of 68
8/12/2019 IPV6 - Security and Implementation
1/68
BYZ: - Ossontbecs end [okurbty
-Evb Ahsfb
@[ Kylo
8/12/2019 IPV6 - Security and Implementation
2/68
8/12/2019 IPV6 - Security and Implementation
3/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
4/68
]fet bs BY8
Tfo Bntornot Yrhthkhc (BY) bs tfo prbnkbpec kh``unbketbhn
tfo Bntornot prhthkhc subto jhr roceybnm detemre`s ek
lhunderbos. Bts rhutbnm junktbhn onelcos bntornotw
ossontbeccy ostelcbsfos tfo Bntornot.
BY, es tfo prb`ery prhthkhc bn tfo Bntornot ceyor hj tfo Bntosubto, fes tfo tesg hj docbvorbnm pekgots jrh` tfo shurko
dostbnetbhn fhst shcocy lesod hn tfo BY eddrossos bn tfo pe
Tfo Bntornot Yrhthkhc bs rosphnsblco jhr eddrossbnm fhsts e
detemre`s (pekgots) jrh` e shurko fhst th e dostbnetbhn fh
hr `hro BY notwhrgs.
8/12/2019 IPV6 - Security and Implementation
5/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
6/68
]fet bs BYv48
Jbrst vorsbhn hj BY.
BYv4 bs hno hj tfo `eahr prhthkhc bn TKY/BY prhthkhcs subto.
whrgs et Notwhrg ceyor hj H[B `hdoc end et Bntornot ce
`hdoc. Tfus tfbs prhthkhc fes tfo rosphnsblbcbty hj bdo
fhsts lesod uphn tfobr chmbkec eddrossos end th lotwoon/e`hnm tfo` hvor tfo undorcybnm notwhrg.
BYv4 prhvbdos e `okfenbs` th unbquocy bdontbjy oekf f
notwhrg ly BY eddrossbnm skfo`o.
8/12/2019 IPV6 - Security and Implementation
7/68
Uubkg BYv4 Eddross \okep
Dovochpod bn 69s
8/12/2019 IPV6 - Security and Implementation
8/68
BYv4 - Eddrossbnm
BYv4 usos fborerkfbkec eddrossbnm skfo`o. En BY eddross w
bn conmtf, bs dbvbdod bnth twh perts es dopbktod1
;< lbt
eddrossbnm
8/12/2019 IPV6 - Security and Implementation
9/68
BYv4 - Kcessos
BYv4 usos fborerkfbkec eddrossbnm skfo`o.
Tfo jbrst lbt hj tfo jbrst hktot bs ecweys sot th 9 (zorh). Tfus
renmos jrh` 55
8/12/2019 IPV6 - Security and Implementation
10/68
BYv4 - Kcessos
En BY eddross wfbkf lochnms th kcess L fes tfo jbrst twh l
hktot sot th 59, b.o.
.
KCE[[
L
KCE[[
K
Dojeuct sulnot `esg1
8/12/2019 IPV6 - Security and Implementation
11/68
BYv4 - Kcessos
KCE[[
D
KCE[[
O
Zory jbrst jhur lbts hj tfo jbrst hktot bn Kcess D BY eddrossos e
th 5559
\osorvod jhr `uctbkestbnm
Tfbs BY Kcess bs rosorvod jhr oxporb`ontec purphsos hncy c
hr [tudy.
BY eddrossos bn tfbs kcess renmos jrh`
8/12/2019 IPV6 - Security and Implementation
12/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
13/68
]fet bs BYZ:8
Bntornot Yrhthkhc vorsbhn : (BYv:) bs tfo cetost rovbsbhn h
Yrhthkhc (BY), tfo kh``unbketbhns prhthkhc tfet
bdontbjbketbhn end chketbhn systo` jhr kh`putors hn n
rhutos trejjbk ekrhss tfo Bntornot.
BYv: (Bntornot Yrhthkhc vorsbhn :) bs e sot hj spokbjbketb
Bntornot Onmbnoorbnm Tesg Jhrko (BOTJ) tfet's ossontbeccy en
vorsbhn 4 (BYv4).
Bt wes b`pco`ontod hn : Auno
8/12/2019 IPV6 - Security and Implementation
14/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
15/68
]fets tfo prhlco` wbtf BYv48
[b`pcy put, bt dhosnt hjjor onhumf eddrossos
]hrcd Yhpucetbhn1
Erhund :.6 lbccbhn
Nu`lor hj BYv4 eddrossos
Erhund 4.; lbccbhn
8/12/2019 IPV6 - Security and Implementation
16/68
Bt Mots ]hrso
Yohpco (porshnec kh`putors) eront tfo hncy tfbnm hncbno
8/12/2019 IPV6 - Security and Implementation
17/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
18/68
Dbssoktbnm en BYv: Eddross
Dovochpod bn 5226
8/12/2019 IPV6 - Security and Implementation
19/68
8/12/2019 IPV6 - Security and Implementation
20/68
Typos hj BYv: Eddrossos
_nbkest Eddross e hno-th-hnoeddross1
Mchlecpulcbkcy rhutelco eddross essbmnodly BENE (
8/12/2019 IPV6 - Security and Implementation
21/68
Typos hj BYv: Eddrossos
@uctbkest Eddrossen eddrossbntondod jhr hno-th-`enykh``unbketbhn1
@uctbkestsont th `o`lors bn e`uctbkest mrhup
Lrhedkest sont th ecc eddross hn enotwhrg (tokfnbkeccy, nhw e ecc-nhdos`uctbkest)
Enykest Eddross e now eddross usodth sond th tfo jbrst rokobpbont hj emrhup
8/12/2019 IPV6 - Security and Implementation
22/68
BYv: Fborerkfbkec Eddrossbnm
8/12/2019 IPV6 - Security and Implementation
23/68
BYv: [ulnottbnm
KBD\ hncy (scesf nhtetbhn)Nh khnkopt hj sulnot `esgs/ jhcchwod ly projbx sbzo (dokb`ec nu`lor 5-5
8/12/2019 IPV6 - Security and Implementation
24/68
]fet elhut @EK8
Fhsts monoreto e unbquo Bntorjeko Bdontbjbor Keccod :4-lbt Oxtondod _nbquo Bdontbjbor hr O_B-:4
46-lbt @EK eddrossos khnvortod ly eddbnm JJJO th tfo bd
5. @EK Eddross1 29-;E-
8/12/2019 IPV6 - Security and Implementation
25/68
]fet elhut E\Y8
BYv: ropcekos E\Y wbtf tfo Nobmflhrfhhd DbskhvoryYrhthkhc. Tfbs now prhthkhc kh`lbnos `eny junktbhn
Eddross roshcutbhn (usos BK@Yv: Nobmflhr edvortbso`ont end shcbkbtetbhn `sms)
Dupcbketo eddross dotoktbhn
Noxt-Fhp dotor`bnetbhn
Nobmflhr unroekfelco dotoktbhn
Fhst-th-Fhst Junktbhns
\hutor Dbskhvory
Yrojbx Dbskhvory
Yere`otor Dbskhvory
Eddross Euthkhnjbmuretbhn
Fhst/\hutor Dbskhvory Junktbhns
\odbrokt Junktbhn
8/12/2019 IPV6 - Security and Implementation
26/68
[b`pcbjbod Foedors @oen Jestor Trejjbk
Zorsbhn BFCTypo hj
[orvbkoThtec Conmtf
Bdontbjbketbhn Jcems Jrem`ont Hjjsot
Tb`o th
CbvoYrhthkhc
Foedor
Kfokgsu`
[hurko Eddross
Dostbnetbhn Eddross
Hptbhns Yeddbnm
BYv4 Foedor
(
8/12/2019 IPV6 - Security and Implementation
27/68
BYv: H[ [upphrt
8/12/2019 IPV6 - Security and Implementation
28/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
29/68
Tfo Lbm BYv: [okurbty Uuostbhn
8/12/2019 IPV6 - Security and Implementation
30/68
BYv: Hjjors1
[okurbty Lonojbts (Tfo Mhhd)
[okurbty Drewlekgs (Tfo Led)
8/12/2019 IPV6 - Security and Implementation
31/68
BYv: [okurbty1 Tfo Mhhd
8/12/2019 IPV6 - Security and Implementation
32/68
Lubct-Bn BY[ok Hjjors Lottor [okurbty \bmft8
BY[ok bs e `endethry pert hj tfo BYv: Yrhthkhc
8/12/2019 IPV6 - Security and Implementation
33/68
]fets BY[ok Emebn8
E`hnm htfor tfbnms, BY[ok khnsbsts hj1
Eutfontbketbhn Foedors (EF) Yrhvbdos dete hrbmbneutfontbketbhn end bntomrbty (prhtokts emebnst ropcey ettekgs
Onkepsucetbnm [okurbty Yeycheds (O[Y) Edds onkryptbhn thtfo bx th prhvbdo khnjbdontbecbty
Bntornot Yrhthkhc [okurbty (BY[ok) bs e stenderd jhreddbnm strhnm eutfontbketbhn, `ossemo bntomrbty,
entbropcy, end onkryptbhn (khnjbdontbecbty) th BY
pekgots, tfus prhvbdbnm sokuro end prbveto
kh``unbketbhns.
8/12/2019 IPV6 - Security and Implementation
34/68
]fet ero BYv: Oxtonsbhn Foedors8
\o`o`lor BYv: foedor sb`pcbjbketbhn8
Zorsbhn BFCTypo hj
[orvbkoThtec Conmtf
Bdontbjbketbhn JcemsJrem`on
t Hjjsot
Tb`o th
CbvoYrhthkhc
Foedor
Kfokgsu`
[hurko Eddross
Dostbnetbhn Eddross
Hptbhns Yeddbnm
BYv4 Foedor
(
8/12/2019 IPV6 - Security and Implementation
35/68
Lubct-Bn BY[ok Hjjors Lottor [okurbty \bmft8
BY[ok bs e `endethry pert hj tfo BYv: Yrhthkhc
]fet dhos tfbs roeccy `oen8
Yert hj BYv: prhthkhc stekg, nht en hptbhnec edd-hnB`pco`ontod wbtf EF end O[Y Oxtonsbhn Foedors
Jhcchws hno stenderd (coss bntorhp bssuos)
Ovory BYv: dovbko ken dh BY[ok
Fhwovor, BY[ok usemo bs stbcc HYTBHNEC!
8/12/2019 IPV6 - Security and Implementation
36/68
]ebt! Dhosnt BYv4 Hjjor BY[ok thh8
[h`o trutfs elhut BYv:s eddbtbhnec BY[ok [okurbty1 BYv4 fes bt thh (tfhumf, nht netbvocy)
]o dhnt fevo th uso bt, end `hst dhnt
[tbcc kh`pcox
@ey roqubro YGB Bnjrestrukturo
[h bs tfbs roeccy e sokurbty lonojbt8
[fhrt tor` prhlelcy nh `oesuroelco edventemo hvor BYv4 BY[ok
Chnm tor` @hro eppcbketbhns wbcc covoremo bt nhw tfet bts`endethry!
8/12/2019 IPV6 - Security and Implementation
37/68
[h Chnm NET! Focch, Ond-
8/12/2019 IPV6 - Security and Implementation
38/68
Zest Eddross [peko Netureccy Tfwerts KortebEttekgs
(;49 unbdokbccbhn)
Thh lbm jhr euth`etod rokhnnebssenko end ettekg1
Evoremo notwhrg phrt skens whucd tego dokedos
Euth`etod whr` prhpemetbhn whucd schw th e krewc
8/12/2019 IPV6 - Security and Implementation
39/68
BYv: [okurbty1 Tfo Led
8/12/2019 IPV6 - Security and Implementation
40/68
B``eturo Yrhthkhcs 0 Bnkroesod Zucnorelbcbt& \bsg
Durbnm tfo kroetbhn cbjo-kykco hj now stenderds end prhthkhcs1[okurbty bs hjton en ejtor-tfhumft
_noxpoktod prhlco`s feppon duo th kh`pcox bntorektbhns
@eny bssuos dhnt surjeko untbc tfo tokf rokobvos wbdor usemo
Tfoso khnkopts fevo prhvon tfo`socvos wbtf `eny now notwhrg prhthkhcs bn
tfo pest. @hst oxports suspokt tforo ero `eny sokurbty bssuos bn BYv:, end
rocetod prhthkhcs, tfet wo fevo yot th unkhvor.
8/12/2019 IPV6 - Security and Implementation
41/68
_nje`bcberbty Keusos @bskhnjbmuretbhns
@eny notwhrg ed`bnbstrethrsend BT prektbtbhnors ero stbcc
rocetbvocy unje`bcber wbtf ecc
BYZ:s bns end huts
Kh``hn bssuos1
Nht roecbzbnm BYv: bs ecroedy bn tfobr notw
Bmnhrenko hj Tunnocbnm @okfenbs`s
Cekg hj EKC phcbky jhr BYv: `uctb-fh`bnm
_neweronoss hj phtontbec prbveky bssuos
Hvor por`bssbvonoss, aust th mot bt th whr
8/12/2019 IPV6 - Security and Implementation
42/68
Euth`etbk Eddrossbnm @ey Yhso YrbvekyKhnkorns
Bn tfo provbhus scbdos,b sfhwod fhw th
euth`etbkeccy kroetoe O_B-:4 eddross.
Fhwovor, tfbs `egoshur @EK pulcbk, wfbkf
wo `ey khnsbdor eprbveky bssuo.
Yrbveky Onfenkod Eddrossos W\JK ;945P
Krypthmrepfbkeccy Monoretod Eddrossos(KME) W\JK ;2=
8/12/2019 IPV6 - Security and Implementation
43/68
B ecsh fevo52
8/12/2019 IPV6 - Security and Implementation
44/68
B Dh. [ondtrejjbk th `o
Nobmflhrfhhd Dbskhvory [ujjors jrh` [b`bceBssuos
]fh fes
8/12/2019 IPV6 - Security and Implementation
45/68
@eny Htfor Nobmflhr end \hutor DbskhvoryBssuos
[hcutbhn1 [Okuro Nobmflhr Dbskhvory ([OND) \J
Ossontbeccy edds BY[ok th ND kh``unbketbh
\oqubros YGB Bnjrestrukturo
Nht evebcelco bn ecc H[s yot.
69
8/12/2019 IPV6 - Security and Implementation
46/68
BYv: [okurbty Khntrhcs Cemmbnm FekgbnmErsonec/Thhcs
Ettekgors ecroedy fevo `eny BYv: kepelco thhcs1
TFK-BYv: Ettekg [ubto
Ecbvo:
Yeresbto:
\odbr:
JegoX\hutor:
Dotokt-Now-BYv:
Dh[-Now-BYv:
[`urj:
r[`urj:
ThhLbm:
JegoX@BYv:
JegoX`cd:
JegoXEdvortbsor:
[ondYoos:
DN[Dbkt:
Treko:
JchhdX\hutor:
JchhdXEdvortbso:
JuzzXBY:
otk
_njhrtunetocy, BY
sokurbty khntrhcs e
prhdukts soo`s th
e lbt lofbnd.
TFK-BYv: Ettekg [ubto
N`ep
]brosferg
@uctb-Monorethr (@MON)
BYv: [okurbty [kennor (vsken:)
Fecjsken:
[trhlo
Notket:
B`ps:-thhcs
\ocey:
:tunnoc
NT:tunnoc
ZhhdhhNot
[kepy:
@otespchbt (otk.)
]ol Lrhwsors (V[[ &
TKYDu`p
KHCD
[peg:
Bsbk: Fyoneo
[ondBY
Yekgbt
4th:ddhs
:tunnocdhs
8/12/2019 IPV6 - Security and Implementation
47/68
BYv: [okurbty1 Khnkcusbhn[h Dhos/]bcc BYv: Yrhvbdo @hro [okurbty8
Yrhlelcy Nht. Jow wbccedhpt/uso tfo BYv: rocetodsokurbty eddbtbhns oercy hn.Jurtfor`hro, tfo prhthkhcsnownoss end ed`bnbstrethrsunje`bcberbty `ey rosuct bn`hro vucnorelbcbtbos et jbrst.Tfet sebd, BYv: sokurbty bs NHT
whrso tfen BYv4.
[fhrtTor`
Ros. Bj covoremod, sh`o BYv:eddbtbhns ken bnkroeso hurhvorecc notwhrg sokurbty. Eswo lokh`o `hro je`bcber wbtfbt, end `hro notwhrg sorvbkoslombn th covoremo edvenkodhptbhns, BYv: sfhucd prhvoscbmftcy `hro sokurbty tfen
BYv4.
ChnmTor`
8/12/2019 IPV6 - Security and Implementation
48/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
49/68
BYv: Tokfnbkec Lonojbts
Oxphnontbeccy hro BY eddrossos
Jbxod foedors oens jestor trejjbk
Truo ond-th-ond eddrossbnm. (Nh `hro NET8)
Lubct bn ond-th-ond sokurbty (BY[ok)
Lubct bn Uh[ junktbhnecbty
Euthkhnjbmuretbhn
Mroet jhr `hlbcos
8/12/2019 IPV6 - Security and Implementation
50/68
Edventemos hj BYv: hvor BYv4 (5)
Joeturo BYv4 BYv:
[hurko end dostbnetbhneddross
;< lbts 5
8/12/2019 IPV6 - Security and Implementation
51/68
Edventemos hj BYv: hvor BYv4 (
8/12/2019 IPV6 - Security and Implementation
52/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
53/68
Bpv: B`pco`ontetbhn tbcc deto
8/12/2019 IPV6 - Security and Implementation
54/68
Bpv: B`pco`ontetbhn tbcc deto
8/12/2019 IPV6 - Security and Implementation
55/68
8/12/2019 IPV6 - Security and Implementation
56/68
KHNTONT[
5. ]fet bs Bntornot Yrhthkhc8
8/12/2019 IPV6 - Security and Implementation
57/68
Tfroo [tops th B`pco`ontbnm BYv:
\osoerkf end Dbskhvory
Ycennbnm & @bmretbhn
[tretombosB`pco`ontetbhn &Trensbtbhn
8/12/2019 IPV6 - Security and Implementation
58/68
Jbnd tfo Enswor th Tfroo Uuostbhns
Dhos yhur B[Y supphrt BYv:8
]fets yhur notwhrg chhg
cbgo thdey8
]fet noods en upmredo8 (hre trensbtbhn tokfnhchmy)
8/12/2019 IPV6 - Security and Implementation
59/68
@ep Rhur Notwhrg
]o sfhucd bdontbjy1
Hur khro bnjrestrukturo (rhutors, swbtkfos, otk)
[okurbty dovbkos
Fhsts end H[s hn hur notwhrg
Onu`oreto hur DN[ end DFKY sorvors
Hur eppcbketbhn sorvors (Yulcbk & Yrbveto)
Htfor notwhrgs dovbkos (prbntors, NE[, otk..)
8/12/2019 IPV6 - Security and Implementation
60/68
]fet Noods en _pmredo8
Tfo mhec hj tfo provbhus
notwhrg onu`oretbhnprhkoss bs th jbmuro hut wfetsupphrts BYv: end wfet dhos
nht.
Yceko bn tfroo lukgots1
Nh supphrt
Yertbec supphrt
Jucc supphrt (w/duec-stekg)
Dovbkos cekgbnm supphrt wbccroqubro ovontuec upmredo hr
trensbtbhn sorvbkos
8/12/2019 IPV6 - Security and Implementation
61/68
BYv: Trensbtbhn Tokfnhchmbos
Duec-[tekg1 BYv4 end BYv: run thmotfor hn ecc/`hst dovbkos.
Duec-[tekg rhutbnm dovbkos ken fendco trenscetbhn, bj nokossery
Tunnocbnm1 Ecchw BYv: dovbkos th kh``unbketo hvor en BYv4notwhrg vbe tunnocs (e cht cbgo ZYN)
@enuec1 \oqubro khnjbmuretbhn. @hro khntrhc, tfus hro sokuro
Euth`etbk1 Cbttco sotup. @ey snoeg hut yhur notwhrg
Tunnoc Lrhgors1 Kh`penbos tfet hjjor oesy BYv: tunnocbnm sorvbkos
Trenscetbhn1 \o-wrbtbnm hno prhthkhc pekgots th enhtfor
prhthkhc (BYv: th BYv4, end vbko vorse).
Eppcbketbhn-spokbjbk prhxbos1 Trenscetbhn hncy jhr spokbjbksorvbkos (wol, o`ebc, otk). BYv: kcbont khnnokts th prhxy sorvor,bt `egos BYv4 khnnoktbhn th e sorvbko
8/12/2019 IPV6 - Security and Implementation
62/68
Kh``hn Tunnocbnm end Trenscetbhn Yrhthkhc
Tunnoc Yrhthkhcs
:th4 (Euth)
Torodh (Euth)
B[ETEY (Euth)
:rd (Euth)
4bn: (Khnjbmurod)
:bn4 (Khnjbmurod)
Trenscetbhn Yrhthkhcs
[tetocoss BY/BK@YTrenscetbhn ([BBT)
NET:4
DN[ :4
Duec-stekg Cbto (D[-Cbto)
NET-YT(doprokbetod)
8/12/2019 IPV6 - Security and Implementation
63/68
Tfroo @bmretbhn [tretombos
Khro @bmretbhn
Eppcbketbhn/[orvor @bmretbh
Kcbont-[bdo @bmretbhn
8/12/2019 IPV6 - Security and Implementation
64/68
8/12/2019 IPV6 - Security and Implementation
65/68
O C T b b Yf
8/12/2019 IPV6 - Security and Implementation
66/68
Oxpokt e Chnm-tor` Trensbtbhn Yfeso
Ycen et coeste : yoer BYv: Trensbtbhn pfeso
Bt wbcc ektueccy tego sh`o hrmenbzetbhns yoersth juccy khnvort th BYv:
@hro b`phrtentcy, ovon bj yhu khnvort yhurontbro notwhrg th BYv:-hncy th`hrrhw, yhuwbcc stbcc nood th covoremo 4th: trenscetbhntokfnhchmbos th ecchw tfo rost hj tfo whrcd thkhnnokt th yhu untbc tfoy ketkf up!
j
8/12/2019 IPV6 - Security and Implementation
67/68
\ojoronkos1
5. fttp1//www.mhhmco.kh`/bpv:/stetbstbks.ft c
8/12/2019 IPV6 - Security and Implementation
68/68
Tfeng Rhu!
