Practical IPv6 for Windows Administrators

Transcription

1 Practical IPv6 for Windows Administrators Edward Horley Apress"

2 Contents J Forward About the Author About the Technical Reviewers Acknowledgments Introduction xvii xix xxi xxiii xxv Chapter 1: IPv6 the Big Picture 1 IPv6 Now 1 Market Drivers 2 Depletion of Address Space 2 Support in Major Operating Systems 3 Rise of Cloud-Based Computing 3 Ubiquity of Mobile Computing 4 Access to Reference Materials 4 Business Drivers 5 Service Providers 6 Why Is IPv6 Important to Microsoft 6 Chapter 2: IPv6 Support in Windows 7 Microsoft IPv6 History 7 The Early Days 7 Windows XP and Windows 2000 Server 8 Current IPv6 Networking Stack Implementation 9 vii

3 W CONTENTS Features and Functions of the Stack 11 Mobile IPv6 11 RFC 6106-IPv6 Router Advertisement Options for DNS Configuration 12 DS-Lite 12 6in4 12 6rd 12 SEND 13 Tools Available to Manage IPv6 in Windows 13 Tools Available to Migrate to IPv6 in Windows 13 Transition Technologies 13 6to4 Transition Technology 14 ISATAP Transition Technology 14 Teredo Transition Technology 14 Microsoft's Long-Term Goals with IPv6 15 Some Final IPv6 Support Thoughts 15 Chapter 3: IPv6 Addressing 17 IPv6 Address Basics 17 Address Format 17 Size of the Address Space 18 IPv6 Address Structure 19 Packet and Header Configuration 20 IPv6 Address Representation 21 Defining Common IPv6 Terminology 22 Types of IPv6 Addresses 26 Unicast 27 Global Unicast Addresses 27 Unique Local Addresses 28 Link-Local Addresses 28 Special Unicast Addresses 29 viii

4 W CONTENTS Unicast Transition Addresses 30 6to4 Transition Technology 30 ISATAP Transition Technology 33 Teredo Transition Technology 38 Multicast Addresses 41 Multicast Address Structure 42 Managing Multicast 43 Neighbor Discovery Solicited-Node 45 Inverse Neighbor Discovery 45 IPv6 Multicast and Ethernet 46 Anycast Addresses 47 ICMPv6 Protocol 48 Assigning IPv6 Addresses 50 Autoassigning Addresses 50 Assigning Both SLAAC and DHCPv6 56 Manually Assigning IPv6 Addresses 57 Windows OS Address Behavior 59 How Windows Determines to Use IPv6 or IPv4 60 Default Address Selection Behavior of IPv6 60 IPv6 Address Planning and Design 64 Size of Prefix and Subnetting 65 Nibble Boundaries 65 Routing 66 Additional IPv6 Addressing Resources 67 Chapter 4: IPv6 Best Practices for Windows 69 Microsoft Best Practice Resources 69 IPv6 Best Practices for Windows 70 IPv6 Best Practices Overview 70 ix

5 B CONTENTS IPv6 Transition Technologies 71 6t04 72 ISATAP 73 Teredo 74 IPv6 Transition Technologies Key Takeaways 75 Internet 75 Impact of IPv6 76 IPv6 Internet Key Takeaways 79 Internet Edge 79 Basic IPv6 Internet Edge Requirements 79 IPv6 Internet Edge Key Takeaways 80 Firewalls 82 Basic IPv6 Firewall Requirements 82 IPv6 Firewall Key Takeaways 83 DirectAccess 83 DirectAccess and IPv6 84 DirectAccess IPv6 Key Takeaways 86 DMZ Services DNS 88 High Availability 89 Microsoft NLB and IPv6 91 Remote Access 92 Site-to-SiteVPNand IPv6 93 Microsoft Exchange 94 Microsoft Exchange and IPv6 94 Microsoft Exchange IPv6 Key Takeaways 95 Microsoft Lync 95 Microsoft Lync and IPv6 95 Microsoft Lync IPv6 Key Takeaways 96 x

6 CONTENTS Microsoft IIS and SharePoint 96 Microsoft SharePoint and IPv6 96 Microsoft IIS and IPv6 97 Microsoft SharePoint, IIS, and IPv6 Key Takeaways 97 Microsoft SQL Server 97 Microsoft SQL Server and IPv6 97 Microsoft SQL Server and IPv6 Key Takeaways 98 Microsoft Active Directory and Group Policy 99 Microsoft Active Directory and IPv6 99 Microsoft Group Policy and IPv6 101 Microsoft Active Directory, Group Policy, and IPv6 Key Takeaways 102 Microsoft File and Print 102 IPv6 with Microsoft File and Print 102 File and Print IPv6 Key Takeaways 103 Microsoft Windows Server 103 Microsoft Windows Server and IPv6 103 Microsoft Windows Server IPv6 Key Takeaways 104 Microsoft Windows Client 104 Microsoft Windows Client and IPv6 104 Microsoft Windows Client IPv6 Key Takeaways 105 Wide Area Networks 105 WAN and IPv6 105 WAN and IPv6 Key Takeaways 105 Remote Offices 106 Remote Office and IPv6 106 Remote Office and IPv6 Key Takeaways 106 Additional IPv6 Best Practices Resources 107 xi

7 m CONTENTS Chapter 5: IPv6 and PowerShell 109 IPv6-Specific PowerShell Commands 109 Getting the Help Documentation 110 Randomizing IPv6 Addresses for Privacy 112 Controlling Temporary Addressing Behavior 114 General Networking PowerShell Commands 118 Physical and Logical Interfaces 119 IPv4 and IPv6 Interface Management 120 IPv4 and IPv6 Routing Management 123 IPv4 and IPv6 DNS IP Management 125 IPv6 Transition PowerShell Cmdlets 127 6to4 IPv6 Transition Technology 128 ISATAP IPv6 Transition Technology 129 Teredo IPv6 Transition Technology 130 IPv6 IPsec PowerShell Cmdlets 131 Building IPv6 IPsec Tunnels 131 Building IPv6 IPsec Tunnel from New-NetlPsecRule cmdlets 132 Building IPv6 IPsec Tunnel with Preshared Keys 135 IPv6 VPN PowerShell Cmdlets 142 Conclusion 144 Chapter 6: IPv6 and the Windows Firewall 145 PowerShell Transport Layer Filters 145 Understanding Profiles 149 Wireless Network Profiles 149 Firewall Profiles 151 PowerShell Advanced Firewall Rules 154 Individual Server Firewall Management 159 xii

8 B CONTENTS Chapter 7: IPv6 in Hyper-V and Virtual Networking 161 Hyper-Vand IPv6 161 Microsoft Hyper-V Server 2008 Through Hyper-V Server 2012 R2 162 Microsoft Windows Server 2008 Through Window Server 2012 R2 166 Hyper-V Network Virtualization and IPv6 166 Virtualizing Windows 169 Chapter 8: IPv6 and DNS 171 How Is DNS Different for IPv6? 171 IPv6 DNS-Specific Records 171 IPv6rDNS Domain 172 Installing Windows DNS 172 DNS Server Manager GUI Installation 173 DNS Server PowerShell Installation 177 Managing IPv6 DNS Records 178 IPv6 DNS Resource Entries 178 DNS Role IPv6 PowerShell cmdlets 179 How to Change Windows Client DNS Settings 182 How Windows Clients Chose Which IPv6 to Register in DNS 185 Operationally Managing IPv6 DNS 185 Other Types of Name Resolution 187 LLMNR 188 IPv6 Literals 188 Name Resolution Policy Table 189 IPv6 DNS Challenges 189 Chapter 9: IPv6 and DHCP 191 How Is DHCP Different for IPv6? 191 DHCPv6-Specific Attributes 192 DHCPv6 Stateful 192 DHCPv6 Stateless 193 xiii

9 m CONTENTS Installing Windows DHCPv6 193 DHCPv6 Server Manager GUI Installation 193 DHCPv6 Server PowerShell Installation 197 DHCPv6 Scopes 200 New Scope Creation 201 DHCPv6 Scope Options 202 Changing the Windows Client DHCP Settings 202 Operationally Managing DHCPv6 203 Other Address Allocation Methods 207 DHCPv6 Challenges 207 Chapter 10: Miscellaneous IPv6 209 NCSI on Windows 209 Impact of NCSI 209 How to WorkAround NCSI 210 Prefix Policy Table 211 NPTv6and NAT NPTv6 213 NAT Carrier Grade NAT 214 SLB Formats for IPv6 216 Common Tools That Support IPv6 217 Other IPv6 Transition Technologies 218 IP-HHPS 218 NAT64/DNS PortProxy 218 Order of Interfaces in Windows 219 Do Binding Orders Matter? 219 xiv

10 m CONTENTS IPAM in Windows 221 Microsoft Private Cloud and IPv6 226 Azure and IPv6 226 IPv6 and Microsoft Support 226 Index 229 XV