ipv6-lan-v3.0

32
IPv6 - Telefonica Day Luis Anzola SWAT Team Consultant CCIEx2 #21959 RS/SP

Upload: cyoncon

Post on 11-Sep-2015

216 views

Category:

Documents


0 download

DESCRIPTION

ipv6

TRANSCRIPT

Nombre Presentacin

IPv6 - Telefonica DayLuis AnzolaSWAT Team ConsultantCCIEx2 #21959 RS/SP

AgendaIPv4 Depletion & IPv6 AdoptionIPv6 Transition AnalysisApproach to Successful IPv6 Adoption

2IPv4 Depletion & IPv6 Adoption4Quick History of the Internet ProtocolInternet Protocol version 4 (IPv4, or just IP)First developed for the original Internet (ARPANET) in spring 1978Deployed globally with growth of the InternetTotal of 4 billion IP addresses availableWell adopted and used by every ISP and hosting company to connect customers to the InternetAllocated based on documented need

The maximum prefix size that may be assigned shall be a /24 and the minimum a /21. Initial assignments of a block larger than a /21 must follow the additional requirements.45Quick History of the Internet ProtocolInternet Protocol version 6 (IPv6)Design started in 1993 when IETF forecasts showed IPv4 depletion between 2010 and 2017Completed, tested, and available for production since 1999Total of 340 trillion trillion trillion IP addresses available = 340,282,366,920,938,463,463,374,607,431,768,211,456Used and managed similar to IPv4

IPv6 provides a much larger pool of IP addresses. IPv6 is not backwards compatible with IPv4. The much larger IPv6 numbering system is meant to one day completely replace IPv4, but this will take many years. In the meantime, much of the Internet will run IPv4 and IPv6 simultaneously. This is necessary to ensure all users, regardless of the protocol version they are using, will be able to interact with all content on the Internet.

56IPv4 versus IPv6IP version IPv4 IPv6Deployed1981 1999 Address Size 32-bit number 128-bit number Address FormatDotted Decimal Notation: 192.0.2.76 Hexadecimal Notation: 2001:0DB8:0234:AB00:0123:4567:8901:ABCD Number of Addresses 232 = 4,294,967,296

2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456Examples of Prefix Notation

192.0.2.0/2410/8

(a /8 block = 1/256th of total IPv4 address space = 224 = 16,777,216 addresses)2001:0DB8:0234::/48 2600:0000::/127IPv4 Address Space Utilization

*as of 3 February 2011The five RIRs each get IPv4 address space from the Internet Assigned Numbers Authority (IANA). The RIRs then use that IPv4 address space to satisfy requests for the resource in their respective regions. This slide indicates what has already been allocated to the RIRs and what is unavailable. The IANA pool of IPv4 addresses fully depleted on February 3, 2011. The unavailable address space includes Class D multicast address space, Class E experimental address space, and the address space identified in RFC 1918.

7Available IPv4 Space in /8s 8

* The IANA pool of IPv4 address space depleted on February 3, 2011. This graph shows the steady depletion of that pool over time.8IPv4 Depletion Situation Report9

Each RIR received its last /8 from IANA on 3 February 2011. The IANA free pool of IPv4 addresses has reached 0%. While each RIR currently has IPv4 addresses to allocate, it is impossible to predict when each RIR will run out. ARIN publishes an inventory of available IPv4 addresses, updated daily, at www.arin.net

African Network Information Centre (AfriNIC) for AfricaAmerican Registry for Internet Numbers (ARIN) for the United States, Canada, several parts of the Caribbean region, and Antarctica.Asia-Pacific Network Information Centre (APNIC) for Asia, Australia, New Zealand, and neighboring countriesLatin America and Caribbean Network Information Centre (LACNIC) for Latin America and parts of the Caribbean regionRseaux IP Europens Network Coordination Centre (RIPE) for Europe, the Middle East, and Central Asia9IPv4 & IPv6 - The Bottom Line10

Were running out of IPv4 address space.IPv6 must be adopted for continued Internet growth.IPv6 is not backwards compatible with IPv4.We must maintain IPv4 and IPv6 simultaneously for many years.IPv6 deployment has begun.IPv6 provides a much larger pool of IP addresses. IPv6 is not backwards compatible with IPv4. The much larger IPv6 numbering system is meant to one day completely replace IPv4, but this will take many years. In the meantime, much of the Internet will run IPv4 and IPv6 simultaneously. This is necessary to ensure all users, regardless of the protocol version they are using, will be able to interact with all content on the Internet.

10IPv6 Deployment has begun11The RIRs began distributing IPv6 address space in 1999. Although thousands of organizations have obtained IPv6 resources to date, IPv6 has not been widely adopted. Some people predicted in the 1990s that the only true driver for IPv6 adoption would be the depletion of the IPv4 resource. Many people would agree those assessments were accurate, as today we see increased energy to adopt IPv6 in anticipation of imminent IPv4 depletion.

11World IPv6 Day On 8 June, 2011, top websites and Internet service providers around the world, including Google, Facebook, Yahoo!, Akamai and Limelight Networks joined together with more than 1000 other participating websites in World IPv6 Day for a successful global-scale trial of the new Internet Protocol, IPv6. 12

By providing a coordinated 24-hour test flight, the event helped demonstrate that major websites around the world are well-positioned for the move to a global IPv6-enabled Internet, enabling its continued exponential growth.

There was a peak of 458 web site hits per second demonstrating that the native IPv6 traffic in going up now that we have real content live network.

Arbor estimates that IPv6 traffic has doubled as a percentage of overall Internet traffic, but IPv6 is still miniscule when compared to the more than 99.5% of all Internet traffic flowing over IPv4. Arbor bases its measurements on data gathered from the networks operated by six carriers worldwide.

12IPv6 Technical DriversIncreased address space128 bits = 340 trillion trillion trillion addresses(2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456)= 67 billion billion addresses per cm2 of the planet surfaceHierarchical address architectureImproved address aggregationMore efficient header architectureImproved forwarding efficiency13

IPv6 Technical DriversNeighbor discovery and autoconfigurationImproved operational efficiencyEasier network changes and renumberingSimpler network applications (Mobile IP)Integrated security featuresInternet-enabled appliancesElectrolux ScreenfridgeSamsung Digital Network Refrigerator

14

IPv6 Technical DriversInternet-enabled automobilesAlready available in many luxury carsInteresting research being conducted in Japan

Video surveillance15

*** MORE IP ADDRESSES ***MORE IP ADDRESSESFor billions of new usersFor billions of new devicesFor always-on accessFor transparent Internet connectivity the way it was meant to be

15

IPv6 Business Drivers16Main Drivers Enable New Services Reaching New Customers (increasing as time goes on) Businesses are beginning to ask for IPv6 over their existing Internet connections and for their co-located servers. Nice To Haves Reduced Costs for Peer-to-peer Application Development Enhanced mobility user experience Market Leadership Customers want access to the entire Internet, and this means IPv4 and IPv6 websites. Offering full access requires running IPv4/IPv6 transition services and is a significant engineering project.In addition to provisioning new customers using IPv6, there is work to be done by Internet Service Providers to ensure their existing IPv4 customers are able to interact with new IPv6-only content on the Internet. ISPs must establish protocol translation and/or tunneling services for their customers. You should be planning this now.

16IPv6 Business Drivers17Revenue impact Short term: Likely to be zero Longer term: Access to new IPv6-only customers Retention of existing customers Business agility ability to provide new service

IPv6 Transition AnalysisKeep it Simple

19

Address Exhaustion Mitigation20Carrier Grade NAT (NAT444)Short-term solution to public IPv4 exhaustion issues without any changes on RG and SP Access/Aggregation/Edge infrastructure Subscriber uses NAT44 (i.e. IPv4 NAT) in addition to the SP using CGN with NAT44 within its network CGN NAT44 multiplexes several customers onto the same public IPv4 address CGN performance and capabilities should be analyzed in planning phase

Cisco Carrier Grade NAT Solution21Introducing a new engine for massive Cisco CGv6 deployments20+ million active translations100s of thousands of subscribers1+ million connections per second20Gb/s of throughput per CGSETranslation (NAT, AFT), Tunneling (6rd, DS-lite)Builds upon the proven performance of the Cisco CRS-1Widely deployed where maximum coverage and ROI can be achieved Cisco CRS-1Powerful PerformanceThe Cisco CGSE housed inside a Cisco CRS offers carrier-class performance for Cisco CGv6 services: 1+ million connection setups per second for stateful IPv4 Network Address Translation (NAT44) Real-time off-box logging of NAT44 translation sates using NetFlow 9 Line-rate forwarding for IPv4 and IPv6The powerful performance of the Cisco CGSE, as outlined previously, helps ensure that the end-user experience continues to be optimal for all services.

Massive ScalabilityAs an increasing multitude of subscribers with their numerous applications traverse the network, the Cisco CGSE scales to support this growth: Up to 20 million stateful NAT44 translations per Cisco CGSE module Support for tens to hundreds of thousands of private IPv4 subscribers accessing the public IPv4 Internet Ability to add multiple Cisco CGSE modules in a chassis, increasing performance linearly

21IPv6 global connectivity over and IPv4-MPLS core Transitioning mechanism for providing unicast IP PEs are updated to support dual stack/6PE IPv6 reachability exchanged among 6PEs via iBGP (MBGP) IPv6 packets transported from 6PE to 6PE inside MPLS MPLS Core respolsable only for label swapping (IPv6 free) IPv6 in MPLS Networks 6PE

2222RFC4659: BGP-MPLS IP Virtual Private Network (VPN) Extension for IPv6 VPN6VPE simply adds IPv6 support to current IPv4 MPLS VPN offeringFor end-users: v6-VPN is same as v4-VPN services (QoS, hub and spoke, internet access, etc.)For operators: Same configuration operation for v4 and v6 VPNNo upgrade of IPv4/MPLS core (IPv6 unaware)

IPv6 in MPLS Networks 6VPE

232324Introduction of two Components: 6rd CE (Customer Edge) and 6rd BR (Border Relay) Automatic Prefix Delegation on 6rd CE Simple, stateless, automatic IPv6-in-IPv4 encap and decap functions on 6rd (CE & BR) IPv6 traffic automatically follows IPv4 Routing 6rd BRs addressed with IPv4 anycast for load-balancing and resiliency Limited investment & impact on existing infrastructure

IPv6 Transition Solution IPv6 Rapidly Deployment (6rd)

2425Access, Aggregation, Edge and Core migrated to IPv6. NMS/OSS and network services migrated to IPv6 as well (DNS, DHCP) IPv4 Internet service still available and overlaid on top of IPv6-only network. Introduction of two Components: B4 (Basic Bridging Broadband Element) and AFTR (Address Family Transition Router) B4 typically sits in the RG AFTR is located in the Core infrastructure Assumption: IPv4 has been phased out, IPv6 only Access/aggregation network IPv6 Transition Solution Dual Stack Lite (DS-Lite)

DS-Lite Basic Bridging Broadbandelement(B4)Address Family Transition Router element(AFTR).2526Deploy small (controlled) IPv6 network with known hostsStateless NAT64Employs 1:1 mappingEnables bi-directional session setupsStateful NAT64 N:1 mapping (IPv4 address sharing)Ideal for large Mobile IPv6 to public IPv4 InternetAdvantages to operator is head-start on IPv6 adoption & services/application deploymentIPv6 Transition Solution NAT64

DS-Lite Basic Bridging Broadbandelement(B4)Address Family Transition Router element(AFTR).26All P + PE routers are capable of IPv4+IPv6 support Two IGPs supporting IPv4 and IPv6 Memory considerations for larger routing tables Native IPv6 multicast supportIn the short term deploying IPv6 in dual stack does not solve IPv4 exhaustAll IPv6 traffic routed in global space Good for content distribution and global services (Internet)

IPv6 Transition Solution Dual Stack

2727Approach to Successful IPv6 AdoptionDesca - Phased Approach toSuccessful IPv6 Adoption29PlanProject Management PlanReadiness & Network AssessmentSecurity Vulnerability AssessmentDesignLow Level DesignStaging PlanImplementation Plan DevelopmentAcceptance Plan DevelopmentMigration PlanImplementStagingImplementationMigrationAcceptance TestingStaff TrainingIdentify the highest priority IPv6-critical areas in your networkPerform IPv6 Assessment on highest-priority areas to determine scope of designDevelop an IPv6 design that enables IPv6 to be introduced without disrupting your IPv4 networkBegin IPv6 testing and implementation in pilot mode, then extend over time into production deploymentOur Team of professionals has the highest level of Certifications 3044 CCIE's (3 Double CCIE's)Cisco Certifications#CSE44CCNA197CCDA81CQS302CCNP93CCDP20CCSP38CCIP31CCVP39CCIE44

Broad industry & quality accreditations

+50 Microsoft Certifications5+ EMC TAs+15 VMware Accreditations10+ Ciena Arquitects+25 PMP6+ ASPECT Specialists+150 ITIL v3 CertificationsQ&A

Thank you