IPv6 Cheat Sheet

©2011-2022, CellStream, Inc. -- www.cellstream.com

IPv6 Protocol Header (40 octets) IPv4 Protocol Header (for reference)

Size of IPv6 address = 128 bits or 2^128 = 340,282,366,920,938,463,463,374,607,431,768,211,456 addresses

Addressing Types Next Header Field Definitions
Global Unicast Address: 000 IPv6 Hop-by-Hop Option
002 Internet Group Management Protocol
006 Transmission Control Protocol (TCP)
017 User Datagram Protocol (UDP)
2400::/12 to APNIC 2600::/12 to ARIN 041 IPv6
2800::/12 to LACNIC 2A00::/12 to RIPE 043 IPv6 Routing Header
2C00::/12 to AfriNIC 3FFE::/16 the old 6Bone 044 IPv6 Fragementation Header
Global IPv6 Hierarchy: 046 Reservation Protocol (RSVP)
047 General Routing Encapsulation (GRE)
050 Encapsulation Security Payload (ESP)
051 Authentication Header (AH)
055 IP Mobility (MOBILE)
Link Local Address (FE80::/10): 058 ICMPv6
059 No Next Header
060 IPv6 Destination Options
089 OSPF IGP
Site Local Address (FEC0::/10) Depracated: 094 IP-in-IP Encap. Protocol (IPIP)
103 Protocol Independent Multicast (PIM)
135 Mobility for IPv6 (MIPv6) Header

Unique Local Address: FD00:/8 group shown IPv6 Multicast

Documentation Format:

Scope Field 0 = Reserved, 1 = Node/Infc. Local

Unspecified Format (::/128): (analogous to "0.0.0.0") 2 = Link Local, 3 = Subnet Local
4 = Admin Local, 5 = Site Local
8 = Organization Local, E = Global
Flag Bits (L): Format is "0RPT" where
Loopback Address (::1/128): (analogous to "127.0.0.1") T, =1 "well known", =0 "transient"
R, =1 Embedded RP, =0 not
P, =1 based on unicast, =0 not
plen = length of the network prefix, locally administered
NAT64 64:FF9B::/96
IPv6 Mapped IPv4 Address (::FFFF:A.B.C.D) Well Known IPv6 Multicast Addresses

©2011-2022, CellStream, Inc. Page 1 of 3 www.cellstream.com

 FF01::1 All nodes on Local Node/Infc.
FF02::1 All nodes on Link Local (analogous to 224.0.0.1)
FF01::2 All Routers on Local Node/Infc.
FF02::2 All Routers on Link Local
IPv6 Interface Addresses FF05::2 All Routers on Local Site
Options: a) By Configuration, b) Psuedo Random, c) EUI: FF02::4 All DVMRP Routers on Link Local
FF02::5 All OSPF IGP Routers on Link Local
FF02::6 All OSPF DRouters on Link Local
FF02::9 All RIP Routers on Link Local
FF02::A All EIGRPv6 Routers on Link Local
FF02::D All PIM Routers on Link Local
FF02::12 All VRRPv3 Routers on Link Local
FF02::16 All MLDv2 Routers on Link Local
FF02::1:2 All DHCP agents on Link Local
FF05::1:3 All DHCP servers on Local Site
FF05::16 All MLDv2 Routers on Link Local
Note: Also flips 7th bit (Universal/Local flag) to 1 FF01::101 All NTP servers on sender's host
FF02::101 All NTP servers on sender's link
Example: 00d0.5873.4cf1 becomes FE80::2D0:58FF:FE73:4CF1 FF05::101 All NTP servers on sender's site
IPv6 Tunnel Interface Addresses FF0E::101 All NTP servers on the Internet
ISATAP: Private IPv4 addreses Solicited Node Multicast Addresses

ISATAP: Public IPv4 addreses

ICMPv6
6to4:

Teredo Tunnels: 2001:0000::/32 ICMPv6 Error Messages

Ethertype Reference Type = 0-127 Error Messages
0800 = IPv4 86DD = IPv6 Type = 1 Destination Unreachable
0806 = ARP 8847 = MPLS Unicast Code = 0 No route to destination
8035 = Reverse ARP 8848 = MPLS Multicast Code = 1 Administratively Prohibited
8863 = PPoE (Discovery) 8864 = PPoE (PPP sess) Code = 2 (unassigned)
Stateless Address Autoconfiguration (SLAAC) Code = 3 Address Unreachable
Originally in RFC 2462, updated by RFC 4862 Code = 4 Port Unreachable
“Stateless” because it begins from a “dead start” with Type = 2 Packet Too Big
no information (or “state”) at all for the host to work with Type = 3 Time Exceeded
, and has no need for a DHCP server Code = 0 Hop Limit Exceeded
Host autonomously configures its own Link-Local addr. Code = 1 Fragment Reass. Time Exceeded
Router solicitations are sent by booting nodes to Type = 4 Parameter Problem
request Router Advertisements (RAs) for Prefix Code = 0 Errored Header Field
Neighbor Discovery & Duplicate Address Detect Code = 1 Unrecognized Next Header
Code = 2 Unrecognized IPv6 Option

ICMPv6 Informational Messages

Type = 128-255 are Informational Messages
Type = 128 Echo Request (Ping)
Type = 129 Echo Reply
Type = 130 Multicast Listener Query

©2011-2022, CellStream, Inc. Page 2 of 3 www.cellstream.com

Neighbor Discover replaces ARP Type = 131 Multicast Listener Report
Router Solicitation & Router Advertisement Type = 132 Multicast Listener Done
Type = 133 Router Solicitation
Type = 134 Router Advertisement
Type = 135 Neighbor Solicitation
Type = 136 Neighbor Advertisement
Type = 137 Redirect Message
Type = 138 Router Renumbering
Type = 139 Node Information Query
Type = 140 Node Information Response
Stateful Address Config. - DHCPv6 Type = 143 Version 2 Multicast Listener Report
Type = 144 Home Agent Address Discovery Request
Type = 145 Home Agent Address Discovery Reply
Type = 146 Mobile Prefix Solicitation
Type = 147 Mobile Prefix Advertisement

ICMPv6 Flags

DHCP Client Port = UDP port 546

DHCP Server Port = UDP port 547
Each client and server has a DHCP Unique Id. (DUID) CellStream IPv6 Courses
DUID can have multiple Identity Associations (IAs) Hands On IPv6 Course - 2.5 day ILT
IPv6 101 - 2 day ILT or Web Based Delivery
Security: Preventing Scanning from Outside IPv6 201 (Advanced) - 2 day ILT or Web Based Del.

CellStream IPv6 Resources

All our IPv6 related Articles
An IPv6 Profile for Wireshark
Our profiles for Wireshark repository
Reference Library at the Online School

RFC4941/RFC8981: IPv6 Temporary Addresses

©2011-2022, CellStream, Inc. Page 3 of 3 www.cellstream.com