IPv6 Foundations: Protocols, Services, and Migration

1. Introduction to IPv6

• IPv6 First Appears Simple
• Why IPv6
• New Technologies
  • IPv4 Lifetime Extension
  • Key Differences Between IPv4 and IPv6
• Free IPv6 Brokers and Support
• IPv4 Lifetime Extension
• What Happened to IPv5?
• Key Differences between IPv4 and IPv6
• DoD 2003 Mandate
• NIST Recommendations
• DoD IPv6 Standard Profiles
• IPv6 Forum
• MoonV6, NAv6TF, and JTIC
• IPv6 Ready Logo Program
• Five Internet Registries
• ARIN Requirements for Address Licensing
  • ARIN Form/Template
  • ARIN Assignment
• 2012 Government Public-Facing Servers
• Current Issues with Public Servers
• IPv6 Reference Sheet

2. IPv6 Addressing

• Binary Number Representation
  • Decimal-to-Binary Conversion
• Hexadecimal
• IPv6 Addressing
  • Possible IPv6 Addresses
  • IPv6 Address Notation
  • Compressing the IPv6 Address
  • IPv6 Address Space
  • IPv6 Address Prefix Subnetting
  • Prefix Examples
  • IPv6 Prefixes
  • Unicast Addresses
  • Link-Local Address
  • Site-Local (deprecation)
  • Unique Local Address (ULA)
  • Global Unicast Address
  • Global Address Flow Chart
  • Auto-Configured Address States
    • Tentative
    • Preferred, Deprecated
    • Valid and Invalid
    • Address Timers
  • IPv6 Address Timers
  • Anycast Addresses
  • Multicast Addresses
    • Well-Known Multicast
  • Mapping Layer 3 to Layer 2 Multicast
  • Loopback and Unspecified Addresses
  • 64-bit MAC Address Assignment
  • IPv6 Prefixes and MAC Addresses
  • Temporary IPv6 Address
  • IPv6 Ping Command
  • Unicast Addresses
  • IPv6 Host, Nodes, Routers, and Interfaces

3. IPv6 Header Information

• IPv4 Protocol Stack
• IPv6 Protocol Stack
• IPv6 Dual Stack
• IPv4 and IPv6 Type Codes
• IPv4 and IPv6 Header Comparison
• New Header Format
• Traffic Class Field
• IPv6 Header Length Includes
• IPv6 Extension Headers
  • Hop-by-Hop
  • Destinations Options
  • Routing Header
    • Mobility with IPv6
    • Mobile Node Home Agent Support
  • Fragment Header
  • IPSec Authentication Header
  • IPSec ESP Header
  • Extension Header Order
  • List of Next Header Values

4. ICMPv6 Network Operation

• ICMPv6 Header
• ICMPv6 Message Types
• ICMPv6 Error Message Types
• ICMPv6 Informational Message Types
• ICMPv6 Ping Operation
  • ICMPv6 Echo Request Message
  • ICMPv6 Echo Reply Message
• Windows XP
• Windows Vista and 07
• Windows server 03' and 08'
• Windows 07 GUI Configuration
• Common Windows Commands
  • Ipconfig Command
  • Using Different Netsh Commands
  • Windows Route Print Command
  • Client Addresses
• ICMPv6 Neighbor Discoveries
• ICMPv6 Neighbor Discoveries Defined
• Neighbor Solicitation
  • ICMPv6 Neighbor Discovery
  • ICMPv6 Neighbor Solicitation Message
  • Duplicate Address Detection
  • Solicited-Node Multicast Address
  • Duplicate Address Analyzed
  • Neighbor Solicitation Message Process
  • Host Neighbor Cache
  • Host Neighbor Cache After Solicitation
• Neighbor Advertisement
  • ICMPv6 Neighbor Advertisement Message
• Autoconfiguration Methods
• Router Solicitation
  • ICMPv6 Router Solicitation Message
• Router Advertisement
  • ICMPv6 Router Advertisement Message
  • ICMPv6 Router Advertisement vs. DHCPv6
  • Viewing a Router's Neighbor Cache Table
• SLAAC Flow Chart
• Viewing a Host Routing Table
• Viewing a Router's Neighbor Cache Table
• Configuring IPv6 on a Unix Workstation
  • Unix Ifconfig Commands
  • Common Unix Commands
• Configuring IPv6 on a MAC Workstation
• Operating Systems
• DHCPv6 Overview
  • DHCPv4 and DHCPv6 Comparison
  • DHCPv6 Relay Agent
  • DHCPv6 08' Server Configuration
• ICMPv6 Redirect
• ICMPv6 Multicast Messages
• Fragmentation Service from the Source
• ICMPv6 MTU Path Discovery
  • ICMPv6 Packet Too Big Error Message
  • Windows Destination Cache Table
  • Fragment Header
  • Fragment Offset Value
• ICMPv6 Time Exceeded Destination Unreachable, etc.
• ICMPv6 Multicast Listener Discovery Message

5. Routing Services and Protocols

• Current Routing Protocols
• RIPng Protocol
  • RIPng Enhancements
  • IPv4 RIP-2 MAC Header Snapshot
  • IPv6 RIPng MAC Header Snapshot
  • IPv4 RIP-2 IP Header Snapshot
  • IPv6 RIPng IP Header Snapshot
  • IPv4 RIP-2 UDP Header Snapshot
  • IPv6 RIPng UDP Header Snapshot
  • IPv4 RIP-2 Snapshot
  • IPv6 RIPng Snapshot
  • IPv6 RIPng Trace File
  • Enabling IPv6 on Cisco
• Enabling IPv6 on a Router
• Router Configuration for IPv6
• OSPFv3
  • OSPF Areas
  • Link State Advertisement
  • LSDB Exchange
  • Entering Information into the Routing Table
  • OSPFv3 Routing Table
  • Forming Adjacency
  • OSPF Area Border Routers
  • DR and BDR Election
  • DR and BDR Operation
  • OSPF Hello Packet
• BGP Protocol
  • BGP Neighbors
  • Common MP-BGP Commands
  • BGP Peering Configuration

6. IPv6 Access List

• DMZ Layer
• Packet Filtering
• IPv6 ACL Packet Flow
• IPv4 Router Access-List
• IPv4 Standard and Extended ACL
• IPv6 Standard Access List
• IPv6 Extended Access List
• IPv6 Reflexive Access List
• Access List Configurations

7. DNS

• DNS infrastructure
  • DNS A Records
  • DNS AAAA Resource Record
  • DNS Deployment
  • Bind9 Support
• Example IPv6 DNS Query Over IPv4
• Example IPv6 DNS Reply Over IPv4
• DNS Update Over IPv6 Native
• Testing DNS
• HTTP and FTP URL Access

8. IPv6 Deployment Strategies

• Reasons Delaying iPv6 Migration
• Migration Schedule
  • Preliminary Stage
  • Discovery Stage
  • Design Stage
  • Deployment Stage
  • IPv6 Address Recommendations
• IPv6 Deployment Strategies
• Potential Host Types During Migration from IPv4 to IPv6
• Dual-Stack Migration Strategy
• Current Operating Systems Supporting IPv6
• Application Upgrades
• FTP over IPv6 Connection
• FTP Connection over IPv6
• Viewing Live Analyzer Traces
• TFTP over IPv6
• SMTP over IPv6
• IPv4 and IPv6 Dual-Stack DNS Support
• IPv6 Tunneling Migration Strategies
  • IPv6 Tunneled over IPv4
• IPv6 Tunneling Methods Using Manual Configuration
  • Tunneling Router-To-Router
  • Tunneling: ICMP Ping Packet
  • Routing over 6to4 Tunnel
• Silver Springs Network
• 6to4 Tunneling Devices
• 6to4 Auto-Configured Tunnel
• ISATAP
• ISATAP Link-Local Capture
• Teredo
• Other Services and Technologies
• IPv6 Supported Technologies
• Enterprise Migration Steps
  • Sample Inventory List
  • Possible IPv6 Subnet Assignment
  • Further Considerations in Migrating IPv6
  • IPv6 Integration

9. IPSec Security

• IPSec Tunneling
• IPv6 IPSec
  • Security Areas Addressed
• IPSec Framework
  • Authentication Header
  • AH Transport Mode
  • AH Tunnel Mode
  • Encapsulating Security Payload
  • ESP Transport Mode
  • ESP Tunnel Mode
  • Internet Key Exchange
• IPv6 IPSec in a Windows Environment
  • Microsoft Symmetric Key Authentication
  • Setting Up the IPSec6 Tunnel

• Features and benefits of IPv6
• Advanced capabilities of IPv6, beyond what IPv4 offers
• Deployment strategies to consider when migrating to IPv6
• How to tunnel IPv6 over an IPv4 network
• How to configure IP RIPng, OSPFv3, and BGP for an IPv6 network
• The role and configuration of DHCP and DNS in an IPv6 network
• How to ensure a smooth transition from IPv4 and coexistence with IPv4 networks
• How IPv6 provides enhanced support for mobile IP and mobile computing devices
• Differences between DHCPv6 and DHCP
• Tunneling methods consisting of 6to4, ISATAP, manual, automatic, and Teredo

Lab 1: Initial Configuring and Neighbor Discovery

• Install IPv6 for Windows XP
• View your IPv6 address
• Review your configuration results
• Ping your neighboring pod's computer
• Use Wireshark to analyze certain captured frames
• Analyze IPv6 header information
• Analyze various neighbor solicitations messages including DaD
• Investigate your PC's neighbor cache

Lab 2: Configuring and Analyzing IPv6 on the Network Router

• Set up the classroom network
• Configure and verify IPv6 on a Cisco router
• Analyze Router Solicitation and Router Advertisement messages
• Verify and test network connectivity
• Use the debug ipv6 nd command to view the exchange of Router Solicitations

Lab 3: ICMPv6 Packet Too Large Fragmentation

• Configure your router with a link MTU size of 1280 bytes
• Ping your neighbor's workstation with 1500 byte frame
• Capture the ICMPv6 Packet Too Large error message
• Ping your neighbor's workstation with 8000 byte packet
• Capture and analyze Fragment Extension Headers

Lab 4: Configuring IPv6 RIPng

• Configure IPv6 on a Cisco router
• Configure IPv6 RIGng
• Verify IPv6 RIPng configuration and operation on your router
• Analyze RIPng updates using a network analyzer

Lab 5: DDNS (Dynamic DNS)

• Configure the network to use DDNS for name resolution
• Instead of pinging by IPv6 addresses, ping FQDN names using DNS resolution
• Configure your workstation for DDNS registration

Lab 6: OSPF Configuration

• Configure IPv6 OSPFv6 on your router
• Build adjacencies between other IPv6 routers
• View IPv6 OSPFv6 routing tables for different network connections
• View live OPSFv6 route updates from local router
• Configure IPv6 encryption used between routers

Lab 7: IPv6 BGP Routing

• Enable IPv6 BGP routing protocol
• Configure IPv6 BGP autonomous systems
• Configure both IBGP and EBGP neighbor statements
• View IPv6 routing tables

Lab 8: IPv6 Access Control List

• Configure your router to block telnet access from your neighboring routers
• Configure your access list so all other network devices can access your router
• Block your neighboring router from pinging your router
• Write an access list where you can ping other routers but block neighboring ping packets

Lab 9: DNS Operation

• Configure client for IPv6 DNS name resolution
• Analyze IPv6 quad (AAAA) records
• Analyze an DNS packet
• Verify DNS operation by pinging your DNS server and analyzing a DNS query

Lab 10: Building a Manual IPv6 Tunnel

• Configure a router for tunnel operation, allowing it to carry IPv6 traffic over an IPv4 network
• Test connectivity using the IPv6 address and fix any problems that occur
• Use show commands to view your configuration and verify tunnel operation
• Analyze tunnel traffic that was captured using a network analyzer

Networking professionals who are considering or making the migration from IPv4 to IPv6 protocol-based network environments.