SlideShare une entreprise Scribd logo
1  sur  17
Télécharger pour lire hors ligne
IPv6 Addressing Plan
                            Fundamentals
                            Nathalie Trenaman
                            Trainer, RIPE NCC
                            Tuesday, 24 April 2012




Wednesday, April 25, 2012
IP Address Distribution
                                                /3                             IANA




                                          /12                                   RIR




                            /32                                                 LIR




                   /48            /56                   /48                   End User


                     Allocation         PA Assignment         PI Assignment

                                                                                      2

Wednesday, April 25, 2012
IPv6 Address Basics
        •    IPv6 address: 128 bits
                 -   32 bits in IPv4
        •    Every subnet should be a /64
        •    Customer assignments (sites) between:
                 - /64 (1 subnet)
                 - /48 (65,536 subnets)

        •    Minimum allocation size /32
                 - 65,536 /48s
                 - 16,777,216 /56s



                                                     3

Wednesday, April 25, 2012
IPv6 Subnetting

                                                           IPv6 Subnetting
                            2001:0DB8:0000:0000:0000:0000:0000:0000
                                      0000:0000
                                                                       64 bits interface ID



                                                      /64
                                                    /60 = 16 /64
                                                 /56 = 256 /64
                                               /52 = 4096 /64
                                            /48 = 65536 /64
                                   /32 = 65536 /48


                                                                    Contact Training Services: ts@ripe.net
                                                 Follow us on Twitter: www.twitter.com/TrainingRIPENCC

                                                                                            www.ripe.net




                                                                                                             4

Wednesday, April 25, 2012
Address Notation
        2001:0db8:003e:ef11:0000:0000:c100:004d




                                                  5

Wednesday, April 25, 2012
Address Notation
        2001:0db8:003e:ef11:0000:0000:c100:004d
        2001:db8:3e:ef11:0:0:c100:4d




                                                  5

Wednesday, April 25, 2012
Address Notation
        2001:0db8:003e:ef11:0000:0000:c100:004d
        2001:db8:3e:ef11:0:0:c100:4d

        2001:db8:3e:ef11: :c100:4d




                                                  5

Wednesday, April 25, 2012
Address Notation
        2001:0db8:003e:ef11:0000:0000:c100:004d
        2001:db8:3e:ef11:0:0:c100:4d

        2001:db8:3e:ef11: :c100:4d

           1     1     1    0   1   1   1   1   0   0   0   1   0   0   0   1




                                                                                5

Wednesday, April 25, 2012
Why Create an IPv6 Addressing Plan?




       •    Mental health during implementation(!)
       •    Easier implementation of security policies
       •    Efficient addressing plans are scalable
       •    More efficient route aggregation

                                                         6

Wednesday, April 25, 2012
IPv6 Address Management
         •    Your Excel sheet might not scale
                – There     are 65.536 /48s in a /32
                – There     are 65.536 /64s in a /48
                – There     are 16.777.216 /56s in a /32


         •    Find a suitable IPAM solution




                                                           7

Wednesday, April 25, 2012
Addressing Plans for ISPs
        •    A /48 per pop can be used
                 - separate blocks for infrastructure and customers
                 - document address needs for allocation criteria




        •    Use one /64 block (per site) for loopbacks
                 - One /128 per device
                 - One /64 contains enough /128s for

                   18.446.744.073.709.551.616 devices



                                                                      8

Wednesday, April 25, 2012
More On Addressing Plans for ISPs
        •    For private networks, look at ULA
        •    For servers you want manual configuration
        •    Use port numbers for addresses
                 - pop server 2001:db8:1::110
                 - dns server 2001:db8:1::53

                 - etc...




                                                        9

Wednesday, April 25, 2012
Point-to-Point Connections
        •    How much space for point-to-point connections?
                 - RFC4291: Interface IDs are required to be /64
                 - RFC3627: Use of /127 between routers considered

                    harmful
                 - RFC6547: RFC3627 to Historic Status

                 - RFC6164: Using /127 on Inter-Router links



        •    Be safe: reserve a /64, assign a /127 per
              point-to-point connection


                                                                     10

Wednesday, April 25, 2012
Addressing Plan Exercise (1)
                                                                             POP3
                                                                                          DMZ



                                                                                                            guest
                                                                                                             vlan
                                                                              cr1.office
                                                                                                                NOC
                                                                                                                vlan

                                                                                                            server
                                                                                                             vlan



           POP1                                                              POP2

              mail


                                                 sw 1                                            colo 1
              www

                                                                 cr1.pop1     cr1.pop2
              proxy

                                                                                                                       colocated
                                                                                                                       customer
                                                                                                                         vlans
             usenet



              voip                                               cr2.pop1     cr2.pop2


                                                 sw 2                                            colo 2
              DNS

                                                                                 AR2



                                                                                                   DSL
                       switch   layer 3 switch          router     firewall
                                                                                                customers                          11

Wednesday, April 25, 2012
Addressing Plan Exercise (2)
                                   POP1
                                           Infrastructure
                                                                         loopback addresses
                                                                             mail server vlan
                                                                            www server vlan
                                                                           proxy server vlan
                                                                          usenet server vlan
                                                                            VoIP server vlan
                                                                            DNS server vlan


                                               cr1.pop1
                                               cr2.pop1
                                                    sw1
                                                    sw2



                                   POP2
                                               cr1.pop2
                                               cr2.pop2
                                                   colo1
                                                   colo2



                                   POP3


                                                   DMZ


                                                                                  guest vlan
                                                                                   NOC vlan
                                                                                 server vlan




                    Customer Assignments   DSL Customers (3000)
                                           Colocation Customers (1000)




                                                                                                12

Wednesday, April 25, 2012
Customers And Their /48
         •    Customers have no idea how to handle 65536
              subnets!
         •    Provide them with information
                – https://www.ripe.net/lir-services/training/material/IPv6-

                    for-LIRs-Training-Course/IPv6_addr_plan4.pdf




                                                                              13

Wednesday, April 25, 2012
Questions?




Wednesday, April 25, 2012

Contenu connexe

Plus de IKT-Norge

Lars Johan Bjørkevoll, Xeneta
Lars Johan Bjørkevoll, XenetaLars Johan Bjørkevoll, Xeneta
Lars Johan Bjørkevoll, XenetaIKT-Norge
 
Erik Stokkeland
Erik Stokkeland Erik Stokkeland
Erik Stokkeland IKT-Norge
 
Ketil Widerberg
Ketil WiderbergKetil Widerberg
Ketil WiderbergIKT-Norge
 
Randi Marjamaa
Randi MarjamaaRandi Marjamaa
Randi MarjamaaIKT-Norge
 
Eirik Norman Hansen
Eirik Norman Hansen Eirik Norman Hansen
Eirik Norman Hansen IKT-Norge
 
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015IKT-Norge
 
Læringsanalyse – Arne Krokan
Læringsanalyse – Arne KrokanLæringsanalyse – Arne Krokan
Læringsanalyse – Arne KrokanIKT-Norge
 
Læringsanalyse – Yngve Lindvig
Læringsanalyse – Yngve LindvigLæringsanalyse – Yngve Lindvig
Læringsanalyse – Yngve LindvigIKT-Norge
 
Multi Smart Øving – skjermbilder
Multi Smart Øving – skjermbilderMulti Smart Øving – skjermbilder
Multi Smart Øving – skjermbilderIKT-Norge
 
NEO2015: Zwipe
NEO2015: ZwipeNEO2015: Zwipe
NEO2015: ZwipeIKT-Norge
 
NEO2015: Crypho
NEO2015: CryphoNEO2015: Crypho
NEO2015: CryphoIKT-Norge
 
NEO2015: Bartec Pixavi
NEO2015: Bartec PixaviNEO2015: Bartec Pixavi
NEO2015: Bartec PixaviIKT-Norge
 
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015IKT-Norge
 
NEO2015: Filmgrail
NEO2015: FilmgrailNEO2015: Filmgrail
NEO2015: FilmgrailIKT-Norge
 
NEO2015: Home Control
NEO2015: Home ControlNEO2015: Home Control
NEO2015: Home ControlIKT-Norge
 
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015IKT-Norge
 
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...IKT-Norge
 
NEO2015: Xeneta
NEO2015: XenetaNEO2015: Xeneta
NEO2015: XenetaIKT-Norge
 
NEO2015: Hatteland
NEO2015: HattelandNEO2015: Hatteland
NEO2015: HattelandIKT-Norge
 

Plus de IKT-Norge (20)

Lars Johan Bjørkevoll, Xeneta
Lars Johan Bjørkevoll, XenetaLars Johan Bjørkevoll, Xeneta
Lars Johan Bjørkevoll, Xeneta
 
Erik Stokkeland
Erik Stokkeland Erik Stokkeland
Erik Stokkeland
 
Ketil Widerberg
Ketil WiderbergKetil Widerberg
Ketil Widerberg
 
Randi Marjamaa
Randi MarjamaaRandi Marjamaa
Randi Marjamaa
 
Roar Olsen
Roar Olsen Roar Olsen
Roar Olsen
 
Eirik Norman Hansen
Eirik Norman Hansen Eirik Norman Hansen
Eirik Norman Hansen
 
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015
Roger Schjervas innlegg for produktivitetskommisjonen 19.05.2015
 
Læringsanalyse – Arne Krokan
Læringsanalyse – Arne KrokanLæringsanalyse – Arne Krokan
Læringsanalyse – Arne Krokan
 
Læringsanalyse – Yngve Lindvig
Læringsanalyse – Yngve LindvigLæringsanalyse – Yngve Lindvig
Læringsanalyse – Yngve Lindvig
 
Multi Smart Øving – skjermbilder
Multi Smart Øving – skjermbilderMulti Smart Øving – skjermbilder
Multi Smart Øving – skjermbilder
 
NEO2015: Zwipe
NEO2015: ZwipeNEO2015: Zwipe
NEO2015: Zwipe
 
NEO2015: Crypho
NEO2015: CryphoNEO2015: Crypho
NEO2015: Crypho
 
NEO2015: Bartec Pixavi
NEO2015: Bartec PixaviNEO2015: Bartec Pixavi
NEO2015: Bartec Pixavi
 
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015
Verdiskaping i en digital verden: Næringsminister Monica Mæland på NEO2015
 
NEO2015: Filmgrail
NEO2015: FilmgrailNEO2015: Filmgrail
NEO2015: Filmgrail
 
NEO2015: Home Control
NEO2015: Home ControlNEO2015: Home Control
NEO2015: Home Control
 
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015
Et digitalt #drømmeløft for Norge: Innovasjon Norge-keynote på NEO2015
 
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...
NEO2015: The Trampery keynote. Creating a global innovation cluster: Lessons ...
 
NEO2015: Xeneta
NEO2015: XenetaNEO2015: Xeneta
NEO2015: Xeneta
 
NEO2015: Hatteland
NEO2015: HattelandNEO2015: Hatteland
NEO2015: Hatteland
 

Dernier

Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxLoriGlavin3
 
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesHow to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesThousandEyes
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...Wes McKinney
 
Scale your database traffic with Read & Write split using MySQL Router
Scale your database traffic with Read & Write split using MySQL RouterScale your database traffic with Read & Write split using MySQL Router
Scale your database traffic with Read & Write split using MySQL RouterMydbops
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsPotential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsRavi Sanghani
 
A Framework for Development in the AI Age
A Framework for Development in the AI AgeA Framework for Development in the AI Age
A Framework for Development in the AI AgeCprime
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demoHarshalMandlekar2
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteDianaGray10
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsNathaniel Shimoni
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfNeo4j
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxLoriGlavin3
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity PlanDatabarracks
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPathCommunity
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfLoriGlavin3
 
Decarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a realityDecarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a realityIES VE
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersNicole Novielli
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch TuesdayIvanti
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxLoriGlavin3
 

Dernier (20)

Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptxPasskey Providers and Enabling Portability: FIDO Paris Seminar.pptx
Passkey Providers and Enabling Portability: FIDO Paris Seminar.pptx
 
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesHow to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
 
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
The Future Roadmap for the Composable Data Stack - Wes McKinney - Data Counci...
 
Scale your database traffic with Read & Write split using MySQL Router
Scale your database traffic with Read & Write split using MySQL RouterScale your database traffic with Read & Write split using MySQL Router
Scale your database traffic with Read & Write split using MySQL Router
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
Potential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and InsightsPotential of AI (Generative AI) in Business: Learnings and Insights
Potential of AI (Generative AI) in Business: Learnings and Insights
 
A Framework for Development in the AI Age
A Framework for Development in the AI AgeA Framework for Development in the AI Age
A Framework for Development in the AI Age
 
Sample pptx for embedding into website for demo
Sample pptx for embedding into website for demoSample pptx for embedding into website for demo
Sample pptx for embedding into website for demo
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test Suite
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directions
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdf
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity Plan
 
UiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to HeroUiPath Community: Communication Mining from Zero to Hero
UiPath Community: Communication Mining from Zero to Hero
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdf
 
Decarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a realityDecarbonising Buildings: Making a net-zero built environment a reality
Decarbonising Buildings: Making a net-zero built environment a reality
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software Developers
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch Tuesday
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
 

Nathalie Trenaman - RIPE NCC: Address planning fundamentals

  • 1. IPv6 Addressing Plan Fundamentals Nathalie Trenaman Trainer, RIPE NCC Tuesday, 24 April 2012 Wednesday, April 25, 2012
  • 2. IP Address Distribution /3 IANA /12 RIR /32 LIR /48 /56 /48 End User Allocation PA Assignment PI Assignment 2 Wednesday, April 25, 2012
  • 3. IPv6 Address Basics • IPv6 address: 128 bits - 32 bits in IPv4 • Every subnet should be a /64 • Customer assignments (sites) between: - /64 (1 subnet) - /48 (65,536 subnets) • Minimum allocation size /32 - 65,536 /48s - 16,777,216 /56s 3 Wednesday, April 25, 2012
  • 4. IPv6 Subnetting IPv6 Subnetting 2001:0DB8:0000:0000:0000:0000:0000:0000 0000:0000 64 bits interface ID /64 /60 = 16 /64 /56 = 256 /64 /52 = 4096 /64 /48 = 65536 /64 /32 = 65536 /48 Contact Training Services: ts@ripe.net Follow us on Twitter: www.twitter.com/TrainingRIPENCC www.ripe.net 4 Wednesday, April 25, 2012
  • 5. Address Notation 2001:0db8:003e:ef11:0000:0000:c100:004d 5 Wednesday, April 25, 2012
  • 6. Address Notation 2001:0db8:003e:ef11:0000:0000:c100:004d 2001:db8:3e:ef11:0:0:c100:4d 5 Wednesday, April 25, 2012
  • 7. Address Notation 2001:0db8:003e:ef11:0000:0000:c100:004d 2001:db8:3e:ef11:0:0:c100:4d 2001:db8:3e:ef11: :c100:4d 5 Wednesday, April 25, 2012
  • 8. Address Notation 2001:0db8:003e:ef11:0000:0000:c100:004d 2001:db8:3e:ef11:0:0:c100:4d 2001:db8:3e:ef11: :c100:4d 1 1 1 0 1 1 1 1 0 0 0 1 0 0 0 1 5 Wednesday, April 25, 2012
  • 9. Why Create an IPv6 Addressing Plan? • Mental health during implementation(!) • Easier implementation of security policies • Efficient addressing plans are scalable • More efficient route aggregation 6 Wednesday, April 25, 2012
  • 10. IPv6 Address Management • Your Excel sheet might not scale – There are 65.536 /48s in a /32 – There are 65.536 /64s in a /48 – There are 16.777.216 /56s in a /32 • Find a suitable IPAM solution 7 Wednesday, April 25, 2012
  • 11. Addressing Plans for ISPs • A /48 per pop can be used - separate blocks for infrastructure and customers - document address needs for allocation criteria • Use one /64 block (per site) for loopbacks - One /128 per device - One /64 contains enough /128s for 18.446.744.073.709.551.616 devices 8 Wednesday, April 25, 2012
  • 12. More On Addressing Plans for ISPs • For private networks, look at ULA • For servers you want manual configuration • Use port numbers for addresses - pop server 2001:db8:1::110 - dns server 2001:db8:1::53 - etc... 9 Wednesday, April 25, 2012
  • 13. Point-to-Point Connections • How much space for point-to-point connections? - RFC4291: Interface IDs are required to be /64 - RFC3627: Use of /127 between routers considered harmful - RFC6547: RFC3627 to Historic Status - RFC6164: Using /127 on Inter-Router links • Be safe: reserve a /64, assign a /127 per point-to-point connection 10 Wednesday, April 25, 2012
  • 14. Addressing Plan Exercise (1) POP3 DMZ guest vlan cr1.office NOC vlan server vlan POP1 POP2 mail sw 1 colo 1 www cr1.pop1 cr1.pop2 proxy colocated customer vlans usenet voip cr2.pop1 cr2.pop2 sw 2 colo 2 DNS AR2 DSL switch layer 3 switch router firewall customers 11 Wednesday, April 25, 2012
  • 15. Addressing Plan Exercise (2) POP1 Infrastructure loopback addresses mail server vlan www server vlan proxy server vlan usenet server vlan VoIP server vlan DNS server vlan cr1.pop1 cr2.pop1 sw1 sw2 POP2 cr1.pop2 cr2.pop2 colo1 colo2 POP3 DMZ guest vlan NOC vlan server vlan Customer Assignments DSL Customers (3000) Colocation Customers (1000) 12 Wednesday, April 25, 2012
  • 16. Customers And Their /48 • Customers have no idea how to handle 65536 subnets! • Provide them with information – https://www.ripe.net/lir-services/training/material/IPv6- for-LIRs-Training-Course/IPv6_addr_plan4.pdf 13 Wednesday, April 25, 2012