Table of Contents
IPv6
IPv6 overview
IPv6 policies
IPv6 Standards
IPv6 Assignments
- RIPE NCC = 2a00::/12
- NCBV IPv6 RIPE prefix = 2a00:1bc8::/32
Address Type Identification
2::/3 Global Unicast FE80::/10 Link-Local unicast FF00::/8 Multicast (in unicast scopes) Anycast
Special Addresses
IPv6-address Comment IPv4-compare --------------------- ------------------------------- ---------------- ::/128 Unspecified address 0.0.0.0/32 ::/0 Default Route 0.0.0.0/0 ::1/128 Local addresses 127.0.0.1/32 ::FFFF:0:0/96 IPv4-mapped addresses ::FFFF:0:0:0/96 IPv4-translated addresses (SIIT) 2001:(0000-01F8)::/29 Sub-TLA ID 2001:0000::/32 Teredo tunneling 2001:0002::/48 Benchmarking IPv6 198.18.0.0/15 2001:10::/28 ORCHID (Overlay Routable Cryptographic Hash Identifiers) 2002::/16 6to4 addressing (IPv4 192.88.99.0/24 is used) FC00::/7 Unique local addresses (ULA's) 10/8,172.16/12,192.168/16 FE80::/10 Link-local prefix 169.254.0.0/16 FF02::1:FF00:0/104 Solicited-Node multicast addresses Pre-Defined Multicast Addresses: FF01:0:0:0:0:0:0:1 All Nodes Addresses, scope: interface-local FF02:0:0:0:0:0:0:1 All Nodes Addresses, scope: link-local FF01:0:0:0:0:0:0:2 All Routers Addresses, scope: interface-local FF02:0:0:0:0:0:0:2 All Routers Addresses, scope: link-local FF05:0:0:0:0:0:0:2 All Routers Addresses, scope: site-local FF02:0:0:0:0:1:FF/102 Solicited-Node Address (used by DAD) > cat /etc/hosts ::1 ip6-localhost ip6-loopback FE00::0 ip6-localnet FF00::0 ip6-mcastprefix FF02::1 ip6-allnodes FF02::2 ip6-allrouters FF02::3 ip6-allhosts
MAC adresses
- MAC-48
- EUI-48
- EUI-64
Cisco
More IPv6 info
IPv6 on Linux
IPv6 summary
- IPv6 packet format
- fixes size 40 bytes (ipv4:20-60 bytes)
- version = 6
- traffic-class 1 byte
- flow label 20 bits
- next header (=TCP/UDP if no IPv6 header extensions)
- Hop-by-Hop Options header
- Routing header
- Fragment header (in IPv6 only endpoints do fragmentation)
- Destination Options header
- Authentication header
- Encrypted Security Payload header
- Ethernet type code for IPv6 is 0x86DD (IPv4:0×0800)
- IPv6 addressing
- 16 bytes = 8 two-byte-blocks = 32 hex-digits = 128 bits
- example: 1234:5678:9abc:def0:1234:5678:9abc:def0
- notation in bitmask-length (slash-notation) (ipv4:netmask)
- global routing prefix (address range assigned to a site)
- subnet ID (identify a link within a site)
- interface ID (identify an interface on a link)
- Class
- unicast
- multicast
- anycast
- (no broadcast/address in IPv6, all-ones interface-ID is valid address)
- Scope
- link-local (IPv6:Link-Local Address = IPv4:private-address)
- FC::/7 = Unique local addresses (IPv4:10/8,172.16/12,192.168/16)
- FE80::/10 = Link-local prefix (IPv4:169.254.0.0/16)
- global (IPv6:Global Unicast Address = IPv4:public-address)
- 2::/3 (IANA to RIRs)
- Address Privacy (rfc3041)
- Unique stable IP addresses
- Temporary transient IP addresses (random ID)
- Required Addresses for all IPv6 hosts (routers require some more):
- Its link-local address for each interface
- Any assigned unicast addresses
- The loopback address
- (some multicast addresses)
- ICMPv6
- Error Messages
- type 1: Destination Unreachable
- code 0 = no route to destination
- code 1 = communication with destination administratively prohibited
- code 2 = beyond scope of source address (draft)
- code 3 = address unreachable
- code 4 = port unreachable
- type 2: Packet Too Big
- type 3: Time Exceeded
- type 4: Parameter Problem
- Informational Messages
- type 128: Echo Request
- type 129: Echo Reply
- type 130: Multicast Listener Query
- type 131: Multicast Listener Report
- type 132: Multicast Listener Done
- type 133: Router Solicitation
- type 134: Router Advertisement
- type 135: Neighbor Solicitation
- type 136: Neighbor Advertisement
- type 137: Redirect Message
- type 138: Router Renumbering
- type 139: Node Information Query
- type 140: Node Information Response
- type 141: Inverse ND Solicitation
- type 142: Inverse ND Adv Message
- type 150: Home Agent Address Discovery Request Message
- type 151: Home Agent Address Discovery Reply Message
- type 152: Mobile Solicitation Message Format
- type 153: Mobile Advertisement Message Format
- Neighbor Discovery (ND)
- Neighbor Solicitation and Neighbor Advertisement (IPv4:ARP)
- Duplicate Address Detection (DAD)
- Neighbor Unreachability Discovery (NUD)
- Inverse ND (find IP with MAC)
- SEcure Neighbor Discovery (SEND) (RFC3971)
- Router Discovery (RD)
- Redirect
- Autoconfiguration (IPv4:zeroconf)
- stateless autoconfiguration (link-local prefix FE80 with EIU-64-MAC)
- stateful autoconfiguration (DHCPv6)
- Path MTU Discovery
- IPv6 minimum MTU size 1280 octets
- Multicast group management (IPv4:IGMPv2)
- Neighbor Cache (IPv4:arp-cache)
- Destionation Cache (updated by redirect messages)
- IPsec in Ipv6
- Quality of Service in Ipv6
- A flow is a sequence of packets sent from a particular source to a particular (unicast or multicast) destination(s), for which the source requires special handling by the intermediate routers.
- Routing protocols for IPv6
- RIPng
- OSPFv3
- MP-BGP
- Interoperability IPv4-IPv6
- Dual-stack
- Tunneling
- Manually configured tunneling of IPv6 over IPv4
- Automatic tunneling of IPv6 over IPv4
- 6to4 (RFC 3056)
- ISATAP
- Teredo
- Translation (NAT/PAT)
- IPv6 DNS
- Forward lookup (AAAA-record)
- sub.domain.tld. IN AAAA 2001:660:3003:2::4:20
- Reverse lookup (PTR-record)
- root = ip6.arpa. (IPv4: in-addr.arpa.)
- nibble (4 bits) boundaries (=1 hex-digit)
- example:
- $ORIGIN 1.0.0.0.6.0.0.3.0.6.6.0.1.0.0.2.ip6.arpa.
- 1.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0 PTR ns3.nic.fr.
- IPv6 Registration Policy
- RIPE policy → http://www.ripe.net/ripe/docs/ipv6policy.html
- Global Unicast Space = 2::/3 (IANA to RIRs)
- Minimum allocation LIR = /32
- Minimum assignment Large Enterprise = /48
- Minimum assignment Small/Home = /56
- Link-size (network) = /64 (so that EUI-64 MAC can be used)
- LIR is required to: DNS-delegation to enduser of enduser-prefix
- IPv6 Provider Independent (PI) Assignments (if multihomed) = minimum /32
DNS
Example DNS-delegation
//A-records here are glue-records://
@ IN SOA ns1.tld. ...
IN NS ns1.tld.
delegation-domain.tld. IN NS ns1.delegation-domain.tld.
ns1.delegation-domain.tld. IN A 193.49.159.2
ns1.delegation-domain.tld. IN AAAA 2001:660:3001:4002::2
