27:a40a >
    ff02::1:ff00:1: ICMP6, neighbor solicitation, who has
                2001:db8:1f05:2e5::1, length 32

      00:1f:f3:3c:fc:d5 > 00:22:41:27:a4:0a, ethertype IPv6
          (0x86dd), length 86: 2001:db8:1f05:2e5::1 >
     2001:db8:1f05:2e5:222:41ff:fe27:a40a: ICMP6, neighbor
      advertisement, tgt is 2001:db8:1f05:2e5::1, length 32
Saturday, September 19, 2009
IPv6 duplicate address
                           detection

     00:1b:63:f0:8a:93 > 33:33:ff:f0:8a:93, ethertype IPv6
  (0x86dd), length 78: :: > ff02::1:fff0:8a93: ICMP6, neighbor
   solicitation, who has fe80::21b:63ff:fef0:8a93, length 24

                     (no reply, so no duplicate address detected)



Saturday, September 19, 2009
IPv6 router
                               advertisements
  00:1f:f3:3c:fc:d5 > 33:33:00:00:00:01, ethertype IPv6 (0x86dd),
 length 110: (hlim 255, next-header ICMPv6 (58) payload length:
56) fe80::21f:f3ff:fe3c:fcd5 > ff02::1: [icmp6 sum ok] ICMP6, router
                       advertisement, length 56
   hop limit 64, Flags [none], pref medium, router lifetime 1800s,
                  reachable time 0s, retrans time 0s
     source link-address option (1), length 8 (1): 00:1f:f3:3c:fc:d5
                          0x0000: 001f f33c fcd5
  prefix info option (3), length 32 (4): 2001:db8:1f05:2e5::/64, Flags
       [onlink, auto], valid time 2592000s, pref. time 604800s

Saturday, September 19, 2009
IPv6 address stateless
                 autoconfiguration (RFC2462)
                    •          Host has MAC address 1234:5678:90ab

                    •          After using duplicate address detection, host
                               assumes IPv6 link-local address
                               fe80::1234:56FF:FE78:90ab

                    •          Host sends router solicitation and receives
                               router advertisement with prefix
                               2001:db8:1234:5678::/64

                    •          Host uses DAD and eventually assumes IPv6
                               address
                               2001:db8:1234:5678:1234:56FF:FE78:90ab
Saturday, September 19, 2009
IPv6 Cisco IOS support
                    •          Introduced in 12.2T

                    •          Integrated into mainline in 12.3

                    •          Many recent new features, so use at least 12.4
                               mainline

                    •          For cat6, use 12.2(18)SXF or later (currently 12.2
                               (18)SXF16, 12.2(33)SXH5, or 12.2(33)SXI2a

                    •          IP plus feature set, or advanced IP services
                               feature set (very recent releases include it in IP
                               services)
Saturday, September 19, 2009
IPv6 map example
                   All IPv6 addresses start with:
                           2001:0db8:0:                        Top
                                                           lo0 1::1/128

                                                   s0        s1
                                                2::1/64   1::5/126




                                     s1                                   s0
                                  2::2/64                              1::6/126


                                               s0               s1
                                            3::1/64          3::2/64
                             Middle                                          bottom
                          lo0 1::2/128                                    lo0 1::3/128


Saturday, September 19, 2009
IPv6 configuration
                                    example
                               ipv6 unicast-routing

                               interface Serial1
                                 no ip address
                                 ipv6 address 2001:DB8:0:2::2/64
                                 ipv6 rip bob enable
                                 clock rate 64000
                               !
                               ipv6 router rip bob

Saturday, September 19, 2009

Weitere ähnliche Inhalte

Was ist angesagt?

instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6
instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6
instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6cyberjoex
 
ipv6 mpls by Patrick Grossetete
ipv6 mpls by Patrick Grosseteteipv6 mpls by Patrick Grossetete
ipv6 mpls by Patrick GrosseteteFebrian ‎
 
IPv6 - Neighbour Discovery
IPv6 - Neighbour DiscoveryIPv6 - Neighbour Discovery
IPv6 - Neighbour DiscoveryHeba_a
 
Ipv6 the next generation protocol
Ipv6 the next generation protocolIpv6 the next generation protocol
Ipv6 the next generation protocolPRADEEP Cheekatla
 
IPv6 How To Set Up a Linux IPv6 Lan
IPv6 How To Set Up  a Linux IPv6 LanIPv6 How To Set Up  a Linux IPv6 Lan
IPv6 How To Set Up a Linux IPv6 LanJumping Bean
 
IPv6 next generation protocol
IPv6 next generation protocolIPv6 next generation protocol
IPv6 next generation protocolRupshanker Mishra
 
Cisco Certified Network Associate
Cisco Certified Network AssociateCisco Certified Network Associate
Cisco Certified Network AssociateSumit K Das
 
A very good introduction to IPv6
A very good introduction to IPv6A very good introduction to IPv6
A very good introduction to IPv6Syed Arshad
 
IPv6 Fundamentals
IPv6 FundamentalsIPv6 Fundamentals
IPv6 FundamentalsMatt Bynum
 

Was ist angesagt? (20)

instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6
instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6
instructor ppt_chapter8.2.2 - i_pv6 addressing with exercises of IPv6
 
ipv6 mpls by Patrick Grossetete
ipv6 mpls by Patrick Grosseteteipv6 mpls by Patrick Grossetete
ipv6 mpls by Patrick Grossetete
 
IPv6_Quick_Start_Guide
IPv6_Quick_Start_GuideIPv6_Quick_Start_Guide
IPv6_Quick_Start_Guide
 
IPv6
IPv6IPv6
IPv6
 
Introduction to IPv6
Introduction to IPv6Introduction to IPv6
Introduction to IPv6
 
About IPv6
About IPv6About IPv6
About IPv6
 
Basic of IPv6
Basic of IPv6Basic of IPv6
Basic of IPv6
 
IPv6 - Neighbour Discovery
IPv6 - Neighbour DiscoveryIPv6 - Neighbour Discovery
IPv6 - Neighbour Discovery
 
Ipv6 the next generation protocol
Ipv6 the next generation protocolIpv6 the next generation protocol
Ipv6 the next generation protocol
 
Ipv6
Ipv6Ipv6
Ipv6
 
IPv6 How To Set Up a Linux IPv6 Lan
IPv6 How To Set Up  a Linux IPv6 LanIPv6 How To Set Up  a Linux IPv6 Lan
IPv6 How To Set Up a Linux IPv6 Lan
 
IPv6 Overview
IPv6 OverviewIPv6 Overview
IPv6 Overview
 
IPv6 Static Routes
IPv6 Static RoutesIPv6 Static Routes
IPv6 Static Routes
 
IPv6 next generation protocol
IPv6 next generation protocolIPv6 next generation protocol
IPv6 next generation protocol
 
Cisco Certified Network Associate
Cisco Certified Network AssociateCisco Certified Network Associate
Cisco Certified Network Associate
 
Ipv6 cheat sheet
Ipv6 cheat sheetIpv6 cheat sheet
Ipv6 cheat sheet
 
A very good introduction to IPv6
A very good introduction to IPv6A very good introduction to IPv6
A very good introduction to IPv6
 
Ipv6
Ipv6Ipv6
Ipv6
 
IPv6 Fundamentals
IPv6 FundamentalsIPv6 Fundamentals
IPv6 Fundamentals
 
Autoconfig
AutoconfigAutoconfig
Autoconfig
 

Ähnlich wie IPv6 Theory by Cisco

IPv6 networking training sduffy v3
IPv6 networking training   sduffy v3IPv6 networking training   sduffy v3
IPv6 networking training sduffy v3Shane Duffy
 
IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013Zivaro Inc
 
Deploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack EnvironmentsDeploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack EnvironmentsShannon McFarland
 
Deploy ipv6 multicast_v0_1
Deploy ipv6 multicast_v0_1Deploy ipv6 multicast_v0_1
Deploy ipv6 multicast_v0_1Nguyen Thanh
 
VYOS & RPKI at the BGP as edge
VYOS & RPKI at the BGP as edgeVYOS & RPKI at the BGP as edge
VYOS & RPKI at the BGP as edgeFaelix Ltd
 
Getting started with IPv6
Getting started with IPv6Getting started with IPv6
Getting started with IPv6Private
 
ipv6 introduction & environment buildup
ipv6 introduction & environment buildupipv6 introduction & environment buildup
ipv6 introduction & environment builduppsychesnet Hsieh
 
IPv6 Fundamentals & Securities
IPv6 Fundamentals & SecuritiesIPv6 Fundamentals & Securities
IPv6 Fundamentals & SecuritiesDon Anto
 
Cisco EuroMPI'13 vendor session presentation
Cisco EuroMPI'13 vendor session presentationCisco EuroMPI'13 vendor session presentation
Cisco EuroMPI'13 vendor session presentationJeff Squyres
 
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...Louis Göhl
 
Fedv6tf-IPv6-new-friends
Fedv6tf-IPv6-new-friendsFedv6tf-IPv6-new-friends
Fedv6tf-IPv6-new-friendsTim Martin
 
Building Scalable Data Center Networks
Building Scalable Data Center NetworksBuilding Scalable Data Center Networks
Building Scalable Data Center NetworksCumulus Networks
 
MTCNA - MikroTik Certified Network Associate - v2
MTCNA - MikroTik Certified Network Associate - v2MTCNA - MikroTik Certified Network Associate - v2
MTCNA - MikroTik Certified Network Associate - v2Yaser Rahmati
 
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014Đồng Quốc Vương
 
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introductionCodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introductionCodiLime
 

Ähnlich wie IPv6 Theory by Cisco (20)

Charla ipv6
Charla ipv6Charla ipv6
Charla ipv6
 
Crash
CrashCrash
Crash
 
IPv6 networking training sduffy v3
IPv6 networking training   sduffy v3IPv6 networking training   sduffy v3
IPv6 networking training sduffy v3
 
IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013
 
Deploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack EnvironmentsDeploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack Environments
 
Deploy ipv6 multicast_v0_1
Deploy ipv6 multicast_v0_1Deploy ipv6 multicast_v0_1
Deploy ipv6 multicast_v0_1
 
VYOS & RPKI at the BGP as edge
VYOS & RPKI at the BGP as edgeVYOS & RPKI at the BGP as edge
VYOS & RPKI at the BGP as edge
 
IPv6 im Jahre 2018
IPv6 im Jahre 2018IPv6 im Jahre 2018
IPv6 im Jahre 2018
 
Getting started with IPv6
Getting started with IPv6Getting started with IPv6
Getting started with IPv6
 
ipv6 introduction & environment buildup
ipv6 introduction & environment buildupipv6 introduction & environment buildup
ipv6 introduction & environment buildup
 
IPv6 Fundamentals & Securities
IPv6 Fundamentals & SecuritiesIPv6 Fundamentals & Securities
IPv6 Fundamentals & Securities
 
Cisco EuroMPI'13 vendor session presentation
Cisco EuroMPI'13 vendor session presentationCisco EuroMPI'13 vendor session presentation
Cisco EuroMPI'13 vendor session presentation
 
Ipv4 address
Ipv4 addressIpv4 address
Ipv4 address
 
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
 
Fedv6tf-IPv6-new-friends
Fedv6tf-IPv6-new-friendsFedv6tf-IPv6-new-friends
Fedv6tf-IPv6-new-friends
 
Testing PPT
Testing PPTTesting PPT
Testing PPT
 
Building Scalable Data Center Networks
Building Scalable Data Center NetworksBuilding Scalable Data Center Networks
Building Scalable Data Center Networks
 
MTCNA - MikroTik Certified Network Associate - v2
MTCNA - MikroTik Certified Network Associate - v2MTCNA - MikroTik Certified Network Associate - v2
MTCNA - MikroTik Certified Network Associate - v2
 
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014
Www ccnav5 net_ccna_1_chapter_8_v5_0_exam_answers_2014
 
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introductionCodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
 

Mehr von Febrian ‎

Cisco academy procedure cust
Cisco academy procedure custCisco academy procedure cust
Cisco academy procedure custFebrian ‎
 
QoS Cheatsheet by packetlife.net
QoS Cheatsheet by packetlife.netQoS Cheatsheet by packetlife.net
QoS Cheatsheet by packetlife.netFebrian ‎
 
Tutorial: Internet Resource Management by Champika Wijayatunga, APNIC
Tutorial: Internet Resource Management by Champika Wijayatunga, APNICTutorial: Internet Resource Management by Champika Wijayatunga, APNIC
Tutorial: Internet Resource Management by Champika Wijayatunga, APNICFebrian ‎
 
Juniper mpls best practice part 2
Juniper mpls best practice   part 2Juniper mpls best practice   part 2
Juniper mpls best practice part 2Febrian ‎
 
Deploying IP/MPLS VPN - Cisco Networkers 2010
Deploying IP/MPLS VPN - Cisco Networkers 2010Deploying IP/MPLS VPN - Cisco Networkers 2010
Deploying IP/MPLS VPN - Cisco Networkers 2010Febrian ‎
 
MPLS-based Metro Ethernet Networks Tutorial by Khatri
MPLS-based Metro Ethernet Networks Tutorial by KhatriMPLS-based Metro Ethernet Networks Tutorial by Khatri
MPLS-based Metro Ethernet Networks Tutorial by KhatriFebrian ‎
 
Juniper mpls best practice part 1
Juniper mpls best practice   part 1Juniper mpls best practice   part 1
Juniper mpls best practice part 1Febrian ‎
 
BGP Advance Technique by Steven & James
BGP Advance Technique by Steven & JamesBGP Advance Technique by Steven & James
BGP Advance Technique by Steven & JamesFebrian ‎
 
Juniper MPLS Tutorial by Soricelli
Juniper MPLS Tutorial by SoricelliJuniper MPLS Tutorial by Soricelli
Juniper MPLS Tutorial by SoricelliFebrian ‎
 
Juniper IPv6 Workshop by Irzan
Juniper IPv6 Workshop by IrzanJuniper IPv6 Workshop by Irzan
Juniper IPv6 Workshop by IrzanFebrian ‎
 
OnMobile Global Limited
OnMobile Global Limited OnMobile Global Limited
OnMobile Global Limited Febrian ‎
 
Neso Newsletter Feb09
Neso Newsletter Feb09Neso Newsletter Feb09
Neso Newsletter Feb09Febrian ‎
 
bti asia salary guide
bti asia salary guidebti asia salary guide
bti asia salary guideFebrian ‎
 

Mehr von Febrian ‎ (20)

Cisco academy procedure cust
Cisco academy procedure custCisco academy procedure cust
Cisco academy procedure cust
 
Iperf Tutorial
Iperf Tutorial Iperf Tutorial
Iperf Tutorial
 
QoS Cheatsheet by packetlife.net
QoS Cheatsheet by packetlife.netQoS Cheatsheet by packetlife.net
QoS Cheatsheet by packetlife.net
 
Tutorial: Internet Resource Management by Champika Wijayatunga, APNIC
Tutorial: Internet Resource Management by Champika Wijayatunga, APNICTutorial: Internet Resource Management by Champika Wijayatunga, APNIC
Tutorial: Internet Resource Management by Champika Wijayatunga, APNIC
 
Juniper mpls best practice part 2
Juniper mpls best practice   part 2Juniper mpls best practice   part 2
Juniper mpls best practice part 2
 
Deploying IP/MPLS VPN - Cisco Networkers 2010
Deploying IP/MPLS VPN - Cisco Networkers 2010Deploying IP/MPLS VPN - Cisco Networkers 2010
Deploying IP/MPLS VPN - Cisco Networkers 2010
 
MPLS-based Metro Ethernet Networks Tutorial by Khatri
MPLS-based Metro Ethernet Networks Tutorial by KhatriMPLS-based Metro Ethernet Networks Tutorial by Khatri
MPLS-based Metro Ethernet Networks Tutorial by Khatri
 
Juniper mpls best practice part 1
Juniper mpls best practice   part 1Juniper mpls best practice   part 1
Juniper mpls best practice part 1
 
BGP Advance Technique by Steven & James
BGP Advance Technique by Steven & JamesBGP Advance Technique by Steven & James
BGP Advance Technique by Steven & James
 
Juniper MPLS Tutorial by Soricelli
Juniper MPLS Tutorial by SoricelliJuniper MPLS Tutorial by Soricelli
Juniper MPLS Tutorial by Soricelli
 
Juniper IPv6 Workshop by Irzan
Juniper IPv6 Workshop by IrzanJuniper IPv6 Workshop by Irzan
Juniper IPv6 Workshop by Irzan
 
IPv6 by APNIC
IPv6 by APNICIPv6 by APNIC
IPv6 by APNIC
 
Internet Market
Internet MarketInternet Market
Internet Market
 
MyJalah200905
MyJalah200905MyJalah200905
MyJalah200905
 
Passion
PassionPassion
Passion
 
OnMobile Global Limited
OnMobile Global Limited OnMobile Global Limited
OnMobile Global Limited
 
Nps320
Nps320Nps320
Nps320
 
My Jalah200904
My Jalah200904My Jalah200904
My Jalah200904
 
Neso Newsletter Feb09
Neso Newsletter Feb09Neso Newsletter Feb09
Neso Newsletter Feb09
 
bti asia salary guide
bti asia salary guidebti asia salary guide
bti asia salary guide
 

Kürzlich hochgeladen

From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024The Digital Insurer
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024Results
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationRadu Cotescu
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘RTylerCroy
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science
 

Kürzlich hochgeladen (20)

From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path Mount
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptx
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
 

IPv6 Theory by Cisco

  • 1. Cisco Hands-On Training IPv6 theory Darrell Root Sep-09 www.ciscohandsontraining.com This presentation will be posted in the episode comments on the website Saturday, September 19, 2009
  • 2. IPv4 address exhaustion (www.potaroo.net) Saturday, September 19, 2009
  • 3. OSI layer review source: http://www.softpanorama.org/Net/Images/tcp_ip_layers.gif Saturday, September 19, 2009
  • 4. Ethernet frame format Ethernet frame type 0x0800=IPv4 Ethernet frame type 0x86DD=IPv6 source: http://cs.uccs.edu/~cs522/msgformat/hw1_ht1.gif Saturday, September 19, 2009
  • 5. TCP segment format (RFC 793) Saturday, September 19, 2009
  • 6. HTTP tcpdump is very familiar Saturday, September 19, 2009
  • 7. UDP format (RFC 768) Saturday, September 19, 2009
  • 8. IPv4 and IPv6 header format (source: h3c.com) Saturday, September 19, 2009
  • 9. IPv6 extension headers (from www.cisco.com) Saturday, September 19, 2009
  • 10. IPv6 extension headers (from wikipedia) Saturday, September 19, 2009
  • 11. IPv6 address example and shortening rules 192.168.33.76 2001:0db8:0032:0000:0000:5bf0:3f2d:8f8a 2001:db8:32::5bf0:3f2d:8f8a Saturday, September 19, 2009
  • 12. IPv6 netmasks 2001:0db8:0032:48c3:4f21:5bfe:3f2d:8f8a 2001:0db8::/32 Typical small ISP allocation Typical allocation for 2001:0db8:0032::/48 enterprise, building, or home 2001:0db8:0032:48c3::/ Typical subnet (including p2p 64 links) 2001:0db8:0032:48c3:4 Loopback interface f21:5bfe:3f2d:8f8a/128 Saturday, September 19, 2009
  • 13. IPv6 netmask sizes 65536 sites each with /32 /48 65536 subnets each of /48 size /64 One subnet with 16 /64 billion billion hosts Used for loopback /128 interfaces Saturday, September 19, 2009
  • 14. subnet mask drill 2345:6789:abcd:ef01:2345:6789:abcd:ef01 2345:6789:abcd:ef00::/63 0x1=1 0001 /16 /32 /48 /64 /128 /8 /44 /52 /60 /43 /45 /50 /62 /63 Saturday, September 19, 2009
  • 15. 2345:6789:abcd:ef01:2345:6789:abcd:ef01/128 2345::/16 2345:6789:abcd::/48 2345:6789::/32 2345:6789:abcd:ef01::/64 2300::/8 2345:6789:abc0::/44 2345:6789:abcd:e000::/52 2345:6789:abcd:ef00::/60 2345:6789:abc0::/43 2345:6789:abc8::/45 2345:6789:abcd:c000::/50 2345:6789:abcd:ef00::/62 2345:6789:abcd:ef00::/63 Saturday, September 19, 2009
  • 16. IPv6 address types (www.iana.org) 2000::/3 through 3fff::/3 Global Unicast fc00::/7 through fdff::/7 Unique local unicast fe80::/10 through febf::/10 Link local unicast ff00::/8 through ffff::/8 multicast Saturday, September 19, 2009
  • 17. IPv6 multicast addresses (source: edge.networkworld.com) Saturday, September 19, 2009
  • 18. ipv6 well known multicast addresses • ff02::1 all hosts on local subnet • ff02::2 all routers on local subnet • ff02::5, ff02::6 OSPFv3 • ff02::9 RIPng Saturday, September 19, 2009
  • 19. IPv6 multicast to ethernet multicast (src: technet.microsoft.com) Saturday, September 19, 2009
  • 20. IPv6 neighbor solicitation sudo tcpdump -e -n icmp6 00:22:41:27:a4:0a > 33:33:ff:00:00:01, ethertype IPv6 (0x86dd), length 86: 2001:db8:1f05:2e5:222:41ff:fe27:a40a > ff02::1:ff00:1: ICMP6, neighbor solicitation, who has 2001:db8:1f05:2e5::1, length 32 00:1f:f3:3c:fc:d5 > 00:22:41:27:a4:0a, ethertype IPv6 (0x86dd), length 86: 2001:db8:1f05:2e5::1 > 2001:db8:1f05:2e5:222:41ff:fe27:a40a: ICMP6, neighbor advertisement, tgt is 2001:db8:1f05:2e5::1, length 32 Saturday, September 19, 2009
  • 21. IPv6 duplicate address detection 00:1b:63:f0:8a:93 > 33:33:ff:f0:8a:93, ethertype IPv6 (0x86dd), length 78: :: > ff02::1:fff0:8a93: ICMP6, neighbor solicitation, who has fe80::21b:63ff:fef0:8a93, length 24 (no reply, so no duplicate address detected) Saturday, September 19, 2009
  • 22. IPv6 router advertisements 00:1f:f3:3c:fc:d5 > 33:33:00:00:00:01, ethertype IPv6 (0x86dd), length 110: (hlim 255, next-header ICMPv6 (58) payload length: 56) fe80::21f:f3ff:fe3c:fcd5 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 56 hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0s, retrans time 0s source link-address option (1), length 8 (1): 00:1f:f3:3c:fc:d5 0x0000: 001f f33c fcd5 prefix info option (3), length 32 (4): 2001:db8:1f05:2e5::/64, Flags [onlink, auto], valid time 2592000s, pref. time 604800s Saturday, September 19, 2009
  • 23. IPv6 address stateless autoconfiguration (RFC2462) • Host has MAC address 1234:5678:90ab • After using duplicate address detection, host assumes IPv6 link-local address fe80::1234:56FF:FE78:90ab • Host sends router solicitation and receives router advertisement with prefix 2001:db8:1234:5678::/64 • Host uses DAD and eventually assumes IPv6 address 2001:db8:1234:5678:1234:56FF:FE78:90ab Saturday, September 19, 2009
  • 24. IPv6 Cisco IOS support • Introduced in 12.2T • Integrated into mainline in 12.3 • Many recent new features, so use at least 12.4 mainline • For cat6, use 12.2(18)SXF or later (currently 12.2 (18)SXF16, 12.2(33)SXH5, or 12.2(33)SXI2a • IP plus feature set, or advanced IP services feature set (very recent releases include it in IP services) Saturday, September 19, 2009
  • 25. IPv6 map example All IPv6 addresses start with: 2001:0db8:0: Top lo0 1::1/128 s0 s1 2::1/64 1::5/126 s1 s0 2::2/64 1::6/126 s0 s1 3::1/64 3::2/64 Middle bottom lo0 1::2/128 lo0 1::3/128 Saturday, September 19, 2009
  • 26. IPv6 configuration example ipv6 unicast-routing interface Serial1 no ip address ipv6 address 2001:DB8:0:2::2/64 ipv6 rip bob enable clock rate 64000 ! ipv6 router rip bob Saturday, September 19, 2009