IPv6 IMPLEMENTATION IN VNPT

Size: px
Start display at page:

Download "IPv6 IMPLEMENTATION IN VNPT"

Transcription

1 IPv6 IMPLEMENTATION IN VNPT VŨ XUÂN NHÀN 11/2016 NOC VNPT Net 1

2 Contents 6PE/6VPE model IPv6 implementation in VNPT Service models IPv6 allocation IPv6 CPE IPv6 security threats Problems 11/29/2016 VNNIC NOG 2

3 6PE/6VPE model Transporting IPv6 traffic in IPv4 based MPLS network No change in core MPLS network, only in PE/ASBR Enable inet6 label-unicast, inet6-vpn, inet6-mvpn, ipv6-tunneling 11/29/2016 VNNIC NOG 3

4 6PE/6VPE model APPs Web UPSTREAMS/ PEERINGS IPv6 RR Inet & VPN ebgp DualStack BRAS ibgp IPv6 ASBR- IXP (6PE) MANE PE/BNG (6PE) VN2 ebgp DualStack DOMESTIC PEERINGS CPE DSLAM/ SWITC H VPN ASBR- NIX (6PE) MANE PE/BNG (6PE) RR IPv6 APPs Web CPE 11/29/2016 VNNIC NOG 4

5 Contents 6PE/6VPE model IPv6 implementation in VNPT Service models IPv6 allocation IPv6 CPE IPv6 security threats Problems 11/29/2016 VNNIC NOG 5

6 IPv6 implementation in VNPT Target Dual-stack: Pure IPv6: from 2020 Services ILL (Internet Leased Line), IPv6 transit IPv6 L3VPN HSI (High Speed Internet) 4G/LTE (dual-stack) Hosting/ server 11/29/2016 VNNIC NOG 6

7 Service models: ILL, IPv6 transit APPs UPSTREAMS/ PEERINGS IPv6 CE ebgp DualStack IPv6 MANE PE (6PE) VN2 ASBR- IXP (6PE) ebgp DualStack DOMESTIC CPE DSLAM/SWITCH ASBR- NIX (6PE) PE (6PE) RR IPv6 APPs Web CPE 11/29/2016 VNNIC NOG 7

8 Service models: IPv6 L3VPN CPE VPN CE MANE VPN PE (6VPE) VN2 PE (6VPE) VPN CPE DSLAM/SWITCH PE (6VPE) PE (6PE) RR IPv6 VPN 11/29/2016 VNNIC NOG 8

9 Service models: HSI TẬP ĐOÀN BƯU CHÍNH VIỄN THÔNG VIỆT NAM APPs Web UPSTREAMS/ PEERINGS IPv6 BRAS Radius RR Inet & VPN ibgp ebgp DualStack IPv6 MANE PE (6PE) VN2 ASBR- IXP (6PE) ebgp DualStack DOMESTIC CPE DSLAM/ SWITCH ASBR- NIX (6PE) MANE PE/BNG (6PE) RR IPv6 APPs Web CPE DSLAM/ SWITCH 11/29/2016 VNNIC NOG 9

10 IPv6 Allocation Total: /32 Loopback: /128 Connected IP: point-to-point /126 or /127. /64 for each router Broadband subscribers: N*/40 for each province N*/64 for each subscriber /40-/45 aggregated before being advertised 11/29/2016 VNNIC NOG 10

11 IPv6 Allocation TẬP ĐOÀN BƯU CHÍNH VIỄN THÔNG VIỆT NAM Unique Local Address (fc00::/7) or Global unicast IPv6 for Internal IP addresses? 11/29/2016 VNNIC NOG 11

12 IPv6 Allocation schemes for broadband subscribers 01*/64 for each subscriber? 01*/64 WAN and N*/64 LAN for each subscriber? DHCPv6 IA_NA, NDRA and DHCPv6 PD 11/29/2016 VNNIC NOG 12

13 IPv6 Allocation schemes for broadband subscribers: Radius attributes 11/29/2016 VNNIC NOG 13

14 IPv6 Addressing: DHCPv6 IA_NA and DHCPv6 PD 11/29/2016 VNNIC NOG 14

15 IPv6 Addressing: NDRA and DHCPv6 prefix Delegation 11/29/2016 VNNIC NOG 15

16 IPv6 Addressing: NDRA TẬP ĐOÀN BƯU CHÍNH VIỄN THÔNG VIỆT NAM 11/29/2016 VNNIC NOG 16

17 IPv6 Addressing: DHCPv6 prefix Delegation 11/29/2016 VNNIC NOG 17

18 IPv6 Allocation schemes for broadband subscribers VNPT uses: DHCPv6 PD NDRA and DHCPv6 PD Other ISPs 11/29/2016 VNNIC NOG 18

19 IPv6 for L3VPN Unique Local Address (fc00::/7)? Cannot be routed in internet NAT may needed! More secured Global unicast? Address overlapping Multihoming 11/29/2016 VNNIC NOG 19

20 IPv6 supported CPE GPON Huawei, ZTE GPON VNPT Technology AON? EMS: Remotely IPv6 enable? 11/29/2016 VNNIC NOG 20

21 Contents 6PE/6VPE model IPv6 implementation in VNPT Service models IPv6 allocation IPv6 CPE IPv6 security threats Problems 11/29/2016 VNNIC NOG 21

22 IPv6 security threats Reconnaissance in IPv6 Neighbor Discovery Issues L3 Spoofing in IPv6 DHCPv6 Threats 11/29/2016 VNNIC NOG 22

23 Reconnaissance in IPv6 Attackers use site-local multicast addresses (FF05::2 all-routers, FF05::FB mdnsv6, FF05::1:3 all DHCP servers) or link-local multicast addresses (FF02::1 all nodes, FF02::2 all routers) Reconnaissance preventing Block FEC0::/10 (deprecated site-local addresses) Permit mcast to FF02::/16 (link-local scope) Permit mcast to FF0E::/16 (global scope) Block all mcast 11/29/2016 VNNIC NOG 23

24 Neighbor Discovery Issues Fake IPv6 router sends out RA packets. New client may receives fake RAs then connects to the fake IPv6 router. Attacker sends fakes Neighbor advertisements. Clients send all packets to the attacker. Attacker listens for ICMPv6 DAD packets and sends a response that this IPv6 address already exists. 11/29/2016 VNNIC NOG 24

25 Neighbor Discovery Issues: Mitigation Block ICMPv6 RA from hosts Secure Neighbor Discovery (for ND and DAD issues) 11/29/2016 VNNIC NOG 25

26 L3 Spoofing in IPv6 TẬP ĐOÀN BƯU CHÍNH VIỄN THÔNG VIỆT NAM Tool for Protecting Against L3 Spoofing: urpf 11/29/2016 VNNIC NOG 26

27 DHCPv6 Threats Rogue DHCPv6 client and servers on the linklocal multicast address (FF02::1:2) Rogue DHCPv6 servers on the site-local multicast address (FF05::1:3) Mitigation: DHCPv6 authentication ACL to block DHCPv6 traffic (UDP 546, 547) 11/29/2016 VNNIC NOG 27

28 IPv6 security threats: Protect ISP s network Well tested IPv6 filter for router s loopback Well tested IPv6 filter for customer facing interfaces IPv6 DDoS and DDoS Mitigation 11/29/2016 VNNIC NOG 28

29 Protect ISP s network: protect RE Permit inet6 BGP peers Police DHCP, icmp, UDP traceroute, TCP established Discard others 11/29/2016 VNNIC NOG 29

30 Protect ISP s network: protect ISP Permit inet6 BGP peers Police icmp, UDP traceroute Discard connections to Internal IP adds Permit others 11/29/2016 VNNIC NOG 30

31 Contents 6PE/6VPE model IPv6 implementation in VNPT Service models IPv6 allocation IPv6 CPE IPv6 security threats Problems 11/29/2016 VNNIC NOG 31

32 Problems Radius, VISA, LDAP Billing DNS IPv6 security IPv6 contents 11/29/2016 VNNIC NOG 32

33 Discussion 11/29/2016 VNNIC NOG 33

Cisco IOS IPv6. Cisco IOS IPv6 IPv6 IPv6 service provider IPv6. IPv6. data link IPv6 Cisco IOS IPv6. IPv6

Cisco IOS IPv6. Cisco IOS IPv6 IPv6 IPv6 service provider IPv6. IPv6. data link IPv6 Cisco IOS IPv6. IPv6 IP6FD v6 Fundamentals, Design, and Deployment v3.0 Cisco IOS IPv6 Cisco IOS IPv6 IPv6 IPv6 service provider IPv6 IP IPv6 IPv6 data link IPv6 Cisco IOS IPv6 IPv6 IPv6 DHCP DNS DHCP DNS IPv6 IPv4 IPv6 multicast

More information

Case Study A Service Provider s Road to IPv6

Case Study A Service Provider s Road to IPv6 Case Study A Service Provider s Road to IPv6 September 2010 Menog Amir Tabdili UnisonIP Consulting amir@unisonip.com The Scenario Residential Network L3 MPLS VPN Network Public Network The Scenario What

More information

IPv6 Address Planning

IPv6 Address Planning IPv6 Address Planning IPv6 Address Recap 0 63 64 127 Network Prefix Interface ID 32 16 16 ISP /32 Customer Site /48 End Site Subnet /64 64 Device 128 Bit Address IPv6 Address Planning Network Operators

More information

InterAS Option B. Information About InterAS. InterAS and ASBR

InterAS Option B. Information About InterAS. InterAS and ASBR This chapter explains the different InterAS option B configuration options. The available options are InterAS option B, InterAS option B (with RFC 3107), and InterAS option B lite. The InterAS option B

More information

Remember Extension Headers?

Remember Extension Headers? IPv6 Security 1 Remember Extension Headers? IPv6 allows an optional Extension Header in between the IPv6 header and upper layer header Allows adding new features to IPv6 protocol without major re-engineering

More information

Customer IPv6 Delivery

Customer IPv6 Delivery Customer IPv6 Delivery The Nextgen Experience Chris Chaundy, Nextgen Networks October 2011 Agenda Nextgen Network s strategy Just get a prefix and turn it on!?!? Scope of the project Hardware considerations

More information

Radware ADC. IPV6 RFCs and Compliance

Radware ADC. IPV6 RFCs and Compliance Radware ADC IPV6 s and Compliance Knowledgebase Team February 2016 Scope: This document lists most of the s that relevant to IPv6. Legend: Yes supported N/A not applicable No Currently not supported Relevance:

More information

IPv6 Bootcamp Course (5 Days)

IPv6 Bootcamp Course (5 Days) IPv6 Bootcamp Course (5 Days) Course Description: This intermediate - advanced, hands-on course covers pertinent topics needed for IPv6 migration and deployment strategies. IPv6 novices can expect to gain

More information

Patrick Grossetete Cisco Systems Cisco IOS IPv6 Product Manager 2003, Cisco Systems, Inc. All rights reserved.

Patrick Grossetete Cisco Systems Cisco IOS IPv6 Product Manager 2003, Cisco Systems, Inc. All rights reserved. Patrick Grossetete Cisco Systems Product Manager pgrosset@cisco.com 1 IPv6 Business Model Integration of IPv6 brings benefits but it has also a cost ROI not yet - easy to evaluate Additional business models

More information

Contents. Configuring urpf 1

Contents. Configuring urpf 1 Contents Configuring urpf 1 Overview 1 urpf check modes 1 Features 1 urpf operation 2 Network application 3 Configuration procedure 4 Displaying and maintaining urpf 4 urpf configuration example 4 Configuring

More information

IPv6 Security (Theory vs Practice) APRICOT 14 Manila, Philippines. Merike Kaeo

IPv6 Security (Theory vs Practice) APRICOT 14 Manila, Philippines. Merike Kaeo IPv6 Security (Theory vs Practice) APRICOT 14 Manila, Philippines Merike Kaeo merike@doubleshotsecurity.com Current IPv6 Deployments Don t break existing IPv4 network Securing IPv6 Can t secure something

More information

Network Operators (ISPs) Perspectives (Challenges and Progresses). = IPv6 at Sonatel M. Sall

Network Operators (ISPs) Perspectives (Challenges and Progresses). = IPv6 at Sonatel M. Sall Network Operators (ISPs) Perspectives (Challenges and Progresses). = M. Sall modou.sall@orange-sonatel.com agenda Facts and reasons for IPv6 Challenges IPv6 at France Telecom Group Sonatel MPLS VPNv6 implementation

More information

IPv6 Security awareness

IPv6 Security awareness IPv6 Security awareness By Musa Stephen HONLUE Trainer@AFRINIC Stephen.honlue@afrinic.net 04/12/2015' 1 Presentation Objectives! Create awareness of IPv6 Security implications.! Highlight technical concepts

More information

2009/10/01. Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Obsoleted by RFC3596 [7] RFC 1887

2009/10/01. Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Obsoleted by RFC3596 [7] RFC 1887 六 年度 路 IPv6 RFC 年 871 872 六 IPv6 RFC IPv6 RFC 2009/10/01 RFC 狀 [1] RFC 1809 Using the Flow Label Field in IPv6 1995/06 [2] RFC 1881 IPv6 Address Allocation Management. 1995/12 [3] RFC 1883 Internet Protocol,

More information

"Charting the Course... IPv6 Bootcamp Course. Course Summary

Charting the Course... IPv6 Bootcamp Course. Course Summary Course Summary Description This intermediate - advanced, hands-on course covers pertinent topics needed for IPv6 migration and deployment strategies. IPv6 novices can expect to gain a thorough understanding

More information

DHCPv6 (RFC3315 RFC4361)

DHCPv6 (RFC3315 RFC4361) 6.5. DHCPv6-1 DHCPv6 (RFC3315 RFC4361) DHCPv6 is a client-server-based UDP protocol designed to reduce the IPv6 nodes management cost in those environments whereby control of IPv6 address allocation is

More information

BGP Cost Community. Prerequisites for the BGP Cost Community Feature

BGP Cost Community. Prerequisites for the BGP Cost Community Feature The feature introduces the cost extended community attribute. The cost community is a non-transitive extended community attribute that is passed to internal BGP (ibgp) and confederation peers but not to

More information

Configuring IPv6 basics

Configuring IPv6 basics Contents Configuring IPv6 basics 1 IPv6 overview 1 IPv6 features 1 IPv6 addresses 2 IPv6 neighbor discovery protocol 5 IPv6 PMTU discovery 8 IPv6 transition technologies 8 Protocols and standards 9 IPv6

More information

Cisco Certified Network Associate ( )

Cisco Certified Network Associate ( ) Cisco Certified Network Associate (200-125) Exam Description: The Cisco Certified Network Associate (CCNA) Routing and Switching composite exam (200-125) is a 90-minute, 50 60 question assessment that

More information

A Border Gateway Protocol 3 (BGP-3) DNS Extensions to Support IP version 6. Path MTU Discovery for IP version 6

A Border Gateway Protocol 3 (BGP-3) DNS Extensions to Support IP version 6. Path MTU Discovery for IP version 6 IPv6 Standards and RFC 1195 Use of OSI IS-IS for Routing in TCP/IP and Dual Environments RFC 1267 A Border Gateway Protocol 3 (BGP-3) RFC 1305 Network Time Protocol (Version 3) Specification, Implementation

More information

CCNA Routing and Switching (NI )

CCNA Routing and Switching (NI ) CCNA Routing and Switching (NI400+401) 150 Hours ` Outline The Cisco Certified Network Associate (CCNA) Routing and Switching composite exam (200-125) is a 90-minute, 50 60 question assessment that is

More information

CCNA. Murlisona App. Hiralal Lane, Ravivar Karanja, Near Pethe High-School, ,

CCNA. Murlisona App. Hiralal Lane, Ravivar Karanja, Near Pethe High-School, , CCNA Cisco Certified Network Associate (200-125) Exam DescrIPtion: The Cisco Certified Network Associate (CCNA) Routing and Switching composite exam (200-125) is a 90-minute, 50 60 question assessment

More information

Exam Topics Cross Reference

Exam Topics Cross Reference Appendix R Exam Topics Cross Reference This appendix lists the exam topics associated with the ICND1 100-105 exam and the CCNA 200-125 exam. Cisco lists the exam topics on its website. Even though changes

More information

TEXTBOOK MAPPING CISCO COMPANION GUIDES

TEXTBOOK MAPPING CISCO COMPANION GUIDES TestOut Routing and Switching Pro - English 6.0.x TEXTBOOK MAPPING CISCO COMPANION GUIDES Modified 2018-08-20 Objective Mapping: Cisco 100-105 ICND1 Objective to LabSim Section # Exam Objective TestOut

More information

Configuring IPv6 VPN Provider Edge over MPLS (6VPE)

Configuring IPv6 VPN Provider Edge over MPLS (6VPE) Configuring IPv6 VPN Provider Edge over MPLS (6VPE) Finding Feature Information, page 1 Configuring 6VPE, page 1 Finding Feature Information Your software release may not support all the features documented

More information

IPv6 DEPLOYMENT GLOBAL TRANSIT COMMUNICATIONS. Presented by Mark Tinka Chief Network Architect Global Transit Kuala Lumpur, Malaysia

IPv6 DEPLOYMENT GLOBAL TRANSIT COMMUNICATIONS. Presented by Mark Tinka Chief Network Architect Global Transit Kuala Lumpur, Malaysia IPv6 DEPLOYMENT GLOBAL TRANSIT COMMUNICATIONS Presented by Mark Tinka Chief Network Architect Global Transit Kuala Lumpur, Malaysia IPv6: The Interest IPv6: The Interest Main reason; readiness for effects

More information

DHCPv6 OPERATIONAL ISSUES Tom Coffeen 4/7/2016

DHCPv6 OPERATIONAL ISSUES Tom Coffeen 4/7/2016 1 2016 2013 Infoblox Inc. All Inc. Rights All Reserved. Rights Reserved. DHCPv6 OPERATIONAL ISSUES Tom Coffeen 4/7/2016 ABOUT THE PRESENTER Tom Coffeen IPv6 Evangelist Infoblox @ipv6tom tom@ipv6.works

More information

Avaya Networking IPv6 Using Fabric Connect to ease IPv6 Deployment. Ed Koehler Director DSE Ron Senna SE Avaya Networking Solutions Architecture

Avaya Networking IPv6 Using Fabric Connect to ease IPv6 Deployment. Ed Koehler Director DSE Ron Senna SE Avaya Networking Solutions Architecture Avaya Networking IPv6 Using Fabric Connect to ease IPv6 Deployment Ed Koehler Director DSE Ron Senna SE Avaya Networking Solutions Architecture IAUG Newport RI, November 2013 Agenda IPv6, The fundamentals

More information

Adopting Innovative Detection Technique To Detect ICMPv6 Based Vulnerability Attacks

Adopting Innovative Detection Technique To Detect ICMPv6 Based Vulnerability Attacks Adopting Innovative Detection Technique To Detect ICMPv6 Based Vulnerability Attacks Navaneethan C. Arjuman nava@nav6.usm.my National Advanced IPv6 Centre January 2014 1 Introduction IPv6 was introduced

More information

TR-187 IPv6 for PPP Broadband Access

TR-187 IPv6 for PPP Broadband Access TECHNICAL REPORT TR-187 IPv6 for PPP Broadband Access Issue: 1 Issue Date: May 2010 The Broadband Forum. All rights reserved. Notice The Broadband Forum is a non-profit corporation organized to create

More information

Introduction to IPv6 - II

Introduction to IPv6 - II Introduction to IPv6 - II Building your IPv6 network Alvaro Vives 27 June 2017 Workshop on Open Source Solutions for the IoT Contents IPv6 Protocols and Autoconfiguration - ICMPv6 - Path MTU Discovery

More information

Foreword xxiii Preface xxvii IPv6 Rationale and Features

Foreword xxiii Preface xxvii IPv6 Rationale and Features Contents Foreword Preface xxiii xxvii 1 IPv6 Rationale and Features 1 1.1 Internet Growth 1 1.1.1 IPv4 Addressing 1 1.1.2 IPv4 Address Space Utilization 3 1.1.3 Network Address Translation 5 1.1.4 HTTP

More information

CCNA Questions/Answers IPv6. Select the valid IPv6 address from given ones. (Choose two) A. FE63::0043::11:21 B :2:11.1 C.

CCNA Questions/Answers IPv6. Select the valid IPv6 address from given ones. (Choose two) A. FE63::0043::11:21 B :2:11.1 C. Select the valid IPv6 address from given ones. (Choose two) A. FE63::0043::11:21 B. 191.2.1.2:2:11.1 C. 2001::98 D. 2002:c0a8:101::42 E. :2001:: F. 2002.cb0a:3cdd:1::1 Answer: C, D. 2013 1 Which method

More information

COURSE OUTLINE: Course: CCNP Route Duration: 40 Hours

COURSE OUTLINE: Course: CCNP Route Duration: 40 Hours COURSE OUTLINE: Course: CCNP Route 300-101 Duration: 40 Hours CCNP Route Training Day 1: Connecting Remote Locations Principles of Static Routing Configuring an IPv4 Static Route Configuring a Static Default

More information

Configuring IPv6 First-Hop Security

Configuring IPv6 First-Hop Security This chapter describes the IPv6 First-Hop Security features. This chapter includes the following sections: Finding Feature Information, on page 1 Introduction to First-Hop Security, on page 1 RA Guard,

More information

Transitioning to IPv6

Transitioning to IPv6 Transitioning to IPv6 麟瑞科技區域銷售事業處副處長張晃崚 CCIE #13673 2007 Cisco Systems, Inc. All rights reserved. ICND2 v1.0 7-1 IPv4 and IPv6 Currently, there are approximately 1.3 billion usable IPv4 addresses available.

More information

IPv6 Deployment Architecture for Broadband Access Networks. Nurul Islam Roman, APNIC

IPv6 Deployment Architecture for Broadband Access Networks. Nurul Islam Roman, APNIC IPv6 Deployment Architecture for Broadband Access Networks Nurul Islam Roman, APNIC Issue Date: [Date] Revision: [xx] Flashback: Internet Architecture 1 st generation Internet: What was the architecture?

More information

Network Management. IPv6 Bootcamp. Zhiyi Huang University of Otago

Network Management. IPv6 Bootcamp. Zhiyi Huang University of Otago TELE301 Network Management IPv6 Bootcamp! Zhiyi Huang University of Otago Overview Brief look at current deployment status Recap common IPv6 addresses Basic mechanisms of IPv6 StateLess

More information

IPv6 Rapid Deployment (6rd) in broadband networks. Allen Huotari Technical Leader June 14, 2010 NANOG49 San Francisco, CA

IPv6 Rapid Deployment (6rd) in broadband networks. Allen Huotari Technical Leader June 14, 2010 NANOG49 San Francisco, CA Rapid Deployment () in broadband networks Allen Huotari Technical Leader ahuotari@cisco.com June 14, 2010 NANOG49 San Francisco, CA 1 Why IP Tunneling? IPv4 Tunnel Tunnel IPv4 IPv4 Retains end-end IP semantics

More information

Chapter 7: IP Addressing CCENT Routing and Switching Introduction to Networks v6.0

Chapter 7: IP Addressing CCENT Routing and Switching Introduction to Networks v6.0 Chapter 7: IP Addressing CCENT Routing and Switching Introduction to Networks v6.0 CCNET v6 13 Chapter 7 - Sections & Objectives 7.1 IPv4 Network Addresses Convert between binary and decimal numbering

More information

IPv6 Addressing. There are three types of IPV6 Addresses. Unicast:Multicast:Anycast

IPv6 Addressing. There are three types of IPV6 Addresses. Unicast:Multicast:Anycast IPv6 Addressing There are three types of IPV6 Addresses. Unicast:Multicast:Anycast Unicast IPv6 addresses A unicast address identifies a single interface within the scope of the type of unicast address.

More information

IPV6 SIMPLE SECURITY CAPABILITIES.

IPV6 SIMPLE SECURITY CAPABILITIES. IPV6 SIMPLE SECURITY CAPABILITIES. 50 issues from RFC 6092 edited by J. Woodyatt, Apple Presentation by Olle E. Johansson, Edvina AB. ABSTRACT The RFC which this presentation is based upon is focused on

More information

TD#RNG#2# B.Stévant#

TD#RNG#2# B.Stévant# TD#RNG#2# B.Stévant# En1tête#des#protocoles#IP# IPv4 Header IPv6 Extensions ICMPv6 s & 0...7...15...23...31 Ver. IHL Di Serv Packet Length Identifier flag O set TTL Checksum Source Address Destination

More information

Implementing Cisco IP Routing (ROUTE)

Implementing Cisco IP Routing (ROUTE) Implementing Cisco IP Routing (ROUTE) Foundation Learning Guide Foundation learning for the ROUTE 642-902 Exam Diane Teare Cisco Press 800 East 96th Street Indianapolis, IN 46240 Implementing Cisco IP

More information

Internet Engineering Task Force (IETF) Category: Standards Track. T. Morin France Telecom - Orange Y. Rekhter. Juniper Networks.

Internet Engineering Task Force (IETF) Category: Standards Track. T. Morin France Telecom - Orange Y. Rekhter. Juniper Networks. Internet Engineering Task Force (IETF) Request for Comments: 6514 Category: Standards Track ISSN: 2070-1721 R. Aggarwal Juniper Networks E. Rosen Cisco Systems, Inc. T. Morin France Telecom - Orange Y.

More information

Configuring IPv6 PDP Support on the GGSN

Configuring IPv6 PDP Support on the GGSN CHAPTER 5 This chapter describes how to configure support for Internet Protocol Version 6 (IPv6) packet data protocol (PDP) contexts on a Cisco Gateway GPRS Support Node (GGSN). For complete descriptions

More information

Alcatel-Lucent 4A Alcatel-Lucent Virtual Private Routed Networks. Download Full version :

Alcatel-Lucent 4A Alcatel-Lucent Virtual Private Routed Networks. Download Full version : Alcatel-Lucent 4A0-106 Alcatel-Lucent Virtual Private Routed Networks Download Full version : http://killexams.com/pass4sure/exam-detail/4a0-106 Answer: D QUESTION: 137 Which of the following about inter-as

More information

Egress Protection (draft-shen-mpls-egress-protection-framework) Presented by Krzysztof G. Szarkowicz NANOG71 October 4, 2017

Egress Protection (draft-shen-mpls-egress-protection-framework) Presented by Krzysztof G. Szarkowicz NANOG71 October 4, 2017 Egress Protection (draft-shen-mpls-egress-protection-framework) Presented by Krzysztof G. Szarkowicz NANOG71 October 4, 2017 Current status draft-shen-mpls-egress-protection-framework-05 Co-authored by

More information

IPv6 Security Fundamentals

IPv6 Security Fundamentals IPv6 Security Fundamentals UK IPv6 Council January 2018 Dr David Holder CEng FIET MIEEE david.holder@erion.co.uk IPv6 Security Fundamentals Common Misconceptions about IPv6 Security IPv6 Threats and Vulnerabilities

More information

IPv6 Protocol Architecture

IPv6 Protocol Architecture IPv6 Protocol Architecture v4/v6 Header Comparison Not kept in IPv6 Renamed in IPv6 Same name and function New in IPv6 2 New Functional Improvement Address Space Increase from 32-bit to 128-bit address

More information

IPv6 on Cable. Note. Cisco Converged Broadband Routers Software Configuration Guide For DOCSIS 1

IPv6 on Cable. Note. Cisco Converged Broadband Routers Software Configuration Guide For DOCSIS 1 Cisco cbr series Converged Broadband Router supports full IPv6 functionality. The IPv6 feature support available in the Cisco IOS software and for Cisco CMTS routers is extensive. This document provides

More information

Internet Protocol v6.

Internet Protocol v6. Internet Protocol v6 October 25, 2016 v6@nkn.in Table of Content Why IPv6? IPv6 Address Space Customer LAN Migration Why IPv6? IPv6 Address Space Customer LAN migration IPv4 DASH BOARD THE REASON For IPv6

More information

IPv6 Security Safe, Secure, and Supported.

IPv6 Security Safe, Secure, and Supported. IPv6 Security Safe, Secure, and Supported. Andy Davidson Hurricane Electric and LONAP adavidson@he.net Twitter: @andyd MENOG 9 Muscat, Oman, Tuesday 4 th October 2011 Don t Panic! IPv6 is not inherently

More information

Table of Contents 1 IPv6 Configuration IPv6 Application Configuration 2-1

Table of Contents 1 IPv6 Configuration IPv6 Application Configuration 2-1 Table of Contents 1 IPv6 Configuration 1-1 IPv6 Overview 1-1 IPv6 Features 1-1 Introduction to IPv6 Address 1-2 Introduction to IPv6 Neighbor Discovery Protocol 1-5 Introduction to ND Snooping 1-7 Introduction

More information

HP FlexFabric 7900 Switch Series

HP FlexFabric 7900 Switch Series HP FlexFabric 7900 Switch Series MCE Configuration Guide Part number: 5998-6188 Software version: Release 2117 and Release 2118 Document version: 6W100-20140805 Legal and notice information Copyright 2014

More information

Multihoming with BGP and NAT

Multihoming with BGP and NAT Eliminating ISP as a single point of failure www.noction.com Table of Contents Introduction 1. R-NAT Configuration 1.1 NAT Configuration 5. ISPs Routers Configuration 3 15 7 7 5.1 ISP-A Configuration 5.2

More information

Tutorial: IPv6 Technology Overview Part II

Tutorial: IPv6 Technology Overview Part II Tutorial: IPv6 Technology Overview Part II Speaker: Byju Pularikkal, Cisco Systems, Inc Date: 01/30/2011 1 DOCSIS = Data-Over-Cable Service Interface Specification CMTS = Cable Modem Termination System

More information

Agenda. DHCP Overview DHCP Basic. DHCP Additional. DHCP Relay DHCP Snooping DHCP Server. DHCP Security SAVI ND Snooping

Agenda. DHCP Overview DHCP Basic. DHCP Additional. DHCP Relay DHCP Snooping DHCP Server. DHCP Security SAVI ND Snooping DHCP Agenda DHCP Overview DHCP Basic DHCP Relay DHCP Snooping DHCP Server DHCP Additional DHCP Security SAVI ND Snooping 1 Concepts of DHCP DHCP Dynamic Host Configuration Protocol (DHCP) enables a client

More information

Implementing DHCP for IPv6

Implementing DHCP for IPv6 This module describes how to configure Dynamic Host Configuration Protocol (DHCP) for IPv6. DHCPv6 Prefix Delegation, page 1 How to Implement DHCP for IPv6, page 6 DHCPv6 Prefix Delegation The IPv6 Access

More information

BGP MPLS VPNs. Introduction

BGP MPLS VPNs. Introduction This chapter describes services that are supported for Border Gateway Protocol (BGP) Multi-Protocol Label Switching (MPLS) Virtual Private Networks (VPNs). MPLS is a licensed Cisco feature that requires

More information

IPv4/v6 Considerations Ralph Droms Cisco Systems

IPv4/v6 Considerations Ralph Droms Cisco Systems Title IPv4/v6 Considerations Ralph Droms Cisco Systems Agenda Motivation for IPv6 Review of IPv6 Impact of differences Tools and techniques Why IPv6? More addresses More addresses More addresses Security,

More information

Routing Protocol Type Primarily IGP or EGP RIP Distance-Vector IGP EIGRP OSPF IS-IS BGP

Routing Protocol Type Primarily IGP or EGP RIP Distance-Vector IGP EIGRP OSPF IS-IS BGP Appendix D Memory Tables Chapter 1 Table 1-2 Routing Protocol Characteristics Routing Protocol Type Primarily IGP or EGP RIP Distance-Vector IGP EIGRP OSPF IS-IS BGP Chapter 3 Table 3-2 Hexadecimal/Binary

More information

IPv6 Implementation Best Practices For Service Providers

IPv6 Implementation Best Practices For Service Providers IPv6 Implementation Best Practices For Service Providers Brandon Ross Chief Network Architect and CEO 2013 Utilities Telecom Council Network Utility Force www.netuf.net @NetUF RFC 6540 - IPv6 Support Required

More information

Transition To IPv6 October 2011

Transition To IPv6 October 2011 Transition To IPv6 October 2011 Fred Bovy ccie #3013 fred@fredbovy.com 2011 Fred Bovy fred@fredbovy.com. Transition to IPv6 1 1st Generation: The IPv6 Pioneers Tunnels for Experimental testing or Enterprises

More information

debug ip ospf database external default-metric subnet area 0 stub distribute-list in Serial0/1

debug ip ospf database external default-metric subnet area 0 stub distribute-list in Serial0/1 Which statement about stateless autoconfiguration is true? A host can autoconfigure itself by appending its MAC address to the local link prefix (64 bits). 2 Autoconfiguration allows devices to connect

More information

IPv6 on Cable. Hardware Compatibility Matrix for Cisco cbr Series Routers, page 2 Restrictions for IPv6 on Cable, page 3

IPv6 on Cable. Hardware Compatibility Matrix for Cisco cbr Series Routers, page 2 Restrictions for IPv6 on Cable, page 3 Cisco cbr series Converged Broadband Router supports full IPv6 functionality. The IPv6 feature support available in the Cisco IOS software and for Cisco CMTS routers is extensive. This document provides

More information

HPE FlexFabric 5940 Switch Series

HPE FlexFabric 5940 Switch Series HPE FlexFabric 5940 Switch Series Layer 3 IP Services Configuration Guide Part number: 5200-1022a Software version: Release 2508 and later verison Document version: 6W101-20161101 Copyright 2016 Hewlett

More information

Workshop on Scientific Applications for the Internet of Things (IoT) March

Workshop on Scientific Applications for the Internet of Things (IoT) March Workshop on Scientific Applications for the Internet of Things (IoT) March 16-27 2015 IP Networks: From IPv4 to IPv6 Alvaro Vives - alvaro@nsrc.org Contents 1 Digital Data Transmission 2 Switched Packet

More information

ISO 9001:2008. Pankaj Kumar Dir, TEC, DOT

ISO 9001:2008. Pankaj Kumar Dir, TEC, DOT ISO 9001:2008 Pankaj Kumar Dir, TEC, DOT AWARENESS OBJECTIVES IPv6 Address Format & Basic Rules Understanding the IPv6 Address Components Understanding & Identifying Various Types of IPv6 Addresses 3/25/2012

More information

Module 11b MPLS VPLS Configuration Lab (LDP Manual)

Module 11b MPLS VPLS Configuration Lab (LDP Manual) APNIC MPLS Workshop Lab Module 11b MPLS VPLS Configuration Lab (LDP Manual) Objective: All the routers are pre-configured with basic interface, OSPF, BGP, MPLS Label Distribution Protocol (LDP) configuration

More information

Internet Protocol Version 6: advanced features. The innovative aspects of IPv6

Internet Protocol Version 6: advanced features. The innovative aspects of IPv6 Internet Protocol Version 6: advanced features The innovative aspects of IPv6 1 Autoconfiguration Addresses are composed by Information held by routers (network address) Information locally available (interface

More information

IPv6 Security for Broadband Access, Wireless and ISPs

IPv6 Security for Broadband Access, Wireless and ISPs IPv6 Security for Broadband Access, Wireless and ISPs Presented: May 27, 2010 IPv6 Summit By: Scott Hogg Director of Technology Solutions Chair Rocky Mountain IPv6 Task Force CCIE #5133, CISSP #4610 IPv6

More information

IPv6 Protocol & Structure. npnog Dec, 2017 Chitwan, NEPAL

IPv6 Protocol & Structure. npnog Dec, 2017 Chitwan, NEPAL IPv6 Protocol & Structure npnog3 9-11 Dec, 2017 Chitwan, NEPAL Protocol Header Comparison IPv4 contains 10 basic header fields, while IPv6 has 6 basic header fields IPv6 header size is 40 octets compared

More information

Module 11a MPLS VPWS Configuration Lab (LDP)

Module 11a MPLS VPWS Configuration Lab (LDP) APNIC MPLS Workshop Lab Module 11a MPLS VPWS Configuration Lab (LDP) Objective: All the routers are pre-configured with basic interface, OSPF, BGP, MPLS Label Distribution Protocol (LDP) configuration

More information

CCIE Routing & Switching

CCIE Routing & Switching CCIE Routing & Switching Cisco Certified Internetwork Expert Routing and Switching (CCIE Routing and Switching) certifies the skills required of expert-level network engineers to plan, operate and troubleshoot

More information

CERTIFICATE CCENT + CCNA ROUTING AND SWITCHING INSTRUCTOR: FRANK D WOUTERS JR. CETSR, CSM, MIT, CA

CERTIFICATE CCENT + CCNA ROUTING AND SWITCHING INSTRUCTOR: FRANK D WOUTERS JR. CETSR, CSM, MIT, CA CERTIFICATE CCENT + CCNA ROUTING AND SWITCHING INSTRUCTOR: FRANK D WOUTERS JR. CETSR, CSM, MIT, CA CCENT - Cisco Certified Entry Networking Technician (ICND1) CCNA Routing and Switching (ICND2) Prerequisites:

More information

IPv6. (Internet Protocol version 6)

IPv6. (Internet Protocol version 6) IPv6 Réseaux 1 IPv6 (Internet Protocol version 6) 2 IPv6 IP version 6 is the new version of the Internet Protocol (IP) The standardization process started in the 90s The main elements of IPv4 are still

More information

PASS4TEST. IT Certification Guaranteed, The Easy Way! We offer free update service for one year

PASS4TEST. IT Certification Guaranteed, The Easy Way!   We offer free update service for one year PASS4TEST IT Certification Guaranteed, The Easy Way \ http://www.pass4test.com We offer free update service for one year Exam : 642-691 Title : CCIP BGP + MPLS Exam (BGP + MPLS) Vendors : Cisco Version

More information

ETSF10 Internet Protocols Network Layer Protocols

ETSF10 Internet Protocols Network Layer Protocols ETSF10 Internet Protocols Network Layer Protocols 2012, Part 2, Lecture 3.1 Kaan Bür, Jens Andersson Network Layer Protocols IPv4, IPv6 [ed.4 ch.20.3+19.2] [ed.5 ch.22.1.1-2+22.2] Transition from IPv4

More information

Rocky Mountain IPv6 Summit April 9, 2008

Rocky Mountain IPv6 Summit April 9, 2008 Rocky Mountain IPv6 Summit April 9, 2008 Introduction to the IPv6 Protocol Scott Hogg GTRI - Director of Advanced Technology Services CCIE #5133, CISSP 1 IPv6 Header IPv4 Header 20 bytes IPv6 Header, 40

More information

IETF RFCs Supported by Cisco NX-OS Unicast Features Release 6.x

IETF RFCs Supported by Cisco NX-OS Unicast Features Release 6.x IETF Supported by Cisco NX-OS Unicast Features Release 6.x BGP, page 1 First-Hop Redundancy Protocols, page 2 IP Services, page 3 IPv6, page 3 IS-IS, page 4 OSPF, page 5 RIP, page 5 BGP RFC 1997 BGP Communities

More information

TCP/IP Protocol Suite

TCP/IP Protocol Suite TCP/IP Protocol Suite Computer Networks Lecture 5 http://goo.gl/pze5o8 TCP/IP Network protocols used in the Internet also used in today's intranets TCP layer 4 protocol Together with UDP IP - layer 3 protocol

More information

2016/01/17 04:05 1/19 Basic BGP Lab

2016/01/17 04:05 1/19 Basic BGP Lab 2016/01/17 04:05 1/19 Basic BGP Lab Basic BGP Lab Introduction The purpose of this exercise is to: Understand the routing implications of connecting to multiple external domains Learn to configure basic

More information

IP Generic Training Programs. Catalog of Course Descriptions

IP Generic Training Programs. Catalog of Course Descriptions IP Generic Training Programs Catalog of Course Descriptions Catalog of Course Descriptions INTRODUCTION... 4 BGP OVERVIEW & FUNDAMENTALS... 5 BNG FUNDAMENTALS... 8 BNG OVERVIEW... 10 DHCP-CLIPS FUNDAMENTALS...

More information

Organization of Product Documentation... xi

Organization of Product Documentation... xi Contents Organization of Product Documentation... xi Chapter 1 Getting Started... 1-1 Introduction...1-1 Software Versions Covered...1-1 Audience...1-1 Conventions...1-1 Terminology...1-2 Support and Warranty

More information

Internet Protocol, Version 6

Internet Protocol, Version 6 Outline Protocol, Version 6 () Introduction to Header Format Addressing Model ICMPv6 Neighbor Discovery Transition from to vs. Taken from:chun-chuan Yang Basics: TCP/ Protocol Suite Protocol (IP) Features:

More information

IPv6 Deployment Planning

IPv6 Deployment Planning IPv6 Deployment Planning ISP Workshops Last updated 1 st October 2016 1 Introduction p Presentation introduces the high level planning considerations which any network operator needs to be aware of prior

More information

IPv6 Deployment - Security Issues Thinking outside the NAT box

IPv6 Deployment - Security Issues Thinking outside the NAT box IPv6 Deployment - Security Issues Thinking outside the NAT box Tony Hain IPv6 Forum Fellow Cisco Systems Technical Leader ahain@cisco.com Session Number 1 Agenda: Introduction IPv4 lifetime Conflicting

More information

TR-177 IPv6 in the context of TR-101

TR-177 IPv6 in the context of TR-101 Technical Report TR-177 IPv6 in the context of TR-101 Issue: 1 Corrigendum 1 Issue Date: November 2017 The Broadband Forum. All rights reserved. Notice The Broadband Forum is a non-profit corporation organized

More information

IPv6 Technical Challenges

IPv6 Technical Challenges IPv6 Technical Challenges Peter Palúch, CCIE #23527, CCIP University of Zilina, Slovakia Academy Salute, April 15 th 16 th, Bucharest IPv6 technical challenges What challenges do I meet if I decide to

More information

IPv6 Deployment. npnog Dec, Chitwan - Nepal. Tashi Phuntsho (APNIC)

IPv6 Deployment. npnog Dec, Chitwan - Nepal. Tashi Phuntsho (APNIC) IPv6 Deployment npnog3 9-11 Dec, Chitwan - Nepal Tashi Phuntsho (APNIC) tashi@apnic.net Agenda IPv6 in Core Network IPv6 in Mobile Network IPv6 in Broadband Network 2 IPv6 in Core Network - BGP MP-BGP

More information

C. The ESP that is installed in the Cisco ASR 1006 Router does not support SSO.

C. The ESP that is installed in the Cisco ASR 1006 Router does not support SSO. Volume: 197 Questions Question No : 1 SSO was configured on a Cisco ASR 1006 Router by using two RPs. When the main RP failed, a service disruption occurred. What are two reasons that the SSO did not work?

More information

Configuring Wireless Multicast

Configuring Wireless Multicast Finding Feature Information, on page 1 Prerequisites for, on page 1 Restrictions for, on page 1 Information About Wireless Multicast, on page 2 How to Configure Wireless Multicast, on page 6 Monitoring

More information

PREREQUISITES TARGET AUDIENCE. Length Days: 5

PREREQUISITES TARGET AUDIENCE. Length Days: 5 Cisco Implementing Cisco IP Routing v2.0 (ROUTE) ROUTE v2.0 includes major updates and follows an updated blueprint. However, note that this course does not cover all items listed on the blueprint. Some

More information

IPv6 Access Services: DHCPv6 Relay Agent

IPv6 Access Services: DHCPv6 Relay Agent A Dynamic Host Configuration Protocol for IPv6 (DHCPv6) relay agent, which may reside on the client's link, is used to relay messages between the client and the server. Finding Feature Information, page

More information

Zero To Hero CCIE CCNP

Zero To Hero CCIE CCNP Zero To Hero CCIE CCNP CCIE CCNP CCIE CCNP Week 1 Simple Network Design Understanding the Host-to-Host Communications Model Understanding the TCP/IP Internet Layer Addresses in a Network Introduction to

More information

Cisco Implementing Cisco IP Routing v2.0 (ROUTE)

Cisco Implementing Cisco IP Routing v2.0 (ROUTE) Course Overview ROUTE v2.0, a five-day ILT course, includes major updates and follows an updated blueprint. (However, note that this course does not cover all items listed on the blueprint.) Some older

More information

Remote Access MPLS-VPNs

Remote Access MPLS-VPNs First Published: August 12, 2002 Last Updated: May 4, 2009 The feature allows the service provider to offer a scalable end-to-end Virtual Private Network (VPN) service to remote users. This feature integrates

More information

TR-177 IPv6 in the context of TR-101

TR-177 IPv6 in the context of TR-101 TECHNICAL REPORT TR-177 IPv6 in the context of TR-101 Issue: 1 Issue Date: November 2010 The Broadband Forum. All rights reserved. Notice The Broadband Forum is a non-profit corporation organized to create

More information

ITBraindumps. Latest IT Braindumps study guide

ITBraindumps.   Latest IT Braindumps study guide ITBraindumps http://www.itbraindumps.com Latest IT Braindumps study guide Exam : 300-101 Title : Implementing Cisco IP Routing Vendor : Cisco Version : DEMO Get Latest & Valid 300-101 Exam's Question and

More information