EncartaLabs

IPv6 Implementation

( Duration: 5 Days )

IPv6 Implementation training course is a hands-on in-depth technical course covering IPv6 technologies, design, implementations and migration.

By attending IPv6 Implementation workshop, Participants will learn:

  • Features and benefits of IPv6
  • Structure of the IPv6 address format
  • Advanced capabilities of IPv6
  • Implementation Strategies for IPv6 services and applications
  • DHCP and DNS in an IPv6 network
  • Differences between DHCPv6 and DHCP
  • Implement IPv6 over EIGRPv6, OSPFv3, IS-ISv6, BGP, and MPLS networks
  • Implement auto-configuration to manage IPv6 addresses
  • IPv6 multicast and unicast concepts
  • Security concerns related to IPv6 and how to protect your company’s infrastructure from new IPv6 vulnerabilities
  • Why IPv6 provides enhanced IPSec and more reliable QoS
  • How IPv6 provides enhanced support for mobile IP and mobile computing devices
  • Plan and manage the migration of your network to IPv6
  • Deployment strategies to consider when migrating to IPv6
  • How to ensure a smooth transition from IPv4 and coexistence with IPv4 networks
  • Configure the different IPv6 migration tools such as dual-stacks and tunnelling in order to facilitate the transition
  • Configure different IPv6 transition methods for tunneling IPv6 traffic over current IPv4 networks
  • How to tunnel IPv6 over an IPv4 network
  • How IPv6 is supported in Linux, UNIX, Windows and Cisco IOS software

Network Architect and Design Engineers, Operations engineers and technicians dealing with IPv6 configuration and support services, Network Management and Operations, System Engineers, System Verification, Validation and Testing Network Administrators.

COURSE AGENDA

1

Overview of IPv6

  • IPv6 in a nutshell
  • Key differences between IPv4 and IPv6
  • The Fields in the IPv6 Header
  • Detailed overview of IPv6 headers and extension headers
  • The Structure of the IPv6 Protocol
  • IPv6 Deployment Strategies
  • Planning to Deploy IPv6
  • Identifying Requirements
  • Selecting a Deployment Strategy
  • Deployment Strategies: Primary Uses, Benefits, and Limitations
  • Deploying IPv6 over IPv4 Tunnels
  • Deploying IPv6 over Dedicated Data Links
  • Deploying IPv6 over MPLS Backbones
  • Deploying IPv6 Using Dual-Stack Backbones
  • Protocol Translation Mechanisms
2

IPv6 Address Architecture

  • The IPv6 Address Space
  • Differences from IPv4 (e.g., no broadcast, minimum MTU, no fragmentation, etc.)
  • Link- and Site-Local Addresses
  • Global Routing Prefixes
  • Unicast, multicast, and anycast
  • Global Unicast Address
  • Special addresses
  • Address types, notations, and prefixes
  • Jumbograms
  • Advanced IPv6 Addressing
  • Advanced Subnetting
3

ICMPv6

  • Differences from IPv4
  • Path MTU discovery
  • Neighbor Discovery (ND)
  • Network Renumbering
  • Multicast Listener Discovery (MLD)
  • Multicast Router Discovery (MRD)
  • Neighbor Solicitation
  • Neighbor Advertisement
  • Router Solicitation
  • Router Advertisement
4

Autoconfiguration

  • Stateless and stateful
  • Neighbor discovery and secure neighbor discovery
  • Router advertisement and solicitation
  • Duplicate address detection
  • DHCPv6
  • Ethernet Support
  • Layer 2 Support for IPv6
  • Ethernet frame differences from IPv4
  • VLAN support
  • How IPv6 discovers MAC addresses for remote hosts (ARP equivalent)
  • How IPv6 discovers local static IPv6 addresses based on MAC address
  • Detecting Network Attachment (DNA)
5

Multicast Services

  • Differences from IPv4
  • Multicast address space and reserved/special addresses
  • MLDv2 for IPv6
  • IGMPv3
6

Securing IPv6 networks

  • IPv6 and IPv4 Threat Comparison
  • Mitigating IPv6 Threats
  • IPv6 end-to-end security
  • IPsec, VPNs, IKE, PKI
  • Threat Analysis Attacks in IPv6
  • ICMP, ICMP Attack, Ping Attack, Smurf Attack, PING Flood,Pingof Death
  • Reconnaissance Unauthorized Access
  • Header Manipulation and Fragmentation
  • Layer 3-Layer 4 Spoofing ARP and DHCP Attacks Broadcast Amplification Attacks (smurf)
  • Routing Attacks
  • Viruses and Worms
  • Application Layer Attacks
  • Rogue Devices
  • Flooding Denial of service attacks (DOS)
  • Man-in-the-middle attacks
  • ARP poisoning and ICMP redirect
  • Port scanning
  • Authentication and Encryption
  • IPSec
  • Differences from IPv4
  • Key Management
  • Security Associations
  • Tunnel vs. transport mode
  • ESP
  • AH
  • Operational issues
  • Transition and IPv4 Interoperability
  • Basic Transition Mechanisms for IPv6 Hosts and Routers
7

Transition and Implementation Mechanisms

  • Dual IP stack implementation
  • IPv4-mapped IPv6 addresses
  • Tunneling
  • Automatic tunneling
  • Configured and automated tunneling (6in4)
  • Proxying and translation for IPv6-only hosts Dual stack
  • Dual-Stack
  • DS-Lite (Dual-Stack Lite)
  • 6over4
  • BIS-Bump-in-the-Stack (RFC 2767)
  • BIA-Bump-in-the-API (RFC 3338)
  • Automatic and configured tunneling
  • 6to4
  • IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
  • Teredo
  • DSTM
  • IPv6 Tunnel brokers
  • IPv6 Tunnel Broker with the Tunnel Setup Protocol (TSP)
  • 4in6
  • 6in4
  • ISATAP
  • Translations
  • SIIT6over4
  • NAT-PT
  • NAPT-PT
  • Stateless IP/ICMP Translation (SIIT)
  • Transport Relay Translation (TRT)
  • Socks-based Gateway (RFC 3089)
8

Differences in Transport and Application Protocols from IPv4

  • DNS in IPv6
  • Changes to DNS for IPv6
  • IPv6 AAAA resource records
  • PTR records and IPv6
  • Reverse lookups in IPv6
  • ip6.arpa. & ip6.int.
  • IPv6 in BIND and MS DNS
  • IPv6 and EDNS0
  • SNMP
  • DHCP
  • FTP
  • Trivial File Transfer Protocol
  • SSH/SFTP/SCP
  • syslog SIP/SIPS
  • HTTP/HTTPS
  • TLS/DTLS
  • RTP/SRTP/cRTP
  • RTCP
  • RTSP
  • UDP
  • TCP
  • SCTP
9

IPv6 Routing Protocols

  • IPv6 Dynamic Routing
  • ICMPv6 Redirects
  • RIPng
  • OSPF for IPv6 (OSPFv3)
  • BGP-4 Support for IPv6
  • OSPFv3
  • IS-IS and IPv6
  • IGRPv6
  • BGPv4 & IPv6
  • IPv6 Multicast Routing
  • IPv6 Multicast Routing
  • IPv6 PIM-DM
  • IPv6 PIM-SM
  • Advertising IPv6 addresses on an IPv4 network
  • Advanced IS-IS
  • NAT-PT
  • 6PE
  • 6VPE
10

IPv6 and QoS

  • Traffic classes in IPv6
  • Flow label
  • Differential services (DiffServ)
  • Integrated services (IntServ)
  • RSVP (Resource Reservation Protocol)
  • Explicit congestion notification (ECN)
11

IPv6 for Windows

  • IPv6 Deployment Strategies for Windows 2000
  • Microsoft .NET
  • Application Changes
  • IPv6 ping, telnet and FTP
  • Mail systems and IPv6
  • IPv6 enabled web-servers
  • The Programming Interface
  • Socket Library changes for IPv6
  • IPv6 Code Migration Tools
  • Sockets & Winsock APIs
  • Perl, Java, C# support for IPv6
12

IPv6 Linux Programming APIs

  • Linux IPv6 Programming Interface
  • Port and Sockets
  • Socket Library for IPv6
  • The updated Socket API
  • IPv6 Socket Programming
  • Socket Programming with TCP
  • Changes socket API for IPv6 Support
  • IPv6 Code sequence
  • Socket Interface
  • Address data structures
  • Name-to-address translation functions
  • Address conversion functions
  • Perl, Java, C# support for IPv6
  • IPv6-ready system check
  • Configuring interfaces
  • Configuring normal IPv6 routes
  • Neighbor Discovery
  • Kernel settings in /proc-filesystem
  • Netlink-Interface to kernel
  • Address Resolver
  • Network debugging
  • Support for persistent IPv6 configuration in Linux distributions
  • Auto-configuration
  • Mobility
  • Firewalling
  • Security
  • Encryption and Authentication
  • Quality of Service (QoS)
  • IPv6-enabled daemons
13

Building the Linux kernel for IPv6 support

  • Configuring a Linux server for IPv6
  • Linux IPv6 protocol implementation
  • Setting system parameters
  • Resolving names
  • IP address configuration
  • DNS configuration (client and server)
  • SNMP configuration
  • xinetd configuration
  • ip6tables configuration
  • NTP configuration
  • NFS configuration (NFS packet security emphasis)
  • sshd configuration
  • syslog configuration
14

Getting connected

  • Tunnel types
  • Setting up the tunnel
  • Allowing proto-41 traffic
  • Setting up an IPv6-capable gateway
  • Enabling forwarding
  • apache/lighttpd configuration
  • other services (instructor suggestions requested)
  • IPSec Key Management
15

Cisco IOS Router IPv6

  • Preference
  • Privacy Extensions
  • Packet Filter/Firewall
  • Access control lists (ACLs)
  • Tunneling IPv4/IPv6
  • Configured tunnels
  • DHCPv6
  • PPPv6
  • Routing
  • Management
  • User Access and Privilege Levels
  • TACACS+
  • Using privacy and temporary addresses
  • Enabling IPv6 Routing and Configuring IPv6 Addressing
  • Mapping Host Names to IPv6 Addresses
  • Monitoring and Maintaining IPv6

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 3,500 Modules on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 20,000 corporate candidates across india and abroad
  • All our trainings are conducted in workshop mode with more focus on hands On

View our other course offerings by visiting www.encartalabs.com/course-catalogue

Contact us for delivering this course as a public/open-house workshop for a group of 10+ candidates at our venue

Top