If you’re ready to join the move to IPv6, this comprehensive guide gets you started by showing you how to create an effective IPv6 address plan. In three example-driven sections—preparation, design, and maintenance—you’ll learn principles and best practices for designing, deploying, and maintaining an address plan far beyond what’s possible with IPv4 networks. During the course of the book, you’ll walk through the process of building a sample address plan for a fictional company. Enterprise IT network architects, engineers, and administrators will see firsthand how IPv6 provides opportunities for creating an operationally efficient plan that’s scalable, flexible, extensible, manageable, and durable. Explore IPv6 addressing basics, including representation, structure, and types Manage risks and costs by using a three-phase approach for deploying IPv6 Dig into IPv6 subnetting methods and learn how they differ from IPv4 Determine the appropriate size and type of the IPv6 allocation you require Apply current network management tools to IPv6 Use IPv6 renumbering methods that enable greater network scale and easier integration Implement policies and practices to keep IPv6 addresses reachable
If your organization is gearing up for IPv6, this in-depth book provides the practical information and guidance you need to plan for, design, and implement this vastly improved protocol. Author Silvia Hagen takes system and network administrators, engineers, and network designers through the technical details of IPv6 features and functions, and provides options for those who need to integrate IPv6 with their current IPv4 infrastructure. The flood of Internet-enabled devices has made migrating to IPv6 a paramount concern worldwide. In this updated edition, Hagen distills more than ten years of studying, working with, and consulting with enterprises on IPv6. It’s the only book of its kind. IPv6 Essentials covers: Address architecture, header structure, and the ICMPv6 message format IPv6 mechanisms such as Neighbor Discovery, Stateless Address autoconfiguration, and Duplicate Address detection Network-related aspects and services: Layer 2 support, Upper Layer Protocols, and Checksums IPv6 security: general practices, IPSec basics, IPv6 security elements, and enterprise security models Transitioning to IPv6: dual-stack operation, tunneling, and translation techniques Mobile IPv6: technology for a new generation of mobile services Planning options, integration scenarios, address plan, best practices, and dos and don’ts
IPv6 Security Protection measures for the next Internet Protocol As the world’s networks migrate to the IPv6 protocol, networking professionals need a clearer understanding of the security risks, threats, and challenges this transition presents. In IPv6 Security, two of the world’s leading Internet security practitioners review each potential security issue introduced by IPv6 networking and present today’s best solutions. IPv6 Security offers guidance for avoiding security problems prior to widespread IPv6 deployment. The book covers every component of today’s networks, identifying specific security deficiencies that occur within IPv6 environments and demonstrating how to combat them. The authors describe best practices for identifying and resolving weaknesses as you maintain a dual stack network. Then they describe the security mechanisms you need to implement as you migrate to an IPv6-only network. The authors survey the techniques hackers might use to try to breach your network, such as IPv6 network reconnaissance, address spoofing, traffic interception, denial of service, and tunnel injection. The authors also turn to Cisco® products and protection mechanisms. You learn how to use Cisco IOS® and ASA firewalls and ACLs to selectively filter IPv6 traffic. You also learn about securing hosts with Cisco Security Agent 6.0 and about securing a network with IOS routers and switches. Multiple examples are explained for Windows, Linux, FreeBSD, and Solaris hosts. The authors offer detailed examples that are consistent with today’s best practices and easy to adapt to virtually any IPv6 environment. Scott Hogg, CCIE® No. 5133, is Director of Advanced Technology Services at Global Technology Resources, Inc. (GTRI). He is responsible for setting the company’s technical direction and helping it create service offerings for emerging technologies such as IPv6. He is the Chair of the Rocky Mountain IPv6 Task Force. Eric Vyncke, Cisco Distinguished System Engineer, consults on security issues throughout Europe. He has 20 years’ experience in security and teaches security seminars as a guest professor at universities throughout Belgium. He also participates in the Internet Engineering Task Force (IETF) and has helped several organizations deploy IPv6 securely. Understand why IPv6 is already a latent threat in your IPv4-only network Plan ahead to avoid IPv6 security problems before widespread deployment Identify known areas of weakness in IPv6 security and the current state of attack tools and hacker skills Understand each high-level approach to securing IPv6 and learn when to use each Protect service provider networks, perimeters, LANs, and host/server connections Harden IPv6 network devices against attack Utilize IPsec in IPv6 environments Secure mobile IPv6 networks Secure transition mechanisms in use during the migration from IPv4 to IPv6 Monitor IPv6 security Understand the security implications of the IPv6 protocol, including issues related to ICMPv6 and the IPv6 header structure Protect your network against large-scale threats by using perimeter filtering techniques and service provider—focused security practices Understand the vulnerabilities that exist on IPv6 access networks and learn solutions for mitigating each This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks. Category: Networking: Security Covers: IPv6 Security
Organizations are increasingly transitioning to IPv6, the next generation protocol for defining how devices of all kinds communicate over networks. Now fully updated, IPv6 Fundamentals offers a thorough, friendly, and easy-to-understand introduction to the knowledge and skills you need to deploy and operate IPv6 networks. Leading networking instructor Rick Graziani explains all the basics simply and clearly, step-by-step, providing all the details you’ll need to succeed. You’ll learn why IPv6 is necessary, how it was created, how it works, and how it has become the protocol of choice in environments ranging from cloud to mobile and IoT. Graziani thoroughly introduces IPv6 addressing, configuration options, and routing protocols, including EIGRP for IPv6, and OSPFv3 (traditional configuration and with address families). Building on this coverage, he then includes more in-depth information involving these protocols and processes. This edition contains a completely revamped discussion of deploying IPv6 in your network, including IPv6/IPv4 integration, dynamic address allocation, and understanding IPv6 from the perspective of the network and host. You’ll also find improved coverage of key topics such as Stateless Address Autoconfiguration (SLAAC), DHCPv6, and the advantages of the solicited node multicast address. Throughout, Graziani presents command syntax for Cisco IOS, Windows, Linux, and Mac OS, as well as many examples, diagrams, configuration tips, and updated links to white papers and official RFCs for even deeper understanding. Learn how IPv6 supports modern networks encompassing the cloud, mobile, IoT, and gaming devices Compare IPv6 with IPv4 to see what has changed and what hasn’t Understand and represent IPv6 addresses for unicast, multicast, and anycast environments Master all facets of dynamic IPv6 address allocation with SLAAC, stateless DHCPv6, and stateful DHCPv6 Understand all the features of deploying IPv6 addresses in the network including temporary addresses and the privacy extension Improve operations by leveraging major enhancements built into ICMPv6 and ICMPv6 Neighbor Discovery Protocol Configure IPv6 addressing and Access Control Lists using a common topology Implement routing of IPv6 packets via static routing, EIGRP for IPv6, and OSPFv3 Walk step-by-step through deploying IPv6 in existing networks, and coexisting with or transitioning from IPv4
Practical IPv6 for Windows Administrators is a handy guide to implementing IPv6 in a Microsoft Windows environment. This is the book you need if you are a Microsoft Windows Administrator confronted with IPv6 and in need of a quick resource to get up and going. The book covers the current state of IPv6 and its support in Microsoft Windows. It provides best-practices and other guidance toward successful implementation. This book is especially written with the goal of translating your current expertise in IPv4 into the new realm of IPv6. Special attention is given to dual-stack configurations, helping you to run IPv4 and IPv6 side-by-side and support both protocol versions during a transition period. Practical IPv6 for Windows Administrators is also a fast reference you can look at to get something done quickly. It covers IPv6 addressing, management of IPv6 from Powershell, Advanced Firewall configuration, and use of IPv6 in Hyper-V and virtual networking environments. You'll find practical examples showing how IPv6 integrates with all the standard tools you use for IPv4 today, tools like DNS and DHCP. You'll also find insider knowledge on IPv6 that can help avert stumbling points on the road to deployment. Provides a quick path from IPv4 expertise to IPv6 implementation Gives best-practices specific to Windows on IPv6 and dual stack networks Is chock full of practical examples showing how to manage IPv6 on Windows
This essential guide explains what works, what doesn't, and most of all, what's practical about IPv6 -- the next-generation Internet standard. Also covers other IPv6 benefits, such as routing, integrated auto-configuration, quality-of-services (QoS), enhanced mobility, and end-to-end security.
Your essential guide to deploying IPv6 on Windows networks Get in-depth technical information to put IPv6 technology to work—including networks with hardware running Windows 8 and Windows Server 2012. Written by a networking expert, this reference explains IPv6 features and benefits, and provides detailed information to help you implement this protocol. You’ll learn best practices for using IPv6 services in your Windows network, whether you’re an IT professional, a network administrator, or an IT student. Discover how to: Use Windows features and tools to implement IPv6 on your network Set up a test lab to experiment with IPv6 configuration and functionality Understand dynamic routing and the IPv6 routing protocols Use IPv6 transition technologies to support both IPv4 and IPv6 during deployment Implement IPv6 security features and measures Deploy native IPv6 connectivity to an IPv4-only intranet Apply best practices from the Microsoft corporate network case study Test your understanding of IPv6 concepts with end-of-chapter quizzes
Border Gateway Protocol (BGP) is the routing protocol used to exchange routing information across the Internet. It makes it possible for ISPs to connect to each other and for end-users to connect to more than one ISP. BGP is the only protocol that is designed to deal with a network of the Internet's size, and the only protocol that can deal well with having multiple connections to unrelated routing domains.This book is a guide to all aspects of BGP: the protocol, its configuration and operation in an Internet environment, and how to troubleshooting it. The book also describes how to secure BGP, and how BGP can be used as a tool in combating Distributed Denial of Service (DDoS) attacks. Although the examples throughout this book are for Cisco routers, the techniques discussed can be applied to any BGP-capable router.The topics include: Requesting an AS number and IP addresses Route filtering by remote ISPs and how to avoid this Configuring the initial BGP setup Balancing the available incoming or outgoing traffic over the available connections Securing and troubleshooting BGP BGP in larger networks: interaction with internal routing protocols, scalability issues BGP in Internet Service Provider networks The book is filled with numerous configuration examples with more complex case studies at the end of the book to strengthen your understanding. BGP is for anyone interested in creating reliable connectivity to the Internet.
If you're preparing to roll out IPv6 on your network, this concise book provides the essentials you need to support this protocol with DNS. You'll learn how DNS was extended to accommodate IPv6 addresses, and how you can configure a BIND name server to run on the network. This book also features methods for troubleshooting problems with IPv6 forward- and reverse-mapping, and techniques for helping islands of IPv6 clients communicate with IPv4 resources. Topics include: DNS and IPv6—Learn the structure and representation of IPv6 addresses, and the syntaxes of AAAA and PTR records in the ip6.arpa IPv6 reverse-mapping zone BIND on IPv6—Use IPv6 addresses and networks in ACLs, and register and delegate to IPv6-speaking name servers Resolver Configuration—Configure popular stub resolvers (Linux/Unix, MacOS X, and Windows) to query IPv6-speaking name servers DNS64—Learn about the transition technology that allows clients with IPv6-only network stacks to communicate with IPv4 servers Troubleshooting—Use the nslookup and dig troubleshooting tools to look up the IPv6 addresses of a domain name, or reverse-map an IPv6 address to a domain name
IPv6 for Enterprise Networks The practical guide to deploying IPv6 in campus, WAN/branch, data center, and virtualized environments Shannon McFarland, CCIE® No. 5245 Muninder Sambi, CCIE No. 13915 Nikhil Sharma, CCIE No. 21273 Sanjay Hooda, CCIE No. 11737 IPv6 for Enterprise Networks brings together all the information you need to successfully deploy IPv6 in any campus, WAN/branch, data center, or virtualized environment. Four leading Cisco IPv6 experts present a practical approach to organizing and executing your large-scale IPv6 implementation. They show how IPv6 affects existing network designs, describe common IPv4/IPv6 coexistence mechanisms, guide you in planning, and present validated configuration examples for building labs, pilots, and production networks. The authors first review some of the drivers behind the acceleration of IPv6 deployment in the enterprise. Next, they introduce powerful new IPv6 services for routing, QoS, multicast, and management, comparing them with familiar IPv4 features and behavior. Finally, they translate IPv6 concepts into usable configurations. Up-to-date and practical, IPv6 for Enterprise Networks is an indispensable resource for every network engineer, architect, manager, and consultant who must evaluate, plan, migrate to, or manage IPv6 networks. Shannon McFarland, CCIE No. 5245, is a Corporate Consulting Engineer for Cisco serving as a technical consultant for enterprise IPv6 deployment and data center design with a focus on application deployment and virtual desktop infrastructure. For more than 16 years, he has worked on large-scale enterprise campus, WAN/branch, and data center network design and optimization. For more than a decade, he has spoken at IPv6 events worldwide, including Cisco Live. Muninder Sambi, CCIE No. 13915, is a Product Line Manager for Cisco Catalyst 4500/4900 series platform, is a core member of the Cisco IPv6 development council, and a key participant in IETF’s IPv6 areas of focus. Nikhil Sharma, CCIE No. 21273, is a Technical Marketing Engineer at Cisco Systems where he is responsible for defining new features for both hardware and software for the Catalyst 4500 product line. Sanjay Hooda, CCIE No. 11737, a Technical Leader at Cisco, works with embedded systems, and helps to define new product architectures. His current areas of focus include high availability and messaging in large-scale distributed switching systems. n Identify how IPv6 affects enterprises n Understand IPv6 services and the IPv6 features that make them possible n Review the most common tranisition mechanisms including dual-stack (IPv4/IPv6) networks, IPv6 over IPv4 tunnels, and IPv6 over MPLS n Create IPv6 network designs that reflect proven principles of modularity, hierarchy, and resiliency n Select the best implementation options for your organization n Build IPv6 lab environments n Configure IPv6 step-by-step in campus, WAN/branch, and data center networks n Integrate production-quality IPv6 services into IPv4 networks n Implement virtualized IPv6 networks n Deploy IPv6 for remote access n Manage IPv6 networks efficiently and cost-effectively This book is part of the Networking Technology Series from Cisco Press®, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.
Cisco's authorized foundation learning self-study guide for the latest CCDP® ARCH exam • •Developed in conjunction with the Cisco certification team, creators of the newest CCDP ARCH exams and courses. •Fully covers Cisco network design to deliver fundamental infrastructure services. •Contains new coverage of network virtualization, voice, video, QoS, WAN services, and more. •Contains many self-assessment review questions, and a running case study. This is Cisco's authorized, self-paced, foundation learning tool for the latest version of the Cisco ARCH exam, required for the current CCDP certification. It brings together practical knowledge of the latest developments in network design and technologies, including network infrastructure, intelligent network services, and converged network solutions. Readers will gain a thorough understanding of the issues and considerations associated with designing networks that deliver fundamental infrastructure services. As an Authorized Self-Study Guide, this book fully reflects the content of the newest version of the Cisco ARCH course. Each chapter ends with questions designed to help readers assess their understanding as they prepare for the exam. An ongoing case study illustrates and reinforces concepts presented throughout the book. Coverage also includes: network design in the context of Cisco's Preparing, Planning, Designing, Implementing, Operating, and Optimizing (PPDIOO) framework; enterprise campus network and data center design; e-commerce design; SAN design; security services design; IPsec and SSL VPN design; IP multicast design; and network management.
IPv6 was introduced in 1994 and has been in development at the IETF for over 10 years. It has now reached the deployment stage. KAME, the de-facto open-source reference implementation of the IPv6 standards, played a significant role in the acceptance and the adoption of the IPv6 technology. The adoption of KAME by key companies in a wide spectrum of commercial products is a testimonial to the success of the KAME project, which concluded not long ago. This book is the first and the only one of its kind, which reveals all of the details of the KAME IPv6 protocol stack, explaining exactly what every line of code does and why it was designed that way. Through the dissection of both the code and its design, the authors illustrate how IPv6 and its related protocols have been interpreted and implemented from the specifications. This reference will demystify those ambiguous areas in the standards, which are open to interpretation and problematic in deployment, and presents solutions offered by KAME in dealing with these implementation challenges. Covering a snapshot version of KAME dated April 2003 based on FreeBSD 4.8 Extensive line-by-line code listings with meticulous explanation of their rationale and use for the KAME snapshot implementation, which is generally applicable to most recent versions of the KAME IPv6 stack including those in recent releases of BSD variants Numerous diagrams and illustrations help in visualizing the implementation In-depth discussion of the standards provides intrinsic understanding of the specifications
An essential, comprehensive, and practical guide to IPv6 concepts, service implementation, and interoperability in existing IPv4 environments After completing Deploying IPv6 Networks, you will: Understand the current state of IPv6 technologies and services Understand the IPv6 features as they are applied in service deployments Be prepared with guidelines on how to ready your organization for a migration to IPv6 Know how to design and implement an IPv6 production-level network using the book's templates and examples Have the ability to configure and troubleshoot IPv6 networks Know where IPv6 developments are moving in the future Large IPv6 production deployments worldwide are proof that the transition to the next generation of the IP protocol is no longer merely a prediction--IPv6 is now touching all aspects of IP networking and communications. Therefore, understanding the technology and being able to plan, design, and deploy IPv6 services are necessary skills for networking professionals. Deploying IPv6 Networks is an essential guide to IPv6 concepts, service implementation, and interoperability in existing IPv4 environments. You'll learn about IPv6 as a mature technology ready for deployment. Deploying IPv6 Networks goes beyond addressing the basics of IPv6 yet remains accessible to readers unfamiliar with the protocol. With this book in hand, you will learn how to plan, design, deploy, and manage IPv6 services. Deploying IPv6 Networks opens with an updated "Case for IPv6": a review of the IPv4 challenges and the IPv6 opportunities. It then covers the IPv6 concepts related to IP services provided in real networks. Relevant features and corresponding configuration examples are presented in a deployment context as they are applied to the various segments of the network. The IPv6 knowledge accumulated in the first part of the book is revisited in Part II, where it is leveraged in concrete and usable examples that cover most common network environments: MPLS service provider, IP service provider, and enterprise. The structure of Deploying IPv6 Networks enables you to use it as a reference for specific aspects of IPv6, as a technology study guide, or as a design guide for deploying IPv6. You'll also find that the presentation approach enables you to leverage your IPv4 experience to quickly become knowledgeable and proficient with the concepts of IPv6.
Author: Thomas Maufer
Publisher: Pearson P T R
Release Date: 1999
A hands-on guide that teaches the fundamentals of IP addressing, routing, and troubleshooting - with real-world exercises and examples throughout. It contains coverage of the IP protocol itself; how IP operates over Ethernet, Token Ring, ATM, FDDI, and Frame Relay; the interplay between addressing and routing; and OSPF.