28
1 IPv6 Address Management Rajiv Kumar

1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

Embed Size (px)

Citation preview

Page 1: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

1

IPv6 Address Management

Rajiv Kumar

Page 2: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

2

Lecture Overview

• Introduction to IP Address Management• Rationale for IPv6• IPv6 Addressing• IPv6 Policies & Procedures• References

Page 3: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

3

Rationale for IPv6

• IPv4 address space consumption• Now ~10 years free space remaining• Up to 17 if unused addresses reclaimed• These are today’s projections – reality will be different

• Loss of “end to end” connectivity• Widespread use of NAT due to ISP policies and marketing• Additional complexity and performance degradation

Page 4: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

4

The NAT “Problem”

10.0.0.1 ..2 ..3 ..4

*AKA home router, ICS, firewall

NAT*

61.100.32.128

R

61.100.32.0/25

61.100.32.1 ..2 ..3 ..4

ISP 61.100.0.0/16

The Internet

Page 5: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

5

The NAT “Problem”

Internet

10.0.0.1

61.100.32.128

NAT

?Extn 10

Phone Network

10 4567 9876

PABX

Page 6: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

6

NAT implications

• Breaks end-to-end network model• Some applications cannot work through NATs• Breaks end-end security (IPsec)

• Requires application-level gateway (ALG)• When new application is not NAT-aware, ALG device must be upgraded• ALGs are slow and do not scale

• Merging of separate private networks is difficult• Due to address clashes

• See RFC2993• Architectural Implications of NAT

Page 7: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

7

Features of IPv6

Page 8: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

8

IPv6 feature summary

• Increased size of address space• Header simplification• Autoconfiguration

• Stateless (RFC 2462) or stateful (DHCPv6)• Facilitates renumbering

• QoS• Integrated services (int-serv), Differentiated services (diff-serv and RFC2998)• RFC 3697

• IPSec• As for IPv4

• Transition techniques• Dual stack• Tunnelling

Page 9: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

9

IPv6 addressing model

• Unicast• Single interface

• Anycast• Any one of several

• Multicast• All of a group of interfaces• Replaces IPv4 “broadcast”

• See RFC 3513

Page 10: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

10

IPv4 vs IPv6IPv4: 32 bits

• 232 addresses = 4,294,967,296 addresses

= 4 billion addresses

IPv6: 128 bits

• 2128 addresses? = 340,282,366,920,938,463,463,374,607,431,770,000,000

= 340 billion billion billion billion addresses?

• No, due to IPv6 address structure…

Page 11: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

11

IPv6 header

• IPv6 header is simpler than IPv4• IPv4: 14 fields, variable length (20 bytes +)• IPv6: 8 fields, fixed length (40 bytes)

• Header fields eliminated in IPv6• Header Length• Identification• Flag• Fragmentation Offset• Checksum

• Header fields enhanced in IPv6• Traffic Class• Flow Label

Page 12: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

40bytes

20bytes

IPv4

IPv6

0 15 16 31

vers hlen TOS total length

identification flags flag-offset

TTL protocol header checksum

source address

destination address

options and padding

vers traffic class flow-label

payload length next header hop limit

source address

destination address

Removed (6)• ID, flags, flag offset• TOS, hlen• header checksum

Changed (3)

Added (2)

Expanded

• total length => payload• protocol => next header• TTL => hop limit

• traffic class• flow label

• address 32 to 128 bits

Header comparison

Page 13: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

Major Improvements of IPv6 Header

• No option field: Replaced by extension header. Result in a fixed length, 40-byte IP header.

• No header checksum: Result in fast processing. • No fragmentation at intermediate nodes: Result in

fast IP forwarding.

Page 14: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

Extension Headers• Routing – Extended routing, like IPv4 loose list of

routers to visit• Fragmentation – Fragmentation and reassembly• Authentication – Integrity and authentication,

security • Encapsulation – Confidentiality• Hop-by-Hop Option – Special options that require

hop-by-hop processing• Destination Options – Optional information to be

examined by the destination node

Page 15: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

Stateless Address Autoconfiguration

• 3 ways to configure network interfaces: Manually, Stateful, Stateless

• IPSAA IPv6 addr. Separated into 2 parts: network and interface id.

• Link- local addresses: prefix FE80::0 + interface identifier (EUI-64 format)

• Obtain network id through Router solicitation (RS)

Page 16: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

Stateless vs Stateful IP addressing

There are two ways DHCPv6 can be implemented, either Stateful or Stateless.

Stateful DHCP is centrally managed on a DHCP server(s); and the DHCP clients use Stateful DHCP to obtain an IP address(es) and other useful configuration informaiton from the DHCP server(s).

But, Stateless DHCP on the other hand; means the DHCP server(s) is not required to store any dynamic state information on the DHCP server(s) about any indivisual DHCP clients. Instead, the DHCP clients autoconfigure their own IP address(es) based on router advertisments. So, with Stateless DHCP, the DHCP clients don't use the DHCP server(s) to obtain IP address(es) information, they use the DHCP server(s) to obtain the other useful configuration informaiton (like the address(es) of DNS servers).

Currently, Cisco recommends that you use Stateless DHCP instead of Stateful DHCP when implementing and deploying IPv6 networks; because, Cisco Routers are not designed to act as Stateful DHCPv6 servers. But, if you need to implement Stateful DHCP on your IPv6 network; Cisco makes a product named Cisco Network Registar (CNR) that can help you out a lot.

Page 17: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

17

IPv6 transition• Dual stack hosts

• Two TCP/IP stacks co-exists on one host• Supporting IPv4 and IPv6• Client uses whichever protocol it wishes

IPv4 IPv6

www.apnic.net

??

IPv4

TCP/UDP

Application

IPv6

Link

Page 18: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

18

• IPv6 tunnel over IPv4

IPv6 transition

IPv4Network

IPv6 IPv6

IPv6 Header Data

IPv4 Header IPv6 Header Data

IPv6 Header Data

tunnel

Page 19: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

19

IPv6 Addressing

Page 20: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

20

128 bits

How much IPv6?Topological Interface

/0 /64 /128

Infrastructure Site

/0 /64/48

• 248 site addresses = 281,474,976,710,656

= 281 thousand billion site addresses

• 264 “subnet” addresses = 18,446,744,073,709,551,616

= 18 billion billion subnet addresses

Page 21: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

21

IPv6 address format

• 8 groups of 4 hexadecimal digits• Each group represents 16 bits• Separator is “:”• Case-independent

128 bits2001:0DA8:E800:0000:0260:3EFF:FE47:0001

Page 22: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

22

2001:0DA8:E800:0000:0000:0000:0000:0001

2001:0DA8:E800:0000:0260:3EFF:FE47:0001

IPv6 address format

2001:DA8:E800:0:260:3EFF:FE47:1

2001:0DA8:E800:0000:0000:0000:0000:0001

2001:0DA8:E800:0000:0260:3EFF:FE47:0001

2001:DA8:E800::1

Page 23: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

23

IPv6 Address Structure

Page 24: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

24

IPv6 address structureInfrastructure Site

/0 /64/48

• Each site address is /48• Providing 216 = 65,536 subnet addresses

• Current ISP allocation (min) is /32• Providing 216 = 65,536 customer site addresses• ISP allocation can be larger and can increase

Infrastructure CustomerISP

/0 /48/32

Page 25: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

25

• Every ISP receives a /32 (or more)• Providing 65,536 site addresses (/48)

/32

/32

IPv6 – ISP addressing

/32

Page 26: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

26

• Every “site” receives a /48• Providing 65,536 /64 (LAN) addresses

IPv6 – Site addressing

/48

Page 27: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

27

IPv6 – LAN addressing

• Every LAN segment receives a /64• Providing 264 interface addresses per LAN

/64

Page 28: 1 IPv6 Address Management Rajiv Kumar. 2 Lecture Overview Introduction to IP Address Management Rationale for IPv6 IPv6 Addressing IPv6 Policies & Procedures

28

IPv6 – Device addressing

• Every device interface receives a /128• May be EUI-64 (derived from interface MAC address), random number (RFC

3041), autoconfiguration, or manual configuration

/128 /128

/128

/128