02 brocade migration scenarios andrecommendations to give away

8/12/2019 02 Brocade Migration Scenarios AndRecommendations to Give Away

1/14

IPv6 - Migration Scenarios

and Recommendations

Emanuel KleindienstSAM Brocade Communications

ekleindi atbrocade dotcom

June, 11th, 2013, Zurich IPv6 Conference

1 2013 Brocade Communications Systems, Inc. Company Proprietary Information


2/14

Agenda

10/06/2013 2013 Brocade Communications Systems, Inc. Company Proprietary Information 2

Prefetch, how to run this session, language, interactions How to get IPv6 addresses? RIPE policies

Politics & Lobbying, reasons for IPv6 implementation,

arguments in favour

Concepts, testingand rough budget estimation Step-by-step implementation of IPv6 into TCP/IP

networks

Quick look at Brocades SDN IPv6 readiness Contact and link-collection


3/14

How to run this session


Language?Who what's it in German? Who inEnglish?

I shall give you an brief overview about the topics

and step-by-steps

Thereafter we shall do it interactive

We should share our experiences

to get most out of it


4/14

How to get IPv6 addresses?


If you are LIR (RIPE member) already, its verysimple

Just go to https://lirportal.ripe.net/, login and fill

in the forms - done

If you are not a LIR you need to talk to your ISPProblem:re-addressing when changing ISPAlways insist to get PI IPv6 address block(s)

Youll get one or more /48, depending on your

needs

You pay something for your RIPE objects, usually~CHF 100.00 per object per annum
https://lirportal.ripe.net/https://lirportal.ripe.net/https://lirportal.ripe.net/


5/14

Politics & Lobbying


Unfortunately IT decision makers dont see the value for IPv6 yet

We will sooner or later run out of IPv4 addresses

Not having IPv6 implemented affects your reachability from and to

IPv6 only content and customers

Tunnelling usually sucks because of inconstancy of all the various6to4to6 tunnelling mechanisms and its routing tables -> latency

and bandwidth problems

Implementing tunnelling mechanisms causes

additional work which is not concluding

as youll have to go to IPv6 one day anyway

Financial: its difficult to estimate additional

one-off and recurring costs, but budgets

needed to be doneat first


6/14

Concepts, testing & budgets


Test all respective devices AND processes before implementinganything -> you know about that ;-)

Trainings needs to be done to all levels to drive awareness.

As heard earlier today, test and check all your security mechanism

and follow the rules, experiences and suggestions

Go through your inventory and check what needsto be done on all gear to make it IPv6 ready


7/14 2013 Brocade Communications Systems, Inc. Company Proprietary Information

IPv4 and IPv6 Header Comparison

Fragment

OffsetFlags

Total LengthType of

ServiceIHL

PaddingOptions

Destination Address

Source Address

Header ChecksumProtocolTime to Live

Identification

Version

IPv4 Header

Next

Header

Hop Limit

Flow LabelTraffic

Class

Destination Address

Source Address

Payload Length

Version

IPv6 Header

Fields Name Kept from IPv4 to IPv6

Fields Not Kept in IPv6

Name and Position Changed in IPv6

New Field in IPv6

Legend

10/06/2013


8/14

Step-by-step implementation #1


Get your /48 IPv6 PI IP address range(s) doneDo your IP address scheme and policies according your existing

IPv4 scheme(s)

Enable dualstack on all your core routers and in your core network

FIRST! -> if applicable -> talk to your ISP about

Enable dualstack for services like (reverse)DNS, DHCP(v6), etc.

Enable dualstack for Email- and other DMZ-Services (e.g. VPN

gateways)

Only after that, enable your boarder-, access router and/or firewalls

Pain:firewall compatibility Enable dualstack for your web- and extranet services. Bear in mind

to check and configure all relevant services with this steps, e.g.

picture database servers, webshops, CMS etc.


9/14



Enable dualstack on local hubs, access routers in branch offices

(VPN), and datacenter

Enable dualstack on (file) servers and client computers ->

datacenter services, VMWare-enviroment(s)

Enable dualstack on peripheral devices like printers etc.

Pain: Older router OS, memory, flash In MS Windows ADS enviroments, think accurately about DHCP-

and directory services.

Pain:MS Windows ADS, SLAAC oder DHCPv6? Which device(s)become your DHCPv6 server(s)?

How about spam filters based on IP-address ranges and/or spam-

rejecter-lists (e.g. Spamhouse.org)?


10/14



Other services? Your suggestions and experiences?


11/14

BROCADE INNOVATION FOR CLOUD

ETHERNET FABRIC 100 GBECAMPUS LAN 16 GBPS SANSOFTWARE-DEFINED

NETWORKING



12/1412

Brocade Software-Defined Network (SDN)

the BlueprintA LAYERED APPROACH TO SDN

EnablingTechnologies

KeyBenefits

Cloud-OptimizedNetwork Stack

Automated Provisioningloud Management Layer

Customizationand Monetizationpplication Layer

Multi-tenancy, ResourceUtilization, Service Agilityirtualization Layer

Orchestration Interface

SDN Applications

Overlay Networks, OpenFlow

Ethernet Fabric,SuperCore Routing

Operational Simplicity,Scalable Capacityetwork Layer

2013 Brocade Communications Systems, Inc. Company Proprietary Information 10/06/2013


13/14

Links


Brocade Software-Defined Network (SDN)http://www.brocade.com/launch/sdn/index.html

RIPE IPv6 Address Allocation and Assignment Policyhttp://www.ripe.net/ripe/docs/ripe-552#IPv6_PI_Assignments

IPv6 Roll-out, Olivier MJ Crpin-Leblond, [email protected]://slidesha.re/11QTadp

DHCPv6 and SLAAC within MS Windows ADShttp://slaco.net/general/dhcpv6-and-slaac/http://bit.ly/Mbw4qK

DHCPv6 Wikihttp://en.wikipedia.org/wiki/DHCPv6

Wiki: IPv6 transition mechanismshttp://en.wikipedia.org/wiki/IPv6_transition_mechanisms

IPv6 migration guide: Essential knowledge for a smooth transitionhttp://bit.ly/R9uqNY

Deploying IPv6 in the Google Enterprise Networkhttp://bit.ly/14ORSl7
http://www.brocade.com/launch/sdn/index.htmlhttp://www.ripe.net/ripe/docs/ripe-552mailto:[email protected]://slidesha.re/11QTadphttp://slaco.net/general/dhcpv6-and-slaac/http://bit.ly/Mbw4qKhttp://en.wikipedia.org/wiki/DHCPv6http://en.wikipedia.org/wiki/IPv6_transition_mechanismshttp://bit.ly/R9uqNYhttp://bit.ly/14ORSl7http://bit.ly/14ORSl7http://bit.ly/14ORSl7http://bit.ly/R9uqNYhttp://bit.ly/R9uqNYhttp://en.wikipedia.org/wiki/IPv6_transition_mechanismshttp://en.wikipedia.org/wiki/IPv6_transition_mechanismshttp://en.wikipedia.org/wiki/IPv6_transition_mechanismshttp://en.wikipedia.org/wiki/DHCPv6http://en.wikipedia.org/wiki/DHCPv6http://en.wikipedia.org/wiki/DHCPv6http://bit.ly/Mbw4qKhttp://bit.ly/Mbw4qKhttp://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slaco.net/general/dhcpv6-and-slaac/http://slidesha.re/11QTadphttp://slidesha.re/11QTadpmailto:[email protected]://www.ripe.net/ripe/docs/ripe-552http://www.ripe.net/ripe/docs/ripe-552http://www.ripe.net/ripe/docs/ripe-552http://www.ripe.net/ripe/docs/ripe-552http://www.ripe.net/ripe/docs/ripe-552http://www.brocade.com/launch/sdn/index.htmlhttp://www.brocade.com/launch/sdn/index.html


14/14

Thank You for being here today!

Emanuel Kleindienst

SAM Brocade Communications

ekleindi atbrocade dotcom

June, 11th, 2013, Zurich IPv6 Conference

14 2013 Brocade Communications Systems Inc Company Proprietary Information

02 brocade migration scenarios andrecommendations to give away

Documents