Course Content
Overview of IPv6
- IPv6 in a nutshell
- Key differences between IPv4 and IPv6
- The Fields in the IPv6 Header
- Detailed overview of IPv6 headers and extension headers
- The Structure of the IPv6 Protocol
- IPv6 Deployment Strategies
- Planning to Deploy IPv6
- Identifying Requirements
- Selecting a Deployment Strategy
- Deployment Strategies: Primary Uses, Benefits, and Limitations
- Deploying IPv6 over IPv4 Tunnels
- Deploying IPv6 over Dedicated Data Links
- Deploying IPv6 over MPLS Backbones
- Deploying IPv6 Using Dual-Stack Backbones
- Protocol Translation Mechanisms
IPv6 Address Architecture
- The IPv6 Address Space
- Differences from IPv4 (e.g.,no broadcast,minimum MTU,no fragmentation,etc.)
- Link- and Site-Local Addresses
- Global Routing Prefixes
- Unicast, multicast, and anycast
- Global Unicast Address
- Special addresses
- Address types, notations, and prefixes
- Jumbograms
- Advanced IPv6 Addressing
- Advanced Subnetting
ICMPv6
- Differences from IPv4
- Path MTU discovery
- Neighbor Discovery (ND)
- Network Renumbering
- Multicast Listener Discovery (MLD)
- Multicast Router Discovery (MRD)
- Neighbor Solicitation
- Neighbor Advertisement
- Router Solicitation
- Router Advertisement
Autoconfiguration
- Stateless and stateful
- Neighbor discovery and secure neighbor discovery
- Router advertisement and solicitation
- Duplicate address detection
- DHCPv6
- Ethernet Support
- Layer 2 Support for IPv6
- Ethernet frame differences from IPv4
- VLAN support
- How IPv6 discovers MAC addresses for remote hosts (ARP equivalent)
- How IPv6 discovers local static IPv6 addresses based on MAC address
- Detecting Network Attachment (DNA)
Multicast Services
- Differences from IPv4
- Multicast address space and reserved/special addresses
- MLDv2 for IPv6
- IGMPv3
Securing IPv6 networks
- IPv6 and IPv4 Threat Comparison
- Mitigating IPv6 Threats
- IPv6 end-to-end security
- IPsec, VPNs, IKE, PKI
- Threat Analysis Attacks in IPv6
- ICMP, ICMP Attack, Ping Attack, Smurf Attack, PING Flood,Pingof Death
- Reconnaissance Unauthorized Access
- Header Manipulation and Fragmentation
- Layer 3-Layer 4 Spoofing ARP and DHCP Attacks Broadcast Amplification Attacks (smurf)
- Routing Attacks
- Viruses andWorms
- Application Layer Attacks
- Rogue Devices
- Flooding Denial of service attacks (DOS)
- Man-in-the-middle attacks
- ARP poisoning and ICMP redirect
- Port scanning
- Authentication and Encryption
- IPSec
- Differences from IPv4
- Key Management
- Security Associations
- Tunnel vs. transport mode
- ESP
- AH
- Operational issues
- Transition and IPv4 Interoperability
- Basic Transition Mechanisms for IPv6 Hosts and Routers
Transition and Implementation Mechanisms
- Dual IP stack implementation
- IPv4-mapped IPv6 addresses
- Tunneling
- Automatic tunneling
- Configured and automated tunneling (6in4)
- Proxying and translation for IPv6-only hosts Dual stack
- Dual-Stack
- DS-Lite (Dual-Stack Lite)
- 6over4
- BIS-Bump-in-the-Stack (RFC 2767)
- BIA-Bump-in-the-API (RFC 3338)
- Automatic and configured tunneling
- 6to4
- IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
- Teredo
- DSTM
- IPv6 Tunnel brokers
- IPv6 Tunnel Broker with the Tunnel Setup Protocol (TSP
- Teredo
- 4in6
- 6in4
- ISATAP
- Translations
- SIIT6over4
- NAT-PT
- NAPT-PT
- Stateless IP/ICMP Translation (SIIT)
- Transport Relay Translation (TRT)
- Socks-based Gateway (RFC 3089)
Differences in Transport and Application Protocols from IPv4
- DNS in IPv6
- Changes to DNS for IPv6
- IPv6 AAAA resource records
- PTR records and IPv6
- Reverse lookups in IPv6
- ip6.arpa. & ip6.int.
- IPv6 in BIND and MS DNS
- IPv6 and EDNS0
- SNMP
- DHCP
- FTP
- TFTP
- SSH/SFTP/SCP
- syslog SIP/SIPS
- HTTP/HTTPS
- TLS/DTLS
- RTP/SRTP/cRTP
- RTCP
- RTSP
- UDP
- TCP
- SCTP
IPv6 Routing Protocols
- IPv6 Dynamic Routing
- ICMPv6 Redirects
- RIPng
- OSPF for IPv6 (OSPFv3)
- BGP-4 Support for IPv6
- OSPFv3
- IS-IS and IPv6
- IGRPv6
- BGPv4 & IPv6
- IPv6 Multicast Routing
- IPv6 Multicast Routing
- IPv6 PIM-DM
- IPv6 PIM-SM
- Advertising IPv6 addresses on an IPv4 network
- Advanced IS-IS
- NAT-PT
- 6PE
- 6VPE
IPv6 and QoS
- Traffic classes in IPv6
- Flow label
- Differential services (DiffServ)
- Integrated services (IntServ)
- RSVP (Resource Reservation Protocol)
- Explicit congestion notification (ECN)
IPv6 for Windows
- IPv6 Deployment Strategies for Windows 2000
- Microsoft .NET
- Application Changes
- IPv6 ping, telnet and FTP
- Mail systems and IPv6
- IPv6 enabled web-servers
- The Programming Interface
- Socket Library changes for IPv6
- IPv6 Code Migration Tools
- Sockets & Winsock APIs
- Perl, Java, C# support for IPv6
IPv6 Linux Programming APIs
- Linux IPv6 Programming Interface
- Port and Sockets
- Socket Library for IPv6
- The updated Socket API
- IPv6 Socket Programming
- Socket Programming with TCP
- Changes socket API for IPv6 Support
- IPv6 Code sequence
- Socket Interface
- Address data structures
- Name-to-address translation functions
- Address conversion functions
- Perl, Java, C# support for IPv6
- IPv6-ready system check
- Configuring interfaces
- Configuring normal IPv6 routes
- Neighbor Discovery
- Kernel settings in /proc-filesystem
- Netlink-Interface to kernel
- Address Resolver
- Network debugging
- Support for persistent IPv6 configuration in Linux distributions
- Auto-configuration
- Mobility
- Firewalling
- Security
- Encryption and Authentication
- Quality of Service (QoS)
- IPv6-enabled daemons
Building the Linux kernel for IPv6 support
- Configuring a Linux server for IPv6
- Linux IPv6 protocol implementation
- Setting system parameters
- Resolving names
- IP address configuration
- DNS configuration (client and server)
- SNMP configuration
- xinetd configuration
- ip6tables configuration
- NTP configuration
- NFS configuration (NFS packet security emphasis)
- sshd configuration
- syslog configuration
Getting connected
- Tunnel types
- Setting up the tunnel
- Allowing proto-41 traffic
- Setting up an IPv6-capable gateway
- Enabling forwarding
- apache/lighttpd configuration
- other services (instructor suggestions requested)
- IPSec Key Management
Cisco IOS Router IPv6
- Preference
- Privacy Extensions
- Packet Filter/Firewall
- Access control lists (ACLs)
- Tunneling IPv4/IPv6
- Configured tunnels
- DHCPv6
- PPPv6
- Routing
- Management
- User Access and Privilege Levels
- TACACS+
- Using privacy and temporary addresses
- Enabling IPv6 Routing and Configuring IPv6 Addressing
- Mapping Host Names to IPv6 Addresses
- Monitoring and Maintaining IPv6
Basic Labs
- Router Advertisements Lab
- IPv6 Deep Packet Inspection
- Analyzing IPv6 packets
- IPv6 Packet Capture and Analysis
- Routing Labs
- Configuring basic IPv6 using Cisco IOS
- Configuring OSPFv3 for IPv6 Routing
- Configuring with IS-IS for IPv6 Routing
- Configuring with EIGRP for IPv6 Routing
- Configuring BGP and MP-BGP for IPv6 Routing
- IPv6 Addressing Lab
- IPv6 Anycast Lab
- IPv6 Multicast LabIPv4 and IPv6 Dual Stack Lab
- Implementing Tunnels for IPv6 Labs
- Teredo Tunneling Lab
- 6in4 Tunneling Lab
- 6to4 Tunneling Labels
- ISATAP Tunneling Lab
- Configuring Connectivity using a Tunnel Broker
- IPv6 Security Lab
- Implementing IPsec and IKE
- Configuring Cisco IOS Firewall
- IPv6 QoS Lab
- IPv4 IPv6 NAT Lab
Elective Hands-on Labs,Demonstrations and Exercises
- Configuring Linux systems for IPv6 support:
- Configuring Linux Interfaces
- Upgrading and configuring IPv6
- Capturing and decoding IPv6 datagrams
- Configuring RIPng for IPv6 Routing
- Configuring OSPFv3 for IPv6 Routing
- Configuring MP-BGP for IPv6 Routing
- Configuring IPv6 auto-configuration
- Configuring IPv6 dynamic routing
- Security configuration using IPv6 IPSec
- Configuring IPv6 transition mechanisms
- Configuring 6to4, ISATAP, Teredo, and NAT-PT
- Configuring IPv6-in-IPv4 tunnels
- Configuring IPv4-in-IPv6 tunnels
- Configuring and testing Mobile IPv6
- Upgrading and configuring IPv6 DNS servers
- Configuring IPv6 applications and services
- Upgrading and configuring BIND for IPv6
- Configuring Access Control for IPv6
- Configuring IPv6 IPSec
- Configuring IPv6 firewalls
- Configuring a Basic MPLS P Router
- Configuring a Basic MPLS PE Router
- Configuring Basic MPLS CE Routers
- Configuring MPLS over ATM
- Configuring CEF and Distributed CEF Switching for IPv6
- Configuring IPv6 ICMP Rate Limiting
- Configuring Static Cache Entries for IPv6 Neighbor Discovery
- Configuring IPv6 Duplicate Address Detection
- Configuring IPv6 Redirect Messages
- Configuring IPv6 ATM and Frame Relay Interfaces
- Configuring IPv6 Access Control Lists
- Configuring IPv6 RIP
- Configuring IPv6 IS-IS
- Configuring Multiprotocol BGP Extensions for IPv6
- Configuring Dual Protocol Stacks and IPv6 Overlay Tunnels
- Configuring IPv6 Provider Edge Routers over MPLS
