ITMCCS-2943 - IPv6 Rapid Deployment (6rd) at Swisscom (2011 London) - 45 Mins
Oct 24, 2014
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 2
Swisscom is the Leading Telecom Provider in Switzerland: Our Figures
Source: www.swisscom.com/ir
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 3
What Needs to be Changed for an IPv6 Internet Access Service?
Complex infrastructure is barrier to cost-efficient IPv6 deployment. Legacy infrastructure cannot be upgraded easily.
End-to-end overview of Swisscom‘s Internet Access Service network
ADSL
VDSL
ATM
native Ethernet
BRAS
3P-PE
No IPv6
support in
used mode
of operation
L2 platform,
IPv6 not
required
L2 platform,
IPv6 not
required
L2 platform,
IPv6 not required, but
scalability issues
PPP
IPoE
IPoEoA
Access Edge
ISP connectivity
Aggregation
Access Core
FTTH
L2 platform,
IPv6 not
required
Ethernet over MPLS
L2 platform, IPv6
not required
6VPE ready
BNG
IPoE
IT Systems:
DHCP, RADIUS,
LDAP
ISP core Internet peering
IPv4/IPv6
dual stack
IT Systems: Various
user/service
databases
LNS
Route
Reflector:
Required IPv6
features available
Required
IPv6
features
available
(6VPE)
P Routers:
IPv6 not
required
SSG
ISG
MPLS VPN
MP
LS
VP
N
MP
LS
VP
N
wholesale retail
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 4
Using 6rd, IPv6 Internet Access is an Incremental Upgrade
No complex upgrade of infrastructure, leverage IPv4 network to provide IPv6 access
Simply add …
IPv6 and 6rd support to customer modems
6rd Border Relays to dual-stack portion of
network
Production-quality IPv6 Internet access at a fraction of the costs
IPv4 access
network
Internet peering (dual stack)
IPv6
Internet
native IPv6
home network
Home network (dual stack)
Swisscom Internet
Access Service
network (IPv4 only)
6rd CE
router
New IPv6 6rd Border
Relay Router
IPv6 6rd
functionality
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 5
6rd is a Stateless Tunnel Technology, Embedding the CE’s IPv4 Address into the IPv6 Prefix
IPv6 Rapid Deployment on IPv4 Infrastructures (RFC 5969)
Network
topology IPv4
networknative IPv6
network
native IPv6
network
6rd CE router 6rd Border Relay
send to preconfigured BR address send to embedded CE address
0 28 60 64
subscriber subnetting
up to 32 bits of subscriber’s IPv4 address
Interface IDSubnet ID85.5.7.1712A02:1200
6rd prefix
IPv6 address
format for 6rd
IPv4 dest 85.5.7.171
IPv4 Header IPv6 Header
IPv6 Payloadcopy
IPv4 header &
encapsulated
IPv6 packet
(downstream)
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 6
6rd Provides Control over Routing Return Path and Provides Native IPv6 Access to Home User
Upstream processing, end host to Internet
1. Host sends IPv6 packet to Internet host. IPv6 source address contains embedded IPv4 address
2. IPv6 packet is forwarded natively to Residential Gateway (RG)
3. RG tunnels packet to pre-provisioned IPv4 address of 6rd gateway
4. 6rd gateway forwards IPv6 packet natively
Packet processing
IPv4
networknative IPv6
network
native IPv6
network
6rd CE router 6rd Border Relay
send to preconfigured BR address send to embedded CE address
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 7
6rd Provides Control over Routing Return Path and Provides Native IPv6 Access to Home User
Downstream processing, Internet to end host
1. Internet host sends IPv6 packet to end host
2. IPv6 packet is forwarded natively up to 6rd gateway
3. 6rd gateway extracts IPv4 address from the IPv6 destination address, and tunnels packet to IPv4 address of RG
4. RG forwards IPv6 packet natively to end host
Packet processing
IPv4
networknative IPv6
network
native IPv6
network
6rd CE router 6rd Border Relay
send to preconfigured BR address send to embedded CE address
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 8
For ISPs that Control the Residential Gateway, 6rd Offers the Easiest, yet Highly Scalable Upgrade Path to a Production-quality IPv6 Service
Impact on IT
systems
Configuration and activation of 6rd can be performed through TR-69 or DHCP
Swisscom prefers TR-69, as such a system is already in place and works for all our access technologies
Otherwise, no impact on service provisioning and activation systems (OSS)
Impact on
legacy network
No changes in the access network (DSLAM, BRAS, etc.)
Native IPv6 connectivity from 6rd gateway to ISPs required
Scalability &
Manageability
6rd is stateless. High throughput, with very little management effort.
6rd gateways can be multiplied by using Anycast addressing
Excellent scalability for a large-scale rollout
Service offering (Almost) identical to native IPv6 Internet access. [Exceptions: MTU, Multicast]
Multiple subnets per subscriber possible
Native IPv6 on the LAN, WAN side not visible to subscriber
Fixed IPv6 prefix if IPv4 address is fixed
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 9
OSPFv3OSPFv2
6rd Border Relay
Cisco ASR1002-ESP10
Scales up to 10 Gb/s per box (tested)
6rd supported on all ASR1000 platforms
Starting from IOS XE Release 3.1.0S
Using anycast IPv4 address, geographically distributed
Scaling by adding more nodes
Topology: “Router on a stick“
No danger of black hole routing, as IPv4 and IPv6 interface status is inherently coupled
Implementation details
6rd Border Relay
Dual stack core
router
IPv4 IPv6
OSPFv3
IPv4 + IPv6
OSPFv2
6rd Border Relay
IPv4 IPv6
Link failure
propagated
on both
IGPs
Link failure not
noticed in IPv4 IGP
(or vice versa)
Router on a stick
Separate IPv4 and
IPv6 interface
ASR1002
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 10
6rd CPE Routers
Vendors: Motorola and ADB Broadband (formerly Pirelli Broadband)
6rd parameters configured using TR-069
- Swisscom 6rd prefix and length (2a02:1200::/28)
- IPv4 bits suffix length (all 32 bits)
- 6rd Border Relay Anycast IPv4 address
- Swisscom DNS servers
- IPv6 flag (enable/disable)
IPv6 must be enabled by customer on “customer centre” website
Third-party modems (AVM Fritz Box and others) work, but need manual configuration
Implementation details
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 11
Addressing Aspects
Swisscom received a /27 allocation based solely upon existing IPv4 customers, no special 6rd policy
Currently, multiple variable-length IPv4 subnets are used for Internet Access
Swisscom uses /28 for 6rd, using the full 32 bits of the IPv4 address. Every subscriber gets a /60, i.e. 16 /64-subnets
Smaller ISPs may chose to use only part of the IPv4 address to save some bits.
First /64 subnet of /60 prefix is advertised using SLAAC
Implementation details
0 28 60 64
subscriber subnetting
up to 32 bits of subscriber’s IPv4 address
Interface IDSubnet ID85.5.7.1712A02:1200
6rd prefix
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 12
Renumbering the Home Network: How to Handle a Changing IPv4 Address
6rd IPv6 prefix is tied to IPv4 address: Static IPv4 addresses should be preferred to avoid home network renumbering
IPv6 prefix lifetimes (valid / preferred) in Router Advertisement should be
Small enough for quick recovery
large enough to survive a CPE reboot
If IPv4 address changes, CPE advertises
Old prefix with valid and preferred lifetime = 0, until prefix expires.
Prefix is still marked as valid, but deprecated. Prefix validity is not updated and will time out.
New prefix with valid lifetime = 300 s, preferred lifetime = 60 s
Prefix is marked as valid and preferred
Implementation details
mgysi@mgysi-desktop:~$ ip addr
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:e0:18:f1:8e:ec brd ff:ff:ff:ff:ff:ff
inet 192.168.100.49/24 brd 192.168.100.255 scope global eth0
inet6 2a02:1205:5054:aaa0:2e0:18ff:fef1:8eec/64 scope global dynamic
valid_lft 293sec preferred_lft 53sec
inet6 2a02:1205:5054:cab0:2e0:18ff:fef1:8eec/64 scope global deprecated dynamic
valid_lft 290sec preferred_lft 0sec
inet6 fe80::2e0:18ff:fef1:8eec/64 scope link
valid_lft forever preferred_lft forever
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 13
Modem Settings are Centrally Managed, for Easy Replacement of Defective Devices
Tool chain to manage IPv6
Customer
center
webpage
Configu-
ration DB
IPv6 capable?
yesDisplay
IPv6 option
Request
web page
Enable/
disable
IPv6
Home
Device
Manager
TR-069
modify
configuration
Support
agent toolEnable/
disable
IPv6
Enable/
disable
IPv6
Enable/
disable
IPv6
Enable/
disable
IPv6
Modem
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 14
Swisscom Will Launch IPv6 for Residential Customers in 2011, Using 6rd Technology
6rd changes the IPv6 “business case” from complex & expensive to simple & cheap
There’s no excuse for not deploying IPv6 now!
6rd is simple, reliable, scalable technology
Fast prototyping thanks to Linux implementation
Vendors engineering/beta implementations quickly available, yet (inter-)worked flawlessly
Tested and proven scalability
Large-scale pilot to be started in June 2011
Apply at [email protected], if you are one of our customers!
© 2010 Swisscom, Cisco and/or its affiliates. All rights reserved. Cisco PublicITMCCS-2943 15
We value your feedback - don't forget to complete your online session evaluations after each session. Complete 4 session evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Networkers 20th Anniversary t-shirt.
All surveys can be found on our onsite portal and mobile website: www.ciscoliveeurope.com/connect/mobi/login.ww
You can also access our mobile site and complete your evaluation from your mobile phone:
1. Scan the Access Code(See http://tinyurl.com/qrmelist for software,
alternatively type in the access URL)
2. Login
3. Complete and Submit the evaluation
Please complete your Session Survey
Related Documents
