Getting Started With IPv6 How to Get This Presentation Go to Samsclass.info Go to Samsclass.info Click IPv6 Materials Click IPv6 Materials IPv6 Certification Projects IPv6 Certification Projects At the top At the top This Powerpoint This Powerpoint In the Lectures section In the Lectures section Links Baythreat-1, etc. Links Baythreat-1, etc. In the Links section In the Links section IPv4 Exhaustion IPv4 Addresses: 32 Bits IPv4 address: IPv4 address: Four bytes Four bytes In Binary: In Binary: ^32 total addresses 2^32 total addresses 4 billion 4 billion IPv4 Address Depletion Link Baythreat-8 Link Baythreat-8 IPv4 Address Space Class A Class B Class C Class D & E Jan 21, 2010 Available Blocks: April 10, 2010 Available Blocks: May 8, 2010 Available Blocks: Nov 30, 2010 Available Blocks: 2011: The End Link BayThreat-7 Link BayThreat-7 The End of the World No Reprieve IANA will not re-purpose class D or E addresses for general use People who ask for IPv4 addresses after exhaustion will not get them Hoarding, scalping, and simple direct sale of used IPv4 addresses will begin soon IPv6 The Solution IPv6 Addresses: 128 Bits IPv6 address IPv6 address 2001:05c0:1000:000b:0000:0000:0000:66fb 2001:05c0:1000:000b:0000:0000:0000:66fb Omitting unnecessary zeroes; Omitting unnecessary zeroes; 2001:5c0:1000:b::66fb 2001:5c0:1000:b::66fb Eight fields, each 16 bits long Eight fields, each 16 bits long 4 hexadecimal characters 4 hexadecimal characters 2^128 total addresses 2^128 total addresses 340 billion billion billion billion 340 billion billion billion billion Enough for a while Enough for a while Link BayThreat-10 Link BayThreat-10 Federal IPv6 Transition Timeline From Cisco (link BayThreat-11) Executive Summary Thus Far IPv4 is Full Image from zinyaw.files.wordpress.com DOOM TheEndOfTheWorld! Migration to IPv6 Methods of IPv6 Migration Ignore IPv6: Stay on IPv4-only Gateways: Devices that convert IPv6 to IPv4 Tunnel: IPv6 over IPv4 Dual-Stack: IPv4 and IPv6 together Nirvana: IPv6-only IPv6 Tunnels Fast and easy to set up--best for n00bs Not the best for security or performance Free IPv4-to-IPv6 Tunnels Gogo6.com Sixxs.net Tunnelbroker.com GoGo6 Easiest Demonstration Companies Already on IPv6 ipv6.google.com ipv6.google.com comcast6.net comcast6.net ipv6.cnn.com ipv6.cnn.com More at link Baythreat-12 More at link Baythreat-12 IPv6 Certifications Fun, realistic projects He.net Link BayThreat-13 IPv6 Sages As of Link BayThreat-18 IPv6 Sages 29 IPv6 Sages from CCSF 10 IPv6 Sages from Frisco, TX As of T-Shirt #1 motivator for IPv6 Certification #1 motivator for IPv6 Certification Link Baythreat-9 Link Baythreat-9 Security Problems Used by Ethernet Privacy Risk Anyone who has your IP address also has your MAC address! There is a "Privacy Extensions" technique to avoid this, enabled by default in Vista and Windows 7 ICMPv6 Required for all networks Cannot be blocked Replaces ARP "Neighbor Discovery" is trivial THC-IPv6 Hacker's Toolkit Runs fine on Ubuntu, even in VMware on Windows 7 Instructions: link BayThreat-14 Other Risks Many security appliances are not ready for IPv6, so it often bypasses them Torrents run over IPv6 Link BayThreat-15 Some VPN appliances are not ready, so IPv6 connections must bypass them Packet Amplification Attacks Routing Header Zero Ping-pong Links BayThreat-16 and 17 Hands-on Project Go to samsclass.info Go to samsclass.info Click IPv6 Materials Click IPv6 Materials Click IPv6 Certification Project 1 Click IPv6 Certification Project 1
