1 / 35

Surachai Chitpinityon Applied Network Research Laboratory Department of Computer Engineering

Surachai Chitpinityon Applied Network Research Laboratory Department of Computer Engineering E-mail: g4765415@ku.ac.th. IPv6. OCS Training, Kasetsart University, 30 March 2011. IPv6 Introduction IPv6 Network Configuration IPv6 System Configuration. Agenda. Agenda. IPv6 Introduction

Download Presentation

Surachai Chitpinityon Applied Network Research Laboratory Department of Computer Engineering

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Surachai Chitpinityon Applied Network Research Laboratory Department of Computer Engineering E-mail: g4765415@ku.ac.th IPv6 OCS Training, Kasetsart University, 30 March 2011

  2. IPv6 Introduction IPv6 Network Configuration IPv6 System Configuration Agenda

  3. Agenda IPv6 Introduction IPv6 Feature Summary IPv6 Address Structure IPv6 address format IPv6 Headers IPv6 Network Configuration IPv6 System Configuration

  4. IPv6 Introduction global address isunique address same aspublic IPv4 address คือสามารถ reachable จากทุกๆ แห่งในเครือข่ายอินเทอร์เน็ต site local address เป็น address ที่อาจจัดสรรให้ภายใน LAN หรือเครือข่ายภายใน อาจเอาไว้ใช้ในเครือข่ายทดสอบ จะมองไม่เห็นจากข้างนอก ข้อดีของการกำหนด site local address คือหากต้องมีการเปลี่ยน global address prefix ขององค์กร ก็ไม่ต้องมานั่งเปลี่ยน address ภายใน ทั้งยังช่วยให้ routing table ภายในองค์กรมีขนาดเล็ก จัดการง่าย อันนี้อาจเทียบเท่ากับการใช้ private IPv4 address link local address เป็น address ที่ unique บนแต่ละลิงค์เท่านั้น ปกติแล้ว link local address จะถูก assign อัตโนมัติ ใช้ Prefix fe80::/64 โดยที่ 64 บิตหลังจะมาจาก MAC address ของแลนการ์ดนั่นเอง ทั้งนี้เพื่อให้แน่ใจได้ว่า link local address ที่ได้จะไม่มีวันซ้ำกันบนแต่ละลิงค์ การใช้งานก็จะเป็นลักษณะการติดต่อระหว่าง node ต่างๆ บนลิงค์เดียวกันเท่านั้น (administrative message) Resource:http://www.ipv6.nectec.or.th/faq.php#ans6

  5. IPv6 Feature Summary Increased size of address space Header simplification Extended Address Hierarchy Auto-configuration / Renumbering QoS (Integrated/Differentiated services)

  6. IPv4 vs IPv6 IPv4: 32 bits 2^32 addresses = 4,294,967,296 addresses IPv6: 128 bits 2^128addresses = 340,282,366,920,938,463,463,374,607,431,770,000,000 addresses

  7. IPv6 Address Structure Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  8. Prefix Type Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  9. Provider-Based Unicast Address Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  10. Address Hierarchy Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  11. IPv6 address format • 8 groups of 4 hexadecimal digits • Each group represents 16 bits • Separator is “:” Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  12. IPv6 address format 2001:03c8:1303:1102:020c:0029:0003:1937 = 2001:3c8:1303:1102:20c:29:3:1937 2001:03c8:1303:1102:0000:0000:0000:0002 = 2001:3c8:1303:1102::2

  13. Special Address • Unspecified address • 0:0:0:0:0:0:0:0 = :: • Source add. (when own add. is unknown) Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  14. Special Address • Loopback address • 0:0:0:0:0:0:0:1 = ::1 • For testing • Datagram is delivered to local machine Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  15. IPv6 Headers Resource:Asso. Prof. Anan Phonphoem, Ph.D.

  16. Agenda IPv6 Introduction IPv6 Network Configuration IPv6 Address Allocation Router Configuration IPv6 System Configuration

  17. IPv6 address Allocation KU have 2 IPv6 prefix From Uninet 2001:3c8:1303::/48 From Thaisarn 2001:F00:2003::/48 Use only Uninet (Maybe request new IPv6 for multi-home routing)

  18. IPv6 address Allocation(2) KU IPv6 address allocation

  19. Router Configuration Network Interface Configuration #configure terminal #interface vlan 44 ipv6 address 2001:3C8:1303:112C::1/64 ipv6 enable ipv6 nd prefix 2001:3C8:1303:112C::/64 7200 7200

  20. Router Configuration OSPF Routing Configuration #configure terminal #ipv6 router ospf 100 router-id 158.108.252.2 log-adjacency-changes area 0 range 2001:3C8:1303::/64 area 101 range 2001:3C8:1303:1100::/56 passive-interface default no passive-interface Vlan460 #interface vlan 44 ipv6 ospf 100 area 101

  21. Router Configuration BGP Routing Configuration #configure terminal #router bgp 9411 address-family ipv6 neighbor 2001:F00:2FFF::FFFC:1 activate neighbor 2001:F00:2FFF::FFFC:1 soft-reconfiguration inbound network 2001:F00:2003::/48 redistribute ospf 100

  22. Router Configuration Debug Command #show ipv6 ospf neighbor

  23. Router Configuration Debug Command #show ipv6 route

  24. Router Configuration Debug Command #sh ipv6 interface brief

  25. Agenda IPv6 Introduction IPv6 Network Configuration Router Configuration IPv6 System Configuration IPv6 address Configuration DNS Configuration Basic Firewall Configuration

  26. IPv6 Address Configuration Linux Edit file /etc/sysconfig/network #vim /etc/sysconfig/network NETWORKING_IPV6=yes

  27. IPv6 Address Configuration(2) Linux (In case fix IPv6 address) Edit network interface in file /etc/sysconfig/network-scripts/ifcfg-eth0 #vim /etc/sysconfig/network-scripts/ifcfg-eth0 IPV6INIT=yes IPV6ADDR=2001:3c8:1303:1102::2/64 IPV6_DEFAULTGW=2001:3c8:1303:1102::1 #service network restart

  28. IPv6 Address Configuration Window WindowXP Run cmd-> #ipv6 install Window7(can use IPv6) In case fix IPv6 address Control Panel->Network and Internet->Network and Sharing Center->Change adapter settings->(choose network interface) Local Area Network-> (right click) Properties->(Choose Internet Protocol Version 6)->(edit IPv6 address)

  29. DNS Configuration DNS server (same IPv4 DNS server) Forward DNS Reverse DNS

  30. Forward DNS Configuration Used same IPv4 zone (Ex. ku.ac.th) #vim /var/named/database/primary/ku Used AAAA type vpn IN AAAA 2001:3c8:1303:1125::12 logs IN AAAA 2001:3c8:1303:1125::fb Restart DNS service

  31. Reverse DNS Configuration Create new zone in configuration file #vim /var/named/etc/named.conf zone "0.0.0.1.3.0.3.1.8.c.3.0.1.0.0.2.ip6.arpa" in { type master; notify no; file "primary/zone/ipv6/zone_0_0_0_1"; allow-query { any; }; };

  32. Reverse DNS Configuration Create new file for 2001:3c8:1303:1000:: #vim /var/named/database/primary/zone/ipv6/zone_0_0_0_1 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR v6gw-vl1.ocs.ku.ac.th. Restart DNS service

  33. Basic Firewall Configuration Linux on personal firewall by default #vim /etc/sysconfig/ipv6tables or you can manual configuration by use command ip6tables -A INPUT -p tcp --dport 22 -j DROP ip6tables -A INPUT -p tcp -s 2001:3c8:1303:1266:ddf9:d748:c636:b0e4 --dport 22 -j DROP ip6tables -F ip6tables -X

  34. Q&A

  35. Thank You

More Related