Dual stack. Let’s define it.
- Is this a migration strategy or co-existence strategy? Ships in the night?
- By the way, does IPv4 ever go away?
Planning for dual-stack. Let’s assume you’ve got an IPv4 infrastructure. What needs to be considered before starting on IPv6 dual-stack deployment?
- A common IPv6 deployment strategy is IPv6 at the edge, using a proxy or NAT64 strategy to handle IPv6 to IPv4 translation. In this context, do we even need dual-stack throughout a network?
- How should existing network equipment capability be evaluated?
- Is the extra burden on control plane much of a concern?
- IPv6 address planning. How to subnet?
- Nibble boundaries
- Wasted space is okay.
- Best practice for IPv6 numbering of P2P links that are /30 or /31 in IPv4.
- Side question – does PI make sense for most enterprises?
- Problems of scale. Are there unique considerations that enter when deploying dual-stack IPv6 in large environments?
- What are the most common mistakes new dual-stackers make?
- Address assignment:
- SLAAC: privacy considerations, new RFC 4941 dealing with this issue.
- Should servers/printers be statically assigned?
- Choosing your ISP:
- Dual Stack links? Overlay? Dedicated v6?
- Pick your service: Internet, L3VPN, DNS Servers?
- IPv6 footprint and peering arrangements
- BGP Sessions? PI address space?
Dual-stack operations. What changes in the day to day network when running a dual-stack environment?
- Managing network devices. Should IPv4 or IPv6 be used in the management plane? Increased dependency of DNS for everything!
- CoPP in a dual-stack environment.
- Common dual-stack problems & troubleshooting strategies
- Multiple host addresses – which one is being used?
- Wireshark is your friend.
- ICMPv6 is relied upon heavily – don’t forget this when building ACLs.
- Security for all environments (even non dual stack ones):
- RA Guard
- Remote address resolution exhaustion
About Guilherme Goes:
“Currently I’m researching how to best deploy IPv6 on the network I manage. The most likely scenario is to deploy it on the Internet edge up to the LB with those having a NAT64/Proxy role.”
About Jeff Carrell:
“I am an IPv6Forum Certified Engineer (Gold) and Trainer (Gold). I present on IPv6 technology at conferences, facilitate IPv6 workshops and training, and provide network consulting with a focus on IPv6.”
IPv6 cheat sheet from Jeff
Operational Security Considerations for IPv6 Networks draft-ietf-opsec-v6-06
Infoblox’s IPv6 Center of Excellence Blog
Ed Horley’s IPv6 blog
Jeff’s IPv6 Book List
- Guide to TCP/IP, 4th Edition by Jeffrey L Carrell, Laura A. Chappell, Ed Tittel, and James Pyles (Course Technology, Cengage Learning)
- IPv6 Address Planning, by Tom Coffeen (O’Reilly Press)
- IPv6 Essentials, Third Edition by Silva Hagen (O’Reilly Press)
- Practical IPv6 for Windows Administrators by Edward Horley (Apress)
- IPv6 Fundamentals: A Straightforward Approach to Understanding IPv6 by Rick Graziani (Cisco Press)
- Understanding IPv6, Third Edition by Joseph Davies (Microsoft Press)
- IPv6 Security, by Scott Hogg & Eric Vyncke (Cisco Press)
- IPv6 for Enterprise Networks, By Shannon McFarland, Muninder Sambi, Nikhil Sharma, Sanjay Hooda (Cisco Press)