IPv6 Deployment and Management

ACKNOWLEDGMENTS XI INTRODUCTION XIII 1 IPv6 DEPLOYMENT DRIVERS 1 1.1 The Internet: A Success Story 1 1.1.1 Supply-Side Issues 3 1.1.2 Internet at a Crossroads 6 1.1.3 Which Internet Are You On? 7 1.2 Emerging Applications 7 1.3 IPv6 Business Case 10 2 IPv6 OVERVIEW 13 2.1 IPv6 Key Features 14 2.2 The IPv6 Header 14 2.2.1 IPv6 Extension Headers 15 2.3 IPv6 Addressing 17 2.3.1 Address Notation 18 2.3.2 Address Structure 19 2.3.3 IPv6 Address Allocations 20 2.3.4 Internet Control Message Protocol for IPv6 (ICMPv6) 27 2.3.5 IPv6 Ping 28 2.3.6 Multicast Listener Discovery 28 2.3.7 Multicast Router Discovery 31 2.3.8 Neighbor Discovery Protocol 31 2.3.9 Secure Neighbor Discovery (SEND) 33 2.3.10 Inverse Neighbor Discovery 33 2.3.11 Router Renumbering 34 2.3.12 Node Information Query 34 2.4 IPv6 Address Autoconfiguration 35 2.4.1 Modified EUI-64 Interface Identifiers 36 2.4.2 Duplicate Address Detection (DAD) 37 2.5 Mobile IPv6 38 2.6 Reserved Subnet Anycast Addresses 40 2.7 Required Host IPv6 Addresses 41 2.8 IPv6 Routing 41 3 IPv4/IPv6 CO-EXISTENCE TECHNOLOGIES 43 3.1 Dual Stack 44 3.1.1 Implementing Dual Stack 44 3.1.2 Which Address Is Used? 45 3.1.3 DNS Considerations 47 3.1.4 DHCP Considerations 48 3.2 Tunneling Approaches 49 3.2.1 Tunneling Scenarios for IPv6 Packets Over IPv4 Networks 49 3.2.2 Tunnel Types 51 3.2.3 Tunneling Scenario for IPv4 Packets Over IPv6 Networks 62 3.2.4 Tunneling Summary 63 3.3 Translation Approaches 63 3.3.1 IP/ICMP Translation 65 3.3.2 Bump in the Host (BIH) 72 3.3.3 Network Address Translation for IPv6/IPv4 (NAT64) 74 3.3.4 Other Translation Techniques 75 3.4 Application Support of IPv6 78 3.5 Service Provider IPv4/IPv6 Co-Existence 78 3.5.1 Reference Architecture 79 3.5.2 Deployment Approaches Overview 80 3.5.3 Routing Infrastructure Deployment Approaches 80 3.5.4 Comparison of Deployment Approaches 87 3.6 Addressing and DNS Considerations 87 4 IPv6 READINESS ASSESSMENT 91 4.1 Putting a Plan in Place 92 4.2 IP Network Inventory 93 4.2.1 IPv6 Readiness 93 4.2.2 Discovery 93 4.2.3 IPv6 Assessment 94 4.3 IPv6 to do List 106 4.4 IPv6 Readiness Assessment Summary 106 5 IPv6 ADDRESS PLANNING 109 5.1 Internet Registries 109 5.1.1 RIR Address Allocation Policies 111 5.1.2 Address Allocation Efficiency 112 5.2 IPv6 Address Planning 112 5.3 IPv6 Address Allocation Methods 113 5.3.1 Best-Fit Method 114 5.3.2 Sparse Allocation Method 116 5.3.3 Random Allocation 117 5.3.4 DHCPv6 Prefix Delegation 118 5.3.5 Unique Local Address Space 118 5.4 Defining Your IPv6 Address Plan 118 5.5 Multihoming and IP Address Space 122 5.6 IP Address Planning Summary 125 6 IPv6 SECURITY PLANNING 127 6.1 The Good News: IP Is IP 127 6.2 The Bad News: IPv6 Is Not IPv4 128 6.3 Update Your Security Policy 129 6.4 Network Perimeter Monitoring and Intrusion Prevention 129 6.4.1 IPv6 Address Filtering 130 6.4.2 ICMPv6 Messages 131 6.5 Extension Headers 132 6.6 Internal Network Protection 133 6.6.1 Network Reconnaissance 133 6.6.2 Network Access 134 6.6.3 DHCPv6 135 6.6.4 DNS 135 6.6.5 Anycast Addressing 136 6.6.6 Internal Network Filtering 136 6.7 Network Device Security Considerations 137 6.8 Mobile IPv6 Security 138 6.8.1 Mobility Extension Header 139 6.8.2 Mobile IPv6 Vulnerabilities 143 6.9 IPv4/IPv6 Coexistence Measures 144 6.9.1 Securing Tunneling Implementations 145 6.9.2 Securing Translation Implementations 146 6.10 Summary 148 7 IPv6 NETWORK MANAGEMENT PLANNING 149 7.1 Management Model 149 7.2 Network Management Scope 150 7.2.1 Network Inventory 150 7.2.2 IP Address Inventory 151 7.2.3 The Management Network 151 7.3 The Simple Network Management Protocol (SNMP) 152 7.3.1 Configuration Management 153 7.3.2 Fault Management 153 7.3.3 Accounting Management 154 7.3.4 Performance Management 154 7.4 Methods and Procedures 154 7.5 Summary 155 8 MANAGING THE DEPLOYMENT 157 8.1 Integrating Plans 157 8.2 Project Management 159 8.3 Testing Deployment 160 8.4 Production Deployment 161 9 MANAGING THE IPv4/IPv6 NETWORK 163 9.1 Common Network Management Tasks 163 9.2 Configuration Management 163 9.2.1 Network Allocation-Related Tasks 164 9.2.2 Adding a New Device 166 9.2.3 Deletion Tasks 167 9.2.4 Address Renumbering or Movement Tasks 168 9.2.5 Block/Subnet Splits 171 9.2.6 Block/Subnet Joins 172 9.2.7 DHCPv6 Server Configuration 173 9.2.8 DNS Server Configuration 174 9.2.9 Prefix Renumbering 175 9.3 Fault Management 176 9.3.1 Fault Detection 176 9.3.2 Troubleshooting and Fault Resolution 177 9.4 Accounting Management 177 9.4.1 Inventory Assurance 177 9.4.2 Address Reclamation 180 9.5 Performance Management 181 9.5.1 Services Monitoring 181 9.5.2 Application Performance Management 182 9.5.3 Auditing and Reporting 182 9.6 Security Management 183 9.7 Disaster Recovery/Business Continuity 183 10 IPv6 AND THE FUTURE INTERNET 185 10.1 Technology Enablers 185 10.2 The Internet's Dark Side 187 10.3 The Internet's Bright Future 187 10.3.1 Living Smarter 187 10.3.2 Keeping Track 188 10.3.3 Extensible Healthcare 188 10.3.4 Public Safety 188 10.3.5 Credit Cards of the Future 188 10.3.6 Consumer Applications 188 10.4 Conclusion 189 APPENDIX 191 BIBLIOGRAPHY 193 INDEX 199