Deploying IPv6 with Cisco IOS - ituarabic.org · All rights reserved. 1 Deploying IPv6 with Cisco...

1© 2004, Cisco Systems, Inc. All rights reserved.

Deploying IPv6 with Cisco IOS

Benoit LourdeletCisco Systems

Cisco IOS Product [email protected]


IPv6 – A Key Driver for the e-EconomyO.S. & Applications

e-Nations

The Ubiquitous Internet

Higher Ed./Research

Manufacturing

Government(Federal/Public Sector)

TransportationAgriculture/Wildlife

Medical

Consumer& Services

Mobile Networking

Services on the edge of the Network

Restoring an environment for Innovation


The End-User Perspective• The network capability to provide

the desired services • It’s all about the applications, and

their servicesDon’t care about IPv6!!!

The End-User Perspective• The network capability to provide

the desired services • It’s all about the applications, and

their servicesDon’t care about IPv6!!!

What is IPv6? Basic Perspectives

The Network Manager Perspective• Stability of a given technology,

implementations and benefits• Cost of deployment and operation

Care but…has to get confident


Building the “IPv6 House”

199419941994 1995-199819919955--19981998 2001-200420012001--20042004

IESG IPng WG creation

IESG IPng WG creation

IETF IPv6 WG Core Specs

IETF IPv6 WG Core Specs

More IETF specs(Mobile IPv6, DHCPv6 PD,

Flow Label…), Applications

port

More IETF specs(Mobile IPv6, DHCPv6 PD,

Flow Label…), Applications

port

2004-200820020044--20082008

Commercial Products &

Infrastructures (6NET, GEANT,…)

Commercial Products &

Infrastructures (6NET, GEANT,…)

Today, Core IPv6 specifications are IETF Draft Standardswell-tested & stable, enabling a move to “full production”


Networking Trends

Simplicity of Ethernet

Capacity of an Optical Network

Security and Privacy of a

Network

Ubiquity of the Internet

Next GenerationNetworks

IPv6 Ready

• Mobility through a Wireless Network

Content Richness of Television


Cisco IPv6 Technology Strategy

PerformanceIPv6 Hardware Assisted

Forwarding

Intelligent Services Cisco IOS IPv6 Feature set

EvolutionaryInfrastructure

IPv6 Solutions Focusing on Integration

and Co-Existence

InnovationInnovation


Cisco Systems – Leading the Evolution

777

• IETF IPv6 & NG Trans WG co-chair for several yearsToday, DHCPv6, MIPv6 WG chair or co-chair Authored IPv6 Spec

• Cisco engineers originated many IETF proposalsMP-BGP4, NAT-PT, 6PE/6VPE, DHCPv6 PD,…

• Cisco IOS IPv6 experimented on 6Bone since 1996• Cisco IOS IPv6 feature sets supported over + 24 platforms• Founding member of the IPv6 Forum• Founding partner of 6Net• IPv6 Ready Logo• Mobile Networking demo – IPv6 Promotion council “Jun Murai

award”


6NET Project Overview

Cisco 12400 and 7200 series

• 3 years project• 9.5 5M € from European Commission• + 30 partners• 7 Work Packages

www.6net.org

DFN

United K ingdom

France

Switzerland

Austria

Italy

Germany

Sweden

The Netherlands

Denm arkForskningsnettet

NorwayUNINETT

FinlandFUNET

G reece

Ukerna Surfnet

PO L-34

GRnet

GARRACOnetHungarnet

Switch

Renater

SwedenNORDUnet

NORDUnet

ATM Link6N ET C O REManual IPv6 Tunnel

G igabit E thernet (Trident)

STM 1 PO S/ATM

STM1 POS (over L2 tunnel)

STM 16 POS

E 1

NTT

CESnet

7200


Industry’s Broadest Platform Support

Cisco IOS 12.3 Cisco IOS 12.3 Cisco 800 Series Routers

Cisco 1700 Series Routers





Cisco 7300 Series RoutersCisco 7500 Series Routers

Cisco IOS 12.2S Cisco IOS 12.2S Cisco 72/7300 Series Routers

Cisco 75/7600 Series Routers

Cisco 10000 Series RoutersCatalyst 3750 Series

Catalyst 4500 SeriesCatalyst 6500 Series

Cisco Product PortfolioCisco Product PortfolioPIX Firewall

Mobile Wireless, Home NetworkingIP Telephony -

Cisco IOS 12.0S Cisco IOS 12.0S Cisco 12000 Series Routers

Cisco 10720 Series


• IPv6 QoS (MQC)

QoSQoS

Cisco IOS 12.3M/TT – IPv6 Feature Set Overview

• IPv6 standard ACL• IPv6 extended ACL•• IPv6 IPsec authentication for IPv6 IPsec authentication for

OSPFv3OSPFv3•• IPv6 FirewallIPv6 Firewall

SecuritySecurity

• RIPng• OSPFv3• IS-IS for IPv6• MT IS-IS• MP-BGP IPv6 Unicast• MPMP--BGP IPv6 MulticastBGP IPv6 Multicast•• Policy Based RoutingPolicy Based Routing

RoutingRouting

Broadband Access

• Cisco VSA AAA•• Radius AAA (RFC 3162)Radius AAA (RFC 3162)• PPPoA, PPPoE, RBERBE and

ATM 1483 encapsulations•• DHCPv6 Prefix Delegation DHCPv6 Prefix Delegation

(RFC3633)(RFC3633)•• Stateless DHCP (RFC 3646)Stateless DHCP (RFC 3646)•• Generic PrefixGeneric Prefix

•• MLDv1 and v2MLDv1 and v2•• MLD Access GroupMLD Access Group•• PIMv2 SM, SSM, BiPIMv2 SM, SSM, Bi--DirDir•• PIM Embedded RPPIM Embedded RP•• IPv6 MC over IPv4 tunnelsIPv6 MC over IPv4 tunnels•• Scope BoundariesScope Boundaries•• Static Static mRoutesmRoutes

MulticastMulticast

• Configured & Automatic Tunnels (RFC 2893)

• 6to4 (RFC 3056 & 30683068)• IPv6 over GRE/IPv4• IPv6 over MPLS (6PE)• ISATAP• NAT-PT Phase I & IIII (RFC 2765

& 2766)•• IP over IPv6 TunnelsIP over IPv6 Tunnels

Integration

• IPv6 (RFC 2460)• ICMPv6 (RFC 2463)• Neighbor Discovery (RFC 2461)• Stateless Auto-Configuration•• AnycastAnycast• CEFv6/dCEFv6• uRPF Strict Mode•• CEFv6 Switched TunnelsCEFv6 Switched Tunnels

CoreCore

• Telnet, TFTP, DNS resolver, HTTP, Ping, Traceroute, SSH

• Cisco IP & IP-Forwarding MIBs•• NetflowNetflow for IPv6for IPv6

Applications & Applications & MgntMgnt

Cisco IOSCisco IOSSoftwareSoftware

Release 12.3MRelease 12.3M&& 12.3T12.3T


The Scope of IPv6 Deployment

P r

o v

i s

i o

n i

n g

& M

o n

i t

o r

i n

gP

r o

v i

s i

o n

i n

g &

M o

n i

t o

r i

n g

Peer to Peer(ie: Instant Messenger)

Peer to Peer(ie: Instant Messenger)

Multimedia(Video Conf)

Multimedia(Video Conf)

Home Information

Services

Home Information

ServicesServer to ClientServer to Client

Home AreaNetworks

Home AreaNetworks

Provider Edge

Provider Edge

Enterprise WAN

Enterprise WANCampusCampus

Integration & Co-ExistenceIntegration & Co-Existence

IPv6 Forwarding & Routing protocols(RIPng, OSPFv3, IS-ISv6, MP-BGP4)

IPv6 Forwarding & Routing protocols(RIPng, OSPFv3, IS-ISv6, MP-BGP4)

FrameRelay

PPPHDLC POSIP ATM FE

Gig.E Wireless xDSLCable, FTTH

Op

era

tion

s an

d T

rain

ing

Op

era

tion

s an

d T

rain

ing

IPv6 Services – The Cisco IOS EmphasisIPv6 Services – The Cisco IOS Emphasis

Provider Core

Provider Core

IPv4-IPv6TranslationIPv4-IPv6TranslationSecuritySecurityMulticastMulticastQoSQoS Network

ManagementNetwork

Management

IPv6 over MPLS(AToM, 6PE)

IPv6 over MPLS(AToM, 6PE)

IPv6 over IPv4 Tunnels(Configured, 6to4, ISATAP, GRE)IPv6 over IPv4 Tunnels(Configured, 6to4, ISATAP, GRE)

Native IPv4 & IPv6Cisco IOS is Multi-Protocol

Since Day 1

Native IPv4 & IPv6Cisco IOS is Multi-Protocol

Since Day 1


IPv6 Deployment Scenario for Enterprises

YesConfigured Tunnels

No IPv6 services from ISP or experimentation – few sites

YesDual StackDedicated Data Link layers, eg.

LL, ATM & FR PVC, dWDMLambda

YesISATAPL3 infrastructure – not IPv6

capable, or sparse IPv6 hosts population

YesDual StackL3 infrastructure – IPv6 capableCampus

Yes6to4No IPv6 services from ISP or

experimentation – many sites, any to any communication

YesDual StackIPv6 services available from ISPWAN

Cisco IOS

supportScenarioEnvironment


Cisco Catalyst Switching –Industry’s Most Comprehensive IPv6 Portfolio

Catalyst 6500Catalyst 6500



Catalyst 2950/2970Catalyst 2950/2970

IPv6 Deployment FocusIPv6 Deployment Focus• Core• Distribution• Datacenter Access/Core + Services • High Performance Wiring Closets

• Core• Distribution• Datacenter Access/Core + Services • High Performance Wiring Closets

• Medium Wiring Closets• Small/Medium Distribution/Core• Medium Datacenter Access/Core• Large/Medium Branch Offices

• Medium Wiring Closets• Small/Medium Distribution/Core• Medium Datacenter Access/Core• Large/Medium Branch Offices

• Small Wiring Closets• Medium Branch Office• Small Datacenter Access• Small Network Aggregation

• Small Wiring Closets• Medium Branch Office• Small Datacenter Access• Small Network Aggregation

• Small Wiring Closets • Small Branch Offices • Industrial environments• Classroom Deployments

• Small Wiring Closets • Small Branch Offices • Industrial environments• Classroom Deployments

Mid-Range Modular ChassisMid-Range Modular Chassis

Industry Leading Modular ChassisIndustry Leading Modular Chassis

Advanced StackableAdvanced Stackable

Entry Level Fixed ConfigurationEntry Level Fixed Configuration

• IPv6 HW FW on Sup.720• 10Gb/s interfaces Line rate• IPv6 Services from Cisco IOS

12.2S

• IPv6 HW FW on Sup.720• 10Gb/s interfaces Line rate• IPv6 Services from Cisco IOS

12.2S

• IPv6 SW FW now, HW FW later• IPv6 services from Cisco IOS

12.2S

• IPv6 HW FW associated to Cisco IOS 12.2S IPv6 services

• IPv6 across Cisco StackWiseTechnology

IPv6 is fully transparent to L2 switches but for

• MLD snooping• Native IPv6 network managementD

ensi

ty ●

Func

tiona

lity ●

Serv

ices

●Pe

rfor

man

ce


IPv6 on a Campus – Dual-Stack IPv4-IPv6

10 GE core

Data Center

WAN & InternetAccess

• Requires Switching / Routing Platforms to support hardware based forwarding for IPv4 & IPv6

IPv6 is transparent on L2 switches but for Multicast –MLD snooping

• Requires Robust Control Plane for both IPv4 & IPv6

Routing protocols

• IPv6 Multicast and other Advanced Services such a QoS

• Security through IPv6 Access Control Capabilities

Including option headers

• IPv6 & IPv6 Control Planes & Data Planes must not impact each other


Cisco 7600/Cat. 6500 series IPv6 Services

Feature set on 12.2SXFeature set on 12.2SX CCY0Y044IPv6 BasicsIPv6 Basics• ICMPv6• ND – including static entries• Stateless Auto-config.• ACL• MIBs, SSH, Telnet• DNS, TFTPRouting protocolsRouting protocols

• RIPng, IS-IS for IPv6, MP-BGP4IPv6 TunnelsIPv6 Tunnels• Configured, automatic, GRE, 6to4, ISATAPSwitchingSwitching

• CEFv6• 6PE (IPv6 over MPLS)

IPv6IPv6 Hardware AssistanceHardware Assistance• Supervisor Engine 720

•IPv6 hardware assisted forwarding • native IPv6 - + 20Mpps• IPv6 over IPv4 tunnels - 10Mpps

• dCEF720 (PFC3) modules• ie: 10GE• +200 Mpps

Sup2/MSFC2 support on 12.2(17d)SXA


Network World Public Sup720 Tests Proclaim the Catalyst 6500 “A World Class Winner”

“Our exclusive lab tests show that new line cards and management modules for Cisco's Catalyst 6500 switches push the performance envelope in a number of ways…

• Line-rate throughput with low delay and jitter. The Catalyst becomes only the second product tested to fill a 10G pipe.

• Fast failover. The Catalyst set records for recovery times.

• Perfect prioritization….• IPv6 routing. In the first-ever public test

of IPv6 routing, the Catalyst 6500 moved traffic at line rate even when handling 250 million flows. ”

– Dave Newman

“Simply put, this is the highest-performing 10G Ethernet product we've tested to date.” – Dave Newman


Catalyst 6500 Series – NAM

• Introducing IPv6 Network Management capabilities

• IPv6 monitoring and decodes with NAM

• Can set up alarms with IPv6 addresses

• Can configure an “easy” IPv6 capture filter and IPv6-historical reports


Cisco IPv6 Security Solutions

IPv6 Firewall IPv6 Firewall Stateful Packet Stateful Packet

FilteringFilteringIOS 12.3(7)TIOS 12.3(7)T

PIX firewallPIX firewall

•Secure connectivity– IPSec

o IPv4 dynamic IPSec to protect IPv6 over IPv4 tunnels with dynamic IPv4 end pointo IPv4 IPSec over UDP to offer protection when crossing a firewall or NATo IPv6 IPSec to authenticate OSPFv3 – 12.3(4)To IPv6 Site-to-Site – H2 CY04

•Threat protection– Packet filtering

o Standard, reflexive, extended access control listo Hardware filtering (Cisco 12000 Series IP Service Engine, Catalyst 6500 Series Supervisor Engine 720)

Protecting your network for IPv6 2004

Integration and CoexistenceNow


IPv6 IOS Firewall• Available in Cisco IOS 12.3(7)T • Stateful protocol inspection (anomaly detection) of IPv6

fragmented packets, TCP, UDP and ICMP traffic – FTP in Q3 CY04•• StatefulStateful inspection and translation services of IPv4/IPv6 packets• IPv6 DoS attack mitigation• IPv4/v6 coexistence, no need for new hardware, just software• Recognizes IPv6 Extension Header information such as routing

header, hop-by-hop Options header, fragment header, etc

IPv4Site 3

IPv6Site 2

IPv6Site 1Internet

IPv6 IPv6

Dual Stack Router

IPv6 Router w/IOS Firewall





Tunnel(s)

Integration Example – Cisco VPN Client & IPv6

IPsec VPNIPv6-in-IPv4 Tunnel

Remote User VPN 3000 Concentrator

Internet CorporateNetwork

Firewall

Dual-StackServer

Dual-stackRouter

Note: The VPN concentrator could be replaced with a VPN-enabled IOS Router or PIX

IPv6 TrafficIPv4 Traffic


SP Deployment Activities

• Several Market segmentsIX, Transit Carriers, Regional ISP, Wireless/Mobile Operators

• SPs have to get an IPv6 prefix from their Regional Registry, e.g. ARIN

• Today, many trials but few commercial serviceslargely driven by customer demand

• Regional ISP focused on their specific marketsJapan is leading the worldwide commercial deploymentTarget is Home Networking services (dial, DSL, Cable, Ethernet-to-the-Home,…)

• business model evolution to focus on end-point and associated services


IPv6 Deployment Scenario for ISP

YesDual StackDedicated circuits – IPv4 – IPv6

YesDual StackNative IPv4-IPv6 services

between aggregation and end-users

Yes6PE/6VPEMPLS – Core is IPv6 unaware

YesDual StackNative IP – Core is IPv6 awareCore

YesTunnelsFew customers, no native IPv6

service form the PoP or Data link is not (yet) native IPv6 capable,

ie: Cable DocsisAccess

Cisco IOS supportScenarioEnvironment


IPv6 services through a minimum Infrastructure Upgrade

GE

GE GEIPv6 Server

6PE router

Cisco 7600Sup.720 as 6PE

Data Center IPv6 Network

MPLS/IPv4

MPLS Coreup to OC-192

GE

IPv4 Server

NAT-PTOnly IPv6 segment

• MPLS/IPv4 Core Infrastructure is IPv6-unaware – 10Gb/s• IPv6 gradually introduced in PoP where/when needed • Dual stack services to the end-users• Dual stack-services in Data Center

FTTH

MP-iBGP session6PE router v6

v4/v6

v4

CE

POPDSL

POP


CY02CY02--0303

Cisco 12000 series router IPv6 Services

• dCEFv6• I/IS-ISv6• Plus IOS Phase I features• Support on E0/1/2/4• 6PE support • IPv6 MIB • Enhancements to RIPng,dCEFv6• SSHv6

•IPv6/E3 Native H/W Forwarding•IPv6 Extended ACLs, LC S/W• Configured IPv6 Tunnels, LC S/W• IPv6 on DPT LCs• IPv6 on 10GE• IPv6 on 10xGE• L2TPv3 with E2 Tunnel Card

• Multicast on E3/E4+• MT IS-IS

CY0CY03/043/04 CY0CY04/054/05

22S22S• IPv6/E3 E-ACLsin E3 H/W• 6PE hardware support on E3•IPv6 on E3 4 x GE

• OSPFv323S23S 24S24S

25S25S

• 6PE fix on E4/E4+• IPv6 multicast on DPT• SNMP over IPv6

26S26S

27S27S

• IPv6 QoS 28S28S


Renater3 (French NRN): Dual Stack IPv4-IPv6


Broadband Home – A necessity for IPv6 !

Wireless LaptopWireless Laptop• Distance learning• Video calls• MP3 downloadsPDAPDA

IP PhoneIP Phone

PrinterPrinter

Wireless GamingWireless Gaming

Broadband Internet AccessBroadband Internet Access

Wired DevicesWired Devices• Streaming Video/Audio• Print/file sharing

Broadband Access PointBroadband Access Point

• Multiplayer gaming• Video on demand• Home security• Digital audio• Domestic appliances

Home NetworkingHome Networking• At the heart of the digital home sits the Broadband access point distributing

a host of enhanced content and services throughout the home• Internet access• Multiple voice lines• Wireless printing• Wireless IP Phone

Triple Play ServicesTriple Play Services•• Multiple devices served Multiple devices served in a Homein a Home•• Commercial download• TV guide


Cisco IOS IPv6 for Broadband Access• IPv6 deployment solutions over Cable,

Dial, DSL, Metro Ethernet accessISP services or not!

• EncapsulationsATM RFC 1483 Routed or Bridged (RBE)PPPoA, PPPoETunnel (Cable)

• IPv6 prefix pools• IPv6 AAA attributes

Cisco VSAIPv6 prefix, IPv6 routeIPv6 ACL {In, Out}

RFC 3162 • DHCPv6 Prefix Delegation

Stateless DHCPv6, Generic Prefix

ADSL

FTTHIPv4 Servers

Radius, NMS,…

/48

/64

IPv4/v6 ServersDNS, Web, E-mails, News,…Telecommuter

Residential


Japan Broadband Access ISP Deployment Model

CPEPEISP

Host

ISP provisioning system

The PE can also send RA’s on the PE-CPE link, and the CPE can auto-configure an “uplink” address. Prefix should be different from the prefix assigned to the user.

DHCP ND/DHCPAAA

(1) CPE sends DHCP solicit,

with ORO = PD

(2) PE sends RADIUS request for the user

(3) RADIUS responds with

user’s prefix(es)

(4) PE sends DHCP REPLY,

with Prefix Delegation

options

(5) CPE configures addresses from the prefix on its

downstream interfaces, and sends an RA. O-bit is set to

on.(6) Host configures addresses based on the prefixes received in the RA. As the O-bit is on, it send a DHCP INFORMATION-REQUEST message, with an ORO = DNS

(7) CPE sends a DHCP REPLY containing request options. Note that the CPE is configured as a DHCP client upstream, and as a DHCP server downstream. The DHCP downstream server acts as a cache, and uses the options received on the upstream interface.


IPv6 Enables New Eco-Systems

Supplier’s

Telephony• Wireless (Wi-Fi, GSM, GPRS)• Inexpensive (VoIP)

Gaming• Online• Network

Video• Subscription• On Demand

Music• Subscription• Per Download

NAS Storage• Music• Movies• Games• Documents

Broadband Gateway• Simple Install• Intuitive to Use• Pay Per Service• Remote Troubleshoot

Data• Always On• Secure

Utilities• Monitoring• Reporting

Parental Controls• Across all Clients• Web, Email, Chat, Time• Multiple Access Levels

Home Monitoring& Security• Motion• Remote

The Fridge’s Case Study


Networks in Motion

GPS

Telematics:Industry related to using

computers in concert with telecommunications systems.

This includes Internet access, as well as all types of networks that

rely on a telecommunications system to transport data.

“Telematics to Become $8 Billion Industry by 2005,

According to New Study from Allied Business Intelligence”

http://www.telematicsupdate.com

ServerHA

Toll or GazStation’s

Internet

GPRS or 3G Network


Moving IPv6 to Production, running Cisco IOS

Telecommuter

Residential

Dual Stack or MPLS & 6PEDual Stack or MPLS & 6PE

IPv6 over IPv4 tunnels or IPv6 over IPv4 tunnels or Dedicated data link layersDedicated data link layers

Cable

IPv6 over IPv4 TunnelsIPv6 over IPv4 Tunnels

IPv6 IX

IPv6 over IPv4 tunnels or IPv6 over IPv4 tunnels or Dedicated data link layersDedicated data link layers

DSLDSL,,FTTHFTTH,,DialDial

Aggregation

IPv6 over IPv4 tunnels IPv6 over IPv4 tunnels or Dual stackor Dual stack

ISP’s

6Bone

6to4 Relay

Dual StackDual Stack

ISATAPISATAP

Enterprise

Enterprise

WAN: 6to4, IPv6 WAN: 6to4, IPv6 over IPv4, Dual Stackover IPv4, Dual Stack


Questions?

333333© 2004, Cisco Systems, Inc. All rights reserved. 333333© 2001, Cisco Systems, Inc. All rights reserved.Presentation_ID


More Information

• CCO IPv6 - http://www.cisco.com/ipv6• The ABC of IPv6

http://www.cisco.com/en/US/products/sw/iosswrel/ios_abcs_ios_the_abcs_ip_version_6_listing.html

• IPv6 Application Noteshttp://www.cisco.com/warp/public/732/Tech/ipv6/ipv6_techdoc.shtml

• Cisco IOS IPv6 Product Manager – [email protected]

Date post:	14-Apr-2018
Category:	Documents
Upload:	nguyenkhue
View:	232 times
Download:	4 times