Académique Documents
Professionnel Documents
Culture Documents
IPv6: An Introduction
Problems with IPv4: Limited Address Space Problems with IPv4: Routing Table Explosion
1
Problems with IPv4: Header Limitations
Problems with IPv4: Other Limitations
Maximum header length is 60 octets.
(Restricts options)
Lack of quality-
quality-of-
of-service support.
Maximum packet length is 64K octets. – Only an 8-
8-bit ToS field, which is hardly used.
(Do we need more than that ?)
– Problem for multimedia services.
ID for fragments is 16 bits. Repeats every 65537th packet.
No support for security at IP layer.
(Will two packets in the network have same ID?)
Mobility support is limited.
Variable size header.
(Slower processing at routers.)
No ordering of options.
(All routers need to look at all options.)
2
IPv6 Header Format Extension Headers
128-
128-bit addresses
Unicast Address for a single interface.
Multicast Identifier for a set of interfaces. Multiple addresses can be assigned to an interface
Packet is sent to all these interfaces. Provider-
Provider-based hierarchy to be used in the beginning
Addresses should have 64-
64-bit interface IDs in EUI-
EUI-64
Anycast Identifier for a set of interfaces.
format
Packet is sent to the nearest one.
Following special addresses are defined :
– IPv4-
IPv4-mapped
– IPv4-
IPv4-compatible
– link-
link-local
– site-
site-local
3
IPv6: Security Issues Mobility Support in IPv6
Neighbour Discovery
4
Neighbour Discovery Operation Neighbour Discovery Operation (contd..)
Address Auto-
Auto-configuration
Neighbour Discovery Operation (contd..)
The problem
Neighbour Solicitation System bootstrap (“plug and play”)
Address renumbering
– To request link-
link-layer address of neighbour
– Also used for Duplicate Address Detection
Addressing Possibilities
Neighbour Advertisement Manual Address configured by hand
– Sent in response to NS Autonomous Host creates address with no external
– May be sent without solicitation to announce change interaction (e.g., link local)
in link-
link-layer address Semi-
Semi-autonomous Host creates address by combining a priori
information and some external information.
Redirect - used to inform hosts of a better first hop
Stateless Server Host queries a server, and gets an address.
for a destination. Server does not maintain a state.
Stateful Server Host queries a server, and gets an address.
Server maintains a state.
Auto-
Auto-configuration in IPv6 Address Renumbering
5
Upper Layer Issues
The pseudo-
pseudo-header is changed in checksum
computation:
Minor changes in TCP
– Address are 128 bits.
– Maximum segment size should be based on Path MTU.
– Payload length is 32 bits.
– The packet size computation should take into account larger
size of IP header(s).
header(s). – Payload length is not copied from IPv6 header.
– Pseudo-
Pseudo-header for checksum is different. (Extension headers should not be counted.)
– Next header field of last extension header is used in place
UDP checksum computation is now mandatory. of protocol.
Most application protocol specifications are UDP packets must also have checksum.
independent of TCP/IP - hence no change.
(Since no IP checksum now.)
FTP protocol exchanges IPv4 addresses - hence needs
to be changed.
ICMPv6 No “flag”day.
– Rate limiting feature added Incremental upgrade and deployment.
Timer based Minimum upgrade dependencies.
Bandwidth based Interoperability of IPv4 and IPv6 nodes.
– IGMP, ARP merged Let sites transition at their own pace.
– Larger part of offending packet is included Basic migration tools
DNS – Dual stack and tunneling
– AAAA type for IPv6 addresses – Translation
– A6 type: recursive definition of IP address
– Queries that do additional section processing are redefined
to do processing for both ‘A’ and ‘AAAA’ type records
6
Transition mechanism: Translation Transition Plan for Internet
This will allow communication between IPv6 only Maintain complete V4 routing till addresses last.
hosts and IPv4 only hosts. Upgrade V4 routers to dual stack.
A typical translator consists of two components: Incrementally build up V6 backbone routing system.
– translation between IPv4 and IPv6 packets. – Use v6-
v6-over-
over-v4 tunnels to construct 6bone.
6bone.
– Address mapping between IPv4 and IPv6 – Grow like Mbone (multicast backbone).
For translation, three technologies are available: De-
De-activate tunnels as soon as underlying path
– header conversion upgraded to V6.
– transport relay
– application proxy
Thank You
– Host-
Host-to-
to-host automatic tunneling over IPv4
Upgrade routers to IPv6.
– Hosts may require native IPv6 addresses
– DNS upgrade is needed before hosts get IPv6
addresses
Connect IPv6 router to an IPv6-
IPv6-enabled ISP.
Install translators like NAT-
NAT-PT or SIIT.