OReilly IPv6 essentials 2nd edition may 2006 ISBN 0596100582

IPv6 Essentials By Silvia Hagen Publisher: O'Reilly Pub Date: May 2006 Print ISBN-10: 0-596-10058-2 Print ISBN-13: 978-0-59-610058-2 Pages: 436 Table of Contents | Index IPv6 Essentials, Second Edition provides a succinct, in-depth tour of all the new features and functions in IPv6 It guides you through everything you need to know to get started, including how to configure IPv6 on hosts and routers and which applications currently support IPv6 The new IPv6 protocols offers extended address space, scalability, improved support for security, real-time traffic support, and auto-configuration so that even a novice user can connect a machine to the Internet Aimed at system and network administrators, engineers, network designers, and IT managers, this book will help you understand, plan for, design, and integrate IPv6 into your current IPv4 infrastructure Beginning with a short history of IPv6, author Silvia Hagen provides an overview of new functionality and discusses why we need IPv6 Hagen also shares exhaustive discussions of the new IPv6 header format and Extension Headers, IPv6 address and ICMPv6 message format, Security, QoS, Mobility and, last but not least, offers a Quick Start Guide for different operating systems IPv6 Essentials, Second Edition also covers: In-depth technical guide to IPv6 Mechanisms and Case Studies that show how to integrate IPv6 into your network without interruption of IPv4 services Routing protocols and upper layer protocols Security in IPv6: concepts and requirements Includes the IPSEC framework and security elements available for authentication and encryption Quality of Service: covers the elements available for QoS in IPv6 and how they can be implemented Detailed discussion of DHCPv6 and Mobile IPv6 Discussion of migration cost and business case Getting started on different operating systems: Sun Solaris, Linux, BSD, Windows XP, and Cisco routers Whether you're ready to start implementing IPv6 today or are planning your strategy for the future, IPv6 Essentials, Second Edition will provide the solid foundation you need to get started "Silvia's look at IPv6 is always refreshing as she translates complex technology features into business drivers and genuine end-user benefits to enable building new business concepts based on end to end models." Latif Ladid, President IPv6 Forum, Chair EU IPv6 Task Force IPv6 Essentials By Silvia Hagen Publisher: O'Reilly Pub Date: May 2006 Print ISBN-10: 0-596-10058-2 Print ISBN-13: 978-0-59-610058-2 Pages: 436 Table of Contents | Index Copyright Preface Chapter 1 Why IPv6? Section 1.1 The History of IPv6 Section 1.2 What's New in IPv6? Section 1.3 Why Do We Need IPv6? Section 1.4 Common Misconceptions Section 1.5 When Is It Time for IPv6? Section 1.6 IPv6 Around the World Section 1.7 IPv6 Status and Vendor Support Section 1.8 References Chapter 2 The Structure of the IPv6 Protocol Section 2.1 General Header Structure Section 2.2 The Fields in the IPv6 Header Section 2.3 Extension Headers Section 2.4 References Chapter 3 IPv6 Addressing Section 3.1 The IPv6 Address Space Section 3.2 Address Types Section 3.3 Address Notation Section 3.4 Prefix Notation Section 3.5 Global Routing Prefixes Section 3.6 Global Unicast Address Section 3.7 Special Addresses Section 3.8 Link- and Site-Local Addresses Section 3.9 Anycast Address Section 3.10 Multicast Address Section 3.11 Required Addresses Section 3.12 Default Address Selection Section 3.13 References Chapter 4 ICMPv6 Section 4.1 General Message Format Section 4.2 ICMP Error Messages Section 4.3 ICMP Informational Messages Section 4.4 Processing Rules Section 4.5 The ICMPv6 Header in a Trace File Section 4.6 Neighbor Discovery (ND) Section 4.7 Autoconfiguration Section 4.8 Network Renumbering Section 4.9 Path MTU Discovery Section 4.10 Multicast Listener Discovery (MLD) Section 4.11 Multicast Router Discovery (MRD) Section 4.12 References Chapter 5 Security with IPv6 Section 5.1 General Security Concepts Section 5.2 General Security Practices Section 5.3 IPsec Basics Section 5.4 IPv6 Security Elements Section 5.5 Overview of New IPsec RFCs Section 5.6 Interaction of IPsec with IPv6 Elements Section 5.7 IPv6 Security "Gotchas" Section 5.8 Enterprise Security Models for IPv6 Section 5.9 References Chapter 6 Quality of Service Section 6.1 QoS Basics Section 6.2 QoS in IPv6 Protocols Section 6.3 Using QoS Section 6.4 References Chapter 7 Networking Aspects Section 7.1 Layer 2 Support for IPv6 Section 7.2 Detecting Network Attachment (DNA) Section 7.3 References Chapter 8 Routing Protocols Section 8.1 The Routing Table Section 8.2 RIPng Section 8.3 OSPF for IPv6 (OSPFv3) Section 8.4 BGP-4 Support for IPv6 Section 8.5 Additional Routing Protocols for IPv6 Section 8.6 References Chapter 9 Upper-Layer Protocols Section 9.1 UDP/TCP Section 9.2 DHCP Section 9.3 DNS Section 9.4 SLP Section 9.5 FTP Section 9.6 Telnet Section 9.7 Web Servers Section 9.8 References Chapter 10 Interoperability Section 10.1 Dual-Stack Techniques Section 10.2 Tunneling Techniques Section 10.3 Network Address and Protocol Translation Section 10.4 Comparison Section 10.5 Integration Scenarios Section 10.6 Case Studies Section 10.7 What Is Missing? Section 10.8 Security Aspects Section 10.9 Applications Section 10.10 Cost of Introduction Section 10.11 Vendor Support Section 10.12 References Chapter 11 Mobile IPv6 Section 11.1 Overview Section 11.2 The Mobile IPv6 Protocol Section 11.3 ICMPv6 and Mobile IPv6 Section 11.4 Mobile IPv6 Communication Section 11.5 Security Section 11.6 Extensions to Mobile IPv6 Section 11.7 References Chapter 12 Get Your Hands Dirty Section 12.1 Linux Section 12.2 BSD Section 12.3 Sun Solaris Section 12.4 Macintosh Section 12.5 Microsoft Section 12.6 Cisco Router Section 12.7 Applications Section 12.8 Description of the Tests RFCs Section A.1 General RFC Information Section A.2 Drafts Section A.3 RFC Index for IPv6 IPv6 Resources Section B.1 Ethertype Field Section B.2 Next Header Field Values (Chapter 2) Section B.3 Reserved Anycast IDs (Chapter 3, RFC 2526) Section B.4 Values for the Multicast Scope Field (Chapter 3, RFC 4291) Section B.5 Well-Known Multicast Group Addresses (Chapter 3, RFC 2375) Section B.6 ICMPv6 Message Types and Code Values (Chapter 4, RFC 2463) Section B.7 QoS in IPv6 (Chapter 6) Section B.8 Multicast Group Addresses and Token Ring Functional Addresses (Chapter 7) Section B.9 OSPFv3 Messages and the Link State Database (Chapter 8) Section B.10 BGP-4 Message Types and Parameters (Chapter 8) Section B.11 DHCPv6 and Multicast Addresses for SLP over IPv6 (Chapter 9) Section B.12 Mobile IPv6 (Chapter 11, RFC 3775) Recommended Reading About the Author Colophon Index IPv6 Essentials, Second Edition by Silvia Hagen Copyright © 2006, 2002 O'Reilly Media, Inc All rights reserved Printed in the United States of America Published by O'Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472 O'Reilly books may be purchased for educational, business, or sales promotional use Online editions are also available for most titles (safari.oreilly.com) For more information, contact our corporate/institutional sales department: (800) 998-9938 or corporate@oreilly.com Editor: Tatiana Apandi and Mike Loukides Production Editors: Reba Libby and Genevieve d'Entremont Copyeditor: Reba Libby Proofreader: Genevieve d'Entremont Indexer: John Bickelhaupt Cover Designer: Hanna Dyer Interior Designer: David Futato Illustrators: Robert Romano and Jessamyn Read Printing History: May 2006: Second Edition July 2002: First Edition Nutshell Handbook, the Nutshell Handbook logo, and the O'Reilly logo are registered trademarks of O'Reilly Media, Inc IPv6 Essentials, the image of a rigatella snail, and related trade dress are trademarks of O'Reilly Media, Inc Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks Where those designations appear in this book, and O'Reilly Media, Inc was aware of a trademark claim, the designations have been printed in caps or initial caps While every precaution has been taken in the preparation of this book, the publisher and author(s) assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein ISBN: 0-596-10058-2 [M] Preface This book is about the next generation Internet protocol We have become familiar with the strengths and weaknesses of IPv4; we know how to design and configure it, and we have learned how to troubleshoot it And now we have to learn a new protocol? Start from scratch? Not really The designers of IPv6 have learned a lot from over 15 years of experience with IPv4, and they have been working on the new protocol since the early 1990s They retained the strengths of IPv4, extended the address space from 32 bits to 128 bits, and added functionality that is missing in IPv4 They developed transition mechanisms that make IPv4 and IPv6 coexist peacefully and that guarantee a smooth transition between the protocols In fact, this was one of the major requirements for the development of the new protocol version So you do not need to forget what you know about IPv4; many things will feel familiar with IPv6 When you get started, you will discover new features and functionalities that will make your life a lot easier IPv6 has features that you will need in tomorrow's networksfeatures that IPv4 does not provide The day will come when our Personal Digital Assistants (PDAs) and mobile phones have IP addresses Aside from the fact that the IPv4 address space could never cover the demand for that number of IP addresses, imagine configuring those devices with the means we have today! One of the coolest features built into IPv6 is the autoconfiguration capability Haven't we always struggled with IP address assignment? The advent of DHCP made our lives a little easier, but now we need to maintain and troubleshoot the DHCP servers And when our refrigerator, our PDA, and our TV each have an IP address, will we need a DHCP server at home? Not with autoconfiguration If you have an IPv6-enabled host, you can plug it into your network, and it will configure automatically for a valid IPv6 address Internet Control Message Protocol (ICMP), which is a networker's best friend, has become much more powerful with IPv6 Many of the new features of IPv6, such as autoconfiguration, optimized multicast routing and multicast group management, Neighbor Discovery, path MTU discovery, and Mobile IPv6 are based on ICMPv6 I hope that this book will help you to become familiar with the protocol and provide an easy-to-understand entry point and guide to exploring this new area Audience This book covers a broad range of information about IPv6 and is an excellent resource for anybody who wants to understand or implement the protocol Whether you are the owner or manager of a company or an IT department; whether you are a system or network administrator, an engineer, or a network designer; or whether you are just generally interested in learning about the important changes with IPv6, this book discusses economic and strategic aspects as well as technical details I describe interoperability mechanisms and scenarios that ensure a smooth introduction of IPv6 Quick start guides for different operating systems help with the first hands-on steps If you are a company owner or manager, you will be most interested in Chapters 1 and 10 If you need to plan your corporate network strategy, you will be most interested in Chapters 1, 4, 8, 9, and 10 If you manage the infrastructure in your company, you will especially be interested in Chapters 4, 7, and 8, which cover ICMPv6, Layer 2 issues and routing, and in Chapter 10, which addresses interoperability If you are a system or network administrator, all chapters are relevant: this book provides a foundation for IPv6 implementation and integration with IPv4 About This Book Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] QoS (Quality of Service) 2nd 6net tests codepoint pools currently defined router types DiffServ (Differentiated Services) 2nd IntServ (Integrated Services Architecture) IPv6 protocols and IPv6 Extension headers IPv6 headers IPv6 Label Switch Architecture (6LSA) PHB (Per Hop Behavior) RFCs using Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] RCoA (Regional Care-of Address) Regional Care-of Address (RCoA) regional registry services registration Rendezvous Point renumbering request messages required addresses reserved anycast IDs 2nd response messages Return Routability Procedure 2nd reverse path forwarding (RPF) interface RFC 1752 RFC 1883 (Internet Protocol, Version 6 (IPv6) Specification) RFC 2235 (Hobbes' Internet Timeline) RFC 4109 RFCs (Request for Comments) important basic RFCs index for IPv6 RFCs general IPv6 RFCS RFCs referring to topologies RIPng changes in topology route poisoning control functions and security distance-vector algorithm limitations message format Next Hop information packet processing request messages response messages split horizon and poison reverse timers triggered updates route Route Optimization 2nd 3rd route source Router Advertisement packets Router Alert option Router Discovery router support for IPv6 routers currently defined router types Routing header fields processing Routing Header, type 2 routing protocols BGP-4, support for IPv6 AS types BGP path attributes establishing a BGP connection message headers multiprotocol extension NOTIFICATION and KEEPALIVE messages OPEN message route storage and policies UPDATE message drafts EIGRP DUAL (Diffuse-Update-Algorithm) IPv6 support neighbors packet format packet types protocol dependent modules IS-IS multicast routing RFCs routing tables routing tables default routes lookup and content routing-loop nested encapsulation RPF (reverse path forwarding) interface RSVP (Resource Reservation Protocol) 2nd Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] SAD (Security Association Database) SAs (Service Agents) scopes SCP (Secure Copy) Secret Key Cryptography Secure Copy (SCP) SEcure Neighbor Discovery (SEND) 2nd security AAA triad authentication algorithms CIA triad contrasts, IPv4 and IPv6 coordination on dual IPv4 and IPv6 networks DHCP concerns drafts encryption algorithms enterprise models for IPv6 firewall filter rules new model IPsec interaction with IPv6 key management RFCs overview SA (Security Associations) IPv6 security elements AH and ESP combined AHs (Authentication Headers) ESPs (Encapsulating Security Payload Headers) mobile IPv6 native IPv6 firewalls and intrusion detection/prevention IPsec implementation issues multicast issues Neighbor Discovery issues port scanning transition and tunneling mechanisms nonrepudiation practices RFCs security concepts Security Association Database (SAD) Security Policy Database (SPD) SEND (SEcure Neighbor Discovery) 2nd Service Agents (SAs) Service Location Protocol (SLP) shared unicast address Shim6 Silkroad site-level aggregation identifier (SLA) site-local addresses SKEME (Versatile Secure Key Exchange Mechanism for the Internet) SLP (Service Location Protocol) solicited-node multicast addresses Source address field source filtering Source Specific Multicast (SSM) 2nd SPD (Security Policy Database) 2nd special addresses 6to4 addresses IPv6 addresses with embedded IPv4 addresses ISATAP addresses loopback address pseudo interfaces Teredo addresses unspecified address split horizon SSH (Secure SHell) SSM (source-specific multicast) 2nd Stateful autoconfiguration or Stateful DHCPv6 Stateless autoconfiguration network access and Stoll, Clifford stub areas stub AS subnet ID subnet-router anycast address Sun Solaris and IPv6 enabling IPv6 utilities symbols symmetric key encryption Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] TCP connections Telnet Teredo implementation terms Teredo addresses Time Exceeded error message Token Ring mapping IPv6 multicast addresses to Token Ring Functional addresses 2nd top-level aggregation identifier (TLA) traceroute Traffic Class field transit AS transition mechanisms 6PE 6to4 Bump-in-the-API Bump-in-the-Stack DSTM GRE ISATAP MPLS NAT-PT Proto 41 Forwarding Silkroad SSH Teredo Transport Relay Translator Tunnel Broker VLANs Transport Relay Translator (TRT) TRT (Transport Relay Translator) Tunnel Broker tunnel entry point tunnel exit point tunneling 2nd 3rd automatic tunneling Cisco 6PE compared to other methods concepts configured tunneling DSTM encapsulation in IPv6 GRE IPv4/IPv6 coexistence using VLANs IPv6 in MPLS networks ISATAP Proto 41 Forwarding Silkroad SSH (Secure SHell) Teredo transition mechanisms 6to4 Tunnel Brokers Tunnel Servers Twisted Pair Ethernet Type of Service Byte (ToS) Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] UAs (User Agents) UDP/TCP unicast addresses unique local IPv6 unicast address Univerity of Strasbourg case study University of Porto case study access/perimeter technology core and vertical distribution cost network services security unspecified address 2nd upper-layer protocols browsers checksumming DNS AAAA records DNS lookup DNS resolvers DNS servers drafts FTP IP addressing and proxy support RFCs SLP Telnet UDP/TCP web servers URL format, IPv6 User Agents (UAs) Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] vendor support for IPv6 Version field virtual links VLANs Index [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] web servers, IPv6-compatible wireless industry, impact on address usage ... Latif Ladid, President IPv6 Forum, Chair EU IPv6 Task Force IPv6 Essentials By Silvia Hagen Publisher: O'Reilly Pub Date: May 2006 Print ISBN- 10: 0-596-10058-2 Print ISBN- 13: 978-0-59-610058-2... Why IPv6? Section 1.1 The History of IPv6 Section 1.2 What's New in IPv6? Section 1.3 Why Do We Need IPv6? Section 1.4 Common Misconceptions Section 1.5 When Is It Time for IPv6? Section 1.6 IPv6 Around the World... DHCPv6 and Multicast Addresses for SLP over IPv6 (Chapter 9) Section B.12 Mobile IPv6 (Chapter 11, RFC 3775) Recommended Reading About the Author Colophon Index IPv6 Essentials, Second Edition by Silvia Hagen Copyright © 2006, 2002 O'Reilly Media, Inc