Network Neutrality - What's At Stake
•
0 likes•270 views
Swiss IPv6 Member Event May 13. Speaker: Balthasar Glättli
Report
Share
Report
Share
Download to read offline
Recommended
IPv6 solutions for an easy implementation
This document proposes an easy solution to implement IPv6 using a load balancer and DNS/DHCP services that are IPv6 ready. The solution involves making the load balancer IPv6 ready in the first phase, which allows existing IPv4 infrastructure and servers to be reached over both IPv4 and IPv6. In the second phase, the DNS and DHCP services are also made IPv6 ready, allowing full IPv6 compatibility without changes to the existing infrastructure. The demonstration showed how this could be done in under 5 minutes using an A10 load balancer and Infoblox DDI solution.
Family history map
The document is a family history map created by Steven Alvarez for a geography class. It traces the paths his mother's and father's families took to immigrate to the United States from Mexico. His mother's family entered through Tijuana from Guadalajara in the early 1970s and settled in San Diego and Los Angeles. His father's family entered through El Paso from Aguascalientes in the late 1970s and went directly to Santa Ana, where they stayed for 10 years before his parents moved to the Inland Empire in the early 1990s.
IPv6 Enterprise Planning
IPv6 Enterprise Adoption Planning.
Opportunities and Challenges.
The Evolution of the Internet and what we learn from it
IPv6 101
Why should you introduce IPv6 now
Is there an IPv6 Killer App
Planning and Methodology
The 7 most important steps
The biggest sumbling blocks - theory and practice
Recommended
IPv6 solutions for an easy implementation
This document proposes an easy solution to implement IPv6 using a load balancer and DNS/DHCP services that are IPv6 ready. The solution involves making the load balancer IPv6 ready in the first phase, which allows existing IPv4 infrastructure and servers to be reached over both IPv4 and IPv6. In the second phase, the DNS and DHCP services are also made IPv6 ready, allowing full IPv6 compatibility without changes to the existing infrastructure. The demonstration showed how this could be done in under 5 minutes using an A10 load balancer and Infoblox DDI solution.
Family history map
The document is a family history map created by Steven Alvarez for a geography class. It traces the paths his mother's and father's families took to immigrate to the United States from Mexico. His mother's family entered through Tijuana from Guadalajara in the early 1970s and settled in San Diego and Los Angeles. His father's family entered through El Paso from Aguascalientes in the late 1970s and went directly to Santa Ana, where they stayed for 10 years before his parents moved to the Inland Empire in the early 1990s.
IPv6 Enterprise Planning
IPv6 Enterprise Adoption Planning.
Opportunities and Challenges.
The Evolution of the Internet and what we learn from it
IPv6 101
Why should you introduce IPv6 now
Is there an IPv6 Killer App
Planning and Methodology
The 7 most important steps
The biggest sumbling blocks - theory and practice
IPv6 Adressvergabe und Adressierung
The document discusses IPv6 addressing fundamentals and policies. It covers how to obtain IPv6 address space from RIPE, including the different allocation and assignment types. It provides guidelines for creating IPv6 addressing plans, with an example addressing plan that encodes information like function and location in the address. The document also discusses IPv6 transition mechanisms and how they allow connectivity to IPv4 networks during the transition period.
Intro Swiss IPv6 Council Event, 24. März 2014
IPv6 Entwicklung
Jim Bound Award
News vom V6 World Kongress in Paris
IPv6 Integration im Datacenter - wie komplex ist es wirklich?
Ein Anlass des Swiss Ipv6 Councils am 24. März 2014, 18 Uhr.
Referent: Ben Mathis, Leiter IT Plattform, Aspectra
Die Neugier von Ingenieuren zur Technologie stand am Anfang des Projekts, IPv6 in die beiden Datacenters der Aspectra AG zu integrieren. Inzwischen ist die erste Integrationsstufe abgeschlossen und die zweite in Arbeit. Rückblickend zeigt uns Ben Mathis, Leiter IT Plattform Aspectra AG, auf, welche Herausforderungen sich stellten und welche Entscheidungen der Schlüssel zur erfolgreichen IPv6 Integration waren. Genügend Zeit für Fragen bleibt selbstverständlich auch.
Inhalt:
- Die Motivation
- Die Strategie
- Die Implementierung
- 5 Do's und 5 Dont's
- Die offenen Punkte
Swisscom: Testing von IPv6 Security Devices
Swiss IPv6 Council Event, 24.02.2014
Neue Anforderungen an Security Devices durch IPv6
Referent: Christoph Weber, Swisscom
Mit der Einführung von IPv6 in die Datacenter und Client-Netzwerke werden neue Anforderungen an Security Devices wie Firewall, IDS/IPS und andere Security Enforcement Points gestellt. Dies erfordert Kenntnis von IPv6-spezifischen Security-Threats. Darauf basierend müssen neue Anforderungen definiert werden, gegen die anzuschaffende Geräte getestet werden müssen. Weiterhin müssen Standards bei bestehenden Geräten diesbezüglich angepasst werden, deren Implementierung validiert und Auditierungen angepasst werden.
In der Präsentation durch Christoph Weber von Swisscom werden die Ansätze, Ideen und Tools anhand von Firewall-Tests aufgezeigt und dargestellt, wie diese praktisch durchgeführt werden können und wie Ergebnisse bewertet werden müssen.
Dual-Stack IPv6 Monitoring bei AWK - Member Anlass Swiss IPv6 Council Nov 2013
● Anfang 2013
„Das Netzwerkmanagement erfolgt zukünftig ausschliesslich über IPv6. Alle
relevanten Netzwerkparameter (IPv4 und IPv6) werden über IPv6 abgefragt.
Konfigurationen der Netzwerkelemente sollen regelmässig automatisiert
gesichert werden. Der Transport erfolgt hier ebenfalls über IPv6“
● November 2013
… nun ja
für das hier vorgestellte Monitoring-Projekt
Erhöhte Anforderungen an das Netzwerk der AWK Group
Redundante Netzwerkkonfigurationen ohne Monitoring machen wenig Sinn
● … für diese Slides
Teilnehmer für Praxis-Versuche motvieren
IPv6 bei PostFinance AG - Erste Erkenntnisse aus der Vorstudie
Inhalt:
Kurz Vorgestellt Die Informatik von PostFinance
IPv6 bei PostFinance Warum wir uns mit IPv6 auseinandersetzen
Standortbestimmung Wo wir heute stehen
Herausforderungen Unsere ersten Erkenntnisse zu IPv6
Wie es weiter geht Rüstung für die Zukunft
IPv6 bei der Post - Step by Step zu IPv6
Inhalt:
Wer sind wir Projektteam, Projekt
Die Post National und international
Post Domain Verwaltung ca. 700 Domains in ca. 70 Ländern
Adresskonzept Unsere ersten Erfahrungen
Dual Stack Sicherheit nicht unterlaufen
Vom User zur Post Wo stehen wir heute
Erfahrungen Hindernisse zu überwinden
Masterplan (Engineering) Unsere Entscheidungsgrundlage
Tools und Prozesse Wie weit sind wir
Intranet und Datacenter Im Lifecycle IPv6 ready werden
SIG IPv6 Provider "IPv6 Ready"
SIG integrated IPv6 into its IP network in 2008 without a business case, seeing it as the natural evolution of its internet product. By 2010, it had achieved native dual-stack mode with IPv4 and IPv6 DNS available for customers. It gained IPv6 ready certification in 2011 and added IPv6 routes to customer networks. SIG's fiber network covers Geneva city and canton, connecting over 110,000 locations and 800 buildings. It offers IPv6 connections for organizations to test or implement within their networks.
Dos And Donts Of IPv6 Transition
The document discusses the benefits of exercise for both physical and mental health. Regular exercise can improve cardiovascular health, reduce symptoms of depression and anxiety, enhance mood, and reduce stress levels. Staying physically active for at least 30 minutes each day can provide significant health benefits.
Members geneva dos and donts of transition silvia hagen
The document discusses the benefits of exercise for both physical and mental health. Regular exercise can improve cardiovascular health, reduce stress and anxiety, and boost mood and cognitive function. Staying physically active for at least 30 minutes each day is recommended for overall health and well-being.
IPv6 Security - Myths and Reality
The document discusses several key differences between IPv4 and IPv6 that relate to security implications:
- IPv6 uses a vastly larger address space (340 trillion trillion trillion addresses vs 4 billion IPv4 addresses), making address scanning much more difficult. However, the large address space was not designed to prevent scanning.
- Techniques like neighbor discovery allow nodes to automatically configure themselves on the network, but this introduces vulnerabilities like denial of service attacks if not secured properly. Cisco technologies like RA Guard help mitigate these risks.
- While IPsec was originally mandated for IPv6, using it for all traffic can introduce scalability issues and impair network services and visibility. It is best reserved for specific high-value targets as with
IPv6 Adoption --- Acceleration
IPv6 adoption is accelerating due to growing challenges with IPv4 addresses and the increasing number of internet devices. Carrier grade NAT (CGN) solutions are being used to share public IPv4 addresses but negatively impact user experience. IPv6 deployment avoids these issues by providing each user with a unique IP address and allows the "full spectrum" internet. Global IPv6 deployment is now doubling every 9 months with some networks seeing 10-15% of users on IPv6. Full deployment is forecast within the next 5 years and will be required to support continued internet growth.
IPv6 Transition
This document discusses IPv6 transition and the state of IPv6 adoption. It notes that while IPv4 address exhaustion is a real issue, users do not care and prefer NAT for security. Transition requires cooperation across users, ISPs, devices and content. Statistics show rapid growth of IPv6 adoption by major networks worldwide in the last two years. Full transition to IPv6 is needed to enable unlimited connectivity for cloud/mobile internet and the internet of things going forward.
IPv6 Security und Hacking
Aspekte von IPv6-Security
• Hackertools & ein paar Angriffsszenarien
• 3 Empfehlungen
q a) Ist IPv6 sicherer als IPv4?
q b) Ist IPv6 unsicherer als IPv4?
q c) Wer ist an allem Schuld?
q d) Wie wirkt sich die Integration von IPv6 in
meine Organisation auf deren IT-Sicherheit aus?
Der Einsatz von Lisp für die IPv6 Migration
Bei der Adressarchitektur von IPv4 beinhaltet eine IP-Adresse zwei Informationen über einen Knoten (genaugenommen ein Interface): erstens die Adresse des Interfaces (Host-ID) und zweitens die Information, wie das Interface mit dem Netzwerk verbunden ist (Subnetz). Dies ändert sich mit IPv6 nicht, ausser dass der Adressraum viel grösser ist. Dies führt zu grösseren Herausforderungen in komplexen Netzwerken, insbesondere wenn Anforderungen an Multi-Homing oder Mobilität vorliegen.
LISP (Locator/ID Separation Protocol) ist eine neue Routingarchitektur mit einer neuen Adressierungsstruktur. Dabei wird die Identität eines Gerätes, auch Endpoint Identifier genannt (EID), von seiner Position im Netzwerk, auch Routing Locator (RLOC) genannt, in zwei separate Adressräume unterteilt.
Die Präsentation geht auf verschiedene Use Cases, insbesondere die Migration von IPv4 auf IPv6 mit LISP ein.
LISP Update
Eine Präsentation über LISP, Routing Architektur und Protokoll-Set. Unter anderem geeignet für IPv6 Einführung. Präsentation stammt von Cisco.
IPv6 at CSCS
IPv6 configuration at CSCS
● Dual Stack approach
● Static addressing for networking equipment and servers
● Dynamic addressing for PC and guest networks
– Auto configuration with SLAAC
● But we still rely on DHCPv4 to distribute DNS
– Tests ongoing for:
● Distributing DNS via RA (RDNSS, RFC6106)
● DHCPv6
IPv6 deployment
5
● Configure the network part and FW/ACLs
– Test
● Configure IPv6 on the systems
– Test
– At this point the system uses IPv6 and IPv4 for outgoing
connections
● Publish the AAAA resource record into the DNS with short TTL
– If test is succesful: set normal TTL for the RR AAAA
– Now the system is fully IPv6 enabled
IPv6 lessons learned
7
● Some network devices send out RA even if they shouldn't
– Impact: machines get IPv6 global address
● Disable SLAAC autoconfiguration on all the servers
● Rogue RA:
– Impact: default gateway changed! No IPv6 connectivity anymore..
● Filter RA messages at the network level
● IPv6 ACL: be careful not to filter NS/ND messages
– Impact: you may break IPv6 connectivity
● On IPv6 ARP is replaced by ICMPv6 NS and ICMPv6 ND messages
● Firewall IPv6 limitations (CLI config needed, WebGUI not ready)
● Services not listening on IPv6. Remember to configure ssh, httpd, etc to
listen also on IPv6
IPv6 strategy for deployment at ETH Switzerland
This document summarizes IPv6 implementation plans at ETH Zurich. It discusses that IPv4 addresses are running out, so IPv6 is needed to connect growing devices. The roadmap is to gain experience with IPv6 in 2013-2014, start dual-stack rollout in 2015, and transition fully from IPv4 by 2020. Key aspects covered include changing to a new IPv6 address range, DHCPv6 implementation challenges, firewall upgrades, and initial projects already using IPv6.
13062024_First India Newspaper Jaipur.pdf
Find Latest India News and Breaking News these days from India on Politics, Business, Entertainment, Technology, Sports, Lifestyle and Coronavirus News in India and the world over that you can't miss. For real time update Visit our social media handle. Read First India NewsPaper in your morning replace. Visit First India.
CLICK:- https://firstindia.co.in/
#First_India_NewsPaper
A draft Ukraine-Russia treaty from April 2022
A draft Ukraine-Russia treaty from April 2022, published here in full for the first time.
Essential Tools for Modern PR Business .pptx
Discover the essential tools and strategies for modern PR business success. Learn how to craft compelling news releases, leverage press release sites and news wires, stay updated with PR news, and integrate effective PR practices to enhance your brand's visibility and credibility. Elevate your PR efforts with our comprehensive guide.
在线办理(latrobe毕业证书)拉筹伯大学毕业证Offer一模一样
学校原件一模一样【微信：741003700 】《(latrobe毕业证书)拉筹伯大学毕业证》【微信：741003700 】学位证，留信认证（真实可查，永久存档）原件一模一样纸张工艺/offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。
本公司拥有海外各大学样板无数，能完美还原。
1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700
【主营项目】
一.毕业证【q微741003700】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【q/微741003700】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
More Related Content
More from Swiss IPv6 Council
IPv6 Adressvergabe und Adressierung
The document discusses IPv6 addressing fundamentals and policies. It covers how to obtain IPv6 address space from RIPE, including the different allocation and assignment types. It provides guidelines for creating IPv6 addressing plans, with an example addressing plan that encodes information like function and location in the address. The document also discusses IPv6 transition mechanisms and how they allow connectivity to IPv4 networks during the transition period.
Intro Swiss IPv6 Council Event, 24. März 2014
IPv6 Entwicklung
Jim Bound Award
News vom V6 World Kongress in Paris
IPv6 Integration im Datacenter - wie komplex ist es wirklich?
Ein Anlass des Swiss Ipv6 Councils am 24. März 2014, 18 Uhr.
Referent: Ben Mathis, Leiter IT Plattform, Aspectra
Die Neugier von Ingenieuren zur Technologie stand am Anfang des Projekts, IPv6 in die beiden Datacenters der Aspectra AG zu integrieren. Inzwischen ist die erste Integrationsstufe abgeschlossen und die zweite in Arbeit. Rückblickend zeigt uns Ben Mathis, Leiter IT Plattform Aspectra AG, auf, welche Herausforderungen sich stellten und welche Entscheidungen der Schlüssel zur erfolgreichen IPv6 Integration waren. Genügend Zeit für Fragen bleibt selbstverständlich auch.
Inhalt:
- Die Motivation
- Die Strategie
- Die Implementierung
- 5 Do's und 5 Dont's
- Die offenen Punkte
Swisscom: Testing von IPv6 Security Devices
Swiss IPv6 Council Event, 24.02.2014
Neue Anforderungen an Security Devices durch IPv6
Referent: Christoph Weber, Swisscom
Mit der Einführung von IPv6 in die Datacenter und Client-Netzwerke werden neue Anforderungen an Security Devices wie Firewall, IDS/IPS und andere Security Enforcement Points gestellt. Dies erfordert Kenntnis von IPv6-spezifischen Security-Threats. Darauf basierend müssen neue Anforderungen definiert werden, gegen die anzuschaffende Geräte getestet werden müssen. Weiterhin müssen Standards bei bestehenden Geräten diesbezüglich angepasst werden, deren Implementierung validiert und Auditierungen angepasst werden.
In der Präsentation durch Christoph Weber von Swisscom werden die Ansätze, Ideen und Tools anhand von Firewall-Tests aufgezeigt und dargestellt, wie diese praktisch durchgeführt werden können und wie Ergebnisse bewertet werden müssen.
Dual-Stack IPv6 Monitoring bei AWK - Member Anlass Swiss IPv6 Council Nov 2013
● Anfang 2013
„Das Netzwerkmanagement erfolgt zukünftig ausschliesslich über IPv6. Alle
relevanten Netzwerkparameter (IPv4 und IPv6) werden über IPv6 abgefragt.
Konfigurationen der Netzwerkelemente sollen regelmässig automatisiert
gesichert werden. Der Transport erfolgt hier ebenfalls über IPv6“
● November 2013
… nun ja
für das hier vorgestellte Monitoring-Projekt
Erhöhte Anforderungen an das Netzwerk der AWK Group
Redundante Netzwerkkonfigurationen ohne Monitoring machen wenig Sinn
● … für diese Slides
Teilnehmer für Praxis-Versuche motvieren
IPv6 bei PostFinance AG - Erste Erkenntnisse aus der Vorstudie
Inhalt:
Kurz Vorgestellt Die Informatik von PostFinance
IPv6 bei PostFinance Warum wir uns mit IPv6 auseinandersetzen
Standortbestimmung Wo wir heute stehen
Herausforderungen Unsere ersten Erkenntnisse zu IPv6
Wie es weiter geht Rüstung für die Zukunft
IPv6 bei der Post - Step by Step zu IPv6
Inhalt:
Wer sind wir Projektteam, Projekt
Die Post National und international
Post Domain Verwaltung ca. 700 Domains in ca. 70 Ländern
Adresskonzept Unsere ersten Erfahrungen
Dual Stack Sicherheit nicht unterlaufen
Vom User zur Post Wo stehen wir heute
Erfahrungen Hindernisse zu überwinden
Masterplan (Engineering) Unsere Entscheidungsgrundlage
Tools und Prozesse Wie weit sind wir
Intranet und Datacenter Im Lifecycle IPv6 ready werden
SIG IPv6 Provider "IPv6 Ready"
SIG integrated IPv6 into its IP network in 2008 without a business case, seeing it as the natural evolution of its internet product. By 2010, it had achieved native dual-stack mode with IPv4 and IPv6 DNS available for customers. It gained IPv6 ready certification in 2011 and added IPv6 routes to customer networks. SIG's fiber network covers Geneva city and canton, connecting over 110,000 locations and 800 buildings. It offers IPv6 connections for organizations to test or implement within their networks.
Dos And Donts Of IPv6 Transition
The document discusses the benefits of exercise for both physical and mental health. Regular exercise can improve cardiovascular health, reduce symptoms of depression and anxiety, enhance mood, and reduce stress levels. Staying physically active for at least 30 minutes each day can provide significant health benefits.
Members geneva dos and donts of transition silvia hagen
The document discusses the benefits of exercise for both physical and mental health. Regular exercise can improve cardiovascular health, reduce stress and anxiety, and boost mood and cognitive function. Staying physically active for at least 30 minutes each day is recommended for overall health and well-being.
IPv6 Security - Myths and Reality
The document discusses several key differences between IPv4 and IPv6 that relate to security implications:
- IPv6 uses a vastly larger address space (340 trillion trillion trillion addresses vs 4 billion IPv4 addresses), making address scanning much more difficult. However, the large address space was not designed to prevent scanning.
- Techniques like neighbor discovery allow nodes to automatically configure themselves on the network, but this introduces vulnerabilities like denial of service attacks if not secured properly. Cisco technologies like RA Guard help mitigate these risks.
- While IPsec was originally mandated for IPv6, using it for all traffic can introduce scalability issues and impair network services and visibility. It is best reserved for specific high-value targets as with
IPv6 Adoption --- Acceleration
IPv6 adoption is accelerating due to growing challenges with IPv4 addresses and the increasing number of internet devices. Carrier grade NAT (CGN) solutions are being used to share public IPv4 addresses but negatively impact user experience. IPv6 deployment avoids these issues by providing each user with a unique IP address and allows the "full spectrum" internet. Global IPv6 deployment is now doubling every 9 months with some networks seeing 10-15% of users on IPv6. Full deployment is forecast within the next 5 years and will be required to support continued internet growth.
IPv6 Transition
This document discusses IPv6 transition and the state of IPv6 adoption. It notes that while IPv4 address exhaustion is a real issue, users do not care and prefer NAT for security. Transition requires cooperation across users, ISPs, devices and content. Statistics show rapid growth of IPv6 adoption by major networks worldwide in the last two years. Full transition to IPv6 is needed to enable unlimited connectivity for cloud/mobile internet and the internet of things going forward.
IPv6 Security und Hacking
Aspekte von IPv6-Security
• Hackertools & ein paar Angriffsszenarien
• 3 Empfehlungen
q a) Ist IPv6 sicherer als IPv4?
q b) Ist IPv6 unsicherer als IPv4?
q c) Wer ist an allem Schuld?
q d) Wie wirkt sich die Integration von IPv6 in
meine Organisation auf deren IT-Sicherheit aus?
Der Einsatz von Lisp für die IPv6 Migration
Bei der Adressarchitektur von IPv4 beinhaltet eine IP-Adresse zwei Informationen über einen Knoten (genaugenommen ein Interface): erstens die Adresse des Interfaces (Host-ID) und zweitens die Information, wie das Interface mit dem Netzwerk verbunden ist (Subnetz). Dies ändert sich mit IPv6 nicht, ausser dass der Adressraum viel grösser ist. Dies führt zu grösseren Herausforderungen in komplexen Netzwerken, insbesondere wenn Anforderungen an Multi-Homing oder Mobilität vorliegen.
LISP (Locator/ID Separation Protocol) ist eine neue Routingarchitektur mit einer neuen Adressierungsstruktur. Dabei wird die Identität eines Gerätes, auch Endpoint Identifier genannt (EID), von seiner Position im Netzwerk, auch Routing Locator (RLOC) genannt, in zwei separate Adressräume unterteilt.
Die Präsentation geht auf verschiedene Use Cases, insbesondere die Migration von IPv4 auf IPv6 mit LISP ein.
LISP Update
Eine Präsentation über LISP, Routing Architektur und Protokoll-Set. Unter anderem geeignet für IPv6 Einführung. Präsentation stammt von Cisco.
IPv6 at CSCS
IPv6 configuration at CSCS
● Dual Stack approach
● Static addressing for networking equipment and servers
● Dynamic addressing for PC and guest networks
– Auto configuration with SLAAC
● But we still rely on DHCPv4 to distribute DNS
– Tests ongoing for:
● Distributing DNS via RA (RDNSS, RFC6106)
● DHCPv6
IPv6 deployment
5
● Configure the network part and FW/ACLs
– Test
● Configure IPv6 on the systems
– Test
– At this point the system uses IPv6 and IPv4 for outgoing
connections
● Publish the AAAA resource record into the DNS with short TTL
– If test is succesful: set normal TTL for the RR AAAA
– Now the system is fully IPv6 enabled
IPv6 lessons learned
7
● Some network devices send out RA even if they shouldn't
– Impact: machines get IPv6 global address
● Disable SLAAC autoconfiguration on all the servers
● Rogue RA:
– Impact: default gateway changed! No IPv6 connectivity anymore..
● Filter RA messages at the network level
● IPv6 ACL: be careful not to filter NS/ND messages
– Impact: you may break IPv6 connectivity
● On IPv6 ARP is replaced by ICMPv6 NS and ICMPv6 ND messages
● Firewall IPv6 limitations (CLI config needed, WebGUI not ready)
● Services not listening on IPv6. Remember to configure ssh, httpd, etc to
listen also on IPv6
IPv6 strategy for deployment at ETH Switzerland
This document summarizes IPv6 implementation plans at ETH Zurich. It discusses that IPv4 addresses are running out, so IPv6 is needed to connect growing devices. The roadmap is to gain experience with IPv6 in 2013-2014, start dual-stack rollout in 2015, and transition fully from IPv4 by 2020. Key aspects covered include changing to a new IPv6 address range, DHCPv6 implementation challenges, firewall upgrades, and initial projects already using IPv6.
More from Swiss IPv6 Council (18)
IPv6 Integration im Datacenter - wie komplex ist es wirklich?
IPv6 Integration im Datacenter - wie komplex ist es wirklich?
Dual-Stack IPv6 Monitoring bei AWK - Member Anlass Swiss IPv6 Council Nov 2013
Dual-Stack IPv6 Monitoring bei AWK - Member Anlass Swiss IPv6 Council Nov 2013
IPv6 bei PostFinance AG - Erste Erkenntnisse aus der Vorstudie
IPv6 bei PostFinance AG - Erste Erkenntnisse aus der Vorstudie
Members geneva dos and donts of transition silvia hagen
Members geneva dos and donts of transition silvia hagen
Recently uploaded
13062024_First India Newspaper Jaipur.pdf
Find Latest India News and Breaking News these days from India on Politics, Business, Entertainment, Technology, Sports, Lifestyle and Coronavirus News in India and the world over that you can't miss. For real time update Visit our social media handle. Read First India NewsPaper in your morning replace. Visit First India.
CLICK:- https://firstindia.co.in/
#First_India_NewsPaper
A draft Ukraine-Russia treaty from April 2022
A draft Ukraine-Russia treaty from April 2022, published here in full for the first time.
Essential Tools for Modern PR Business .pptx
Discover the essential tools and strategies for modern PR business success. Learn how to craft compelling news releases, leverage press release sites and news wires, stay updated with PR news, and integrate effective PR practices to enhance your brand's visibility and credibility. Elevate your PR efforts with our comprehensive guide.
在线办理(latrobe毕业证书)拉筹伯大学毕业证Offer一模一样
学校原件一模一样【微信：741003700 】《(latrobe毕业证书)拉筹伯大学毕业证》【微信：741003700 】学位证，留信认证（真实可查，永久存档）原件一模一样纸张工艺/offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。
本公司拥有海外各大学样板无数，能完美还原。
1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700
【主营项目】
一.毕业证【q微741003700】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！
二.真实使馆公证(即留学回国人员证明,不成功不收费)
三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）
四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度)
如果您处于以下几种情况：
◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【q/微741003700】
◇面对父母的压力，希望尽快拿到；
◇不清楚认证流程以及材料该如何准备；
◇回国时间很长，忘记办理；
◇回国马上就要找工作，办给用人单位看；
◇企事业单位必须要求办理的
◇需要报考公务员、购买免税车、落转户口
◇申请留学生创业基金
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
Snigdha-Sreenath-Minor-v-Travancore-Devaswom-Board-WPCNO-39847-OF-2023-2024-L...
केरल उच्च न्यायालय ने 11 जून, 2024 को मंडला पूजा में भाग लेने की अनुमति मांगने वाली 10 वर्षीय लड़की की रिट याचिका को खारिज कर दिया, जिसमें सर्वोच्च न्यायालय की एक बड़ी पीठ के समक्ष इस मुद्दे की लंबित प्रकृति पर जोर दिया गया। यह आदेश न्यायमूर्ति अनिल के. नरेंद्रन और न्यायमूर्ति हरिशंकर वी. मेनन की खंडपीठ द्वारा पारित किया गया
Howard Fineman, Veteran Political Journalist and TV Pundit, Dies at 75
Howard Fineman, Veteran Political Journalist and TV Pundit, Dies at 75LUMINATIVE MEDIA/PROJECT COUNSEL MEDIA GROUP
From his beginnings with a daily newspaper, he moved easily through Newsweek magazine to cable news and, later, to the frontiers of online journalism.Youngest c m in India- Pema Khandu Biography
Pema Khandu, born on August 21, 1979, is an Indian politician and the Chief Minister of Arunachal Pradesh. He is the son of former Chief Minister of Arunachal Pradesh, Dorjee Khandu. Pema Khandu assumed office as the Chief Minister in July 2016, making him one of the youngest Chief Ministers in India at that time.
Recently uploaded (8)
Snigdha-Sreenath-Minor-v-Travancore-Devaswom-Board-WPCNO-39847-OF-2023-2024-L...
Snigdha-Sreenath-Minor-v-Travancore-Devaswom-Board-WPCNO-39847-OF-2023-2024-L...
Howard Fineman, Veteran Political Journalist and TV Pundit, Dies at 75
Howard Fineman, Veteran Political Journalist and TV Pundit, Dies at 75