IPv6 in practiseMoving from IPv4 to IPv6

Page 2

Adding IPv6 supportWhy did we do this?

IPv6 is coming◦ We want a head start

Learning by doing◦ Gain the experience and knowledge

Someone else will want it soon too!

Adding IPv6 does not remove IPv4◦ Nothing to lose!

Page 3

IPv6 Lab

What did we do?External services!

ISP

DNS www

Page 4

ISPIP-Only

Native IPv6

”Test network”◦ Obtained through ”back-channels”

Page 5

FirewallOpenBSD 4.2 - pf

OS supports IPv6◦ Configure IPv6 address◦ Configure routes

Add firewall rules for IPv6◦ Pf uses keyword inet6 for IPv6 traffic◦ Fully supports IPv6 addresses in rules

Page 6

DNSOpenBSD 4.5 – bind 9.4.2-P2

OS supports IPv6◦ Configure IPv6 address

Check for address related rules in named.conf

Add quad-A records to zone files

Page 7

Web serverOpenBSD 4.6 – Apache 1.3.29

OS supports IPv6◦ Configure IPv6 address

Make sure apache listens on IPv6 interfaces

Page 8

That’s it!

Providing IPv6 services takes very little effort

You can keep IPv4 in parallell

You do not need to do everything at once◦ You can enable individual services

Open the door to the IPv6 community

Page 9

Thank you