IPv6

• IPv6
• ICMPv6
• IPv6 Address
• IPv6 Deployment

• http://www.ipv6actnow.org/
• http://www.ripe.net/ipv6/
• conceptual view on IP: IP hourglass

• RFC-4193 Unique Local IPv6 Unicast Addresses
• RFC-4291 IP Version 6 Addressing Architecture
• RFC-3879 Deprecating Site Local Addresses

• http://www.iana.org/assignments/ipv6-address-space/
• http://www.iana.org/assignments/ipv6-unicast-address-assignments/

• RIPE NCC = 2a00::/12
• NCBV IPv6 RIPE prefix = 2a00:1bc8::/32

• http://ipv6-test.com/
• http://test-ipv6.com/

• disable ipv6 in Firefox:
  go to URL about:config → network.dns.disableIPv6 = true/false(default)
• https://addons.mozilla.org/nl/firefox/addon/showip/

2000::/3             Global Unicast
-- starts at 2000:0000:0000:0000:0000:0000:0000:0000 - 
-- ends at   3FFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
FE80::/10            Link-Local unicast
FF00::/8             Multicast
(in unicast scopes)  Anycast

IPv6-address           Comment                          IPv4-compare
---------------------  -------------------------------  ----------------
::/128                 Unspecified address              0.0.0.0/32
::/0                   Default Route                    0.0.0.0/0
::1/128                Local addresses                  127.0.0.1/32
::FFFF:0:0/96          IPv4-mapped addresses
::FFFF:0:0:0/96        IPv4-translated addresses (SIIT)
2001:(0000-01F8)::/29  Sub-TLA ID
2001:0000::/32         Teredo tunneling
2001:0002::/48         Benchmarking IPv6                198.18.0.0/15
2001:10::/28           ORCHID (Overlay Routable Cryptographic Hash Identifiers)
2002::/16              6to4 addressing (IPv4 192.88.99.0/24 is used)
FC00::/7               Unique local addresses (ULA's)   10/8,172.16/12,192.168/16
FE80::/10              Link-local prefix                169.254.0.0/16
FF02::1:FF00:0/104     Solicited-Node multicast addresses

Pre-Defined Multicast Addresses:
FF01::1         All Nodes   Addresses, scope: interface-local
FF01::2         All Routers Addresses, scope: interface-local
FF02::1         All Nodes   Addresses, scope: link-local
FF02::2         All Routers Addresses, scope: link-local
FF05::2         All Routers Addresses, scope: site-local
FF02::1:FF/102  Solicited-Node Address (used by DAD)

> cat /etc/hosts
::1     ip6-localhost ip6-loopback
FE00::0 ip6-localnet
FF00::0 ip6-mcastprefix
FF02::1 ip6-allnodes
FF02::2 ip6-allrouters
FF02::3 ip6-allhosts

• MAC Address
• MAC-48
• EUI-48
• EUI-64

• Cisco IPv6 Solutions
• http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/CampIPv6.html
• http://www.cisco.com/en/US/docs/solutions/Enterprise/Branch/BrchIPv6.html
• Cisco IOS IPv6 Configuration Guide, Release 12.4T
• CISCO IOS TECHNOLOGIES - IPv6
• Implementing First Hop Security in IPv6
• http://www.networkhardware.com/IPv6

• http://en.linuxreviews.org/Why_you_want_IPv6
• http://www.sixxs.net/
• http://www.xs4all.nl/klant/experimenteel/IPv6.php
• linux → http://www.wiggy.net/texts/ipv6-howto/

• IPV6 Configuration on REDHAT CENTOS FEDORA
• http://lists.quagga.net/pipermail/quagga-users/2004-June/002230.html
• http://www.ietf.org/rfc/rfc4890.txt
• http://www.ietf.org/rfc/rfc3041.txt
• http://files.multicastdns.org/draft-cheshire-dnsext-multicastdns.txt

• SIT is also called 6in4
• SIT = “Simple Internet Transition” tunnel
• uses IP protocol 41 (NAT-traversal not always possible)
• RFC 4213: Basic Transition Mechanisms for IPv6 Hosts and Routers
• IPv6 transition mechanisms

• Requirements For IPv6 in ICT Equipment
  → http://www.ripe.net/ripe/docs/ripe-501
• IPv6 CPE Surveys
  → http://labs.ripe.net/Members/mirjam/ipv6-cpe-surveys

• IPv6 packet format
  • fixes size 40 bytes (ipv4:20-60 bytes)
    • version = 6
    • traffic-class 1 byte
    • flow label 20 bits
    • next header (=TCP/UDP if no IPv6 header extensions)
      • Hop-by-Hop Options header
      • Routing header
      • Fragment header (in IPv6 only endpoints do fragmentation)
      • Destination Options header
      • Authentication header
      • Encrypted Security Payload header
  • Ethernet type code for IPv6 is 0x86DD (IPv4:0x0800)
• IPv6 addressing
  • 16 bytes = 8 'quartets' (two-byte-blocks) = 32 hex-digits = 128 bits
  • example: 1111:2222:3333:4444:5555:6666:7777:8888
  • notation in bitmask-length (slash-notation) (ipv4:netmask)
    • global routing prefix (address range assigned to a site)
    • subnet ID (identify a link within a site)
    • interface ID (identify an interface on a link)
  • Class
    • unicast
    • multicast
    • anycast
    • (no broadcast/address in IPv6, all-ones interface-ID is valid address)
  • Scope
    • interface-local (/128, only defined inside the router for internal processing optimisation)
    • link-local (IPv6:Link-Local Address = IPv4:private-address)
      • FC::/7 = Unique local addresses ULA (IPv4:10/8,172.16/12,192.168/16)
      • FE80::/10 = Link-Local prefix (IPv4:169.254.0.0/16)
    • global (IPv6:Global Unicast Address = IPv4:public-address)
      • 2::/3 (IANA to RIRs)
  • Address Privacy (rfc3041)
    • Unique stable IP addresses
    • Temporary transient IP addresses (random ID)
  • Required Addresses for all IPv6 hosts (routers require some more):
    • Its link-local address for each interface
    • Any assigned unicast addresses
    • The loopback address
    • (some multicast addresses)
• ICMPv6
  • Error Messages
    • type 1: Destination Unreachable
      • code 0 = no route to destination
      • code 1 = communication with destination administratively prohibited
      • code 2 = beyond scope of source address (draft)
      • code 3 = address unreachable
      • code 4 = port unreachable
    • type 2: Packet Too Big
    • type 3: Time Exceeded
    • type 4: Parameter Problem
  • Informational Messages
    • type 128: Echo Request
    • type 129: Echo Reply
    • type 130: Multicast Listener Query
    • type 131: Multicast Listener Report
    • type 132: Multicast Listener Done
    • type 133: Router Solicitation
    • type 134: Router Advertisement
    • type 135: Neighbor Solicitation
    • type 136: Neighbor Advertisement
    • type 137: Redirect Message
    • type 138: Router Renumbering
    • type 139: Node Information Query
    • type 140: Node Information Response
    • type 141: Inverse ND Solicitation
    • type 142: Inverse ND Adv Message
    • type 150: Home Agent Address Discovery Request Message
    • type 151: Home Agent Address Discovery Reply Message
    • type 152: Mobile Solicitation Message Format
    • type 153: Mobile Advertisement Message Format
  • Neighbor Discovery (ND)
    • Neighbor Solicitation and Neighbor Advertisement (IPv4:ARP)
    • Duplicate Address Detection (DAD)
    • Neighbor Unreachability Discovery (NUD)
    • Inverse ND (find IP with MAC)
  • SEcure Neighbor Discovery (SEND) (RFC3971)
  • Router Discovery (RD)
  • Redirect
  • Autoconfiguration (IPv4:zeroconf)
    • stateless autoconfiguration (link-local prefix FE80 with EIU-64-MAC) (SLAAC)
    • DNS-server autoconf in RFC5006 (SLAAC does announce DNS, only GW)
    • stateful autoconfiguration (DHCPv6)
  • Path MTU Discovery
    • IPv6 minimum MTU size 1280 octets
  • Multicast group management (IPv4:IGMPv2)
  • Neighbor Cache (IPv4:arp-cache)
  • Destionation Cache (updated by redirect messages)
• IPsec in Ipv6
• Quality of Service in Ipv6
  • A flow is a sequence of packets sent from a particular source to a particular (unicast or multicast) destination(s), for which the source requires special handling by the intermediate routers.
• Routing protocols for IPv6
  • RIPng
  • OSPFv3
  • MP-BGP
• Interoperability IPv4-IPv6
  • Dual-stack
  • Tunneling
    • Manually configured tunneling of IPv6 over IPv4
    • Automatic tunneling of IPv6 over IPv4
      • 6to4 (RFC 3056)
      • ISATAP
      • Teredo
  • Translation (NAT/PAT)
• IPv6 DNS
  • Forward lookup (AAAA-record)
    • sub.domain.tld. IN AAAA 2001:660:3003:2::4:20
  • Reverse lookup (PTR-record)
    • root = ip6.arpa. (IPv4: in-addr.arpa.)
    • nibble (4 bits) boundaries (=1 hex-digit)
    • example:
      • $ORIGIN 1.0.0.0.6.0.0.3.0.6.6.0.1.0.0.2.ip6.arpa.
      • 1.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0 PTR ns3.nic.fr.
• IPv6 Registration Policy
  • RIPE policy → http://www.ripe.net/ripe/docs/ipv6policy.html
  • Global Unicast Space = 2::/3 (IANA to RIRs)
  • Minimum allocation LIR = /32
  • Minimum assignment Large Enterprise = /48
  • Minimum assignment Small/Home = /56
  • Link-size (network) = /64 (so that EUI-64 MAC can be used)
  • LIR is required to: DNS-delegation to enduser of enduser-prefix
  • IPv6 Provider Independent (PI) Assignments (if multihomed) = minimum /32

A-records here are glue-records:

@                          IN SOA  ns1.tld. ...
                           IN NS   ns1.tld.
delegation-domain.tld.     IN NS   ns1.delegation-domain.tld.
ns1.delegation-domain.tld. IN A    193.49.159.2
ns1.delegation-domain.tld. IN AAAA 2001:660:3001:4002::2