Cisco Certification - IPV6 Security

This customized course on IPv6 addresses the knowledge and skill requirements for Account Managers, Technical Managers and others at Cisco Learning Partners and Service Provider companies supporting the transition from IPv4 to IPv6.

The course covers the range of Cisco products and solutions pertinent to IPv6 in a Service Provider environment, including carrier grade NAT aka Large Scale NAT, global routing protocols (in particular, MPBGP) and the Nexus and CSR products. Migration strategies for a full range of scenarios are discussed.

Pre-Requisites

• Individuals attending this course need basic familiarity with IPv4 routing and switching, preferably at the CCNA or CCDA level of understanding.

Who should attend?

• IT Managers, Administrators and related staff at Service Provider organizations
• Cisco Account Managers
• Cisco Partner Account Managers
• Cisco Partner SEs

Course Objectives

Delegates will be able to meet these overall objectives on completion of this course:

• Overview of IPv6
• IPv6 Addressing in depth
• IPv6 Operations
• IPv6 Applications and Services
• IPv6 routing protocols
• Introduction to IPv6 Multicast
• IPv6 Transition and customer integration Strategies including dual stack, 6to4 and 6RD Tunnels, NAT64 and DNS64 translation, Large Scale Nat (LSN or CGN) NAT444, NAT464, DS-Lite, 6PE and 6VPE.
• Introduction to IPv6 Security
• Introduction to IPv6 QoS

Course Outline

Introduction to IPv6

Explaining the Rationale for IPv6

• IP Address Allocation
• History of IPv4
• Next Generation of IP
• IPv4 Workarounds
• IPv6 rationale in the Service Provider environment

Evaluating IPv6 Features and Benefits

• Features and Benefits of IPv6
• IPv6 Addresses
• IPv6 Autoconfiguration and Aggregation
• Advanced IPv6 Features
• Transition Strategies to IPv6 (focus on Service Provider)

Understanding Market Drivers

• Market Growth for IPv6
• Native IPv6 Content
• Drivers for Adoption (focus on Service Provider)

IPv6 Operations

Understanding the IPv6 Addressing Architecture

• IPv6 Addressing Architecture
• IPv6 Address Formats and Types
• IPv6 Address Uses
• Required IPv6 Addresses
• IPv6 Internet
• IPv6 Address Allocation
• Connecting to the IPv6 Internet
• IPv6 Multihoming Issues and Solutions

Describing the IPv6 Header Format

• IPv6 Header Changes and Benefits
• IPv6 Header Fields
• IPv6 Extension Headers

Enabling IPv6 on Cisco Routers

• Enabling IPv6 on Cisco Routers
• IPv6 Address Configuration
• Autoconfiguration

Using ICMPv6 and Neighbor Discovery

• ICMPv6
• ICMP Errors
• Echo
• IPv6 over Data Link Layers
• Neighbor Discovery
• Router Discovery
• Neighbor Unreachability Detection (NUD)
• Duplicate Address Detection (DAD)
• Reedirection
• Stateless Autoconfiguration
• Value of Autoconfiguration
• Renumbering
• Cisco IOS Neighbor Discovery Command Syntax
• Cisco IOS Network Prefix Renumbering Scenario
• ICMP MLD
• Instructor Led Demonstrations:
• Enabling IPv6 on Hosts
• Enabling IPv6 on Cisco Routers
• Using Neighbor Discovery

IPv6 Services

IPv6 Mobility

• Introduction to IP Mobility
• Mobile IPv6
• Network Mobility Examples (NEMO, MANET)

Describing DNS in an IPv6 Environment

• DNS Objects and Records
• DNS Tree Structure
• Dynamic DNS

Understanding DHCPv6 Operations

• DHCPv6 Operation
• DHCPv6 Stateless and Stateful
• DHCPv6 Prefix Delegation Process

IPv6-Enabled Routing Protocols

Examining OSPFv3

• OSPFv3 Key Characteristics
• OSPFv3 IPsec ESP Authentication and Encryption

Examining Integrated IS-IS

• Integrated IS-IS Characteristics
• Changes Made to IS-IS to Support IPv6
• Single SPF Architecture
• Multitopology IS-IS for IPv6

Understanding MP-BGP

• MP-BGP Support for IPv6
• Strategies to support IPv4 and IPv6 address families
• BGP Peering Over Link-Local Addresses
• BGP Prefix Filtering

Configuring FHRP for IPv6

• First-Hop Redundancy Protocols and Concepts
• HSRP for IPv6
• GLBP for IPv6

IPv6 Multicast Services

Implementing Multicast in an IPv6 Network

• IPv6 Multicast Addressing
• How to Implement Multicasting in an IPv6 Network
• PIM SM, ASM and SSM
• Rendezvous Points
• IPv6 Multicast Application Example

Transition to IPv6

Introduction to the Transition

• Dual-Stack
• Tunnels (6in4, 6to4, 6RD)
• Translation (NAT, NAT-PT, NAT64, DNS64)
• Large Scale NAT or Carrier Grade NAT (NAT444, NAT464, DS-Lite)
• What about NAT66 ? (NPTv6)

Understanding Support for IPv6 in MPLS

• MPLS Operations
• IPv6 over MPLS Deployment Scenarios
• 6PE
• 6VPE

Introduction to IPv6 Security

Understanding IPv6 Security

• Threats in IPv6 Networks
• IPSec
• SEND
• RA Guard
• Secure the Routing Plane
• How to design a secure network without NAT

Discussing Security Issues in an IPv6 Transition Environment

• Dual-Stack Issues
• Tunnel Security Issues
• NAT-PTTranslation Security Issues
• ICMP Traffic Requirements

Understanding IPv6 Security Practices

• Threats in IPv6 Networks
• Build Distributed Security Capability
• Hide Topology when Possible
• Secure the Local Link
• ICMPv6 at Edge—Manage ICMPv6 Traffic
• Develop Mobility Support Plan
• Use Transition Mechanisms as Transport
• Secure the Routing Plane
• Deploy an Early-Warning System

IPv6 Services

IPv6 Mobility

• Introduction to IP Mobility
• Mobile IPv6
• Network Mobility Examples

Describing DNS in an IPv6 Environment

• DNS Objects and Records
• DNS Tree Structure
• Dynamic DNS

Understanding DHCPv6 Operations

• DHCPv6
• DHCPv6 Operation
• DHCPv6 Multicast Addresses
• DHCPv6 Prefix Delegation Process
• DHCPv6 Troubleshooting
• Instructor-Led Demonstration:
• Using Prefix Delegation

Understanding QoS Support in an IPv6 Environment

• IPv6 Header Fields Used for QoS
• IPv6 and the Flow Label Field