IPv6 Flashcards
Problems with NAT
NAT breaks the end to end IP model
This can cause security & application issues
Devices such as NGFWs, traversal servers, & proxy servers can help
It would be a cleaner solution if IP supported an addressing scheme which was big enough to give all devices in the world a publicly reachable address (enter IPv6)
Dual Stack
A network interface can have both an IPv4 & IPv6 address at the same time
It can then communicate using either protocol
Dual stack can be enabled long term to support both IPv4 & IPv6 apps or as a transition strategy
IPv6 Addressing Format
Uses 128 bit address (compared to 32 in IPv4)
Format:
X:X:X:X:X:X:X:X
Each “X” is a 16 bit hexadecimal field (0-9 | A-F)
IPv6 Address Part Naming
Each segment in IPv4 is an “octet” (8 bits)
Each segment in IPv6 is 16 bits (no official nickname)
Sometimes “pieces” “quartets” or “hextets”
Address Shortening
Leading zeros can be removed
2001:0DB8:0000:0001:0000:0000:0000:0001 can be…
2001:DB8:0:1:0:0:0:1
Successive all zero fields can be shortened to “ :: “
2001:DB8:0:1:0:0:0:1 can be…
2001:DB8:0:1::1
–Can only be done once in an address
Global Unicast Address
Similar to IPv4 public addresses
They are assigned to an individual host and have global reachability
–Unless blocked by a security policy
Assigned from the range 2000::/3
Internet authorities assign blocks from the overall 2000::/3 range to organizations
A common assignment for a company is a /48 block
2001:10:10::/48
A smaller/larger block can be assigned depending on company size
IPv6 standards state that addresses for individual hosts should be /64
Using /64 everywhere simplifies the addressing & enables the use of EUI-64 addresses
Command: Configure Global Unicast
ipv6 unicast-routing
Command: Verify IPv6 Interfaces
show ipv6 interface brief
IPv6: Broadcast vs. Multicast
IPv6 does not support broadcast traffic
–It does support multicast to all hosts on the local subnet (equivalent)
EUI-64
A Cisco router can generate full IPv6 addresses for itself when given the interface and /64 network to use
The host portion of the address is derived from the interface’s MAC, which is guaranteed to be globally unique
A MAC address is a /48 address compared to the /64 host portion of the IPv6 address
FF:FE is injected in the middle of the /48 MAC to bring it to 64 bits
–Also, the 7th bit is inverted
Command: Configure EUI-64 on F0/0 & F2/0
This is not recommended
Int f0/0
Ipv6 address 2001:db8:0:1::/64 eui-64
Int f2/0
Ipv6 address 2001:db8:0::/64 eui-64
Unique Local
(And the address range)
Similar to RFC 1918 private addresses
Not publicly reachable
Assigned from the range FC00::/7
Hosts should be assigned /64 addresses
Link Local
Valid for communications on that link only
Cannot send traffic to another link
Assigned from the range FE80::/10 to FEB0::/10
Can be used for communications which should not be forwarded beyond the local link, like routing protocol hello packets
–They are mandatory on IPv6 enabled Cisco router interfaces
Automatically generated with EUI-64 addresses on IPv6 enabled Cisco router interfaces
–The EUI-64 address can be overridden with manual configuration
Link local addresses are valid on the local link only so you can use the same address on multiple interfaces
Command: Configure Link Local Manually to fe80::1 on F0/0 & F2/0
Int f0/0
Ipv6 address fe80::1 link-local
Int f2/0
Ipv6 address fe80::1 link-local
Command: Multiple IPv4 Address Configuration on F0/0
192.168.10.1/24 = Primary
172.16.0.1/24 = Secondary
Interface f0/0
Ip address 172.16.0.1 255.255.255.0 secondary
Ip address 192.168.10.1 255.255.255.0