IPv6 Fundatins: Prtcls, Services and Migratin Date Submitted: February 2 nd, 2014 Curse Title: IPv6 Fundatins: Prtcls, Services and Migratin Curse Number: 9105 Curse Length: Fur days Curse Descriptin: This pwerful, hands-n curse cvers all yu need t knw abut IPv6 technlgy as well as its implementatin and deplyment within yur netwrk envirnments. The IPv6 prtcl ffers 128- bit IP addresses cmpared t IPv4's 32-bit addresses and plays a grwing rle in security, VIP, Quality f Service (QS), and ther netwrking technlgies fr medium t large enterprises. In this curse, yu will gain a cmplete understanding f the differences between the IPv4 and IPv6 prtcls, critical pre- and pst-deplyment installatin techniques t ensure successful migratin, and hw t deply mixed IPv4/IPv6 netwrks. Thrugh detailed hands-n labs, yu will cnfigure IPv6-ver-IPv4 tunnels and explre and understand the expanded rles f the ICMPv6 prtcl vs. ICMP in IPv4. Yu ll als learn abut IPSec Security, Access Cntrl Lists, and DNS implementatin within an IPv6 netwrk, as well as IPv6 aut-cnfiguratin vs. stateful and stateless DHCPv6 cnfiguratin f IPv6-enabled devices. Finally, gain invaluable real-wrld experience as yu cnfigure and set up IPSec tunnels, explre DNS implementatin, cnfigure and analyze Access Cntrl Lists, and cnfigure ruters with varius IPv6 ruting prtcls in infrmative hands-n labs. What Yu ll Learn in Class: Features and benefits f IPv6 Advanced capabilities f IPv6, beynd what IPv4 ffers Deplyment strategies t cnsider when migrating t IPv6 Hw t tunnel IPv6 ver an IPv4 netwrk Hw t cnfigure IP RIPng, OSPFv3, and BGP fr an IPv6 netwrk The rle and cnfiguratin f DHCP and DNS in an IPv6 netwrk Hw t ensure a smth transitin frm IPv4 and cexistence with IPv4 netwrks Hw IPv6 prvides enhanced supprt fr mbile IP and mbile cmputing devices Differences between DHCPv6 and DHCPv4 Tunneling methds cnsisting f 6t4, ISATAP, manual, autmatic and Tered Wh Needs t Attend Netwrking prfessinals wh are cnsidering r making the migratin frm IPv4 t IPv6 prtcl-based netwrk envirnments. Fllw n Curses Advanced IPv6 Migratin (4-Day Curse) IPv6 Security (4-Day Curse) 2014 Glbalipv6 Training LLC. All rights reserved 1
Sectin 1: Intrductin t IPv6 Infrmatin Overlad IPv6 Electrnic Autmatin IPv6 is NOT IPv4 Extended! Why IPv6 New technlgies IPv4 lifetime extensin Key differences between IPv4 and IPv6 Internet f Things (IT) CES 2014 and IT (Internet f Things Bsch IT Lab Established Smart Sensr Mesh Netwrking with IPv6 Key Differences between IPv4 and IPv6 DD 2003 mandate NIST Recmmendatins DD IPv6 Standard Prfiles 2012 Gvernment Public-Facing Servers Current Issues with Public Servers IPv6 Frum IPv6 Ready Lg Prgram IPv6 ready prgram example Five Internet Registries ARIN requirements fr address licensing IPv6 Reference Sheet Sectin 2: IPv6 Addressing Binary number representatin Decimal-t-binary cnversin Hexadecimal review IPv6 addressing Pssible IPv6 addresses IPv6 address ntatin Cmpressing the IPv6 Address IPv6 address space IPv6 address prefix subnetting Prefix Examples IPv6 Prefixes Unicast addresses Link-lcal address Site-lcal (deprecatin) Unique lcal address (ULA) Glbal unicast address Glbal address flw chart Aut-cnfigured address states Tentative Preferred, deprecated Valid and invalid Address Timers IPv6 Address Timers Anycast addresses 2014 Glbalipv6 Training LLC. All rights reserved 2
Multicast addresses Well-knwn multicast Mapping Layer 3 t Layer 2 Multicast Lpback and unspecified addresses 64-bit MAC address assignment IPv6 Prefixes and MAC Addresses Temprary IPv6 Address IPv6 ping cmmand Unicast Addresses Summary IPv6 Hst, Ndes, Ruters and Interfaces Sectin 3: IPv6 Header Infrmatin IPv4 prtcl stack IPv6 prtcl stack IPv6 dual stack IPv4 and IPv6 Type Cdes IPv4 and IPv6 header cmparisn New header frmat Traffic class field IPv6 header length includes IPv6 extensin headers Hp-by-Hp Destinatins Optins Ruting Header Ruting header example Mbility with IPv6 Mbile nde hme agent supprt Fragment Header Fragment header example IPSec Authenticatin Header IPSec ESP Header Extensin header rder Extensin header example List f next header values Sectin 4: ICMPv6 Netwrk Operatin ICMPv6 header ICMPv6 message types ICMPv6 errr message types ICMPv6 infrmatinal message types ICMPv6 ping peratin ICMPv6 Ech Request message ICMPv6 Ech Reply message Windws XP Windws Vista and 07 Windws server 03 and 08 Windws 07 GUI cnfiguratin Cmmn windws cmmands Ipcnfig cmmand Using different netsh cmmands Windws rute print cmmand 2014 Glbalipv6 Training LLC. All rights reserved 3
Client addresses ICMPv6 Neighbr Discveries ICMPv6 Neighbr Discveries Defined Neighbr Slicitatin ICMPv6 Neighbr Discvery ICMPv6 Neighbr Slicitatin message Duplicate Address Detectin Slicited-Nde Multicast Address Duplicate Address analyzed Neighbr Slicitatin Message Prcess Hst Neighbr Cache Hst Neighbr Cache after Sliciatin Neighbr Advertisement ICMPv6 Neighbr Advertisement message Autcnfiguratin Methds Ruter Slicitatin ICMPv6 Ruter Slicitatin message Ruter Advertisement ICMPv6 Ruter Advertisement message ICMPv6 Ruter Advertisement vs. DHCPv6 Viewing a ruter s neighbr cache table SLAAC flw chart Viewing a hst ruting table Viewing a ruter s neighbr cache table Cnfiguring IPv6 n a Unix wrkstatin Unix ifcnfig cmmands Cmmn Unix cmmands Cnfiguring IPv6 n a MAC wrkstatin Operating systems verview DHCPv6 Overview DHCPv4 and DHCPv6 cmparisn DHCPv6 relay agent DHCPv6 08 server cnfiguratin ICMPv6 Redirect ICMPv6 Multicast messages Fragmentatin Service frm the Surce ICMPv6 MTU path discvery ICMPv6 packet t big errr message Windws destinatin cache table Fragment header example Fragment ffset value ICMPv6 Time Exceeded, Destinatin Unreachable, etc. ICMPv6 Multicast Listener Discvery Message Sectin 5: Ruting Services and Prtcls Current ruting prtcls RIPng prtcl RIPng enhancements IPv4 RIP-2 MAC header snapsht IPv6 RIPng MAC header snapsht IPv4 RIP-2 IP header snapsht IPv6 RIPng IP header snapsht IPv4 RIP-2 UDP header snapsht 2014 Glbalipv6 Training LLC. All rights reserved 4
IPv6 RIPng UDP header snapsht IPv4 RIP-2 snapsht IPv6 RIPng snapsht IPv6 RIPng trace file Enabling IPv6 n Cisc Enabling IPv6 n a ruter Ruter cnfiguratin example fr IPv6 OSPFv3 verview OSPF Areas Link state advertisement LSDB exchange Entering infrmatin int the ruting table OSPFv3 ruting table Frming adjacency OSPF area brder ruters DR and BDR electin DR and BDR peratin OSPF hell packet BGP prtcl BGP neighbrs Cmmn MP-BGP cmmands BGP peering cnfiguratin example Sectin 6: IPv6 Access List DMZ layer Packet filtering IPv6 ACL packet flw IPv4 ruter access-list IPv4 standard and extended ACL example IPv6 Standard Access List Standard list example IPv6 Extended Access List Extended list example IPv6 reflexive access list Reflexive access list example Access List cnfiguratins Sectin 7: DNS Overview DNS infrastructure DNS A recrds DNS AAAA resurce recrd DNS deplyment Bind9 supprt Example IPv6 DNS query ver IPv4 Example IPv6 DNS reply ver IPv4 DNS update ver IPv6 native Testing DNS HTTP and FTP URL Access 2014 Glbalipv6 Training LLC. All rights reserved 5
Sectin 8: IPv6 Deplyment Strategies Overview Reasns delaying IPv6 Migratin Migratin Schedule Preliminary stage Discvery stage Design stage Deplyment stage IPv6 address recmmendatins IPv6 deplyment strategies Ptential hst types during migratin frm IPv4 t IPv6 Dual-Stack migratin strategy Current perating systems supprting IPv6 Applicatin upgrades FTP ver IPv6 example Viewing live analyzer traces TFTP ver IPv6 example SMTP ver IPv6 example IPv4 and IPv6 dual-stack DNS supprt IPv6 tunneling migratin strategies IPv6 tunneled ver IPv4 IPv6 tunneling methds using manual cnfiguratin Tunneling ruter-t-ruter Tunneling: ICMP ping packet Ruting ver 6t4 tunnel Silver Springs netwrk 6t4 tunneling devices 6t4 Aut-Cnfigured tunnel ISATAP Example ISATAP link-lcal capture Tered Other services and technlgies IPv6 supprted technlgies Enterprise migratin steps Sample inventry list Pssible IPv6 subnet assignment Further cnsideratins in migrating IPv6 IPv6 intergratin Sectin 9: IPSec Security IPSec tunneling IPv6 IPSec verview Security areas addressed IPSec Framewrk Authenticatin header AH Transprt mde AH tunnel mde Encapsulating security paylad ESP transprt mde ESP tunnel mde Internet key exchange IPv6 IPSec in a Windws envirnment Micrsft symmetric key authenticatin Setting up the IPSec6 tunnel 2014 Glbalipv6 Training LLC. All rights reserved 6
IPv6 Fundatin Labs: Lab 1: Initial Cnfiguring and Neighbr Discvery Install IPv6 fr Windws XP View yur IPv6 address Review yur cnfiguratin results Ping yur neighbring pd's cmputer Use Wireshark t analyze certain captured frames Analyze IPv6 header infrmatin Analyze varius neighbr slicitatins messages including DaD Investigate yur PCs neighbr cache Lab 2: Cnfiguring and Analyzing IPv6 n the Netwrk Ruter Set up the classrm netwrk Cnfigure and verify IPv6 n a Cisc ruter Analyze Ruter Slicitatin and Ruter Advertisement messages Verify and test netwrk cnnectivity Use the debug ipv6 nd cmmand t view the exchange f Ruter Slicitatins Lab 3: ICMPv6 Packet T Large Fragmentatin Cnfigure yur ruter with a link MTU size f 1280 bytes Ping yur neighbr's wrkstatin with 1500 byte frame Capture the ICMPv6 Packet T Large errr message Ping yur neighbr's wrkstatin with 8000 byte packet Capture and analyze Fragment Extensin Headers Lab 4: Cnfiguring IPv6 RIPng Cnfigure IPv6 n a Cisc ruter Cnfigure IPv6 RIPng Verify IPv6 RIPng cnfiguratin and peratin n yur ruter Analyze RIPng updates using a netwrk analyzer Lab 5: DDNS (Dynamic DNS) Cnfigure the netwrk t use Dynamic DNS fr name reslutin. Instead f pinging by IPv6 addresses, instead hst names are. Each student will cnfigured their wrkstatin fr Dynamic DNS registratin. Lab 6: OSPF Cnfiguratin Cnfigure IPv6 OSPFv6 n yur ruter Build adjacencies between ther IPv6 ruters View IPv6 OSPFv6 ruting tables fr different netwrk cnnectins View live OPSFv6 rute updates frm lcal ruter Cnfigure IPv6 encryptin used between ruters Lab 7: IPv6 BGP Ruting Enable IPv6 BGP ruting prtcl Cnfigure IPv6 BGP autnmus systems Cnfigure bth IBGP and EBGP neighbr statements View IPv6 ruting tables 2014 Glbalipv6 Training LLC. All rights reserved 7
Lab 8: IPv6 Access Cntrl List Cnfigure yur ruter t blck telnet access frm yur neighbring ruters Cnfigure yur access list s all ther netwrk devices can access yur ruter Blck yur neighbring ruter frm pinging yur ruter Write an access list where yu can ping ther ruters, but blck neighbring ping packets Lab 9: DNS Operatin Cnfigure client fr IPv6 DNS name reslutin Analyze IPv6 quad (AAA) recrds Analyze an DNS packet Verify DNS peratin by pinging yur DNS server and analyzing a DNS query Lab 10: Building a Manual IPv6 Tunnel Cnfigure a ruter fr tunnel peratin, allwing it t carry IPv6 traffic ver an IPv4 netwrk Test cnnectivity using the IPv6 address and fix any prblems that ccur Use shw cmmands t view yur cnfiguratin and verify tunnel peratin Analyze tunnel traffic that was captured using a netwrk analyzer 2014 Glbalipv6 Training LLC. All rights reserved 8