SlideShare una empresa de Scribd logo
1 de 19
Descargar para leer sin conexión
CORE NETWORK SERVICES
3
DNS DHCP
ADDRESSES OF AN IPV6 HOST
4
§  Link-Local
§  Unicast
§  Loopback
§  All-Nodes Multicast
§  Solicited-Node
Multicast
FE80::61CC:B8CA:FCB2:36BE
2001:db8:1C6E::6D2B:1C6E
::1
FF01::1
FF02::1:FF2B:1C6E
(at least one) 	
  
IPV6 FORWARD DNS
5
ipv6-host IN AAAA 2001:DB8::1:2:34:56
host4711 IN A 192.249.249.111
IN AAAA 2001:db8:cafe:f9::d3
IPV6 REVERSE DNS
6
9.8.7.6.5.4.3.0.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
IN PTR ipv6-host.bluecatnetworks.com.
2001:db8:cafe:f9::/64 >> 9.f.0.0.e.f.a.c.8.b.d.0.1.0.0.2.ip6.arpa.
§  “listen” Statement
§  “query-source” Statement
ISC BIND & IPV6
7
options {
listen-on-v6 { 2001:db8:cafe:1::53; };
};
options {
query-source-v6 address 2001:db8:cafe:1::53;
};
§  “transfer-source” Statement
§  “notify-source” Statement
ISC BIND & IPV6
8
options {
transfer-source-v6 2001:db8:cafe:1::53;
};
options {
notify-source-v6 2001:db8:cafe:1::53;
};
DNS QUERIES
9
DNS Server
Resources
IPv4 = 192.168.191.3
IPv6 = 2001:DB8::1:2:345:6789
DNS Query
A/AAAA
Query
via IPv6
Query
via IPv4
DNS QUERIES
10
§  Filtering
§  Protocol-specific Search List
options {
filter-aaaa-on-v4 yes;
};
IPv6
IPv6
IPv6 IPv4 = bcnlab.corp
IPv6 = v6.bcnlab.corp
Zone bcnlab.corp
Zone v6.bcnlab.corp
DNS Server
ROUTER ADVERTISEMENT (RA)
11
Router
Prefix!?
Prefix,
TTL,
Flags
Src = link-local address (FE80::)
Dst = all-routers multicast address (FF02::2)
Src = link-local address (FE80::)
Dst = all-nodes multicast address (FF02::1)
ROUTER ADVERTISEMENT (RA)
12
Router
You‘re at
2001:db8:ca
fe:1::/64
A, M, O
Address	
  Alloca+on	
   Op+ons	
  
A	
  Flag	
   SLAAC	
   RFC	
  6106	
  
M	
  Flag	
   DHCPv6	
   DHCP	
  
O	
  Flag	
   SLAAC	
   DHCP	
  
RFC 6106
13
§  Recursive DNS Server
§  DNS Search List
switch# configure terminal
switch(config)# interface ethernet 3/3
switch(config-if)# ipv6 nd ra dns server 2001:db8:1:2::53 sequence 0
switch(config-if)# ipv6 nd ra dns search-list bcn.corp sequence 1
Source: http://cisco.com (Nexus 7000 Series Routing Guide)	
  
DHCPV6
14
§  Motivation: Central Management & Auditing
subnet6 2001:db8:1:2::/64 {
range6 2001:db8:1:2::1:0 2001:db8:1:2::1:ffff;
option dhcp6.name-servers 2001:db8:1:2::53;
option dhcp6.domain-search "bcn.corp";
}
DHCPV6
15
§  RA defines Usage of DHCPv6
§  Clients on UDP 546
§  Servers & Relays on UDP 547
§  Special Multicast Addresses
§  FF02::1:2 (All-DHCP-Agents) used by Clients
§  FF05::1:3 (All-DHCP-Servers) used by Relays
DHCPV6
16
Client	
   Server	
  
SOLICIT	
  –	
  FF02::1:2	
  
ADVERTISE	
  (Unicast)	
  
REQUEST	
  (Unicast)	
  
REPLY	
  (Unicast)	
  
Neighbour	
  SolicitaLon	
  Message	
  
(MulLcast)	
  
No	
  Answer	
  
Duplicate	
  
Address	
  
DetecLon	
  
PROTOCOL-SPECIFIC SEARCH LIST
17
IPv6
IPv6
IPv6
DHCP (v4/v6)
IPv4 (119) = bcnlab.corp
IPv6 (24) = v6.bcnlab.corp
DNS ServerRouter
DNSSL
Resources
Zone bcnlab.corp
Zone v6.bcnlab.corp
srv.v6.bcnlab.corp
Query via IPv4
Query via IPv6
srv.bcnlab.corp
THEORETICALLY ... ;)
18Source: https://www.insinuator.net/2015/03/ipv6-router-advertisement-flags-rdnss-and-dhcpv6-conflicting-configurations/	
  
ADDRESS MANAGEMENT FOR IPV6
19Source: https://www.insinuator.net/2013/10/ipam-requirements-in-ipv6-networks/	
  
§  Track dynamic Addresses (SLAAC + DHCP)
§  Connected L2/L3 Ports of Devices
§  Sorting Addresses by Categories
§  RFC 5952
§  Integration with DNS & DHCP
§  Metadata (Import, Reporting, etc.)
Thank you for your Time.

Más contenido relacionado

La actualidad más candente

10 step-to-configure-cisco-call-manager-express
10 step-to-configure-cisco-call-manager-express10 step-to-configure-cisco-call-manager-express
10 step-to-configure-cisco-call-manager-express
Nguyen Thanh
 
Visio-VSCHO001_Design
Visio-VSCHO001_DesignVisio-VSCHO001_Design
Visio-VSCHO001_Design
Rick Galvez
 
Dhcp & dhcp relay agent in cent os 5.3
Dhcp & dhcp relay agent in cent os 5.3Dhcp & dhcp relay agent in cent os 5.3
Dhcp & dhcp relay agent in cent os 5.3
Sophan Nhean
 

La actualidad más candente (19)

Setting up VPN between F5 LTM & ASA
Setting up VPN between F5 LTM & ASASetting up VPN between F5 LTM & ASA
Setting up VPN between F5 LTM & ASA
 
10 step-to-configure-cisco-call-manager-express
10 step-to-configure-cisco-call-manager-express10 step-to-configure-cisco-call-manager-express
10 step-to-configure-cisco-call-manager-express
 
Mpls vpn.rip
Mpls vpn.ripMpls vpn.rip
Mpls vpn.rip
 
Deploy Failover/High Availability in ASA Firewall
Deploy Failover/High Availability in ASA FirewallDeploy Failover/High Availability in ASA Firewall
Deploy Failover/High Availability in ASA Firewall
 
Hungary Usergroup - Midonet overlay programming
Hungary Usergroup - Midonet overlay programmingHungary Usergroup - Midonet overlay programming
Hungary Usergroup - Midonet overlay programming
 
Stu t17 a
Stu t17 aStu t17 a
Stu t17 a
 
Cisco asa active,active failover configuration
Cisco asa active,active failover configurationCisco asa active,active failover configuration
Cisco asa active,active failover configuration
 
IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013
 
Factory setup wsa_9.2_v1.0
Factory setup wsa_9.2_v1.0Factory setup wsa_9.2_v1.0
Factory setup wsa_9.2_v1.0
 
IP Source Guard
IP Source Guard IP Source Guard
IP Source Guard
 
ACI Multicast 구성 가이드
ACI Multicast 구성 가이드ACI Multicast 구성 가이드
ACI Multicast 구성 가이드
 
Visio-VSCHO001_Design
Visio-VSCHO001_DesignVisio-VSCHO001_Design
Visio-VSCHO001_Design
 
Dhcp & dhcp relay agent in cent os 5.3
Dhcp & dhcp relay agent in cent os 5.3Dhcp & dhcp relay agent in cent os 5.3
Dhcp & dhcp relay agent in cent os 5.3
 
ACI MultiPod 구성
ACI MultiPod 구성ACI MultiPod 구성
ACI MultiPod 구성
 
Packet walks in_kubernetes-v4
Packet walks in_kubernetes-v4Packet walks in_kubernetes-v4
Packet walks in_kubernetes-v4
 
Raspberry pi 3
Raspberry pi 3Raspberry pi 3
Raspberry pi 3
 
EIGRP Default Route
EIGRP Default Route EIGRP Default Route
EIGRP Default Route
 
Nxll10 v lan and trunking
Nxll10 v lan and trunkingNxll10 v lan and trunking
Nxll10 v lan and trunking
 
Automating Network Infrastructure : Ansible
Automating Network Infrastructure : AnsibleAutomating Network Infrastructure : Ansible
Automating Network Infrastructure : Ansible
 

Destacado

Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
Cisco Russia
 
LicensingScopeAndBoundaries
LicensingScopeAndBoundariesLicensingScopeAndBoundaries
LicensingScopeAndBoundaries
William Francis
 
Education webinar april 2012
Education webinar april 2012Education webinar april 2012
Education webinar april 2012
Infoblox
 
Wp ipam infoblox
Wp ipam infobloxWp ipam infoblox
Wp ipam infoblox
islamet
 
Network automation seminar
Network automation seminarNetwork automation seminar
Network automation seminar
patmisasi
 
Chapter08 Implementing And Managing Printers
Chapter08      Implementing And  Managing  PrintersChapter08      Implementing And  Managing  Printers
Chapter08 Implementing And Managing Printers
Raja Waseem Akhtar
 

Destacado (20)

itft_system admin
itft_system adminitft_system admin
itft_system admin
 
Palmer 6
Palmer 6Palmer 6
Palmer 6
 
MCSA 70-412 Chapter 01
MCSA 70-412 Chapter 01MCSA 70-412 Chapter 01
MCSA 70-412 Chapter 01
 
Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
Сisco IP NGN: сервисный уровень и управление IP-адресацией в сетях операторов...
 
Campaign of networking in csit association of Nepal
Campaign of networking in csit association of NepalCampaign of networking in csit association of Nepal
Campaign of networking in csit association of Nepal
 
Basic Computer Hardware
Basic Computer HardwareBasic Computer Hardware
Basic Computer Hardware
 
Workgroup Issues
Workgroup IssuesWorkgroup Issues
Workgroup Issues
 
LicensingScopeAndBoundaries
LicensingScopeAndBoundariesLicensingScopeAndBoundaries
LicensingScopeAndBoundaries
 
Bmit meet theexperts_2013
Bmit meet theexperts_2013Bmit meet theexperts_2013
Bmit meet theexperts_2013
 
Education webinar april 2012
Education webinar april 2012Education webinar april 2012
Education webinar april 2012
 
Wp ipam infoblox
Wp ipam infobloxWp ipam infoblox
Wp ipam infoblox
 
Network automation seminar
Network automation seminarNetwork automation seminar
Network automation seminar
 
Long Infoblox
Long InfobloxLong Infoblox
Long Infoblox
 
DHCP & DNS
DHCP & DNSDHCP & DNS
DHCP & DNS
 
Ipadd mngt
Ipadd mngtIpadd mngt
Ipadd mngt
 
Chapter08 Implementing And Managing Printers
Chapter08      Implementing And  Managing  PrintersChapter08      Implementing And  Managing  Printers
Chapter08 Implementing And Managing Printers
 
How to Sell Security to Your CIO
How to Sell Security to Your CIOHow to Sell Security to Your CIO
How to Sell Security to Your CIO
 
Threat Exposure Management - Reduce your Risk of a Breach
Threat Exposure Management - Reduce your Risk of a BreachThreat Exposure Management - Reduce your Risk of a Breach
Threat Exposure Management - Reduce your Risk of a Breach
 
Cyber crime v3
Cyber crime v3Cyber crime v3
Cyber crime v3
 
Cómo mejorar la seguridad de los servicios de DNS, DHCP e IPAM
Cómo mejorar la seguridad de los servicios de DNS, DHCP e IPAMCómo mejorar la seguridad de los servicios de DNS, DHCP e IPAM
Cómo mejorar la seguridad de los servicios de DNS, DHCP e IPAM
 

Similar a DNS, DHCP & IPAM with IPv6

ipv6 introduction & environment buildup
ipv6 introduction & environment buildupipv6 introduction & environment buildup
ipv6 introduction & environment buildup
psychesnet Hsieh
 

Similar a DNS, DHCP & IPAM with IPv6 (20)

IPv6 DHCP
IPv6 DHCPIPv6 DHCP
IPv6 DHCP
 
Deploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack EnvironmentsDeploying IPv6 in OpenStack Environments
Deploying IPv6 in OpenStack Environments
 
Fedv6tf-fhs
Fedv6tf-fhsFedv6tf-fhs
Fedv6tf-fhs
 
Getting started with IPv6
Getting started with IPv6Getting started with IPv6
Getting started with IPv6
 
DHCPv6 Redundancy Considerations (2014-04-05)
DHCPv6 Redundancy Considerations (2014-04-05)DHCPv6 Redundancy Considerations (2014-04-05)
DHCPv6 Redundancy Considerations (2014-04-05)
 
Neighbor Discovery Deep Dive – IPv6-Networking-Referat
Neighbor Discovery Deep Dive – IPv6-Networking-ReferatNeighbor Discovery Deep Dive – IPv6-Networking-Referat
Neighbor Discovery Deep Dive – IPv6-Networking-Referat
 
ULA network experience @ JANOG34, by Shishio Tsuchiya [APNIC 38 / APIPv6TF]
ULA network experience @ JANOG34, by Shishio Tsuchiya [APNIC 38 / APIPv6TF]ULA network experience @ JANOG34, by Shishio Tsuchiya [APNIC 38 / APIPv6TF]
ULA network experience @ JANOG34, by Shishio Tsuchiya [APNIC 38 / APIPv6TF]
 
ipv6 introduction & environment buildup
ipv6 introduction & environment buildupipv6 introduction & environment buildup
ipv6 introduction & environment buildup
 
OpenStack Icehouse Over IPv6
OpenStack Icehouse Over IPv6OpenStack Icehouse Over IPv6
OpenStack Icehouse Over IPv6
 
Dynamic Host Configuration Protocol
Dynamic Host Configuration ProtocolDynamic Host Configuration Protocol
Dynamic Host Configuration Protocol
 
Network Security Best Practice (BCP38 & 140)
Network Security Best Practice (BCP38 & 140) Network Security Best Practice (BCP38 & 140)
Network Security Best Practice (BCP38 & 140)
 
Implementing an IPv6 Enabled Environment for a Public Cloud Tenant
Implementing an IPv6 Enabled Environment for a Public Cloud TenantImplementing an IPv6 Enabled Environment for a Public Cloud Tenant
Implementing an IPv6 Enabled Environment for a Public Cloud Tenant
 
Dhc pv4
Dhc pv4Dhc pv4
Dhc pv4
 
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
SVR401: DirectAccess Technical Drilldown, Part 1 of 2: IPv6 and transition te...
 
IDNIC OPM 2023: IPv6 deployment planning and security considerations
IDNIC OPM 2023: IPv6 deployment planning and security considerationsIDNIC OPM 2023: IPv6 deployment planning and security considerations
IDNIC OPM 2023: IPv6 deployment planning and security considerations
 
IPv6 in CloudStack Basic Networking
IPv6 in CloudStack Basic NetworkingIPv6 in CloudStack Basic Networking
IPv6 in CloudStack Basic Networking
 
Ipv6
Ipv6Ipv6
Ipv6
 
Short Introduction to IPv6
Short Introduction to IPv6Short Introduction to IPv6
Short Introduction to IPv6
 
OpenStack Neutron IPv6 Lessons
OpenStack Neutron IPv6 LessonsOpenStack Neutron IPv6 Lessons
OpenStack Neutron IPv6 Lessons
 
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introductionCodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
CodiLime Tech Talk - Adam Kułagowski: IPv6 - introduction
 

Más de Andreas Taudte

Más de Andreas Taudte (20)

IPAM Security Considerations
IPAM Security ConsiderationsIPAM Security Considerations
IPAM Security Considerations
 
Cloud DNS Challenges
Cloud DNS ChallengesCloud DNS Challenges
Cloud DNS Challenges
 
Next-Gen DHCP
Next-Gen DHCPNext-Gen DHCP
Next-Gen DHCP
 
AI Possibilities for DDI
AI Possibilities for DDIAI Possibilities for DDI
AI Possibilities for DDI
 
DHCP Security Consideration
DHCP Security ConsiderationDHCP Security Consideration
DHCP Security Consideration
 
Troubleshooting DNS with dig
Troubleshooting DNS with digTroubleshooting DNS with dig
Troubleshooting DNS with dig
 
DNS Security Strategy
DNS Security StrategyDNS Security Strategy
DNS Security Strategy
 
Extended DNS Errors
Extended DNS ErrorsExtended DNS Errors
Extended DNS Errors
 
CNS @ Infoblox Exchange
CNS @ Infoblox ExchangeCNS @ Infoblox Exchange
CNS @ Infoblox Exchange
 
Core Network Services
Core Network ServicesCore Network Services
Core Network Services
 
DDI in University Environments
DDI in University EnvironmentsDDI in University Environments
DDI in University Environments
 
DDI Project Planning
DDI Project PlanningDDI Project Planning
DDI Project Planning
 
DNS still partying
DNS still partyingDNS still partying
DNS still partying
 
IT-as-a-Service - BlueCat @ NUBIT 2017
IT-as-a-Service - BlueCat @ NUBIT 2017IT-as-a-Service - BlueCat @ NUBIT 2017
IT-as-a-Service - BlueCat @ NUBIT 2017
 
Who is Andreas Taudte?
Who is Andreas Taudte?Who is Andreas Taudte?
Who is Andreas Taudte?
 
6 Myths about IPv6
6 Myths about IPv66 Myths about IPv6
6 Myths about IPv6
 
The Power of DNS
The Power of DNSThe Power of DNS
The Power of DNS
 
The what-you-may-call-it Internet
The what-you-may-call-it InternetThe what-you-may-call-it Internet
The what-you-may-call-it Internet
 
Network Control Forum - Vienna 2015
Network Control Forum - Vienna 2015Network Control Forum - Vienna 2015
Network Control Forum - Vienna 2015
 
BlueCat's Open Customer Meeting
BlueCat's Open Customer MeetingBlueCat's Open Customer Meeting
BlueCat's Open Customer Meeting
 

Último

Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
Diya Sharma
 
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
soniya singh
 
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 

Último (20)

Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Model Towh Delhi 💯Call Us 🔝8264348440🔝
 
✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663
✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663
✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663
 
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
₹5.5k {Cash Payment}New Friends Colony Call Girls In [Delhi NIHARIKA] 🔝|97111...
 
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 26 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
 
On Starlink, presented by Geoff Huston at NZNOG 2024
On Starlink, presented by Geoff Huston at NZNOG 2024On Starlink, presented by Geoff Huston at NZNOG 2024
On Starlink, presented by Geoff Huston at NZNOG 2024
 
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 6 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
 
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No AdvanceRohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
Rohini Sector 22 Call Girls Delhi 9999965857 @Sabina Saikh No Advance
 
VIP 7001035870 Find & Meet Hyderabad Call Girls LB Nagar high-profile Call Girl
VIP 7001035870 Find & Meet Hyderabad Call Girls LB Nagar high-profile Call GirlVIP 7001035870 Find & Meet Hyderabad Call Girls LB Nagar high-profile Call Girl
VIP 7001035870 Find & Meet Hyderabad Call Girls LB Nagar high-profile Call Girl
 
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableCall Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
 
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Sukhdev Vihar Delhi 💯Call Us 🔝8264348440🔝
 
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝
 
Best VIP Call Girls Noida Sector 75 Call Me: 8448380779
Best VIP Call Girls Noida Sector 75 Call Me: 8448380779Best VIP Call Girls Noida Sector 75 Call Me: 8448380779
Best VIP Call Girls Noida Sector 75 Call Me: 8448380779
 
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
Call Girls In Ashram Chowk Delhi 💯Call Us 🔝8264348440🔝
 
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
Dwarka Sector 26 Call Girls | Delhi | 9999965857 🫦 Vanshika Verma More Our Se...
 
Networking in the Penumbra presented by Geoff Huston at NZNOG
Networking in the Penumbra presented by Geoff Huston at NZNOGNetworking in the Penumbra presented by Geoff Huston at NZNOG
Networking in the Penumbra presented by Geoff Huston at NZNOG
 
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
 
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
 
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
 
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
 
@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶
@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶
@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶
 

DNS, DHCP & IPAM with IPv6

  • 1.
  • 3. ADDRESSES OF AN IPV6 HOST 4 §  Link-Local §  Unicast §  Loopback §  All-Nodes Multicast §  Solicited-Node Multicast FE80::61CC:B8CA:FCB2:36BE 2001:db8:1C6E::6D2B:1C6E ::1 FF01::1 FF02::1:FF2B:1C6E (at least one)  
  • 4. IPV6 FORWARD DNS 5 ipv6-host IN AAAA 2001:DB8::1:2:34:56 host4711 IN A 192.249.249.111 IN AAAA 2001:db8:cafe:f9::d3
  • 5. IPV6 REVERSE DNS 6 9.8.7.6.5.4.3.0.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. IN PTR ipv6-host.bluecatnetworks.com. 2001:db8:cafe:f9::/64 >> 9.f.0.0.e.f.a.c.8.b.d.0.1.0.0.2.ip6.arpa.
  • 6. §  “listen” Statement §  “query-source” Statement ISC BIND & IPV6 7 options { listen-on-v6 { 2001:db8:cafe:1::53; }; }; options { query-source-v6 address 2001:db8:cafe:1::53; };
  • 7. §  “transfer-source” Statement §  “notify-source” Statement ISC BIND & IPV6 8 options { transfer-source-v6 2001:db8:cafe:1::53; }; options { notify-source-v6 2001:db8:cafe:1::53; };
  • 8. DNS QUERIES 9 DNS Server Resources IPv4 = 192.168.191.3 IPv6 = 2001:DB8::1:2:345:6789 DNS Query A/AAAA Query via IPv6 Query via IPv4
  • 9. DNS QUERIES 10 §  Filtering §  Protocol-specific Search List options { filter-aaaa-on-v4 yes; }; IPv6 IPv6 IPv6 IPv4 = bcnlab.corp IPv6 = v6.bcnlab.corp Zone bcnlab.corp Zone v6.bcnlab.corp DNS Server
  • 10. ROUTER ADVERTISEMENT (RA) 11 Router Prefix!? Prefix, TTL, Flags Src = link-local address (FE80::) Dst = all-routers multicast address (FF02::2) Src = link-local address (FE80::) Dst = all-nodes multicast address (FF02::1)
  • 11. ROUTER ADVERTISEMENT (RA) 12 Router You‘re at 2001:db8:ca fe:1::/64 A, M, O Address  Alloca+on   Op+ons   A  Flag   SLAAC   RFC  6106   M  Flag   DHCPv6   DHCP   O  Flag   SLAAC   DHCP  
  • 12. RFC 6106 13 §  Recursive DNS Server §  DNS Search List switch# configure terminal switch(config)# interface ethernet 3/3 switch(config-if)# ipv6 nd ra dns server 2001:db8:1:2::53 sequence 0 switch(config-if)# ipv6 nd ra dns search-list bcn.corp sequence 1 Source: http://cisco.com (Nexus 7000 Series Routing Guide)  
  • 13. DHCPV6 14 §  Motivation: Central Management & Auditing subnet6 2001:db8:1:2::/64 { range6 2001:db8:1:2::1:0 2001:db8:1:2::1:ffff; option dhcp6.name-servers 2001:db8:1:2::53; option dhcp6.domain-search "bcn.corp"; }
  • 14. DHCPV6 15 §  RA defines Usage of DHCPv6 §  Clients on UDP 546 §  Servers & Relays on UDP 547 §  Special Multicast Addresses §  FF02::1:2 (All-DHCP-Agents) used by Clients §  FF05::1:3 (All-DHCP-Servers) used by Relays
  • 15. DHCPV6 16 Client   Server   SOLICIT  –  FF02::1:2   ADVERTISE  (Unicast)   REQUEST  (Unicast)   REPLY  (Unicast)   Neighbour  SolicitaLon  Message   (MulLcast)   No  Answer   Duplicate   Address   DetecLon  
  • 16. PROTOCOL-SPECIFIC SEARCH LIST 17 IPv6 IPv6 IPv6 DHCP (v4/v6) IPv4 (119) = bcnlab.corp IPv6 (24) = v6.bcnlab.corp DNS ServerRouter DNSSL Resources Zone bcnlab.corp Zone v6.bcnlab.corp srv.v6.bcnlab.corp Query via IPv4 Query via IPv6 srv.bcnlab.corp
  • 17. THEORETICALLY ... ;) 18Source: https://www.insinuator.net/2015/03/ipv6-router-advertisement-flags-rdnss-and-dhcpv6-conflicting-configurations/  
  • 18. ADDRESS MANAGEMENT FOR IPV6 19Source: https://www.insinuator.net/2013/10/ipam-requirements-in-ipv6-networks/   §  Track dynamic Addresses (SLAAC + DHCP) §  Connected L2/L3 Ports of Devices §  Sorting Addresses by Categories §  RFC 5952 §  Integration with DNS & DHCP §  Metadata (Import, Reporting, etc.)
  • 19. Thank you for your Time.