IPv6 Deployment and Management IEEE Press Series on Networks and Service Management Series

ACKNOWLEDGMENTS XI

INTRODUCTION XIII

1 IPv6 DEPLOYMENT DRIVERS 1

1.1 The Internet: A Success Story 1

1.1.1 Supply-Side Issues 3

1.1.2 Internet at a Crossroads 6

1.1.3 Which Internet Are You On? 7

1.2 Emerging Applications 7

1.3 IPv6 Business Case 10

2 IPv6 OVERVIEW 13

2.1 IPv6 Key Features 14

2.2 The IPv6 Header 14

2.2.1 IPv6 Extension Headers 15

2.3 IPv6 Addressing 17

2.3.1 Address Notation 18

2.3.2 Address Structure 19

2.3.3 IPv6 Address Allocations 20

2.3.4 Internet Control Message Protocol for IPv6 (ICMPv6) 27

2.3.5 IPv6 Ping 28

2.3.6 Multicast Listener Discovery 28

2.3.7 Multicast Router Discovery 31

2.3.8 Neighbor Discovery Protocol 31

2.3.9 Secure Neighbor Discovery (SEND) 33

2.3.10 Inverse Neighbor Discovery 33

2.3.11 Router Renumbering 34

2.3.12 Node Information Query 34

2.4 IPv6 Address Autoconfiguration 35

2.4.1 Modified EUI-64 Interface Identifiers 36

2.4.2 Duplicate Address Detection (DAD) 37

2.5 Mobile IPv6 38

2.6 Reserved Subnet Anycast Addresses 40

2.7 Required Host IPv6 Addresses 41

2.8 IPv6 Routing 41

3 IPv4/IPv6 CO-EXISTENCE TECHNOLOGIES 43

3.1 Dual Stack 44

3.1.1 Implementing Dual Stack 44

3.1.2 Which Address Is Used? 45

3.1.3 DNS Considerations 47

3.1.4 DHCP Considerations 48

3.2 Tunneling Approaches 49

3.2.1 Tunneling Scenarios for IPv6 Packets Over IPv4 Networks 49

3.2.2 Tunnel Types 51

3.2.3 Tunneling Scenario for IPv4 Packets Over IPv6 Networks 62

3.2.4 Tunneling Summary 63

3.3 Translation Approaches 63

3.3.1 IP/ICMP Translation 65

3.3.2 Bump in the Host (BIH) 72

3.3.3 Network Address Translation for IPv6/IPv4 (NAT64) 74

3.3.4 Other Translation Techniques 75

3.4 Application Support of IPv6 78

3.5 Service Provider IPv4/IPv6 Co-Existence 78

3.5.1 Reference Architecture 79

3.5.2 Deployment Approaches Overview 80

3.5.3 Routing Infrastructure Deployment Approaches 80

3.5.4 Comparison of Deployment Approaches 87

3.6 Addressing and DNS Considerations 87

4 IPv6 READINESS ASSESSMENT 91

4.1 Putting a Plan in Place 92

4.2 IP Network Inventory 93

4.2.1 IPv6 Readiness 93

4.2.2 Discovery 93

4.2.3 IPv6 Assessment 94

4.3 IPv6 to do List 106

4.4 IPv6 Readiness Assessment Summary 106

5 IPv6 ADDRESS PLANNING 109

5.1 Internet Registries 109

5.1.1 RIR Address Allocation Policies 111

5.1.2 Address Allocation Efficiency 112

5.2 IPv6 Address Planning 112

5.3 IPv6 Address Allocation Methods 113

5.3.1 Best-Fit Method 114

5.3.2 Sparse Allocation Method 116

5.3.3 Random Allocation 117

5.3.4 DHCPv6 Prefix Delegation 118

5.3.5 Unique Local Address Space 118

5.4 Defining Your IPv6 Address Plan 118

5.5 Multihoming and IP Address Space 122

5.6 IP Address Planning Summary 125

6 IPv6 SECURITY PLANNING 127

6.1 The Good News: IP Is IP 127

6.2 The Bad News: IPv6 Is Not IPv4 128

6.3 Update Your Security Policy 129

6.4 Network Perimeter Monitoring and Intrusion Prevention 129

6.4.1 IPv6 Address Filtering 130

6.4.2 ICMPv6 Messages 131

6.5 Extension Headers 132

6.6 Internal Network Protection 133

6.6.1 Network Reconnaissance 133

6.6.2 Network Access 134

6.6.3 DHCPv6 135

6.6.4 DNS 135

6.6.5 Anycast Addressing 136

6.6.6 Internal Network Filtering 136

6.7 Network Device Security Considerations 137

6.8 Mobile IPv6 Security 138

6.8.1 Mobility Extension Header 139

6.8.2 Mobile IPv6 Vulnerabilities 143

6.9 IPv4/IPv6 Coexistence Measures 144

6.9.1 Securing Tunneling Implementations 145

6.9.2 Securing Translation Implementations 146

6.10 Summary 148

7 IPv6 NETWORK MANAGEMENT PLANNING 149

7.1 Management Model 149

7.2 Network Management Scope 150

7.2.1 Network Inventory 150

7.2.2 IP Address Inventory 151

7.2.3 The Management Network 151

7.3 The Simple Network Management Protocol (SNMP) 152

7.3.1 Configuration Management 153

7.3.2 Fault Management 153

7.3.3 Accounting Management 154

7.3.4 Performance Management 154

7.4 Methods and Procedures 154

7.5 Summary 155

8 MANAGING THE DEPLOYMENT 157

8.1 Integrating Plans 157

8.2 Project Management 159

8.3 Testing Deployment 160

8.4 Production Deployment 161

9 MANAGING THE IPv4/IPv6 NETWORK 163

9.1 Common Network Management Tasks 163

9.2 Configuration Management 163

9.2.1 Network Allocation-Related Tasks 164

9.2.2 Adding a New Device 166

9.2.3 Deletion Tasks 167

9.2.4 Address Renumbering or Movement Tasks 168

9.2.5 Block/Subnet Splits 171

9.2.6 Block/Subnet Joins 172

9.2.7 DHCPv6 Server Configuration 173

9.2.8 DNS Server Configuration 174

9.2.9 Prefix Renumbering 175

9.3 Fault Management 176

9.3.1 Fault Detection 176

9.3.2 Troubleshooting and Fault Resolution 177

9.4 Accounting Management 177

9.4.1 Inventory Assurance 177

9.4.2 Address Reclamation 180

9.5 Performance Management 181

9.5.1 Services Monitoring 181

9.5.2 Application Performance Management 182

9.5.3 Auditing and Reporting 182

9.6 Security Management 183

9.7 Disaster Recovery/Business Continuity 183

10 IPv6 AND THE FUTURE INTERNET 185

10.1 Technology Enablers 185

10.2 The Internet’s Dark Side 187

10.3 The Internet’s Bright Future 187

10.3.1 Living Smarter 187

10.3.2 Keeping Track 188

10.3.3 Extensible Healthcare 188

10.3.4 Public Safety 188

10.3.5 Credit Cards of the Future 188

10.3.6 Consumer Applications 188

10.4 Conclusion 189

APPENDIX 191

BIBLIOGRAPHY 193

INDEX 199

MICHAEL DOOLEY is responsible for overall operations of the BT Diamond IP division. Prior to joining the team, he was president and CEO of Diamond IP Technologies; vice president of operations for the VitalSoft line of software products at Lucent Technologies; and Vice President of Engineering at Quadritek Systems.

TIMOTHY ROONEY managed the engineering development and market introduction of BT Diamond IP's four next-generation IP management systems: NetControl, IPControl, Sapphire Appliances, and ImageControl. Prior to that, he worked at AT&T Bell Laboratories, Cingular, Triton PCS, and Lucent, including a leadership role managing the VitalQIP software product to its peak as market leader. Timothy Rooney is the author of IP Address Management Principles and Practice and Introduction to IP Address Management, both published by Wiley-IEEE Press.

Includes an introduction by Vint Cerf, VP and Chief Internet Evangelist for Google.