Skip to Content

IPv6

IPv6 for the CCIE R&S Candidate - Session Notes

Today I attended the IPv6 for CCIE R&S session presented by Johnny Bass, CCIE #6458 and Cisco 360 master instructor. Totally awesome presentation! I jotted some notes and figured I’d post them here to share.

All the content in the session (BRKCCIE-9592) is regarding the R&S 4.0 version blueprint. “If it’s not in the blueprint, it’s not in this session”

Different Addressing Types

  • 2000::/3 – Global Unicast
  • FC00::/7 – Unique Local Unicast
  • FE80::/10 – Link Local Unicast
  • FF00::/8 – Multicast

Prefix Subnet Interface/Node ID
32 to 56 bits 32 to 8 bits 64 bits

Note: The interface ID can be either EUI-64, use Privacy Extensions (RFC 3041), or locally configured.

Infoblox to host IPv6 "How to" webinar

World IPv6 Launch will be here June 6. If you haven't heard of it, this is the day where several large companies that have an Internet presence (Google, Yahoo, Facebook, etc.) will permanently enable IPv6 for their online services. 

The following day, June 7, Infoblox is featuring an IPv6 webinar with host Cricket Liu. This webinar will focus on the following topics:

IPv6 Action Plan Video

If you have just been given the task of implementing IPv6 in your company or if you are in the middle of a deployment, you may be asking yourself "How?!" How exactly should you roll out an IPv6 network? Do you configure /64 subnets on point to point links or do you use /127's? How do you secure your network against the initial IPv6 attacks that are available?

These questions and more are covered in this hour long TechWise TV  episode, The IPv6 Action Plan. Some very good points and useful information here, have a look...

Let the IPv6 Vulnerabilities Begin

Cisco last week released a slew of security advisories. One that specifically caught my eye is a Denial of Service vulnerability due to "improper processing of malformed IP version 6 (IPv6) packets by Cisco IOS Software."

I've been wondering how long it would take for the exploits to start to trickle in with IPv6. One can only imagine how many vulnerabilities Windows will have with IPv6 enabled by default. Expect to see more of these in the future as IPv6 becomes more prevalent.

The alert details are available here.

The vulnerability details are available here.

Automatic 6to4 Tunnels

While reading up on IPv6 tunnel configurations, I came across this way cool video on configuring 6to4 tunnels. Keith Barker definitely knows his stuff on this topic and makes it interesting and easy to follow. Check it out:

How to configure an IPv4 GRE tunnel to carry IPv6 traffic

Continuing the review of the TSHOOT Topology, on the IPv6 network map there is a GRE tunnel that is configured between Router 3 and Router 4. This tunnel is in place to allow IPv6 traffic to traverse the 10.1.1.8/30 IPv4 network. So, while reviewing the IPv6 tshoot topology, I decided to try out the tunnel configuration.

There are several ways to configure tunnels to allow IPv6 traffic to traverse IPv4 networks (and vice versa). This post will be focusing on a GRE tunnel configuration. If you want to review the other ways to create tunnels, i.e.  Automatic IPv4-Compatible IPv6 Tunnels, IPv6 Rapid Deployment Tunnels, and Automatic 6to4 Tunnels, I've included a link below to a great resource on Cisco's website that shows some great examples of other tunnels.

I threw together the following network diagram to provide a visual of what we are configuring: 

IPv6_GRE_Tunnel2

Common IPv6 Addresses

Just for quick reference, this post has a list of common IPv6 addresses (multicast and otherwise). I'm sure new ones will be added over time as standards are released, but for now these are the ones I'm planning on memorizing:

Common Unicast Addresses

2000::/3 Global Unicast
FC00::/7 Unique Local IPv6 unicast addresses
FE80::/10 Link Local
::/128 Unspecified for when a host has no address
::1/128 Loopback

Node-Local Scope Multicast Addresses

FF01::1 All Nodes
FF01::2 All Routers

Link-Local Scope Multicast Addresses

FF02::1 All Nodes
FF02::2 All Routers
FF02::5 OSPF
FF02::6 OSPF Designated Routers
FF02::9 RIP Routers

IPv6 Multicast High Level Overview

If you are interested in a quick, high level overview of how multicast works in IPv6, check out this doc at Cisco.com:

Cisco IOS IPv6 Multicast Introduction (pdf)

Pretty easy read, just a few pages long and provides a decent intro. If you don't know what MLD is, keep in mind this doc has a typo and defines it as "lister" instead of Listener. Check out the MLD RFC for the formal definition. 

IPv4 Exhaustion is here, Time to Learn IPv6

If you've had your focus turned from the news lately, here's a quick update.The last of the IPv4 addresses have finally been allocated as can be read about here, here, and here. What does that mean for all of us network engineers out there? Time to actually sit down and start learning IPv6. 

Now, even though the final blocks of IPv4 spaces were allocated, it doesn't mean the Internet is going to stop, or even slow down because of that fact. Several /8 address pools were allocated which means they still have to be put to use in provider networks and handed out to consumers. 

I view this news as similar to the new year. People gather around and celebrate the digits in the year rolling to the next sequential number. Yay, a new number! It's kind of silly in a way, but we do it to help put a close to an era (last year) and look ahead to the future (and help keep track of time). Similarly, IPv6 is coming, we all know it, so let's acknowledge it and embrace it. We've got a little bit of time before we're forced to configure an interface with a v6 address, so let's get practicing. 

I've found some resources to help you in your endeavors to be the next IPv6 configuration master. Read on for the list and feel free to post links to your favorite IPv6 reference guides and training resources!

IPv6 in 2011?

There's an interesting little write-up over at the Internet Storm Center today entitled
What Will Matter in 2011
. On their list, they have IPv6 slated to finally be force fed to us IPv4 users since the IPv4 space is almost depleted. There have been predictions for the past 10 years that the IPv4 space will run out, but somehow we always squeeze a little more of it out to push back the inevitable migration to IPv6. 

If you want to see where all of the address space is currently allocated, check out IANA's list. You'll find a majority of the addresses on that list are administerred by ARIN, who maintains a page on this issue here

The Internet Today...and to come...

Stumbled upon this SWEET analysis of the IPv4 Internet connectivity vs. the IPv6 Internet connectivity.

Wouldn't this be awesome on a nice poster-sized paper in the IT room?

Understanding IPv6

TCP/IPv6 is going to reshape the networking world completely. We all know "it's coming" (insert creepy music here), but no one really wants to learn it. So, what I tried to do is record video that was simple enough to follow, yet technical enough to give you some practical information to take away. My good friends over at CBTNuggets have agreed to allow me to reproduce that video here at no cost to you. It's from the new Cisco BSCI series. Enjoy!
Click here to download (Microsoft WMV format)

Syndicate content


Dr. Radut