Internet Protocol Version 6: advanced features. The innovative aspects of IPv6

Similar documents
Internet Protocol Version 6: advanced features. The innovative aspects of IPv6

DHCPv6 (RFC3315 RFC4361)

Guide to TCP/IP Fourth Edition. Chapter 6: Neighbor Discovery in IPv6

Enhanced Mechanism of Automated IPv6 Site Renumbering

IPv6 Neighbor Discovery

DHCPv6 Overview 1. DHCPv6 Server Configuration 1

IPv6 Autoconfiguration. Stateless and Stateful. Rabat, Maroc Mars 2007

IPv6 Neighbor Discovery

Radware ADC. IPV6 RFCs and Compliance

IPv6 Specifications to Internet Standard

IPv6 CONSORTIUM TEST SUITE Address Architecture Conformance Test Specification

Rocky Mountain IPv6 Summit April 9, 2008

IPv6 Stateless Autoconfiguration

IPv6 Neighbor Discovery

Table of Contents 1 IPv6 Configuration IPv6 Application Configuration 2-1

Introduction to IPv6 - II

IPv6 Technical Challenges

IPv6 Protocols and Networks Hadassah College Spring 2018 Wireless Dr. Martin Land

IPv6. IPv4 & IPv6 Header Comparison. Types of IPv6 Addresses. IPv6 Address Scope. IPv6 Header. IPv4 Header. Link-Local

Transitioning to IPv6

IPv6 Associated Protocols. Athanassios Liakopoulos 6DEPLOY IPv6 Training, Skopje, June 2011

IPv6 Changes in Mobile IPv6 from Connectathon

Configuring IPv6 for Gigabit Ethernet Interfaces

IPv6 ND Configuration Example

IPv6 Protocol Architecture

Setup. Grab a vncviewer like: Or

TD#RNG#2# B.Stévant#

IPv6. (Internet Protocol version 6)

Network Management. IPv6 Bootcamp. Zhiyi Huang University of Otago

Request for Comments: 1972 Category: Standards Track August A Method for the Transmission of IPv6 Packets over Ethernet Networks

IPv6 associated protocols

Configuring IPv6. Information About IPv6. Send document comments to CHAPTER

Lecture Computer Networks

IPv6 Next generation IP

IPv6 Neighbor Discovery

IPv6 Protocol & Structure. npnog Dec, 2017 Chitwan, NEPAL

Athanassios Liakopoulos

12. Name & Address 최양희서울대학교컴퓨터공학부

Internet Protocol, Version 6

IPv6 Neighbor Discovery

Introduction to IPv6. IPv6 addresses

TCP/IP Protocol Suite

IPv6 address configuration and local operation

ISO 9001:2008. Pankaj Kumar Dir, TEC, DOT

Operation Manual IPv6 H3C S3610&S5510 Series Ethernet Switches Table of Contents. Table of Contents

The Netwok Layer IPv4 and IPv6 Part 2

Table of Contents 1 IPv6 Configuration IPv6 Application Configuration 2-1

Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

An IPv6 unicast address is an identifier for a single interface, on a single node. A packet that is sent to a unicast

ICMPv6. Internet Control Message Protocol version 6. Mario Baldi. Politecnico di Torino. (Technical University of Turin)

Table of Contents 1 IPv6 Configuration IPv6 Application Configuration 2-1

Aeronautical Systems Center

IPv6 Concepts. Improve router performance Simplify IP header Align to 64 bits Address hierarchy with more levels Simplify routing tables

Tik Network Application Frameworks. IPv6. Pekka Nikander Professor (acting) / Chief Scientist HUT/TML / Ericsson Research NomadicLab

Advanced Computer Networking. CYBR 230 Jeff Shafer University of the Pacific. IPv6

DHCP for IPv6. Palo Alto, CA Digital Equipment Company. Nashua, NH mentions a few directions about the future of DHCPv6.

Analyze and Verify Ouput of "debug dhcp ipv6 packets" in ASR9k

C. Perkins, Nokia Research Center M. Carney, Sun Microsystems June 9, 2002

Workshop on Scientific Applications for the Internet of Things (IoT) March

Request for Comments: 2464 Obsoletes: 1972 December 1998 Category: Standards Track. Transmission of IPv6 Packets over Ethernet Networks

Insights on IPv6 Security

Internet Engineering Task Force INTERNET DRAFT. C. Perkins Nokia Research Center R. Droms(ed.) Cisco Systems 1 March 2001

Configuring IPv6 PDP Support on the GGSN

Table of Contents 1 IPv6 Basics Configuration 1-1

Adopting Innovative Detection Technique To Detect ICMPv6 Based Vulnerability Attacks

Configuration IPv6 Routing Avaya Ethernet Routing Switch 8800/8600

Internet Engineering Task Force. Obsoletes: draft-ietf-dhc-dhcpv6-05.txt 16 August 1996

HPE ArubaOS-Switch IPv6 Configuration Guide YA/YB.16.02

Internet Engineering Task Force (IETF) Obsoletes: 3315, 3633, 3736, 4242, 7083, 7283, 7550 B. Volz

Personal Firewall Default Rules and Components

Recent advances in IPv6 insecurities reloaded Marc van Hauser Heuse GOVCERT NL Marc Heuse

Foreword xxiii Preface xxvii IPv6 Rationale and Features

Request for Comments: 2467 Obsoletes: 2019 December 1998 Category: Standards Track. Transmission of IPv6 Packets over FDDI Networks

Internet Engineering Task Force. C. Perkins Nokia Research Center Ted Lemon Nominum Bernie Volz Ericsson R. Droms(ed.) Cisco Systems 22 Apr 2002

Transition to IPv6. Hui Chen, Ph.D. Dept. of Engineering & Computer Science Virginia State University Petersburg, VA 23806

Internet Engineering Task Force INTERNET DRAFT. C. Perkins Nokia Research Center R. Droms(ed.) Cisco Systems 15 April 2001

DNS, DHCP and Auto- Configuration. IPv6 Training Day 18 th September 2012 Philip Smith APNIC

11. IP Mobility 최 양 희 서울대학교 컴퓨터공학부

Internet Engineering Task Force. C. Perkins Nokia Research Center Ted Lemon Nominum Bernie Volz Ericsson R. Droms(ed.) Cisco Systems May

Manual Configuration Stateful Address Configuration (i.e. from servers) Stateless Autoconfiguration : IPv6

Veryx ATTEST TM Conformance Test Suite

Organization of Product Documentation... xi

DHCPv6 OPERATIONAL ISSUES Tom Coffeen 4/7/2016

IPv6 Bootcamp Course (5 Days)

IPv6 Security Fundamentals

"Charting the Course... IPv6 Bootcamp Course. Course Summary

IPv6 Configuration Guide, Cisco IOS XE Fuji 16.8.x (Catalyst 9400 Switches)

Cisco IOS IPv6. Cisco IOS IPv6 IPv6 IPv6 service provider IPv6. IPv6. data link IPv6 Cisco IOS IPv6. IPv6

Introduction to IPv6

ODL Summit Bangalore - Nov 2016 IPv6 Design in OpenDaylight

The Study on Security Vulnerabilities in IPv6 Autoconfiguration

Internet Engineering Task Force. C. Perkins Nokia Research Center R. Droms(ed.) Cisco Systems 22 November 2000

Charles Perkins Nokia Research Center 2 July Mobility Support in IPv6 <draft-ietf-mobileip-ipv6-14.txt> Status of This Memo

Information Sources Hans Kruse & Shawn Ostermann, Ohio University

Practical IPv6 for Windows Administrators

ArubaOS-Switch IPv6 Configuration Guide for WC.16.03

IPv4/v6 Considerations Ralph Droms Cisco Systems

Learning/Playing with IPv6 at home. Keith Garner, Gradebook Team Lead

Configuring IPv6 First-Hop Security

IPv6 Security Safe, Secure, and Supported.

Transcription:

Internet Protocol Version 6: advanced features The innovative aspects of IPv6 1

Autoconfiguration Addresses are composed by Information held by routers (network address) Information locally available (interface identifier) Addressing space: usually received from the provider Switching provider implies changes in addressing space A protocol is needed for address assignment and propagation of configuration information, and it should be designed for: making it easier to re-number devices avoiding manual configuration (Plug and Play) avoiding the use of servers, for small sites managing: Link Local Address Site Local Address Global Address What we need to configure Host, Routers, DNS, applications (e.g. web server, IP-based licenses, access lists,...) 2

Stateless autoconfiguration for hosts Basic configuration Generate a local address Probing to verify its uniqueness The host can communicate with devices within its own LAN, without router intervention If a router exists It si possible to listen to Router Advertisement messages (or) to send a Router Solicitation message Configuration and probing the uniqueness of the address Router advertisement with 2 network prefixes 3

Stateless autoconfiguration for hosts Hosts are always listening to router messages A host can be re-configured at run time Renumbering is easier For example, it is possible to switch from a link local to a global address Or from a global address to another one State of addresses Preferred Deprecated (invalid) 4

Duplicate Address Detection Needed to test the uniqueness of an IPv6 address For example, it is used to verify the uniqueness of a configured address Procedure Solicted Node Multicast Address (and corresponding MAC address) corresponding to the IPv6 address to verify is prepared A ICMP Neighbor Discovery message is sent in multicast packet with the address to be verified as a target Wait for a response for at least 1 sec If no answer is received, the address is considered valid Start router discovery phase once done 5

Host autoconfiguration: stateful DHCPv6: client/server model Compatible with stateless autoconfiguration Possible messages: Solicit (sent to the all-agents address: FF02::1:2) Advertise Request (sent to the all-agents address: FF02::1:2) Reply Release Reconfigure 6

Autoconfiguration for routers Router Renumbering (RFC 2894) Router Renumbering packets they include PCOs (Prefix Control Operations) Match-Prefix: specifies the operation Use-Prefix They are transported in ICMPv6 packets Two types of Router Renumbering messages Commands: sent to the routers Results: sent by routers as responses to commands 7

Autoconfiguration and privacy The least significant 64 bits in an IPv6 address never change, when obtained with stateless configuration 8 Privacy problems (es. traceability) RFC 4941, Privacy Extensions for Stateless Address Autoconfiguration in IPv6 Algorithm Stateless address (64 bit) + 64 bit random number (or previous privacy address) MD5 is computed over the previous result The most significant 64 bits are selected, and the bit 6 (universal/local) is set to 0 ( local ) The result is used as interface identifier This value is stored to be used in the next address configuration Each host may have several different addresses ( default and privacy ), used to accept/generate connections Selection of address may be available to the user through suitable API

DNS DNS: Domain Name System Distributed data base It associates IP addresses and names The atomic element in DNS is the resource record (RR) Record: type A (canonical): used for 32 bit addresses type AAAA: ised for 128 bit (RFC1886) addresses IP6.INT domain It is possible to specifiy the type ANY in a query, in order to receive both type A and type AAAA records (if they exist) It is up to the application to select which one to use (modified application) 9

Scoped addresses 10

Why a scope is required? application socket TCP/UDP IPv6 DL DL PHY PHY FE80::0237:00FF:FE02:a7FD FE80::0237:00FF:FE02:a7FD 11

Sintax A scoped address is composed by an IPv6 address followed by a % by a number identifying the the interface Example: FE80::0237:00FF:FE02:a7FD%19 The value of the scope is selected according some internal criterion 12