Deploying IPv6 Networks

Ciprian P. Popoviciu, PhD, CCIE® No. 4499, is a technical leader within the Networked Solutions Integration Test Engineering (NSITE) group at Cisco Systems®. As part of NSITE, Ciprian was the lead on several projects including IPv6 Deployments and Solutions to which he contributed architecture, implementation, and evaluation guidance. Eric Levy-Abegnoli is a technical leader in the IP Technologies Engineering group at Cisco®, where he is the technical lead for IPv6 development in the Cisco IOS Software. Eric has worked with the Cisco IPv6 implementation since 2001 and has been involved in some of the largest IPv6 deployments. Patrick Grossetete, manager of product management at Cisco, is responsible for a suite of Cisco IOS Software technologies including IPv6 and IP Mobility. He is a member of the IPv6 Forum Technical Directorate and manages the participation of Cisco in the Forum.

Introduction Part I Implementing IPv6 Services Chapter 1 The Case for IPv6—An Updated Perspective Unicast Connectivity Addressing IPv4 Address Architecture Private Versus Public Addresses Static Versus Dynamic Addresses Renumbering Network Address Translation Routing QoS Services Multicast Services Virtual Private Networks Security IP Mobility IPv6 Is an Evolutionary Step Chapter 2 An IPv6 Refresher IPv6 Addressing IPv6 Address Representation IPv6 Address Architecture IPv6 Unicast Address IPv6 Anycast Addresses IPv6 Multicast Addresses IPv6 and Layer 2 Addressing IPv6 Addresses Required for an Interface Configuring IPv6 Addresses in Cisco IOS Routers IPv6 Addressing Architecture at a Glance IPv6 Packet Format IPv6 Versus IPv4 Basic Header Format IPv6 Extension Headers Hop-by-Hop Options Header Destination Options Header Routing Header

Fragment Header Authentication Header Encapsulating Security Payload Header Mobility Header Linking Multiple Extension Headers IPv6 and Data-Link Technologies Internet Control Message Protocol for IPv6 ICMPv6 Error Messages Destination Unreachable Time Exceeded Packet Too Big Parameter Problem ICMPv6 Informational Messages Source Address Selection Algorithm Conclusion on ICMPv6 Neighbor Discovery Protocol Protocol Operations Summary Comparison with IPv4 Router and Prefix Discovery Address Resolution Redirecting a Host to a Better Next Hop Inverse Neighbor Discovery Proxy Neighbor Discovery Neighbor Discovery Algorithms Next-Hop Determination Default Router Selection Duplicate Address Detection Neighbor Unreachability Detection The State Machine for Reachability Autoconfiguration Neighbor Discovery at a Glance Chapter 3 Delivering IPv6 Unicast Services Overview IPv6 Provisioning Host IPv6 Address Provisioning Stateless Autoconfiguration Stateful DHCP Router IPv6 Address Provisioning: Prefix Delegation Protocol Description Requesting Router

Delegating Router What DHCP-PD Does Not Do Other Configuration Information Stateless DHCP DNS Services IPv6 Network Access Media Types Native IPv6 Access Routed Access Bridged Access PPP-Encapsulated IPv6 Access Virtualized Access Layer Access over Tunnels Manually Configured Tunnel Tunnel Broker and Tunnel Server Teredo ISATAP IPv6 over the Backbone Native IPv6 IPv6 over IPv4 Tunnels IPv6 over MPLS Translation Mechanisms (NAT-PT) Chapter 4 IPv6 Routing Protocols Distance Vector Routing Protocol Path Vector Routing Protocol Link-State Routing Protocol IPv6 Interior Gateway Protocols Routing Information Protocol next-generation Support for IPv6 Configuration Example EIGRP for IPv6 Support for IPv6 Configuration Example OSPFv3 Support for IPv6 Configuration Example IS-IS for IPv6 Support for IPv6 Configuration Example BGP

Use of MP-BGP Extensions for IPv6 Interdomain Routing BGP Peering BGP Next Hop BGP Configuration Example Site Multihoming Deploying IPv6 Routing Protocols Network Core Network Distribution/Edge Network Access Chapter 5 Implementing QoS QoS for IPv6 Differences Between IPv6 and IPv4 QoS Layer 3 QoS Layer 2 QoS Link-Efficiency Mechanisms Differentiated Services Support for IPv6 Configuration Example Integrated Services Support for IPv6 QoS for IPv6 over MPLS Using DiffServ in a 6PE or 6VPE Environment Configuration Example Using RSVP-TE in a 6PE or 6VPE Environment Using Multiple BGP Next Hops COS-Based TE Tunnel Selection (CBTS) Deploying QoS for IPv6 QoS in a Native IPv6 Deployment QoS in an MPLS-Based IPv6 Deployment IPv4 and IPv6 Coexistence Chapter 6 Providing IPv6 Multicast Services IPv6 Multicast Group Membership Management Multicast Listener Discovery Multicast Layer 2 Protocols Multicast Routing and Forwarding Multicast Distribution Trees Reverse-Path Forwarding Determination Protocol Independent Multicast

Deployment Considerations Multicast Domain Control RP Mapping and Redundancy Service Models Multicast over Tunnels Multicast over MPLS Infrastructures IPv6 Multicast Deployment Examples SSM in a Service Provider Network Enabling IPv6 Multicast Routing MLD Configuration Tuning PIM Subscriber Joining the (S,G) IPv6 Multicast Traffic Forwarding ASM in an Enterprise Network Configuring BSR Configuring Candidate RP routers PIM Topology and Traffic Forwarding Operation with Embedded RP Chapter 7 VPN IPv6 Architecture and Services Virtual Private Network Overview Provider-Provisioned VPNs CE-Based VPNs PE-Based VPNs Addressing Considerations Security Considerations Using IPsec to Implement CE-Based VPNs Remote Access IPsec Tunnel Alternatives Routing IPv6 CE-Based VPN deployment BGP-MPLS IPv6 VPNs: A PE-Based VPN Solution Routing Table Segregation Routing Protocols for BGP-MPLS IPv6 VPN BGP Next Hop Building the Label Stack Forwarding in BGP-MPLS IPv6 VPN VRF Concepts and IPv6 Implementation Configuring a VRF Associating a VRF to an Interface VRF-Aware Router Commands

Scaling IPv6 VPNs MP-BGP for VPNv6 at a Glance Topology Examples Using IPsec to Secure IPv6 over an IPv4 Tunnel Basic MPLS VPNv6 Topology Dual-Stack VPNs Route Reflectors Hub and Spoke Internet Access Interprovider VPNs Chapter 8 Advanced Services—IPv6 Mobility Chapter Overview IP Host Mobility Mobile IPv4 in a Nutshell Mobile IPv6 Mobile IPv6 Operation Overview IPv6 Mobility Header Destination Option Dynamic Home Agent Address Discovery Route Optimization Mobile IPv6 Security Mobile IPv6 Deployment Configuration Example Using ACLs to Control MIPv6 Operation on the Home Agent Network Mobility Practical Use Cases Enterprise on the Move Home Gateway Personal-Area Network Internet-Enabled Car Sensor Network Fleet in Motion Object Model and Terminology Basic Operations What About NEMO? Home Network in NEMO Extended Home Network Aggregated Home Network Mobile Home Network Distributed Home Network Virtual Home Network

IP Mobility in Nonmobile Scenarios IPv4 to IPv6 Transitioning Topology Hiding Community of Interest Route Projection Server Load Balancing Next Steps in Mobility Forthcoming Evolutions Faster Roaming Movement Detection Attachment Router Selection Integration with Mobile Ad-hoc Networking Endpoint Identification Multihoming Route Optimization for NEMO A Vision Chapter 9 Securing IPv6 Networks Security Threats and Best Practices to Protect Against Them Threats with New Considerations in IPv6 Reconnaissance Unauthorized Access Header Manipulation Fragmentation Layer 3/Layer 4 Spoofing Host-Initialization and Address-Resolution Attacks Broadcast-Amplification Attacks (Smurf) Routing Attacks Viruses and Worms Transition-Mechanism Attacks A Note on Mobile IPv6 Security Threats with Similar Behavior in IPv4 and IPv6 Sniffing Application Layer Attacks Rogue Devices Man-in-the-Middle Attacks Flooding Attacks 6PE Security A Note on VPN Security Tools Available for Securing IPv6 Networks IPsec for IPv6 IPsec Concepts Using IPv4 IPsec to Secure IPv6 Tunnels

Securing Router–to-Router Communication with IPv6 IPsec Access Control Lists Extended IPv6 ACLs and Stateful Filtering IPv6 ACLs and Fragmentation IPv6 Access List Example Firewall Functions Cisco IOS Firewall PIX Firewall Authentication, Authorization, and Accounting Unicast Reverse Path Forwarding Protecting the Control Plane with Rate Limiting Summary of Best Practices for Securing IPv6 Deployments Chapter 10 Managing IPv6 Networks IPv6 Network Management: The Challenges Allocating IPv6 Addresses to Managed Nodes Integrating IPv6 and IPv4 Network Management Network-Management Architecture Retrieving Information from Routers and Switches SNMP and MIBs SNMP over IPv6 IPv6 MIBs BG