Implementing Ipv6 Addressing and Basic Connectivity: - Ipv6, Formerly Named Ipng (Next Generation)
Implementing Ipv6 Addressing and Basic Connectivity: - Ipv6, Formerly Named Ipng (Next Generation)
Implementing Ipv6 Addressing and Basic Connectivity: - Ipv6, Formerly Named Ipng (Next Generation)
Connectivity
• IPv4 transition
::ffff:0:0/96 — this prefix is used for IPv4 mapped addresses
2001::/32 — Used for Teredo tunneling.
2002::/16 — this prefix is used for 6 to 4 addressing.
• ORCHID
2001:10::/28 — ORCHID (Overlay Routable Cryptographic
Hash
Identifiers) as per (RFC 4843). These are non-routed IPv6
addresses used for Cryptographic Hash Identifiers.
• Documentation
2001:db8::/32 — this prefix is used in documentation (RFC
3849). The addresses should be used anywhere an example
IPv6 address is given or model networking scenarios are
described.
IPv6 Special Addresses
• Deprecated or obsolete addresses
::/96 — This is a 96-bit zero-value prefix originally known as IPv4-
compatible addresses. This class of addresses were used to
represent IPv4 addresses within an IPv6 transition technology.
Such an IPv6 address has its first 96 bits set to zero, while its
last 32 bits are the IPv4 address that is represented. The
Internet Engineering Task Force (IETF) has deprecated the use
of IPv4-compatible addresses with publication RFC 4291. The
only remaining use of this address format is to represent an
IPv4 address in a table or database with fixed size members
that must also be able to store an IPv6 address.
fec0::/10 — The site-local prefix specifies that the address is valid
only within the site network of an organization. Its use has
been deprecated in September 2004 by RFC 3879 and new
systems must not support this special type of address. New
specifications replace this address type with unique local
addresses.
IPv6 Address Type: Unicast
• An IPv6 unicast address is an address destined for
a single interface, on a single node.
• A packet that is sent to a unicast address is
delivered to the interface identified by that address.
• Cisco IOS software supports the following IPv6
unicast address types:
FF01::2 All routers node-local. All routers local to the host itself.
FF02::2 All routers link-local. All routers on the same link as the
host.
FF05::2 All routers site-local. All routers on the same site as the host.
Authentication header 51 The Authentication header and the ESP header are used within IP Security
and Protocol (IPSec) to provide authentication, integrity, and confidentiality of a
ESP header 50 packet. These headers are identical for both IPv4 and IPv6.
Transport (upper-layer) 6 TCP The Upper-layer headers are the typical transport-layer headers used inside
headers a packet to transport the data. The two main transport protocols are TCP and
UDP.
17 UDP
Mobility header 135 Extension headers used by mobile nodes, correspondent nodes, and home
agents in all messaging related to the creation and management of bindings.
Unicast Reverse Path Forwarding
• The Unicast RPF feature is invoked to mitigate problems
caused by malformed or forged (spoofed) IPv6 source
addresses that pass through an IPv6 router.
• Malformed or forged source addresses can indicate denial-of-
service (DoS) attacks based on source IPv6 address spoofing.
• Unicast RPF checks to see if any packet received at a router
interface arrives on one of the best return paths to the source
of the packet. Unicast RPF does this by doing a reverse lookup
in the CEF table.
• With Unicast RPF, all equal-cost “best” return paths are
considered valid. Unicast RPF works in cases where multiple
return paths exist provided that each path is equal to the others
in terms of the routing cost (number of hops, weights, and so
on) and as long as the route is in the FIB.
Unicast Reverse Path Forwarding
• Where NOT to use Unicast RPF.
• Unicast RPF should not be used where UPSR ring topologies are
implemented such as within the core of an ISP, or on interfaces
that are internal to the network. These interfaces are likely to
have routing asymmetry meaning the number of hops in the
transmit and receive path differ. Unicast RPF should be applied
only where there is natural or configured symmetry. As long as
administrators carefully plan which interfaces they activate
Unicast RPF on, routing asymmetry is not a serious problem.
• Routers at the edge of the network of an ISP are more likely to
have symmetrical reverse paths than routers that are in the core
of the ISP network.
• Routers that are in the core of the ISP network have no
guarantee that the best forwarding path out of the router will be
the path selected for packets returning to the router. Hence, it is
not recommended that you apply Unicast RPF where there is a
chance of asymmetric routing. It is simplest to place Unicast
RPF only at the edge of a network or, for an ISP, at the customer
edge of the network.
Unicast Reverse Path Forwarding
Unicast RPF Blocking Traffic in an Asymmetrical Routing Environment
Path MTU Discovery for IPv6
• As in IPv4, path MTU discovery in IPv6 allows a host
to dynamically discover and adjust to differences in
the MTU size of every link along a given data path.
• In IPv6, however, fragmentation is handled by the
source of a packet when the path MTU of one link
along a given data path is not large enough to
accommodate the size of the packets.
• Having IPv6 hosts handle packet fragmentation
saves IPv6 router processing resources and helps
IPv6 networks run more efficiently.
• In IPv6, the minimum link MTU is 1280 octets. We
recommend using an MTU value of 1500 octets for
IPv6 links.
IPv6 Neighbor Discovery
• Neighbor discovery is a function that enables a node
to identify other hosts and routers on its links.
• The node needs to know of at least one router so
that it knows where to forward packets if a target
node is not on its local link.
• Neighbor discovery also allows a router to redirect a
node to use a more appropriate router if the node
has initially made an incorrect choice.
• There are two ways that neighbor discovery are
performed in IPv6. Statelessly via ICMPv6 and
Statefuly via DHCPv6
IPv6 Neighbor Discovery
• An IP address is obtained statefuly (DHCPv6) or
Statelessly (ICMPv6)
• The M bit in an RA message determines how the IP
address is obtained.
• The O bit determines if other configuration
parameters are configured statefuly as well.
• An IP address is obtained statefuly (DHCPv6) if the
M bit is set (1).
• An IP address is obtained Statelessly (ICMPv6) if the
M bit is not set (0).
Internet Control Message Protocol Version 6
(ICMPv6)
• In order for IP to move data from one node to another
successfully, there are many functions that need to be carried
out, (error reporting, route discovery, and diagnostics) to name
a few. These tasks are carried out by Internet Control Message
Protocol
• ICMPv6 also carries out the tasks of conveying multicast group
membership information, (a function that was previously
performed by the IGMP protocol in IPv4), and address
resolution, (previously performed by ARP).
• ICMPv6 messages and their use are specified in RFC 4443 –
Internet Control Message Protocol (ICMPv6) for the Internet
Protocol Version 6 (IPv6) and RFC 2461 – Neighbor Discovery
for IP Version 6 (IPv6). Both RFCs are draft standards with a
status of elective.
• Every ICMPv6 message is preceded by an IPv6 header (and
possibly some IP extension headers). The ICMPv6 header is
identified by a Next Header value of 58 in the immediately
preceding header.
Internet Control Message Protocol Version 6
(ICMPv6)