IPv6 på Forskningsnettet Jan P. Sørensen Netsekretariatet & Københavns Universitet 2. nov Nov. 2004

Hvorfor IPv6 l Større adresserum l Moderne teknologier l Autokonfigurering l Sikkerhed l Bedre trafikfordeling l Multicast l Mindre route tabel l Simpel header struktur l Forberedt for protokol udvidelser l Nem overgang fra IPv4 l Bibeholder design fra IPv4

EU projekt l Periode 2002 – 2004, + 6 md l Udstyr: CISCO i Lyngby og 7206 på KU l Linier: 155 Mb/s – 1 Gb/s Lyngby - Stockholm l Planlagt 3 MM/år, reelt 1 MM/år. l Opsætning af netværk samt multicast. l 7 Work Packages, Deliverables

Adresser Global l IPv4: eller 82.E1.7F.22 l 2001:0878:1000:0011:0000:0000:0000:0034 l 2001:0878:1000:0011::0034 l 2001:878:1000:11::34 Site-local, benyttes ikke Link-local, ethernet b-3c-c1 l fe80:0000:0000:0000:0208:02ff:fe6b:3cc1 l fe80::208:2ff:fe6b:3cc1

Fordeling af IPv6 adresser (1) l 2001:0878::/32 Forskningsnettet l 2001:0878:0000::/48 UNI-C l 2001:0878:0001::/48 Links to Universities l 2001:0878:0100::/48 KU l 2001:0878:0200::/48 DTU l 2001:0878:0300::/48 AUC l 2001:0878:0400::/48 ÅU l 2001:0878:0500::/48 SDU l 2001:0878:0800::/48 KVL l 2001:0878:0810::/48 CBS l 2001:0878:0142::/48 DFUni

Fordeling af IPv6 adresser (2) ä KU Region l 2001:0878:0100::/48KU l 2001:0878:0140::/48IT-Universitetet l 2001:0878:0142::/48DFUni l 2001:0878:018::/44Hospitaler l 2001:0878:019::/44Kollegier ä KU l 2001:0878:0100:0001::/64 Internal KU linl l 2001:0878:0100:0010::/64 IT-afdelingen l 2001:0878:0100:1030::/64 Matematisk Inst.

CISCO udstyr, IPv6 ? l series l series l 7600/6500 series l 7200 series l 4900 series, IPv6 i software l 3750 series, 1. feb (multicast 1Q 2006) l 3560 som 3750 l 3550 series, aldrig l PIX 515E version 7.0

Anvendelser (1), programmel l OpenLDAP l INND 2.3.4, NORTH extensions l Pine/IMAPD 4.64 l OpenSSH 4.1p1 l TCP-wrapper 7.6 med IPv6 l IPERF l MBONE, VIC, RAT, incl. multicast l Streaming, Quick Time l InternetExplorer, XP, W2K med IPv6 extensions l OpenBSD 3.7, med PF firewall, IPv6 regler

Anvendelser (2), proxy + firewall c Mandrake 10.1, Apache , OpenSSL 0.9.7g Sendmail , Spamassassin 3.1.0, ClamAV, SPFmilter, Greylist Mail, Web Client FW IPv6 IPv4

Anvendelser (3), proxy server l Mandrake 10.1 (eller 2005 eller ) l Apache ( er defekt) l OpenSSL 0.9.7g l /etc/sysconfig/network-scripts/ifcfg-eth0 ä IPV6INIT=yes ä IPV6ADDR_SECONDARIES="2001:878:100:12::136" l /etc/sysconfig/network ä NETWORKING_IPV6=yes ä IPV6FORWARDING=yes l /etc/sysconfig/static-routes-ipv6 ä eth0 2001::/ :878:100:12::1

Ulemper, isolerede IPv6 områder l Navneservice for  AAAA 2001:878:100:12::135  A l IPv4 client  Kender ikke AAAA og tager l IPv6 client  Forsøger 2001: :12::135  Efter 20 sek. benyttes

Referencer KU: Cisco has prepared many document describing IPv6: has compiled a list of available IPv6 software and operating systems. describes the IPv6 Task Forces in the various countries. A Danish IPv6 taskforce has been created: IPv6 Software Versions: 6_c/ftipv6s.htm Porting applications to IPv6 Howto: jungla.dit.upm.es/~ecastro/IPv6- web/ipv6.html NetBSD IPv6 Networking: Lifetime of IPv4: lifetime/ale.html WP5 applications: serverwas.lab.telin.nl/WP5Apps/