IPv6 Launch Day Cisco 6th June 2012 Nathalie Trenaman

1. IPv4 Depletion and
IPv6 Deployment
Cisco World IPv6 Launch
Nathalie Trenaman
RIPE NCC Trainer
Tuesday, June 5, 2012

2. RIPE and RIPE NCC
Tuesday, June 5, 2012

3. RIPE / RIPE NCC
RIPE
Open community
Develops addressing policies
Working group mailing lists
RIPE NCC
Located in Amsterdam
Not for profit membership organisation
One of five RIRs
3
Tuesday, June 5, 2012

4. The five RIRs
4
Tuesday, June 5, 2012

5. IPv4?
Tuesday, June 5, 2012

6. IANA IPv4 Pool
40%
30%
20%
10%
0%
2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011
6
Tuesday, June 5, 2012

7. IPv4 Depletion Worldwide
IPv4 Pool in /8’s
6
5
4
3
2
1
0
AfriNIC RIPE NCC LACNIC ARIN APNIC
7
Tuesday, June 5, 2012

8. RIPE NCC IPv4 Pool
8
Tuesday, June 5, 2012

9. Allocations From the Final /8
• When the RIPE NCC reaches the final /8:
– Every member can get a /22 (1024 addresses)
– Only if they already have IPv6 addresses
– Only when there is justified need
• Current policy does not allow for PI assignments
– Policy proposal 2012-04 under discussion
– Intends to allow for PI assignments
9
Tuesday, June 5, 2012

10. Transfer of IPv4 Allocations
• Policy 2007-08: Allocation Transfer Policy
– Don’t buy your IPv4 on eBay!
– Transfer unused allocations to another member
– Minimum allocation size /21
– Evaluated by RIPE NCC
– Update in RIPE Database
http://www.ripe.net/lir-services/resource-management/listing
10
Tuesday, June 5, 2012

11. IPv6!
Tuesday, June 5, 2012

12. IPv6 Address Distribution
/3 IANA
/12 RIR
/32 LIR
/48 /56 /48 End User
Allocation PA Assignment PI Assignment
12
Tuesday, June 5, 2012

13. IPv6 Ripeness
• Rating system:
– One star if the LIR has an IPv6 allocation
– Additional stars if:
- IPv6 Prefix is announced on router
- A route6 object is in the RIPE Database
- Reverse DNS is set up
–A list of all 4 star LIRs: http://ripeness.ripe.net/
13
Tuesday, June 5, 2012

14. IPv6 RIPEness: 8201 LIRs
1 star
14%
2 stars
6%
3 stars
11%
No IPv6
51%
4 stars
18%
14
Tuesday, June 5, 2012

15. IPv6 Enabled ASes in Global Routing
• Any country or region possible, updated daily
http://v6asns.ripe.net 15
Tuesday, June 5, 2012

16. Getting an IPv6 allocation
• To qualify, an organisation must:
- Be a member of the RIPE NCC
- Have a plan for making assignments
• Minimum allocation size /32
• Allocation size is based on customer numbers
and growth, not on transition technique!
16
Tuesday, June 5, 2012

17. Customer Assignments
• Every “end site” can be assigned up to a /48
without prior approval of the RIPE NCC
– That is 65536 subnets per site
– If they need more, ask for approval first
– Or make a sub-assignment
• Assignments for your own infrastructure
– /48 per Point of Presence
– One additional /48 for the core network
17
Tuesday, June 5, 2012

18. Provider Independent Assignments
• PI assignments in IPv6
– Must have a contract with a member of RIPE NCC
– Minimum assignment size is a /48
– More if there is justified need
• No sub-assignments are allowed
– Not even a single address for the connection
– If you have customers, you can not use PI for them
18
Tuesday, June 5, 2012

19. Creating an
Addressing Plan
Tuesday, June 5, 2012

20. Why Create an IPv6 Addressing Plan?
• Mental health during implementation(!)
• Easier implementation of security policies
• Efficient addressing plans are scalable
• More efficient route aggregation
20
Tuesday, June 5, 2012

21. IPv6 Address Management
• Your Excel sheet might not scale
– There are 65.536 /48s in a /32
– There are 65.536 /64s in a /48
– There are 16.777.216 /56s in a /32
• Find a suitable IPAM solution
21
Tuesday, June 5, 2012

22. Administrative Ease
• If possible assign on 4 bit boundaries
– Matches a hexadecimal digit
– Easier to read and remember
– Aligns with reverse DNS zones
• Possibly follow the structure of the network or
organisation
– Can aid in access control and troubleshooting
22
Tuesday, June 5, 2012

23. Making Customer Assignments
• Don’t be too conservative
• Assign a generous amount of subnets
• /56 is a popular size for residential
– Allows for 256 subnets
– Future proof
• Business customers often get a /48
• You don’t want to renumber later on
23
Tuesday, June 5, 2012

24. “Smart” Addresses Example
• Assume you got 2001:db8:1234::/48
• In your subnet 2001:0db8:1234:XYZZ::/64
–X can represent a location, i.e. “north building”
–Y can represent a function, i.e. “workstations”
– ZZ can represent the specific subnet (number)
• 2001:0db8:1234:1316::/64 could mean:
– South building, printers, area 16 (accounting)
24
Tuesday, June 5, 2012

25. Need Help Making a Plan?
• Surfnet, the Dutch NREN, prepared a document
– How to divide your /48 on a site?
• Available in English on our website
https://www.ripe.net/lir-services/training/material/IPv6-for-LIRs-Training-Course/IPv6_addr_plan4.pdf
25
Tuesday, June 5, 2012

26. Deploying IPv6
• IPv4 and IPv6 are not compatible by design
– Allows to deploy IPv6 without breaking things
• To communicate freely a computer needs both
an IPv4 and IPv6 address
– This is known as “Dual Stack”
• It is all about adding IPv6 to your network
– IPv4 will remain as well for now
26
Tuesday, June 5, 2012

27. Make Sure You Have a Plan
• In the near future you need IPv6
• Take a phased approach:
– Make an inventory of what you need
– When purchasing add demand for IPv6 support
– Identify which elements need replacing
– Plan every step and test it before deploying
• No longer depend on IPv4 alone
27
Tuesday, June 5, 2012

28. RIPE-554 Document
• “Requirements for IPv6 in ICT Equipment”
• Best Current Practice describing what to ask for
when requesting IPv6 Support
• Useful for tenders and RFPs
• Originated by the Slovenian Government
– Adopted by various others (Germany, Sweden)
• Updated yesterday!
28
Tuesday, June 5, 2012

29. IPv6 Act Now!
(but take it slowly)
Tuesday, June 5, 2012

30. Questions?
Tuesday, June 5, 2012