IPv6 Migration Flashcards
IPv6 migration approaches
- Dual Stack
- Dual Layer
Dual stack migration approach
Dual Stack
- Both capabilities in all entities supporting v6
- v4 support can be graudally removed
- Complete duplication of all protocol stack components
- Routing protocols, tables, access lists
- It doesn’t reduce the need for more v4 addresses
- Application need to choose between v4 and v6.
Dual layer migration approach
Application are not responsible for choosing protocol to use: TCP/UDP selects most suited protocol (for example using information from DNS records (Type A, AAAA))
Less modifications in the applications
Less used than dual stack.
Travering IPv4 only network
Tunneling:
- Encapsulating v6 packets in v4 packets emulating a directs link
- End-point: hosts and routers
- Protocols:
- GRE
- IPv6 in IPv4
- Setup: manual and automatic
- IPV4-compatible addresses
- 6over4
- 6to4
- Tunnel broker
- ISATAP
- Teredo
Host centered vs Networks centered vs Carrier-Grade solution list
HC solutions: Dual stack hosts exchange IPv6 packets through an IPv4 network
- ipv4 compatible addresses
- 6over4
- ISATAP
NC solutions: Dual stack and native v6 hosts exchange v6 packets through a v4 network.
- Teredo
- Tunnel Broker
- 6to4
Scalable, CG solutions: Native IPv6 (ipv4) hosts exchange IPv6 (ipv4) packetrs through IPv4 (IPv6) network.
- DS-lite
- A+P
- MAP-T and MAP-E
- NAT64
- 6PE (MPLS-based)
ipv6 migration: ipv4 compatible addresses
improperly called automatic tunneling
ipv4-compatible addresses (::/96) are used for v6 communication
process:
- app send ipv6 packets to ipv6 addresses
- static route forewards packets to ::/96 through pseudo-interface
- pseudo-interface encapsulates v6 packets in v4 packets and sends them out
If configured with dual stack router:
- pseudo-interface in sending host in is configured to terminate tunnels on router
- encapsulating v4 packets are sent to v4 address of dual stack router
6over4
- Host cenetered solution in ipv6 transition
- ipv4 networks emulates a virtual LAN
- broadcast multiple access data link
- ip multicasting used for the purpose
- Neighbor and router discovery enabled
- v4 address is used for automatic v6 interface ID generation of link local address
- Not very used because of the lacking support for v4 multicast
6over4 neighbor discovery
- ipv6 mutlicast addresses are mapped on ipv4 multicast addresses
- 239.192.x.y where x.y are last 2 bytes of ipv6 address
ISATAP
- Intra-site automatic tunnel addressing protocol
- ipv4 netowrk as non-broadcast multiple access data link (NBMA)
- No IP multicast suppport
- Interface Id derived from lpv4 address
- Prefixed by 0000:5efe
- fe80::5efe:0101:0101
- No neighbor discovery: not needed for data-link address discovery as ipv4 address is embedded in ipv6 address
- PRL (Potential Router List) must be provided: router discovery is not possible
- List usually obtained to DNS query to isatap.domain.com (usually domain is obtained through DHCP) or through configuration
- Each router in the list is infrequently probed to check if they are working and to perform unicast-only configuration.
6to4
- Network centered solution for ipv6 migration
- Relay v4 address is embedded in ipv6 prefix by appending it to 2002::/16
- 192.0.2.4 -> 2002:c000:0204::/48
- Basic scenario: not meant for ipv4 host to ipv6 host communication
- Mixed scenario (ipv4 global internet + ipv6 gobal internet): 6to4 relay must be default gatway (192.88.99.1) of 6to4 routers to handle cases of prefix not matching 6to4
- Default gateway (6to4) realy: to be used whener I don’t know what to do with an ipv6 packet (prefix not matching 6to4 prefix)
Teredo
- Solution to ipv6 transition with network centered approach
- Architecture similar to 6to4
- IPv6 packets are encapsulated in IP/UDP to be compatible with NAT, since NAT cannot use ports with IPV6 in IPv4.
Tunnel Broker
- Solution to ipv6 transition with network centered approach
- Solves the problem of 6to4: I cannot use a general ipv6 prefix
- Tunnel broker server:
- Indentifies tunnel servers (routers) and mediates tunnel setup (gives us the ipv4 addresses to contact)
- IPv6 in IPv4 tunnels
- Tunnel setup Protocol/Tunnel Information Control: protocol used to setup tunnels
- 6to4 doens’t support any prefix, but is completely decentralized, doesn’t need central server, here we need it.
- Who is in charge of the server (who pays for it) when it is shared between ISPs? big problem.
- Pretty similar to ISATAP
Goal of Scalable, carrier grade solution to ipv6 transition
Goals:
- need to support
- ipv4 servers possibly communicating with ipv6 hosts
- ipv4 clients
AFTR
Address family transition router:
- allows ipv4 hosts to communcate wit ipv4 hosts over an ipv6 carrier infrastructure
- residential hosts and current providers
- features ipv6 tunnel concentrator and possibly a large-scale NAT
- in use in DS-lite and A+P
DS-lite
Dual stack lite
- Dual stack at the edge of the network
- IPv6 only service provider backbone
- Properties:
- Reduces requirement for ipv4 addresses compared to dual-stack approach
- dual-stack requires an ipv4 public address per host
- Extended NAT enables customer assigned addressing
- IPv6 address of CPE in NAT table
- Reduces requirement for ipv4 addresses compared to dual-stack approach
- Limitation:
- NAT is not under control of customer (same as with CarrierGradeNAT)
- Problematic with servers (static mapping and port forwarding cannot be configured)