IPv6 networking training sduffy v3
•Descargar como PPT, PDF•
2 recomendaciones•1,085 vistas
IPv6 training
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Destacado
Destacado (20)
Similar a IPv6 networking training sduffy v3
Similar a IPv6 networking training sduffy v3 (20)
Último
Último (20)
IPv6 networking training sduffy v3
- 1. IPv6 Networking training Shane Duffy Director, Network Infrastructure B&B Electronics
- 2. Agenda • IPv4 Addressing & Subnets refresher • IPv6 Addressing • IPv6 Neighbor Discovery • IPv6 Tools & Resources • Network layers / DNS & other services • Hands on labs
- 3. Prerequisites • Willingness to learn new things • An understanding of networks • Not customer service , Sales , etc • Laptop / Computer for hands on – We will use CORE to setup a lab environment – http://bit.ly/TI5osL <- Lab files
- 5. IPv4 Addressing (32 bit) • IPv4 - 32bits , 4 x decimal Octets – Subnet mask similar , bit masks network / host id • 137.12.32.13 255.255.255.0 • Network ID 137.12.32.0 • Broadcast 137.12.32.255
- 6. Subnet bit masking IP Address: 209.85.128.5 “Mask”: 255.255.128.0 11010001 01010101 10000000 00000101 11111111 11111111 10000000 00000000 Use two 32-bit numbers to represent a network. Network number = IP address + Mask Example: Google Prefix: 209.85.128.0/17 Address no longer specifies network ID range. New forwarding trick: Longest Prefix Match
- 7. IPv4 RFC1918 / Loopbacks • Private addressing – 192.168.x.x – 172.16-32.x.x – 10.x.x.x
- 8. Types of IPv4 Addresses • Unicast • Broadcast – Last address in subnet range • Loopback addressing – 127.0.0.1 • Multicast addressing – 224.0.0.0 - 239.255.255.255
- 9. ARP Refresher • ARP Request • ARP Reply • Broadcast ARP – To all machines on LAN FF:FF:FF:FF:FF:FF • Who has 192.168.0.12? – Device with 192.168.0.12 will reply • Its me, 00:0E:BE:12:D4:0E • ARP Cache stores list of mappings
- 10. IPv6 Addressing
- 11. Version IHL Type of Service Total Length Identification Flags Fragment Offset Time to Live Protocol Header Checksum Source Address Destination Address Options Padding Version Traffic Class Flow Label Payload Length Next Header Hop Limit Source Address Destination Address IPv4 HeaderIPv4 Header IPv6 HeaderHeader - field’s name kept from IPv4 to IPv6 - fields not kept in IPv6 - Name & position changed in IPv6 - New field in IPv6 Legend IPv4 & IPv6 Header Comparison MTU > 68 bytes MTU > 1280 bytes
- 12. IPv6 Addressing Format • 8 x 16-bit hexadecimal nibbles (128 bits) • Numbers separated by “:” • Hex numbers are not case sensitive • Abbreviations are possible – Leading zeros in contiguous block could be represented by “::” • 2000:ADAB:AAAA:0001:0000:0000:0000:0001 • 2000:ADAB:AAAA:1::1 – Double colon only appears once in address
- 13. IPv6 Addressing (128 bit) • IPv6 128 bits , 8 x hexadecimal • 2000:ADAB:AAAA:1::1/64 • 2000:ADAB:AAAA:0001:0000:0000:0000:0001/64 • Prefix just like CIDR – V4 192.168.0.0/16 – V6 2000:ADAB:AAAA::/48 • Collapse leading zeros
- 14. IPv6 Link Local / Loopback •Loopback address – ::1 (remember double colon notation) – 0000:0000:0000:0000:0000:0000:0000:0001 •Default Gateway route – ::/0
- 15. IPv6 Addressing Model • Addresses are assigned to interfaces – Change from IPv4 (Host) • Interface “expected” to have multiple addresses • Addresses have scope – Link Local – Unique Local – Global • Addresses have lifetime – Valid and preferred lifetime Global Unique Local Link Local
- 16. Special Addressing Hex Binary Type 2 or 3 001 Aggregatable Global Unicast Address FE80::/10 1111 1110 10 Link-Local Unicast Address FC00::/7 FC00::/8 (Registry) FD00::/8 (No Registry) 1111 1100 1111 1101 Unique Local Unicast Address FF00::/8 1111 1111 Multicast Address ::1 Loopback Address ::/0 Default Gateway Route
- 17. Types of IPv6 Addresses • Unicast – Address of a single interface. One-to-one delivery to single interface • Multicast – Address of a set of interfaces. One-to-many delivery to all interfaces in the set • Anycast – Address of a set of interfaces. One-to-one-of- many delivery to a single interface in the set that is closest • No broadcast addresses
- 18. Aggregatable Global Unicast Interface IDSLAGlobal Routing Prefix 001 3 45 Bits 16 Bits 64 Bits Provider Site Host Aggregatable Global Unicast Addresses: •Addresses for generic use of IPv6 •Structure as a hierarchy to keep aggregation 2000:ABCD:AAAA:1234::1
- 19. IPv6 Address Allocation Partitioning of IPv6 Allocated space •Lowest-order 64-bit field of unicast address may be assigned in multiple ways (See neighbor discovery) – Auto-configured EUI-64 , Expanded 48-bit MAC – Auto generated pseudo-random number (privacy) – Assigned via DHCP – Manually configured 2001:ABCD:AAAA::/48 <- Customer 2001:ABCD:AAAA:0001::/64 <- LAN 2001:ABCD:AAAA:0001:0200:29FF:FE00:0001<- Interface
- 20. Unique-Local Interface IDGlobal 40 Bits 1111 110 128 Bits FC00::/7 7 Bits Unique-local Addresses: •Local communications •Inter-site VPNs •Not routable on the internet ( Remember like RFC1918 ) Subnet ID 16 Bits
- 21. Link-Local Interface IDRemaining 54 Bits 1111 1110 10 128 Bits FE80::/10 10 Bits Link-local Addresses: •Mandatory address for communication between two IPv6 devices (Like ARP but at layer 3) •Automatically assigned by router once IPv6 enabled •Used for next hop calculation in routing protocols •Only link specific scope •Remaining 54 Bits could be zero or any manually configured value
- 22. ICMPv6 • Internet Control Message Protocol v6 • RFC 2463 • Modification of ICMP from IPv4 • Message types are similar (but different types/codes) – Destination unreachable (type 1) – Packet too big (type 2) – Time exceeded (type 3) – Parameter problem (type 4) – Echo request/reply (type 128 and 129)
- 24. Neighbor Discovery • Replaces ARP, ICMP (redirects, router discovery) • Reachability of neighbors • Hosts use it to discover routers , auto configuration of addresses • Duplicate Address Detection (DAD)
- 25. IPv6 – Replacing ARP • ICMPv6 – Neighbor Solicitation (type 135) – Neighbor Advertisement (type 136) • A host seeking the link layer address of a neighbor multicasts a neighbor solicitation and the neighbor (if online) responds with its link layer address in a neighbor advertisement. Source: http://packetlife.net/blog/2008/aug/28/ipv6-neighbor-discovery/
- 26. Solicited-node multicast address • Prefix ff02:0:0:0:0:1:ff00::/104 • Last 24 bits of Unicast / Anycast address – fe80::2aa:ff:fe28:9c5a <- IPv6 Address – ff02:0:0:0:0:1:ff28:9c5a <- Multicast address • This becomes very powerful when the network is using MLD / IGMPv3 capable switches with multicast pruning – Failback looks like broadcasting
- 27. IPv6 – Router Discovery Source: http://packetlife.net/blog/2008/aug/28/ipv6-neighbor-discovery/ • ICMPv6 – Router Solicitation (type 133) – Router Advertisement (type 134) • When first joining a link, an IPv6 host multicasts a router solicitation to the all routers multicast group, and each router active on the link responds by sending a router advertisement with its address to the all nodes group.
- 28. IPv6 – Prefix Discovery • Router Advertisement – Prefix information option (type 3) • Each prefix information option lists an IPv6 prefix (subnet) reachable on the local link. • Its not uncommon in IPv6 to have multiple IPv6 prefixes on the same link.
- 29. Address Autoconfiguration (SLAAC) • Uses Prefix discovery • Prefix concatenated with EUI-64 style MAC – Windows uses RFC4941 (Privacy pseudo random generated 64 bits) • FFFE allows us to recognize the address is generated from a MAC address • Invert the universal/local (U/L) flag (bit 7) in the OUI portion of the address – Globally unique addresses assigned by the IEEE originally have this bit set to zero, indicating global uniqueness. Source: http://packetlife.net/blog/2008/aug/04/eui-64-ipv6/
- 30. IPv6 Tools
- 31. IPv6 Tools • Similar to all the familiar IPv4 tools *nix Windows IPv4 Description ping6 ping6 ping Ping a host to request a reply traceroute6 tracert6 traceroute Ask each hop on route to reply netstat –f inet -rn ndp -an arp -an Neighbor discovery table IPv6 equivalent to IPv4 arp table dig nslookup same DNS lookup. IPv6 records are AAAA
- 32. DNS and other services
- 33. DHCPv6 - FF02::1:2 • New UDP ports – 546 Client (IPv4 UDP 67) – 547 Server (IPv4 UDP 68) • Message – Solicit – Advertise – Request – Reply
- 34. IPv6 & DNS • DNS adds AAAA record type (Quad A) SDUFFY-L3:~ sduffy$ dig AAAA google.com ; <<>> DiG 9.8.3-P1 <<>> AAAA google.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25326 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;google.com. IN AAAA ;; ANSWER SECTION: google.com. 192 IN AAAA 2001:4860:4007:801::100e
- 36. Hands on using CORE • Laptop / Computer for hands on – We will use CORE to setup a lab environment – http://bit.ly/TI5osL <- Lab files & Documents • CORE – http://www.nrl.navy.mil/itd/ncs/products/core • Virtual Box – https://www.virtualbox.org/wiki/Download_Old_Builds_4_2
- 37. Hands on using CORE • VM Running and internet connection ok – Download the template files for use later. • sudo apt-get install wireshark – sudo setcap ‘CAP_NET_RAW+eip CAP_NET_ADMIN+eip’ /usr/bin/dumpcap • sudo apt-get install radvd
- 38. Questions?
- 39. IPv6 Security IPv6 restores end-to-end multimedia collaborationIPv6 restores end-to-end multimedia collaboration The false automatic security from IPv6 NAT
- 40. Multicast Groups • Group Concept – Multicast is based on the concept of a group. – A multicast group is an arbitrary group of receivers that expresses an interest in receiving a particular data stream. – This group has no physical or geographical boundaries—the receivers can be located anywhere on the Internet or in a private network. – Receivers that are interested in receiving data flowing to a particular group must join the group by signalling their local router. – This signalling is achieved with MLD protocol, which is the IPv6 equivalent of the IGMP protocol on IPv4. – The network then delivers data to potentially unlimited receivers, using only one copy of the multicast data per subnet.
- 41. Multicast Refresher – IPv6
- 42. Multicast Refresher - Addresses • RFC 3306 Unicast-Prefix-based IPv6 Multicast – The P flag indicates a prefix. Within IPv6 multicast, this flag allows part of the group address to include the source network’s Unicast prefix, which creates a globally unique Group Address. • Solves the old IPv4 address assignment problem: – How can I get global IPv4 multicast addresses (GLOB, ..) In IPv6, if you own an IPv6 unicast address prefix you implicitly own an RFC3306 IPv6 multicast address prefix:
- 43. Multicast - Host to Router • MLD is equivalent to IGMP in IPv4 • Sub protocol of ICMP: MLD messages are transported over ICMPv6 • MLD uses link local source addresses (hop limit 1, router alert option) • Version number confusion: – MLDv1 (RFC2710) like IGMPv2 (RFC2236) – MLDv2 (draft) like IGMPv3 (RFC3376) – MLDv2 enables IPv6 to use SSM operation • Service Model requirements: – ASM – MLDv1 sufficient – SSM – Requires MLDv2 (Fully backward compatible with MLDv1 on hosts)
- 44. Thank you! Corporate Headquarters 707 Dayton Road, PO Box 1040 Ottawa, IL 61350 Phone: 1-800-346-3119 Fax: 815-433-5109 Customer Service: orders@bb-elec.com Tech Support: support@bb-elec.com General Inquiries: info@bb-elec.com European Headquarters Westlink Commerical Park, Oranmore, Co. Galway, Ireland Phone: +353 91 792444 Fax: +353 91 792445 Customer Service: eSales@bb-elec.com Tech Support: techSupport@bb-elec.com General Inquiries: info@bb-elec.com B&B Academy-your partner on the path to knowledge Contact Information
- 46. Network Layers
- 47. Network Layers • File transfer, Email, Remote login7 Application 6 Presentation • Establish/manage connection5 Session • End-to-end control & error checking TCP4 Transport • Routing and Forwarding IP3 Network • Ethernet2 Data Link • Transmission signalling1 Physical
- 48. OSI Model ApplicationApplication TransportTransport NetworkNetwork LinkLink OSI ModelOSI Model TCP/IPTCP/IP ProtocolsProtocols HTTPHTTP SMTPSMTP POP3POP3 FTPFTP …… TCPTCP UDPUDP IPIP ETHERNETETHERNET PPPPPP …… Link Layer : includes device driver and network interface card Network Layer : handles the movement of packets, i.e. Routing Transport Layer : provides a reliable flow of data between two hosts Application Layer : handles the details of the particular application
- 49. EtherNet/IP ApplicationApplication TransportTransport NetworkNetwork LinkLink OSI ModelOSI Model TCP/IPTCP/IP ProtocolsProtocols HTTPHTTP CIPCIP …… TCPTCP UDPUDP IPIP ETHERNETETHERNET ……
- 50. Modbus/TCP ApplicationApplication TransportTransport NetworkNetwork LinkLink OSI ModelOSI Model TCP/IPTCP/IP ProtocolsProtocols HTTPHTTP Modbus/TCPModbus/TCP FTPFTP …… TCPTCP UDPUDP IPIP ETHERNETETHERNET PPPPPP ……
- 51. EtherCAT ApplicationApplication TransportTransport NetworkNetwork LinkLink OSI ModelOSI Model TCP/IPTCP/IP ProtocolsProtocols HTTPHTTP SMTPSMTP POP3POP3 FTPFTP …… TCPTCP UDPUDP IPIP EtherCAT MACEtherCAT MAC PPPPPP …… UDP IP
- 52. PROFINET ApplicationApplication TransportTransport NetworkNetwork LinkLink OSI ModelOSI Model TCP/IPTCP/IP ProtocolsProtocols HTTPHTTP RT DataRT Data DataData TCPTCP UDPUDP IPIP ETHERNETETHERNET PPPPPP …… RT DataRT Data DataData TCPTCP UDPUDP IPIP ETHERNETETHERNET SRTSRT RTRT
- 53. Protocol Stack • Data is sent down the protocol stack • Each layer will at to the packet by prepending headers ApplicationApplication TransportTransport NetworkNetwork LinkLink DataData DataDataTCP/UDP header TCP/UDP header DataDataTCP/UDP header TCP/UDP header IP header IP header DataDataTCP/UDP header TCP/UDP header IP header IP header Frame header Frame header Frame trailer Frame trailer Application Data TCP segment / UDP packet IP Datagram 22Bytes 20Bytes 20Bytes 4Bytes 64 to 1500 BytesPhysicalPhysical Network Frame
Notas del editor
- Training has been developed for technical audience. Need to have a willingness to learn along with a good understanding of IPv4 networking.
- http://www.nrl.navy.mil/itd/ncs/products/core&lt;- Download CORE for our labs https://www.virtualbox.org/wiki/Download_Old_Builds_4_2&lt;- For now we don’t want to go higher than 4.2 Virtual box due to a bug. Labs we will follow for IPv6 tutorial http://www.brianlinkletter.com/ipv6-addressing-simulator-part-1/ http://www.brianlinkletter.com/ipv6-addressing-simulator-part-2/ http://mininet.org/&lt;- Alternative network simulator
- Skip this section if the group is fully familiar with IPv4
- Subnetting in IPv4 is simple to understand once we use classful subnets /8 /16 /24 which break at the dotted decimal points. It gets a little more complicated to understand the start network address and broadcast when we use CIDR Eg a.b.c.d/29+0.0.0.7255.255.255.24881/32 Cd = 0 ... (8n) ... 248 IPv6 will bring the same challenges but with more addresses there is no need to make things compicated so its best to break at the nibbles “:”
- Using a CIDR example we can see how the subnet is applied like a MASK masking over the bits which become the network portion of the address. The host portion is covered in the trailing 0 bits For IPv6 we have so many addresses that in normal addressing which should not break the nibble boundaries when doing subnetting
- Private addresses used on local LAN’s and private networks in IPv4
- ARP does a MAC level broadcast to all hosts on the link. Hosts process the request and discard if not for them. Large flat networks can have issues with too much broadcast traffic. Under powered devices like print servers can suffer issues from dealing with too much broadcast traffic.
- IPv6 header has been greatly simplified for faster processing The minimum path MTU size has been increased to &gt;= 1280 bytes TTL -&gt; Hop Limit
- All globally routable IPv6 addresses will have the 1st Digit 2 or 3 we can very quickly spot the difference between Link local and Global addresses once we learn the identification of the first 3 digits
- Discuss Anycast in IPv4 how its used for Global DNS servers in conjunction with BGP routing for the shortest hop distance
- Keen eyes will spot that the interface has been expanded from an IMC MAC address of 00:00:29:00:00:01 notice the bit flip on the 1st set and also the FF:FE identifer between the 24bit OUI and 24bit unique
- Link-local addresses and zone indices Because all link-local addresses in a host have a common prefix, normal routing procedures cannot be used to choose the outgoing interface when sending packets to a link-local destination. A special identifier, known as a zone index, is needed to provide the additional routing information; in the case of link-local addresses, zone indices correspond to interface identifiers. When an address is written textually, the zone index is appended to the address, separated by a percent sign (%). The actual syntax of zone indices depends on the operating system: the Microsoft Windows IPv6 stack uses numeric zone indices, e.g., fe80::3%1. The index is determined by the interface number; most Unix-like systems (e.g., BSD, Linux, OS X) use the interface name as a zone index: fe80::3%eth0. Zone index notations cause syntax conflicts when used in uniform resource identifiers (URI), so the &apos;%&apos; character must be escaped via percent-encoding: http://[fe80::3%25eth0]
- This is a big difference no more flooding layer 2 with FF:FF:FF:FF:FF:FF. Multicast (Old switches will flood network much like old IPv4 broadcast, switches with MLD (IGMPv3) will prune the multicast traffic so that only ports which have multicast group subscribers will receive traffic) &lt;- this makes a big difference in a large network. Uses ICMPv6 which implies that an IPv6 address must be available to use as the source address. Layer 3 protocol Solicited Multicast
- Address Resolution The function of address resolution was handled by ARP for IPv4, but is handled by ICMPv6 for IPv6. In a process very similar to router discovery, two ICMPv6 messages are used: Neighbor Solicitation (type 135) and Neighbor Advertisement (type 136). A host seeking the link layer address of a neighbor multicasts a neighbor solicitation and the neighbor (if online) responds with its link layer address in a neighbor advertisement.
- A Solicited-Node multicast address is an IPv6 multicast address valid within the local-link (e.g. an Ethernet segment or a Frame Relay cloud). Every IPv6 host will have at least one such address per interface. Solicited-Node multicast addresses are used in Neighbor Discovery Protocol for obtaining the layer 2 link-layer addresses of other nodes.[1] A Solicited-Node multicast address is created by taking the last 24 bits of a unicast or anycast address and appending them to the prefix ff02:0:0:0:0:1:ff00::/104.[2] It is important to realize that we have taken 104 bits from the address, so that the last byte 00 is not used in the prefix. Look at the examples below where the last 24 bits of the multicast address begin after ff. A host is required to join a Solicited-Node multicast group for each of its configured unicast or anycast addresses. Example: If we have an interface with the IP address fe80::2aa:ff:fe28:9c5a the associated Solicited-Node multicast address is ff02::1:ff28:9c5a. So we must join to the multicast group represented by this address. Efficiency Compared to IPv4 and ARP Solicited-node Multicast Addresses are used with IPv6 Neighbor Discovery to provide the same function as the Address Resolution Protocol (ARP) in IPv4. ARP uses broadcasts to send an ARP Request to the broadcast MAC-address ff:ff:ff:ff:ff:ff, which is received by all stations on the local link, although only one station—the one being queried—would need to respond. The other stations still have to process and discard the request. This interruption can cause problems on networks if the amount of broadcast traffic becomes excessive. Devices, such as embedded print servers, might not be able to cope with the amount of traffic they are processing, and fail to operate in a timely manner. Because a Solicited-node Multicast Addresses is a function of the last 24-bits of an IPv6 unicast (or anycast) address, the number of hosts that are subscribed to each Solicited-node Multicast Address is very small. This number would typically be one, but there could be a few because the mapping function is not a 1:1 mapping. This means that a host should not need to be interrupted as often to service Neighbor Solicitation requests, compared to ARP in IPv4. However, to prevent any intervening Ethernet switches from flooding the multicast frames out of all switch-ports, which turns the traffic profile in something more like broadcast, intermediate switches should implement MLD Snooping, which would allow them to send traffic that is addressed to a Solicited-node Multicast Address (or any other multicast address) to be sent out only on the ports that lead to stations that have subscribed to receive that traffic.
- Router Discovery Whereas IPv4 hosts must rely on manual configuration or DHCP to provide the address of a default gateway, IPv6 hosts can automatically locate default routers on the link. This is accomplished through the use of two ICMPv6 messages: Router Solicitation (type 133) and Router Advertisement (type 134). When first joining a link, an IPv6 host multicasts a router solicitation to the all routers multicast group, and each router active on the link responds by sending a router advertisement with its address to the all nodes group.
- Prefix Discovery One of the options typically carried by a router advertisement is the Prefix Information option (type 3). Each prefix information option lists an IPv6 prefix (subnet) reachable on the local link. Remember that it is not uncommon for multiple IPv6 prefixes to reside on the same link, and routers may include more than one prefix in each advertisement. A host which knows what prefixes are reachable on the link can communicate directly with destinations in those prefixes without passing its traffic through a router.
- http://packetlife.net/blog/2008/aug/04/eui-64-ipv6/ One of IPv6&apos;s key benefits over IPv4 is its capability for automatic interface addressing. By implementing the IEEE&apos;s 64-bit Extended Unique Identifier (EUI-64) format, a host can automatically assign itself a unique 64-bit IPv6 interface identifier without the need for manual configuration or DHCP. This is accomplished on Ethernet interfaces by referencing the already unique 48-bit MAC address, and reformatting that value to match the EUI-64 specification. RFC 2373 dictates the conversion process, which can be described as having two steps. The first step is to convert the 48-bit MAC address to a 64-bit value. To do this, we break the MAC address into its two 24-bit halves: the Organizationally Unique Identifier (OUI) and the NIC specific part. The 16-bit hex value 0xFFFE is then inserted between these two halves to form a 64-bit address. Why 0xFFFE? As explained in the IEEE&apos;s Guidelines for EUI-64 Registration Authority, this is a reserved value which equipment manufacturers cannot include in &quot;real&quot; EUI-64 address assignments. In other words, any EUI-64 address having 0xFFFE immediately following its OUI portion can be recognized as having been generated from an EUI-48 (or MAC) address. The second step is to invert the universal/local (U/L) flag (bit 7) in the OUI portion of the address. Globally unique addresses assigned by the IEEE originally have this bit set to zero, indicating global uniqueness. Likewise, locally created addresses, such as those used for virtual interfaces or a MAC address manually configured by an administrator, will have this bit set to one. The U/L bit is inverted when using an EUI-64 address as an IPv6 interface ID. Again, you&apos;re probably wondering why this is done. The answer lies buried in section 2.5.1 of RFC 2373: The motivation for inverting the &quot;u&quot; bit when forming the interface identifier is to make it easy for system administrators to hand configure local scope identifiers when hardware tokens are not available. This is expected to be case for serial links, tunnel end-points, etc. The alternative would have been for these to be of the form 0200:0:0:1, 0200:0:0:2, etc., instead of the much simpler ::1, ::2, etc. The important part to remember here is that the scope of the address never changes: global addresses are still global and local addresses are still local. Rather, the meaning of the bit is inverted for convenience, so the value of the bit must be inverted as well.
- https://kb.wisc.edu/ns/page.php?id=12364 http://test-ipv6.com
- Two features of IPv6 greatly improve DHCPv6: IPv6 hosts have &quot;link-local addresses&quot;. Every network interface has a unique address, that can be used to send and receive on the link only. IPv6 hosts can use this to send requests for &quot;real&quot; addresses. IPv4 hosts have to use systemspecific hacks to work before they have an address. All IPv6 systems support multicasting. All DHCPv6 servers register that they want to receive DHCPv6 multicast packets. This means the network knows where to send them. In IPv4, clients broadcast their requests, and networks do not know how far to send them Not having to hack below the socket layer in the OS is a beautiful thing.
- IPv6 addresses in the Domain Name System In the Domain Name System hostnames are mapped to IPv6 addresses by AAAA resource records, so-called quad-A records. For reverse lookup the IETF reserved the domain ip6.arpa, where the name space is hierarchically divided by the 1-digit hexadecimal representation of nibble units (4 bits) of the IPv6 address. This scheme is defined in RFC 3596. As in IPv4, each host is represented in the DNS by two DNS records, an address record and a reverse mapping pointer record. For example, a host computer named sduffy in zone example.com has the Unique Local Address fdda:5cc1:23:4::1f. Its quad-A address record is sduffy.example.com. IN AAAA fdda:5cc1:23:4::1f and its IPv6 pointer record is f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.0.0.0.3.2.0.0.1.c.c.5.a.d.d.f.ip6.arpa. IN PTR sduffy.example.com. This pointer record may be defined in a number of zones, depending on the chain of delegation of authority in the zone d.f.ip6.arpa. The DNS protocol is independent of its Transport Layer protocol. Queries and replies may be transmitted over IPv6 or IPv4 transports regardless of the address family of the data requested.
- http://www.nrl.navy.mil/itd/ncs/products/core&lt;- Download CORE for our labs https://www.virtualbox.org/wiki/Download_Old_Builds_4_2&lt;- For now we don’t want to go higher than 4.2 Virtual box due to a bug. Labs we will follow for IPv6 tutorial http://www.brianlinkletter.com/ipv6-addressing-simulator-part-1/ http://www.brianlinkletter.com/ipv6-addressing-simulator-part-2/ http://mininet.org/&lt;- Alternative network simulator
- Default sudo root password is “core” Wireshark to see packet dumps radvd router advertisement daemon
- Discuss how by default having a private address behind a NAT gateway provides a layer of security as it stops direct connections from the outside world by default. IPv6 with a Globally routable IPv6 address is by default Globally routable, so we need to ensure firewall and ACL rules prevent inbound connections.
- Multicast Listener Discovery (MLD) v1 & v2
- Protocol Independent Multicast v2 (PIMv2) Provides intradomain multicast forwarding for all underlying unicast routing protocols Independent from any underlying unicast protocol such as OSPF or MP-BGP Sparse mode: relies upon an explicit joining method before attempting to send multicast data to receivers of a multicast group Multicast Listener Discovery (MLD) v1 & v2 Protocol used by IPv6 hosts to communicate multicast group membership states to local multicast routers Version 2 of MLD adds source awareness to the protocol. This allows the inclusion or exclusion of sources. MLDv2 is required for Source Specific Multicast (SSM) PIM Source Specific Multicast SSM forwarding uses only source-based forwarding trees. SSM range is defined for inter domain use.
- Bring example back to electrical level Layer 1 – Power Generation plants (Generation technology can be complicated… Nuclear, Coal, Gas, Solar but it doesn’t matter to the electrician who wires the house once he recives 110v at the main meter) Layer 2 – Electrial wiring within the house(Electrician needs to know how to wire the house, design for the correct loading factor on circuits and follow wiring codes…. This doesn’t matter to the home owner) Layer 3 – Home owner plugging in devices(All the home owner cares about is plugging in their device, turning it on and it works)
- Ethernet/IP on UDP or TCP Packets
- Modbus/TCP sitting on top of TCP packets
- Ethernet Layer data Routed data on top of UDP
- Standard Data – TCP / IP Soft Real Time – Custom Ether Type and Priority Realtime – Special Switches