ipv6 alp

21
1 IPv6 Alp IŞIK NTS Engineer [email protected]

Upload: isikalp82

Post on 21-Jun-2015

226 views

Category:

Documents


3 download

DESCRIPTION

IPv6 basics, on gns 3

TRANSCRIPT

Page 1: Ipv6 Alp

1

IPv6

Alp IŞIK

NTS Engineer

[email protected]

Page 2: Ipv6 Alp

2

IPv6 Addressing

IPv4 ile kiyaslarsak• Adres size 32bit’ten 128bit’e cikti. 3.4 x 10 uzerı 38 adrese sahip.• her adres 8 gruba ayrilir ve her grup 4 hexa decimal karakterden

olusur. Her bir grup 16 bit’e karsilik gelir. Ornek IP : 2001:0050:0000:0000:0000:0AB4:1E2B:98AABu uzun gorunumden kurtulmak icin, belirli kurallar dahilinde 0 lari

atabiliriz.• Kural 1 : Yan yana gelen 0 lari 1 kereye mahsus olmak uzere ::

isareti ile gosterbiliriz, 2001:0050::0AB4:1E2B:98AA

• Kural 2 : Gruplarin basindaki 0’lari atabiliriz.• 2001:50::AB4:1E2B:98AAIPv4 ve IPv6 nin birlikte kullanildigi durumlarda, IPv4 adresini IPv6’in

icinde son 4 octedine karsilik gelecek sekilde kullanabiliriz.– Ornek: 192.168.0.1 asagidaki sekilde yazilir

0:0:0:0:0:0:192.168.0.1 ya da ::192.168.0.1 veya hexadecimal olarak: ::C0A8:1

Page 3: Ipv6 Alp

3

IPv6 Header

Ipv4 header :

Ipv6 header :

Means QoS

Page 4: Ipv6 Alp

4

IPv6 Header

• Flow Label : paketlerin belirli bir kaynaktan, belirlibir unicast, anycast veya multicast adresine sirali olarak gonderilmesini saglar. Kaynak, trafigi flow olarak gondermek istemiyorsa bunun degerini 0 yapar.

• Ipv6 header daha cok BW ısgal etmesıne karsın, processor da daha hızlı ıslenebılır, daha guvenlıdır.

Page 5: Ipv6 Alp

5

IPv6 iletisim tipleri• Unicast : one-to-one• Multicast : one-to-many• Anycast : one-to-closest, vrrp ya da hsrp gibi dusunulebılır. Unicast

adresi ile ayni yapidadir, source gonderim yaparken anycast a gonderdigini bilmez.

• Broadcast yok !!!

• Link Local Scope address : Layer 2 Domain• Unique / Site-Local Scope address : Organizasyon • Global Scope Address : Internet

Page 6: Ipv6 Alp

6

Ipv6 iletisim tipleri 2

• Link local adres otomatic genere edilir. Herhangibir interface e IPv6 global adresi verdigimizde bir adet de link local adresi olusur.istenilirse bu adres degistirilebilir.169.254.x.x e benzetilebilir.

FE80: daima ile baslar; 54 bitlik 0 larla devam eder. Geri kalan 64 biti ise 48 bit mac adresi arasina FF:FE alarak olusturulur.

• Unique / Site-Local Scope address; 192.168../16; 172 .16../12, 10../8 e benzetilebilir. Ama yeterince global scope adresi oldugu icin pek kullanilmaz.

• Global Address :

Page 7: Ipv6 Alp

7

Ipv6 Adres tipleri

all-nodes multicast address - the link-local scope address to reach all nodes. FF02::1

all-routers multicast address - the link-local scope address to reach all routers. FF02::2

• Router Solicitation Message Format

IP Fields:

Source Address : An IP address assigned to the sending interface, or the unspecified address if no address is assigned to the sending interface.

Destination Address : Typically the all-routers multicast address.

Hop Limit : 255

Authentication Header : If a Security Association for the IP Authentication Header exists between the sender and the destination address, then the sender SHOULD include this header.

Page 8: Ipv6 Alp

8

Ipv6 Adres tipleri

ICMP Fields:

Type : 133

Code : 0

Checksum : The ICMP checksum. See [ICMPv6].

Reserved : This field is unused. It MUST be initialized to zero by the sender and MUST be ignored by the receiver.

Page 9: Ipv6 Alp

9

IPv6 Routing

Page 10: Ipv6 Alp

10

IPv6 Routing

ICMP ND : Broadcast’in gitmesiyle, arp tarihe karisti.

Neighbor Discovery Mesaj Tipleri :

Router Solicitation: When an interface becomes enabled, hosts may send out Router Solicitations that request routers to generate Router Advertisements immediately rather than at their next scheduled time.

Router Advertisement: Routers advertise their presence together with various link and Internet parameters either periodically, or in response to a Router Solicitation message. Router Advertisements contain prefixes that are used for on-link determination and/or address configuration, a suggested hop limit value, etc.

Page 11: Ipv6 Alp

11

Neighbor Discovery mesaj Tipleri 2

Neighbor Solicitation: Sent by a node to determine the link-layer address of a neighbor, or to verify that a neighbor is still reachable via a cached link-layer address. Neighbor Solicitations are also used for Duplicate Address Detection.

Ozetle, ayni link – subnet uzerindeki cihazlara neigbor deniyor, arp

Neighbor Advertisement: A response to a Neighbor Solicitation message. A node may also send unsolicited Neighbor Advertisements to announce a link-layer address change. (rfc2461)

Page 12: Ipv6 Alp

12

IPv6 Static Default routes

2001:11aa::/64::2

::1

2001:22aa::/64

2001:33aa::/64

::1

::1

::2

::2

R1 (config) # ipv6 route ::/0 2001:11aa::1

R2 (config) # ipv6 route 2001:33aa::/64 2001:22AA::2

Page 13: Ipv6 Alp

13

Ipv6 RIP NG

2001:11aa::/64

::2

::1

2001:22aa::/64

2001:33aa::/64

iki adimda konfigure ediyoruz.

1- IPv6 unicast-routing komutunu global config modda enable ediyoruz.

2- ilgili interface’in altinda “ipv6 rip <name> en” giriyoruz.

Page 14: Ipv6 Alp

14

IPv6 RIP ng

Router(config-if)#do show ipv6 rip dat

RIP process "alp", local RIB

2001:11AA::/64, metric 3, installed

FastEthernet0/0/FE80::C003:DFF:FE90:0, expires in 172 secs

2001:22AA::/64, metric 2, installed

FastEthernet0/0/FE80::C003:DFF:FE90:0, expires in 172 secs

2001:33AA::/64, metric 2

FastEthernet0/0/FE80::C003:DFF:FE90:0, expires in 172 secs

Page 15: Ipv6 Alp

15

IPv6 OSPF

Area 10

Area 0

Area 20

3 adimda konfigure ediyoruz.1- IPv6 unicast-routing komutunu global config modda enable ediyoruz.2- Daha sonra Router ID veriyoruz, ipv4 te en yuksek interface ip’ sini router id olarak secerken ipv6 te kendimiz vermemiz gerekiyor.(config)#ipv6 router ospf 1(config-router)#router-id 0.0.0.13- ilgili interface’in altina hangi area’ya ait se o bilgiyi giriyoruz.(config-if)#ipv6 ospf 1 area 10

Page 16: Ipv6 Alp

16

IPv6 OSPF

Router# show ipv6 routeIPv6 Routing Table - 7 entriesCodes: C - Connected, L - Local, S - Static, R - RIP, B - BGP U - Per-user Static route I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2 ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2OI 2001:11AA::/64 [110/20] via FE80::C006:2FF:FE80:1, FastEthernet0/1C 2001:22AA::/64 [0/0] via ::, FastEthernet0/1L 2001:22AA::2/128 [0/0] via ::, FastEthernet0/1C 2001:33AA::/64 [0/0] via ::, FastEthernet0/0L 2001:33AA::1/128 [0/0] via ::, FastEthernet0/0L FE80::/10 [0/0] via ::, Null0L FF00::/8 [0/0] via ::, Null0

Page 17: Ipv6 Alp

17

IPv6 Gecis Stratejileri

• Dual Stack Routers

Burada ayni interface uzerinde hem ipv4 hem de ipv6 client larimizin oldugunu varsayiyoruz,

Internet 1 ve 2 uzerinde gecisler vardir, Router’in internet 1 ve internet 2 ye olan baglantisida ayni interface uzerine ipv4 ve ipv6 adresi verilerek gerceklestirilebilir.

Page 18: Ipv6 Alp

18

IPv6 Gecis Stratejileri

•Tunnelling (ipv6 to ipv4 ve ipv4 to ipv6)

Page 19: Ipv6 Alp

19

IPv6 Gecis Stratejileri

NAT Protocol Translation

IPv4 u IPv6 ya, ya da IPv6 yi IPv4 e translate ediyoruz.

Page 20: Ipv6 Alp

20

ERS 8600 Gereksinimleri• Minimum requirement 8692SF ve supermezz.• R moduller ile legecy moduller arasında ipv6 routing desteklenmez. • EUI-64 interface support, ability to change link local address, out of

band IPv6 interface and virtual IPv6 address support

Page 21: Ipv6 Alp

21

Sources• CBT Nugget

• Kashif Shaiks’s Documentations

• Nortel Documentations.