IPv6 Deployment and Management

MICHAEL DOOLEY is responsible for overall operations of the BT Diamond IP division. Prior to joining the team, he was president and CEO of Diamond IP Technologies; vice president of operations for the VitalSoft line of software products at Lucent Technologies; and Vice President of Engineering at Quadritek Systems.TIMOTHY ROONEY managed the engineering development and market introduction of BT Diamond IP's four next-generation IP management systems: NetControl, IPControl, Sapphire Appliances, and ImageControl. Prior to that, he worked at AT&T Bell Laboratories, Cingular, Triton PCS, and Lucent, including a leadership role managing the VitalQIP software product to its peak as market leader. Timothy Rooney is the author of IP Address Management Principles and Practice and Introduction to IP Address Management, both published by Wiley-IEEE Press.Includes an introduction by Vint Cerf, VP and Chief Internet Evangelist for Google.

• ACKNOWLEDGMENTS XIINTRODUCTION XIII1 IPv6 DEPLOYMENT DRIVERS 11.1 The Internet: A Success Story 11.1.1 Supply-Side Issues 31.1.2 Internet at a Crossroads 61.1.3 Which Internet Are You On? 71.2 Emerging Applications 71.3 IPv6 Business Case 102 IPv6 OVERVIEW 132.1 IPv6 Key Features 142.2 The IPv6 Header 142.2.1 IPv6 Extension Headers 152.3 IPv6 Addressing 172.3.1 Address Notation 182.3.2 Address Structure 192.3.3 IPv6 Address Allocations 202.3.4 Internet Control Message Protocol for IPv6 (ICMPv6) 272.3.5 IPv6 Ping 282.3.6 Multicast Listener Discovery 282.3.7 Multicast Router Discovery 312.3.8 Neighbor Discovery Protocol 312.3.9 Secure Neighbor Discovery (SEND) 332.3.10 Inverse Neighbor Discovery 332.3.11 Router Renumbering 342.3.12 Node Information Query 342.4 IPv6 Address Autoconfiguration 352.4.1 Modified EUI-64 Interface Identifiers 362.4.2 Duplicate Address Detection (DAD) 372.5 Mobile IPv6 382.6 Reserved Subnet Anycast Addresses 402.7 Required Host IPv6 Addresses 412.8 IPv6 Routing 413 IPv4/IPv6 CO-EXISTENCE TECHNOLOGIES 433.1 Dual Stack 443.1.1 Implementing Dual Stack 443.1.2 Which Address Is Used? 453.1.3 DNS Considerations 473.1.4 DHCP Considerations 483.2 Tunneling Approaches 493.2.1 Tunneling Scenarios for IPv6 Packets Over IPv4 Networks 493.2.2 Tunnel Types 513.2.3 Tunneling Scenario for IPv4 Packets Over IPv6 Networks 623.2.4 Tunneling Summary 633.3 Translation Approaches 633.3.1 IP/ICMP Translation 653.3.2 Bump in the Host (BIH) 723.3.3 Network Address Translation for IPv6/IPv4 (NAT64) 743.3.4 Other Translation Techniques 753.4 Application Support of IPv6 783.5 Service Provider IPv4/IPv6 Co-Existence 783.5.1 Reference Architecture 793.5.2 Deployment Approaches Overview 803.5.3 Routing Infrastructure Deployment Approaches 803.5.4 Comparison of Deployment Approaches 873.6 Addressing and DNS Considerations 874 IPv6 READINESS ASSESSMENT 914.1 Putting a Plan in Place 924.2 IP Network Inventory 934.2.1 IPv6 Readiness 934.2.2 Discovery 934.2.3 IPv6 Assessment 944.3 IPv6 to do List 1064.4 IPv6 Readiness Assessment Summary 1065 IPv6 ADDRESS PLANNING 1095.1 Internet Registries 1095.1.1 RIR Address Allocation Policies 1115.1.2 Address Allocation Efficiency 1125.2 IPv6 Address Planning 1125.3 IPv6 Address Allocation Methods 1135.3.1 Best-Fit Method 1145.3.2 Sparse Allocation Method 1165.3.3 Random Allocation 1175.3.4 DHCPv6 Prefix Delegation 1185.3.5 Unique Local Address Space 1185.4 Defining Your IPv6 Address Plan 1185.5 Multihoming and IP Address Space 1225.6 IP Address Planning Summary 1256 IPv6 SECURITY PLANNING 1276.1 The Good News: IP Is IP 1276.2 The Bad News: IPv6 Is Not IPv4 1286.3 Update Your Security Policy 1296.4 Network Perimeter Monitoring and Intrusion Prevention 1296.4.1 IPv6 Address Filtering 1306.4.2 ICMPv6 Messages 1316.5 Extension Headers 1326.6 Internal Network Protection 1336.6.1 Network Reconnaissance 1336.6.2 Network Access 1346.6.3 DHCPv6 1356.6.4 DNS 1356.6.5 Anycast Addressing 1366.6.6 Internal Network Filtering 1366.7 Network Device Security Considerations 1376.8 Mobile IPv6 Security 1386.8.1 Mobility Extension Header 1396.8.2 Mobile IPv6 Vulnerabilities 1436.9 IPv4/IPv6 Coexistence Measures 1446.9.1 Securing Tunneling Implementations 1456.9.2 Securing Translation Implementations 1466.10 Summary 1487 IPv6 NETWORK MANAGEMENT PLANNING 1497.1 Management Model 1497.2 Network Management Scope 1507.2.1 Network Inventory 1507.2.2 IP Address Inventory 1517.2.3 The Management Network 1517.3 The Simple Network Management Protocol (SNMP) 1527.3.1 Configuration Management 1537.3.2 Fault Management 1537.3.3 Accounting Management 1547.3.4 Performance Management 1547.4 Methods and Procedures 1547.5 Summary 1558 MANAGING THE DEPLOYMENT 1578.1 Integrating Plans 1578.2 Project Management 1598.3 Testing Deployment 1608.4 Production Deployment 1619 MANAGING THE IPv4/IPv6 NETWORK 1639.1 Common Network Management Tasks 1639.2 Configuration Management 1639.2.1 Network Allocation-Related Tasks 1649.2.2 Adding a New Device 1669.2.3 Deletion Tasks 1679.2.4 Address Renumbering or Movement Tasks 1689.2.5 Block/Subnet Splits 1719.2.6 Block/Subnet Joins 1729.2.7 DHCPv6 Server Configuration 1739.2.8 DNS Server Configuration 1749.2.9 Prefix Renumbering 1759.3 Fault Management 1769.3.1 Fault Detection 1769.3.2 Troubleshooting and Fault Resolution 1779.4 Accounting Management 1779.4.1 Inventory Assurance 1779.4.2 Address Reclamation 1809.5 Performance Management 1819.5.1 Services Monitoring 1819.5.2 Application Performance Management 1829.5.3 Auditing and Reporting 1829.6 Security Management 1839.7 Disaster Recovery/Business Continuity 18310 IPv6 AND THE FUTURE INTERNET 18510.1 Technology Enablers 18510.2 The Internet’s Dark Side 18710.3 The Internet’s Bright Future 18710.3.1 Living Smarter 18710.3.2 Keeping Track 18810.3.3 Extensible Healthcare 18810.3.4 Public Safety 18810.3.5 Credit Cards of the Future 18810.3.6 Consumer Applications 18810.4 Conclusion 189APPENDIX 191BIBLIOGRAPHY 193INDEX 199