Wim Delrue - Trends in IPv6 Training

987 views
928 views

Published on

Wim Delrue - Trends in IPv6 Training

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
987
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide
  • Thank you for your attention. This is the end of this presentation. But this is not the end of IP! It’s just the beginning!
  • Wim Delrue - Trends in IPv6 Training

    1. 1. Trends in IPv6 Training Willem Delrue, Expert Educational Consultant, John Cordier Academy
    2. 2. Who is John Cordier Academy?
    3. 3. Who is John Cordier Academy? <ul><li>Leading ICT training provider in Belgium </li></ul><ul><li>Broadest range of ICT courses </li></ul><ul><ul><li>Generic ICT courses </li></ul></ul><ul><ul><li>Vendor training </li></ul></ul><ul><ul><li>IT management courses </li></ul></ul><ul><li>Formerly known as Telindus High Tech Institute (THTI) </li></ul><ul><ul><li>Founded more than 25 years ago </li></ul></ul><ul><ul><li>Renamed in tribute to founding father of Telindus: John Cordier (+2002) </li></ul></ul><ul><li>Telindus was founded in 1969 and became one of the biggest European network integrators. </li></ul><ul><li>JCA locations: Leuven, Brugge and Namur </li></ul>27/12/10 Unrestricted Slide
    4. 4. Who is John Cordier Academy? <ul><li>Belgacom group acquired Telindus in January 2006. </li></ul><ul><li>JCA is now a subdivision of the Belgacom Group. </li></ul><ul><li>Belgacom has an internal training department: Belgacom Corporate University (BCU), focused on training for Belgacom staff. </li></ul><ul><li>JCA is mainly focused on training for external companies. </li></ul><ul><ul><li>Calendar courses </li></ul></ul><ul><ul><ul><li>2 seasons: February – June & October - February </li></ul></ul></ul><ul><ul><li>Customized training </li></ul></ul><ul><ul><ul><li>JCA location or customer premises </li></ul></ul></ul><ul><li>JCA also trains Belgacom staff at BCU </li></ul>27/12/10 Unrestricted Slide
    5. 5. Who is John Cordier Academy? <ul><li>Own developed training programmes </li></ul><ul><ul><li>Categories: Introduction to ICT, Ethernet, TCP/IP Networking, Internet Security, Storage, Network Services, Backbone and Access Technologies, Mobile Networks, Electrostatic Discharge, Linux, ... </li></ul></ul><ul><li>Vendor specific training </li></ul><ul><ul><li>Products: Avaya, Blackberry, Checkpoint, Cisco, Citrix, CommVault, Isabel, Juniper, Microsoft, NetApp, Nortel, Oracle, SNIA, VMWare? ... </li></ul></ul><ul><li>IT Management </li></ul><ul><ul><li>Business Project Management, ITIL, ISO27001, ISO27002, MS Project, PRINCE2, Risk Management, Six Sigma, ... </li></ul></ul>27/12/10 Unrestricted Slide
    6. 6. Who is John Cordier Academy? <ul><li>Also authorised test center for </li></ul><ul><ul><li>Prometric </li></ul></ul><ul><ul><li>Pearson Vue </li></ul></ul><ul><li>More information on www.jcacademy.be </li></ul>27/12/10 Unrestricted Slide
    7. 7. Who is Willem? <ul><li>Expert Educational Consultant </li></ul><ul><ul><li>Trainer </li></ul></ul><ul><ul><ul><li>TCP/IP, IPv6, Routing protocols, DNS, Wireshark </li></ul></ul></ul><ul><ul><li>Responsible for Internet portfolio of JCA courses </li></ul></ul><ul><ul><ul><li>JCA developed training: Ethernet, TCP/IP Networking & Networking Services </li></ul></ul></ul><ul><li>Works since February 2000 for JCA. </li></ul><ul><li>Previous employer: Eunet/PING </li></ul><ul><ul><li>Technical Trainer & Supervisor of Helpdesk. </li></ul></ul><ul><li>Teaches IPv6 since 2001. </li></ul>27/12/10 Unrestricted Slide
    8. 8. IPv6 Training
    9. 9. IPv6 Training <ul><li>JCA Developed Courses </li></ul><ul><ul><li>IPv6 Essentials </li></ul></ul><ul><ul><ul><li>2 days </li></ul></ul></ul><ul><ul><ul><li>With hands-on </li></ul></ul></ul><ul><ul><li>IPv6 Advanced </li></ul></ul><ul><ul><ul><li>2 days </li></ul></ul></ul><ul><li>Vendor Specific Courses </li></ul><ul><ul><li>Cisco IPv6 Fundamentals, Design & Deployment (IP6FD) </li></ul></ul><ul><ul><ul><li>5 days </li></ul></ul></ul><ul><ul><ul><li>With Cisco hands-on </li></ul></ul></ul>27/12/10 Unrestricted Slide
    10. 10. Vision of JCA on IPv6 training: present situation <ul><li>Knowledge on IPv6, if existent, is very fragmented </li></ul><ul><li>Formal class training offers the advantage of concentrated knowledge about the protocol </li></ul><ul><li>Serious IPv6 (training) efforts already being done by </li></ul><ul><ul><li>Banks </li></ul></ul><ul><ul><li>Governmental organisations (EU, NATO, Belnet) </li></ul></ul><ul><ul><li>Vendors of connectivity devices </li></ul></ul><ul><ul><li>ISP’s </li></ul></ul><ul><ul><li>In each of those private sectors, forerunners and late adopters </li></ul></ul><ul><li>Main customer base of Belgacom/JCA: no ‘sense of urgency’ yet </li></ul>Unrestricted Slide 27/12/10
    11. 11. Evolution 27/12/10 Unrestricted Slide
    12. 12. Why IPv6? <ul><li>At beginning of course, I like to find out what customers know already of IPv6. </li></ul><ul><li>First question: “What keywords pop up in your mind when you think about IPv6? </li></ul><ul><li>I mostly get one, sometimes two answers, but that’s it. </li></ul>27/12/10 Unrestricted Slide
    13. 13. Why IPv6? 27/12/10 Unrestricted Slide IPv6? Expanded Address Space Efficiënt Header Efficiënt Routing Autoconfiguration Security Mobile IP Multicasting Scoped Adresses No more NAT DHCPv6 QoS
    14. 14. Training to raise awareness <ul><li>Customers are not aware of all possible features and benefits of IPv6. </li></ul><ul><ul><li>But, are all these features usable or improvements to IP? </li></ul></ul><ul><li>Main known features are IPv6 address space and security. </li></ul><ul><ul><li>And security is questionable, IPsec not implemented in all IPv6 stacks. </li></ul></ul><ul><li>Exhaustion date for IPv4 address pool is not impressing customers. </li></ul><ul><ul><li>When showing ipv4.potaroo.net , there is no “ oh my god ”-feeling. </li></ul></ul><ul><li>Despites regulation coming from governments and other authoritative organisations, IPv6 is very slowly implemented in networks. </li></ul><ul><li>IPv6 offers a few ‘cool’ new networking features. </li></ul><ul><ul><li>But unfortunately these don’t add to the go/no go decision. </li></ul></ul><ul><li>When going for IPv6, a lot of applications and devices are not </li></ul><ul><li>IPv6 enabled yet. </li></ul><ul><ul><li>So IPv6 implementation will only be partial today. </li></ul></ul>27/12/10 Unrestricted Slide
    15. 15. Training to raise awareness <ul><li>Lot of customers are not convinced about IPv6 in internal networks. </li></ul><ul><ul><li>They mainly think IPv6 is about larger address space. </li></ul></ul><ul><ul><li>Internally everything runs on private space IP addresses. </li></ul></ul><ul><ul><li>To the outside mapping with NAT </li></ul></ul><ul><ul><li>NAT delivers also a (false) impression of security. </li></ul></ul><ul><ul><li>Why do we need to change that? </li></ul></ul><ul><li>Most customers are convinced about IPv6 for external services. </li></ul><ul><ul><li>Make external services available for new customers with (only) IPv6. </li></ul></ul>27/12/10 Unrestricted Slide
    16. 16. Training to raise awareness : Security! <ul><li>Convince customers IPv6 is not only about addresses. </li></ul><ul><ul><li>There are a few more things. </li></ul></ul><ul><ul><ul><li>End-to-end transparency, more efficiënt packet structure, reducing routing tables, ... </li></ul></ul></ul><ul><li>We weren’t really able to convince customers on the other aspects of IPv6. </li></ul><ul><li>We tried to convince the customers on their ‘weak’ side: security. </li></ul><ul><li>Not the security implemented by IPv6. But the security risk you have by running IPv6 without knowing. </li></ul><ul><ul><li>You have dual stack devices in your network today. </li></ul></ul><ul><ul><ul><li>Windows Vista, 7, 2008, Mac OS X, Linux, ... </li></ul></ul></ul><ul><ul><li>You have IPv6 running today without you knowing it runs internally. </li></ul></ul><ul><ul><li>IPv6 uses auto-configuration. </li></ul></ul><ul><ul><li>You don’t need IPv6 connectivity to get attacked based on IPv6. </li></ul></ul><ul><ul><li>Hackers are already exploiting this. </li></ul></ul>27/12/10 Unrestricted Slide
    17. 17. Training to raise awareness : Security! <ul><li>The hacker is interested in IPv6 </li></ul><ul><ul><li>IPv6 network traffic isn’t monitored together with IPv4 traffic. IPv6 traffic is probably not monitored at all. </li></ul></ul><ul><ul><li>IPv4 security measures (perimeter firewalls, filter ACLs) are often not replicated for IPv6. </li></ul></ul><ul><ul><li>Law enforcement isn’t ready to deal with hacks involving IPv6 (Does the Computer Crime Unit of Belgian Federal Police have already IPv6?) </li></ul></ul><ul><ul><li>Understand how IPv6 works to make your network more secure! </li></ul></ul>27/12/10 Unrestricted Slide
    18. 18. Training to raise awareness: Real reasons for IPv6 <ul><li>Well recognised: </li></ul><ul><ul><li>Exhaustion of IPv4 addresses space </li></ul></ul><ul><ul><ul><li>Q1 of 2011 </li></ul></ul></ul><ul><li>Often overlooked: </li></ul><ul><ul><li>End-to-end transparency </li></ul></ul><ul><ul><ul><li>Public IPv6 addresses, no NAT </li></ul></ul></ul><ul><ul><li>Need to reduce size of routing-table. </li></ul></ul><ul><ul><ul><li>Default-free routing tables: 350.000 entries, slow convergence, … </li></ul></ul></ul><ul><ul><li>IPv6 has been mandated in some environments (e.g., theoretically government networks) </li></ul></ul>27/12/10 Unrestricted
    19. 19. Training to raise awareness: Bogus reasons for NOT deploying IPv6 <ul><li>Misunderstandings, still alive </li></ul><ul><ul><li>“ IPv4 exhaustion thing is exaggerated. There will always be a solution to extend the use of IPv4 addresses.” </li></ul></ul><ul><ul><ul><li>IPv4 address space runs out in Q1 of 2011. No way out. </li></ul></ul></ul><ul><ul><ul><li>NAT is not a final solution, it’s a temporary work-around. </li></ul></ul></ul><ul><ul><li>“ IPv6 addresses are to difficult to understand.” </li></ul></ul><ul><ul><ul><li>It’s just a matter of getting used to the address format. </li></ul></ul></ul><ul><ul><li>“ Customers are not asking for IPv6 support yet.” </li></ul></ul><ul><ul><ul><li>Several companies are convinced that IPv6 is needed for extension of Internet and are seeking providers supporting IPv6. </li></ul></ul></ul><ul><ul><ul><li>It is a bit the “chicken-and-egg-problem”. </li></ul></ul></ul><ul><ul><ul><ul><li>ISP’s are not implementing IPv6 because customers </li></ul></ul></ul></ul><ul><ul><ul><ul><li>are not asking for it. </li></ul></ul></ul></ul><ul><ul><ul><ul><li>Customers are not implementing IPv6 because no </li></ul></ul></ul></ul><ul><ul><ul><ul><li>ISP supports it. </li></ul></ul></ul></ul>27/12/10 Unrestricted
    20. 20. Which types of customers? <ul><li>ISP’s (Belgium) </li></ul><ul><ul><li>Core-backbones are IPv6 ready. </li></ul></ul><ul><ul><li>But they wait until more IPv6 request from customers. </li></ul></ul><ul><ul><li>Should be the firsts to implement IPv6, but why invest now? </li></ul></ul><ul><ul><li>Providers with large blocks of IPv4 address space are waiting, planning study and testing for 2011 and implementing in 2012. </li></ul></ul><ul><ul><li>Providers with small blocks have more specific plans for study, testing (2010) and implementing IPv6 (2010-2011). </li></ul></ul><ul><li>Large private enterprises with international networks </li></ul><ul><ul><li>Banks, Automotive industry, Transport, ... </li></ul></ul><ul><ul><li>They see the need for IPv6 to support network expansion. </li></ul></ul><ul><ul><li>Starting study and testing of IPv6 beginning of 2011. Implementation towards end 2011. </li></ul></ul>27/12/10 Unrestricted Slide
    21. 21. Which types of customers? <ul><li>Public enterprises </li></ul><ul><ul><li>Air Traffic control, Public ISP, ... </li></ul></ul><ul><ul><li>They (have) implement(ed) IPv6 because of government requirements (e.g.: EC, Belnet, ...) </li></ul></ul><ul><li>Companies developing products with network-connectivity </li></ul><ul><ul><li>Medical imaging, Storage, ... </li></ul></ul><ul><ul><li>Their customers are asking for IPv6 support. </li></ul></ul><ul><ul><li>Planning IPv6 support in products with next releases in 2011. </li></ul></ul><ul><li>Companies developing network-devices. </li></ul><ul><ul><li>Broadband routers, Set top boxes, Multi-media streaming, ... </li></ul></ul><ul><ul><li>Their customers (ISP’s in France and Netherlands) are asking for IPv6 support. </li></ul></ul><ul><ul><li>Planning IPv6 support in products with next releases in 2011. </li></ul></ul>27/12/10 Unrestricted Slide
    22. 22. Which types of customers? 27/12/10 Unrestricted Slide
    23. 23. Testimonials <ul><li>Marc Lampo, Security Officer, EURid </li></ul><ul><ul><li>The IPv6 Essentials course was a real eye-opener. </li></ul></ul><ul><ul><li>The teacher addressed the various aspects of the new protocol and gave a clear insight in the challenges that await network and security administrators when they start deploying IPv6 in their networks. </li></ul></ul><ul><ul><li>I strongly recommend this course, both for its contents as well as the excellent presentation by the teacher. </li></ul></ul><ul><li>Kurt Vanslambrouck, Manager Network Competence Center, Agfa-Gevaert </li></ul><ul><ul><li>The IPv6 Essentials course has compared IPv6 to IPv4 in a very clear way </li></ul></ul><ul><ul><li>Registering IPv6 ranges is one thing, preparing our complex organisation for IPv6 is something else. </li></ul></ul><ul><ul><li>Internally, a lot of experimenting is being done. However, the possibilities towards the Internet are very limited, because of the slow adoption of IPv6 by the large Belgian ISP’s. </li></ul></ul><ul><li>Average satisfaction score: 4,5/5 </li></ul>27/12/10 Unrestricted Slide
    24. 24. Specific IPv6 training needs <ul><li>Some companies have specific needs about IPv6 training. </li></ul><ul><li>They ask for tailor-made courses. </li></ul><ul><li>These companies have really started implementing IPv6. </li></ul><ul><li>Companies developing network-devices. </li></ul><ul><li>Mainly because of the question of their customers. </li></ul><ul><ul><li>Their customers are big ISP’s in France and The Netherlands and require broadband routers with IPv6 support. </li></ul></ul><ul><li>Difficult to find (in Belgium): training about programming IPv6 sockets. </li></ul>27/12/10 Unrestricted Slide
    25. 25. Vision of JCA on IPv6 training: how to prepare the market for the IPv6 future <ul><li>Still a lot of training work remains to be done before IPv6 can become a reality </li></ul><ul><li>JCA tries to </li></ul><ul><ul><li>Encourage people to start experimenting with IPv6 in a lab setting </li></ul></ul><ul><ul><li>Make people reach out to their colleagues including </li></ul></ul><ul><ul><ul><li>Network engineers </li></ul></ul></ul><ul><ul><ul><li>Domain name server administrators </li></ul></ul></ul><ul><ul><ul><li>System administrators </li></ul></ul></ul><ul><ul><ul><li>Support staff </li></ul></ul></ul><ul><ul><ul><li>Security and abuse handling people </li></ul></ul></ul><ul><ul><ul><li>Your vendors </li></ul></ul></ul><ul><ul><li>Convince customers deployment can be incremental. </li></ul></ul><ul><ul><li>Make people think about the right reasons for (non-)deploying IPv6. </li></ul></ul>27/12/10 Unrestricted Slide
    26. 26. Conclusion <ul><li>There is no way out! </li></ul><ul><ul><li>Predictions are that IPv4 address space will be out in January 2011 @ IANA </li></ul></ul><ul><li>IPv6: soon coming to a network near you! </li></ul><ul><ul><li>Scouts motto: “Be prepared!” </li></ul></ul><ul><li>Learn and understand what IPv6 is all about. </li></ul><ul><li>A lot of companies and networks risk a fast, unprepared implementation of IPv6, when they don’t start to act now with at least the first step: training. </li></ul><ul><li>Study, test and deploy. In that order. </li></ul>27/12/10 Unrestricted Slide
    27. 27. Thank you! <ul><li>This is not the end. It is only the beginning. </li></ul>27/12/10 Unrestricted Slide

    ×