WELCOME DELHI IT PROShttp://groups.msn.com/itdelhiug

Agenda – Delhi IT Community Event Jan 09

Time Agenda Speaker

2:00 pm – 2:30 pm Welcome address Ranjana Jain

2:30 pm - 3:30 pm Get Ready for IPv6 Ranjana Jain

3:30 pm – 3:45 pm Break

3:45 pm – 4:45 pm Protecting Windows Networks from Malware

Madhur Verma

4:45 pm – 5:00 pm Questions, Prizes, Discussion and Feedback !!

Audience

Get Ready for IPv6?

Ranjana JainIT Pro EvangelistMicrosoft IndiaMCSE, MCT, RHCE, CISSP, CIW Security AnalystBlog: http://ranjanajain.spaces.live.com

IPv4 Limitations

IPv6 Changes in Addressing

Future IPv6 Solutions

IPv6 with Windows Vista

What Will We cover?

Level 200

TCP/IP

IPv4 Addressing

Subnetting

Helpful Experience

Introducing IPv6

Addressing with IPv6

Transitioning to IPv6

Exploring IPv6 Scenarios

Agenda

The Microsoft Networks Vision

LabGuest

IPsec isolation

Shortcomings of IPV4

Exponential Internet Growth – Exhaustion on Address Space

Security at the Internet Layer

Internet Backbone Routers with Large Routing Tables

Internet Hosts Growth (1992-2006)

In m

illi

on

s

0

50

100

150

200

250

300

350

400

450

Jan-9

2

Jul-92

Jan-9

3

Jul-93

Jan-9

4

Jul-94

Jan-9

5

Jul-95

Jan-9

6

Jul-96

Jan-9

7

Jul-97

Jan-9

8

Jul-98

Jan-9

9

Jul-99

Jan-0

0

Jul-00

Jan-0

1

Jul-01

Jan-0

2

Jul-02

Jan-0

3

Jul-03

Jan-0

4

Jul-04

Jan-0

5

Jul-05

Jan-0

6

http://www.isc.org/index.pl?/ops/ds/host-count-history.php

IPv6 as a Global Solution

What about NAT?

Internet

NAT Enabled Router

With IPv6

Introducing IPv6

Addressing with IPv6

Transitioning to IPv6

Exploring IPv6 Scenarios

Agenda

Increased Address Space

IPv4 provides 232 addresses, which =

4,294,967,296

(That’s 4 billion)

IPv6 provides 2128 addresses, which =

340,282,366,920,938,463,463,374,607,431,768,211,456

(That’s 3.40*1038, or 340 undecillion addresses)

Header

Version (RFC2780)

4 bits

Traffic Class (RFC 2474)1 Byte

Flow Label (RFC 3697)20 bits

Payload Length2 Bytes

Next Header1 Byte

Hop Limit1 Byte

Source Address4 Bytes

Source Address4 Bytes

Source Address4 Bytes

Source Address4 Bytes

Destination Address4 Bytes

Destination Address4 Bytes

Destination Address4 Bytes

Destination Address4 Bytes

IPv4IPv6

Version4 bits

IHL4 bits

Type of Service1 Byte

Total Length2 Bytes

Identification2 Bytes

Flags3 bits

Fragment Offset13 bits

Time To Live1 Byte

Protocol1 Byte

Header Checksum2 Bytes

Source Address4 Bytes

Destination Address4 Bytes

Options(Variable)

Padding(Variable)

DelayThroug

putReliabi

lityReservedPrecedence

Reserved

Don’t Fragm

ent

More Fragments

Types of IPV6 Addreses

Unicast

Gobal Unicast

Local Use Unicast

Multicast

Begins with “FF”

Anycast

Link Local Site Local

Types of IPv6 Addresses

Interface ID

64 bits

Subnet ID

45 bits

001 Global Routing Prefix

16 bits

Global Addresses

1111 1110 10 Interface ID

10 bits 64 bits

000 . . . 000

54 bits

Link Local Addresses

1111 1110 11 Interface ID

10 bits 64 bits

Subnet ID

54 bits

Site Local Addresses

Link Local Prefix =

FE80::/64

Site Local Prefix =

FEC0::/10

Global ID Prefix = 2000::/3

1111 110 Interface ID

7 bits 64 bits

Global ID

40 bits

Subnet ID

16 bits

L

Unique Local Addresses

Unique Local Prefix (L=1)=

FD00::/8

Special IPV6 Addresses

Unspecified Address

•0:0:0:0:0:0:0:0•::

Loopback Address

•0:0:0:0:0:0:0:1•::1

IPv6 Address Syntax

21DA:D3:0:2F3B:2AA:FF:FE28:9C5A

0010000111011010 0000000011010011 0000000000000000 0010111100111011 0000001010101010 0000000011111111 1111111000101000 1001110001011010

IPv6 address in binary formDivided along 16-bit boundariesEach 16-bit block is converted to hexadecimal and delimited with colonsSuppress leading zeros within each blockCompress zero blocks

0010000111011010000000001101001100000000000000000010111100111011 0000001010101010000000001111111111111110001010001001110001011010

21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A21DA:D3::2F3B:

2AA:FF:FE28:9C5ANetwork ID Interface ID

Compatibility Addresses

IPv4-compatible Address0:0:0:0:0:0:w.x.y.z or ::w.x.y.zUsed by IPv6/IPv4 nodes communicating using IPv6IPv6 packet encapsulated with IPv4 header and sent using IPv4 infrastructure

IPv4-mapped address0:0:0:0:0:FFFF:w.x.y.z or ::FFFF:w.x.y.zIPv4 only node to IPv6 nodeUsed only for internal representation

6to4 addressUsed by nodes with both IPv4 and IPv6 over IPv4 routing infrastructureFormed by combining 2002::/16 with 32 bit IPv4 address making a 48-bit prefixTunneling technique defined in RFC 3056

Multicast IPv6 Addresses

1111 1111 Group ID

8 bits 112 bits

Scope

4 bits

Flags

IPv6 Multicast Addresses

4 bits

32 bits - fixed

Subnetting IPv6

IPv4 Subnet Mask

More networks (255.255.255.0)

More hosts (255.0.0.0)

Networks and Hosts from the same 32-bit

pool

64 bits - HostSubnetNetwork

IPv6 Address

/48/1 /3264 bits dedicated to

hosts64 bits dedicated to

networks

Introducing IPv6

Addressing with IPv6

Transitioning to IPv6

Exploring IPv6 Scenarios

Agenda

Transition Technologies

Application Layer

Transport Layer (TCP/UDP

Network Interface Layer

IPv6 IPv4

DNS Server

A Query

AAAA Query

No Global IPv6 Address

At Least 1 Global IPv6 Address

A Query

IPv6 over IPv4 Tunneling

IPv6/IPv4

Node A

IPv6

Node B

IPv6/IPv4 Router

IPv4 or IPv6 Infrastructure

IPv6 over IPv4 tunnel

IPv4 Infrastructure

IPv6/IPv4

Node A

IPv6

Node B

IPv6/IPv4 Router

IPv6 over IPv4 tunnel

IPv4 InfrastructureIPv4 or IPv6

Infrastructure

IPv6/IPv4 Router

IPv4 or IPv6 Infrastructure

IPv6/IPv4

Node A

IPv6

Node B

IPv6 over IPv4 tunnel

IPv4 Infrastructure

Router to RouterHost-to-Router or Router-to-HostHost-to-Host

IPv6 with Windows Vista

IPv4 IPv6

IPv4 and NAT Introduce Problems

IPv6 Eliminates Problems

Microsoft Provides IPv6 Solutions

Session Summary

Visit TechNet at www.microsoft.com/technet

For More Information

For the latest titles, visit:www.microsoft.com/learning/books/itpro/

Microsoft Press Publications

This book can be purchased at all major bookstores and online retailers

Non-Microsoft Publications

What are MCP certifications?

Validation in performing critical IT functions

Why certify?

Worldwide recognition of skills gained through experience

More effective deployments with reduced costs

What certifications are there for IT pros?

MCP, MCSE, MCSA, MCDST, MCDBA

www.microsoft.com/learning/mcp

Become a Microsoft Certified Professional

Where Else Can I Get Help?

Groups.msn.com/itdelhiug

Live Events and Online Webcast series

Microsoft Professional Blogs Directory

Chats, Newsgroups, Forums and Virtual Labs

Local Locator for Professional User Groups

RanjanaJain.spaces.live.com