Robust Networking with IPv6

Transcription

1 Robust Networking with IPv6 Phil Edholm, CTO, Enterprise Networks December 10, 2003 Nortel Networks Restricted PG 1

2 Nortel Networks Solutions for Mission-critical Government Networks Credentials for Network Transformation Solutions for Enterprises, Governments, and Service Providers in 150 countries Serving the U.S. Military: >2M lines, with evolution to IP Telephony incl. military features Secure Data Networking Providing Optical Networks for Pentagon, DISA Metro and long-haul Building Carrier-grade Wireless Networks Standards leadership including US Network Security Information Exchange Transition to IPv6 globally requires these credentials Nortel Networks Restricted PG 2

3 IPv6 as Enabler for Convergence Business Mobile Gaming Console Home Computer Home Office Phone Starting Point PDA Multiple networks Disparate services Multiple addressing schemes Office Phone Office Computer TV / PVR Transition Converged packet network Major security vulnerabilities Linked addressing schemes The goal: Universal, Secure Connectivity Transformation Dynamic packet/optical network Secure multimedia services Ubiquitous broadband Common addressing IPv6 Nortel Networks Restricted PG 3

4 Tension of Networking Security Connectivity Nortel Networks Restricted PG 4

5 Increased Tension PDA Gaming Console Home Computer Securing connections Security, regardless of path Business Mobile Home Office Phone ebusiness and egov Net-centric operations Office Phone Office Computer TV / PVR Tremendous expansion Always-on broadband Internet to mobile phones Networked Battlefield Intermediary devices Constrained connectivity Management challenge Potential security attacks Nortel Networks Restricted PG 5

6 Meeting the challenges with IPv6 Flexibility for new services 128 bit addresses resolve the shortage Enablers for Networked Battlefield: Mobile IP, dynamic addressing, multicast, anycast Flow-based routing aids control of end-to-end latency Flexible header provides native security capabilities IPSec support in every node End-to-end security services at the network layer Restored transparency key to deploying IP Telephony and other person-to-person communication services But deploying IPv6 will not guarantee a robust network Nortel Networks Restricted PG 6

7 Delivering Dependability with IPv6 Network must provide for failure recovery Transparency requires security of end devices Securing and managing the transition Getting ready for real-time services multimedia and telephony on the IPv6 Internet Nortel Networks Restricted PG 7

8 Sunny Days and Stormy Nights Normal operations Focus on efficient performance Coping with isolated faults and maintenance Time for fine tuning and Quality of Service Requirements Conflict Major Emergency Multiple Faults and topology disruption The message must get through now Nortel Networks Restricted PG 8

9 Structured Resiliency Packet Layer 3 IP Routing Responds in Minutes Resolve emergencies in Layer 3 Traffic engineering can slow recovery Distributed routing will find a path if it exists Plan in enough path redundancy Layer 0-2 Resilient Pipes Responds in milliseconds Efficient Layer 2 pipes connecting routers Resolve single failures and handle maintenance fast Planning and sparing minimizes effect on Layer 3 Traffic engineering can optimize usage Implement enough spare capacity Optical Nortel Networks Restricted PG 9

10 Conundrum of Transparency Multi-homed Compartmentalized Access control IPv6 multi-homing shortcomings Connectivity Security Invisibility Lack of manageability Dependent on trusted end nodes Transparent Network Nortel Networks Restricted PG 10

11 Delivering multi-media with IPv6 Solutions Enough addresses to match telephone numbers IPv6 transparency eases connections PDA Gaming Console Home Computer End-to-end security of conversations Flow labels permit better connection management Improved QoS for speech quality Business Mobile Office Phone Office Computer Home Office Phone TV / PVR Challenges IPv6 overhead is slightly greater though not very important on high speed networks Latency and packet loss remain important especially on the battlefield Nortel Networks Restricted PG 11

12 Robust IPv6 and Nortel Networks Committed to the successful transition to IPv6 Delivering security, connectivity, and failure recovery Balancing normal operations & event responsiveness Delivering IPv6 across range of products Demonstrations at IPv6 Summit Products to be rolled out during 2004 Combination of IPv6, Nortel Optical and 3G wireless Provides a truly robust converged network Nortel Networks Restricted PG 12

13 Thank you Web site: Nortel Networks Restricted PG 13