You are on page 1of 101

Hidaya Institute of

Science & Technology

www.histpk.org
A Division of Hidaya Trust, Pakistan

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
IPv6

By
Z.A. Solangi

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
2
Agenda

Limitations of IPv4
IPv6 Features
Introduction to IPv6 Addressing
IPv6 Address formats
Types of IPv6 Addresses
Link Local Addresses
Site Local Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 3
Special Addresses

Multicast Addresses

Solicited Node Multicast Addresses


Anycast Addresses
IPv6 Interface Identifiers
IPv6 Address with an Embedded IPv4 Address
IPv6 Address Representation for URL

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 4
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 5
Limitations of IPv4

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 6
Scarcity of IPv4 Addresses
• The IPv4 addressing system uses 32-bit address
space. This 32-bit address space is further
classified to usable A, B, and C classes. 32-bit
address space allows for 4,294,967,296 IPv4 
 addresses, but the previous and current IPv4
address allocation practices limit the number of
available public IPv4 addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 7
Scarcity of IPv4 Addresses Cont…
• Because scarcity(shortage) of IPv4 addresses,
many organizations implemented NAT (Network
Address Translation) to map multiple private
addresses to a single public IP address.
• By using NAT (Network Address Translation) we
can map many internal private IPV4 addresses to
a public IPv4 address, which helped in conserving
IPv4 addresses. But NAT (Network Address
Translation) also have many limitations. NAT
(Network Address Translation) do not support
network layer security standards and it do not
support the mapping of all upper layer protocols
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 8
Scarcity of IPv4 Addresses Cont…
• Without NAT, there may be network problems
when two organizations which use same private
IPv4 address ranges communicate.
• Servers, workstations and devices which are
connected to the Internet also need addresses
and the current statistics prove that public IPv4
address space will be depleted soon.
• The scarcity of IPv4 address is a major limitation
of IPv4 addressing system.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 9
Security Issues
• (IPv4) was published in 1981 and the current
network security threats were not anticipated at
that time.
• Internet Protocol Security (IPSec) is a protocol
suit which enables network security by protecting
the data being sent from being viewed or
modified.
• Internet Protocol Security (IPSec) provides
security for IPv4 packets, but Internet Protocol
Security (IPSec) is not built-in instead its optional.
• Many IPSec implementations are proprietary.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 10
Address configuration related
issues
• Internet is expanding and many new computers
and devices are using IP. The configuration of IP
addresses (static or dynamic) should be simple.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 11
Quality of service (QoS)
• Quality of Service (QoS) is available in IPv4 and it
relies on the 8 bits of the IPv4 Type of Service
(TOS) field and the identification of the payload.
• IPv4 Type of Service (TOS) field has limited
functionality, payload identification uses a TCP or
UDP port hence QoS will not be possible when
the IPv4 packet payload is encrypted.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 12
History of IPv4 Address
Management
• In1980s there was a single IP address registry
(the “Central Registry/Network Information
Center/InterNIC/IANA”), located in Los Angeles,
USA
• In early1990s it was decided that the registry
function (Internet Address Registration) should be
regionalized for the distribution of administrative
function and better management of limited IPv4
address space

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 13
Regional Internet address Registries
• RIPE NCC (1992) (RIRs)
– Serving Europe and parts of Africa and Central Asia
• APNIC (1993)
– Serving the Asia Pacific region
• ARIN (1997)
– Serving America and part of Africa
• LACNIC (2001)
– Serving Latin America and much of the Caribbean
• AFRINIC (2005)
– Serving African region
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 14
APNIC NIRs

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 15
IPv4 Address Distribution (February 2011)
• When the last
available blocks of
IPv4 address space
were finally
distributed to the
RIRs, the global
distribution of IPv4
address space was
as shown in pie
chart

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 16
Ref: http://www.potaroo.net/tools/ipv4/
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 17
Hay….! we need alternative, we are in emergency
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 18
IPv6 Features

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 19
New Packet Format and Header
• IPv6 specifies a new packet format. The new IPv6
packet format helps to minimize packet header
processing by routers.
• This is achieved by moving both nonessential and
optional fields to extension headers that are
placed after the IPv6 header.  
• Since IPv4 packets and IPv6 packets are
significantly different, the two protocols are not
interoperable.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 20
Extension Headers

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 21
Large Address Space
• IPv4 has 32 bit (4-byte) address space, but IPv6
has 128-bit (16-byte) address space.
• IPv6 address space supports a total of 2128
addresses. This large address space allow a
better, systematic, hierarchical allocation of
addresses and efficient route aggregation.
• With the large number of available addresses we
can eliminate address-conservation techniques
like NAT (Network Address Translation).

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 22
Statefull and Stateless IPv6 address
configuration
• In IPv6 statefull or stateless configuration is
possible.
• Hosts on a link can automatically configure with
IPv6 addresses called link-local addresses and
with addresses derived from prefixes advertised
by local routers. When a host is connected to a
network, it sends a link-local router solicitation
multicast request for its configuration parameters.
The router which is available on the link responds
with a router advertisement packet that contains
network-layer configuration parameters.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 23
Statefull and Stateless IPv6 address
configuration Cont…
• Hosts can configure link-local addresses
automatically and communicate with each other
without manual configuration even there is no
router available.
• The hosts may also have stateful configuration
with the Dynamic Host Configuration Protocol
version 6 (DHCPv6) or static configurations, as in
IPv4.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 24
Communication Modes
• The three types of communication available in
IPv4 are unicast, multicast and broadcast.
Unicast is one-to-one communication, multicast is
one-to-many communication and broadcast is
one-to-all communication. The transmission of a
packet to all hosts was performed by using
special broadcast addresses in IPv4.
• Broadcast communication is not available in IPv6
and therefore does not define broadcast
addresses. In IPv6, the effect of broadcast can be
achieved by sending a packet to the link-local all
nodes multicast group at address ff02::1
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 25
Encryption

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 26
Integrated Internet Protocol Security
(IPSec)
• Internet Protocol Security (IPSec) is a set of
Internet standards that uses cryptographic
security services to provide Confidentiality,
Authentication, Data integrity.
• The support for Internet Protocol Security (IPSec)
was optional in IPv4. Internet Protocol Security
(IPSec) is an integral part of the base protocol
suite in IPv6. Internet Protocol Security (IPSec)
support is mandatory in IPv6.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 27
Neighbor Discovery

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 28
Neighbor Discovery Protocol
• The Neighbor Discovery Protocol (NDP) is a
protocol used with IPv6. The Neighbor Discovery
protocol (NDP) is based on Internet Control
Message Protocol Version 6 (ICMPv6) messages
that manage the interacting nodes on the same
link.
• There is no Address Resolution Protocol (ARP)
for IPv6 and the role of the Address Resolution
Protocol (ARP) is replaced by Neighbor Discovery
Protocol (NDP).

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 29
Extensibility

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 30
Extensibility
• The features of IPv6 can be extended by adding
extension headers after IPv6 header. The size of
IPv6 extension headers is constrained only by the
size of the IPv6 packet, unlike 40 bytes of options
of IPv4.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 31
Part 01 Ended

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
32
IPv6 Addressing Hierarchy

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 33
Introduction to IPv6 Addressing
• The depleting IPv4 addresses is one of the main
reasons for a new IP version, IPv6.
• The size of an address in IPv4 address is 32-bit
(4-bytes). This is increased much larger and the
size of an address in IPv6 is 128 bits, which is
four times longer than the 32-bit IPv4 address.
• 128 bits (or 16 bytes) long: four times as long as
its predecessor.
• 2128 : about 340 billion billion billion billion different
addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 34
Introduction to IPv6 Addressing
Cont…
• Such a large amount of available IP addresses
ensure that we will never again run out of IP
addresses
• It also allows multiple levels of hierarchy and
flexibility in designing hierarchical unicast
addressing and routing.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 35
IPv6 Address formats

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 36
IPv6 Address formats
• IPv4 addresses are 32-bit addresses, divided into
4-Octets (Bytes).

• 32-bit large number is difficult to represent in


binary format and therefore IPv4 addresses are
represented in decimals, separated by a dot.

An example of IPv4 address is 192.168.100.10

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 37
IPv6 Address formats Cont…

• IPv6 addresses are so much larger than IPv4


addresses and even representing them in
decimals is difficult. Hence IPv6 addresses are
represented
– using 32 hexadecimal numbers
– digits are arranged into 8 groups each of four digits to
improve the readability.
– Groups are separated by colons
• An example of IPv6 address is
4FDE:0000:0000:0002:0022:2217:FF3B:118C

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 38
IPv6 Address formats Cont…
128.91.45.157.220.40.0.0.0.0.252.87.212.200.31.255

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
39
IPv6 Address formats Cont…
Note
– DNS plays an important role in the IPv6 world
• Manual typing of IPv6 addresses is not an easy task
• Some zero suppression rules are allowed to lighten
this task at least a little.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 40
IPv6 Address Simplification
An IPv6 address can be simplified by the following a
two step process.
• Omit leading zeros: Omit the leading zeros in any
group of hexadecimals. For example, IPv6 address
4FDE:0000:0000:0002:0022:F376:FF3B:AC99
may be written as 4FDE:0:0:2:22:F376:FF3B:AC99
• Zero Suppression/Double colon: Use double
colons (::) in place of a series of zeros. For
example, 4FDE:0:0:2:22:F376:FF3B:AC99 can be
further simplified as 4FDE::2:22:F376:FF3B:AC99

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 41
IPv6 Address Simplification Cont…
• Some types of addresses contain long sequences of zeros.
• To further simplify the representation of IPv6 addresses, a
contiguous sequence of 16-bit blocks set to 0 in the colon
hexadecimal format can be compressed to “::”, known as
double-colon.
• For example:
– link-local address
• FE80:0:0:0:2AA:FF:FE9A:4CA2 
FE80::2AA:FF:FE9A:4CA2
– multicast address
• FF02:0:0:0:0:0:0:2  FF02::2
– loopback address
• 0:0:0:0:0:0:0:1  ::1

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 42
IPv6 Address Simplification Cont…
• Zero suppression can only be used to compress a single
contiguous series of 16-bit blocks expressed in colon
hexadecimal notation.
• You cannot use zero compression on significant zero bits of a
16-bit block.
• For example,
– cannot express FF02:30:0:0:0:0:0:5 as FF02:3::5
– correct representation = FF02:30::5
• Only Leading zeroes in every group can be omitted.
2001:0718:1c01:0016:020d:56ff:fe77:52a3
2001:718:1c01:16:20d:56ff:fe77:52a3

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 43
IPv6 Address Simplification Cont…
• To determine the number of 0 bits represented by the “::”
1. count the number of blocks in the compressed address
2. (-) subtract this number from 8
3. (*) multiply the result by 16.

• For example
1. FF02::2
2. Two blocks - “FF02” block and “0002” block.
3. The number of bits expressed by the “::” is 96. [(8 – 2)16 = 96]

• Zero compression (::) can only be used once in a given address.


– Otherwise, you will not be able to determine the number of 0 bits
represented by each instance of “::”

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 44
IPv6 Prefixes
• The prefix is the part of the address that indicates the subnet bits
that have fixed values (on all other clients).
• Prefixes for IPv6 subnets, routes, and address ranges are
expressed in the same way as Classless Inter-Domain Routing
(CIDR) notation for IPv4. (i-e /8, /16 etc.)
• An IPv6 prefix is written in address/prefix-length notation.
– For example, 21DA:D3::/48 and 21DA:D3:0:2F3B::/64 are IPv6
address prefixes.

• Note IPv4 implementations commonly use a dotted decimal


representation of the network prefix known as the subnet mask. A
subnet mask is not used for IPv6. Only the prefix length notation is
supported.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 45
IPv6 Prefixes Cont...
• When writing both a node address and a prefix of
that node address (e.g. The node’s subnet prefix),
the two can be combined as follows:
• Subnet Number
– 13BC:0:0:CD30::/60
• Node Address
– 123:4567:89AB:CDEF
• Can be combined and represented as
– 13BC:0:0:CD30:123:4567:89AB:CDEF/60

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 46
Types of IPv6 Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 47
IPv6 Addresses: Types and Scopes
• IPv6 addresses come in different types Unicast,
Multicast and Anycast, and with different scopes
like link and global scope
• The type of the address determines whether the
packets are destined for one or many machines.
• The scope of the address determines the context
in which address makes sense.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 48
IPv6 Address Categories

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
49
IPv6 Address Types

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
50
Unicast IPv6 Addresses
• The following types of addresses are unicast IPv6
addresses:

– Global Unicast Addresses


– Link-local Addresses
– Site-local Addresses/Unique Local IPv6 Unicast
Addresses
– Special Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 51
Global Unicast Addresses
• Equivalent to public IPv4 addresses.
• Globally routable and reachable on the IPv6 portion of the
Internet.
• Global scoped communication are identified by most
significant 3 bits set to 001 (2000::/3)

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 52
Global Unicast Address
• Each global unicast IPv6 address has three parts:
• Fixed portion set to 001 – The three high-order bits are set
to 001. The address prefix for currently assigned global
addresses is 2000::/3.
• Global Routing Prefix – Site Prefix
– Site prefix assigned to an organization by a provider
should be at least a /48 prefix (45 + high-order bits
001).
– /48 prefix represents the high-order 48-bit of the
network prefix.
– prefix assigned to the organization is part of the
provider’s prefix.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 53
Global Unicast Address
• Subnet-id - Site
– With one /48 prefix allocated to an organization by a
provider, it is possible for that organization to enable up
to 65,535 subnets (assignment of 64-bits prefix to
subnets).
– The organization can use bits 49 to 64 (16-bit) of the
prefix received for subnetting.
• Interface-id – Host
– The host part uses each node’s interface identifier.
– This part of the IPv6 address, which represents the
address’s low-order 64-bit, is called the interface ID.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 54
Global Unicast Address: Example

2001:0410:0110::/48 is assigned by a provider


2001:0410:0110:0002::/64 network subnet within the organization
2001:0410:0110:0002:0200:CBCF:1234:4402 – node address within the
subnet

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 55
Global Unicast Address

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
56
Global Unicast Address Allocation

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
57
Global Unicast Address Allocation

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
58
Global Unicast Address Allocation
Prefix (hex) Prefix (Binary) Description
2000::/16 0010 0000 0000 0000 Reserved
2001::/16 0010 0000 0000 0001 IPv6 Internet
-ARIN,APNIC,RIPE NCC,LACNIC
2002::/16 0010 0000 0000 0 6 to 4 transition mechanisms
2003::/16 0010 0000 0000 0011 IPv6 Internet - RIPE NCCC
2400:0000::/19 0010 0100 0000 0000 IPv6 Internet
2400:2000::/19 - APNIC
2400:4000::/21
2600:0000::/22 0010 0110 0000 0000 IPv6 Internet
2604:0000::/22 0010 0110 0000 0100 -ARIN
2608:0000::/22 0010 0110 0000 1000
260C:0000::/22 0010 0110 0000 1100
2A00:0000::/21 0010 1010 0000 0000 0010 IPv6 Internet
2A01:0000::/23 1010 0000 0001 -RIPE NCC
3FFF::/16 0011 1111 1111 1110 6 Bone
59
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
Link Local and Site Local Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 60
IPv6 Unicast Address Scopes
• Three types of scopes:
1. Link-local scope
• Identifies all hosts within a single layer 2 domain.
• Called as link-local addresses
2. Unique-local scope
• Identifies all devices reachable within an administrative site
or domain typically contains multiple distinct links.
• Called as unique-local addresses (ULAs)
3. Global scope
• Identifies all devices reachable across the Internet.
• Called as global unicast addresses (GUAs)

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 61
Local-Use Unicast Addresses
• There are two types of local-use unicast
addresses:

1. Link-local addresses
• Used between on-link neighbours and for Neighbour Discovery
Processes.

2. Site-local addresses
• Used between nodes communicating with other nodes in the
same site.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 62
Link-local Unicast Address
• IPv6 link-local addresses are equivalent to IPv4 link-
local addresses that use the 169.254.0.0/16 prefix.
• IPv4 link-local addresses are known as Automatic
Private IP Addressing (APIPA) addresses for
computers running Microsoft Windows operating
systems.
• The scope of a link-local address is the local link.

• A link-local address is required for Neighbour


Discovery (NDP) processes and is always
automatically configured, even in the absence of all
other unicast addresses.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 63
Link-local Unicast Address
• Used only between nodes connected on the same local link.
• When an IPv6 stack is enabled on a node, one link-local address is
automatically assigned to each interface of the node at boot time.
• IPv6 link-local prefix FE80::/10 is used and the interface identifier in
Extended Unique Identifier 64 (EUI-64) format is appended as the address’s
low-order 64-bit.
• Bits 11 through 64 are set to 0 (54-bit).
• Link-local addresses are only for local-link scope and must never be routed
between subnets within a site.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 64
Link-local unicast address

• Because the low-order 64-bit of the link-local address is the interface identifier
itself, the length of the link-local prefix is based on a 64-bit length (/64).
• In IPv6, a node having an aggregatable global unicast address on a local link
uses the link-local address of its default IPv6 router rather than the router’s
aggregatable global unicast address.
• If network renumbering must occur, meaning that the unicast aggregatable global
prefix is changed to a new one, the default router can always be reached using
the link-local address.
• Link-local addresses of nodes and routers do not change during network
renumbering.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 65
Link Local Scope

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 66
Site-Local Address
• Site-local addresses are equivalent to the IPv4 private address
space (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/24).
• Private intranets that do not have a direct, routed connection to the
IPv6 Internet can use site-local addresses without conflicting with
global unicast addresses.
• Site-local addresses are not reachable from other sites, and
routers must not forward site-local traffic outside the site.
• Site-local addresses/ global unicast addresses can be used.
• The scope of a site-local address is the site.
• A site is an organization network or portion of an organization's
network that has a defined geographical location (such as an
office, an office complex, or a campus).

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 67
Site-Local Address
• Unlike link-local addresses, site-local addresses are not
automatically configured and must be assigned either through
stateless or stateful address configuration processes.
• May be assigned to any nodes and routers within a site.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 68
Site-Local Address - Example
• For example, a site with ten subnets may assign site-local prefixes such
as the following:
– Subnet 1—FEC0:0:0:0001::/64
– Subnet 2—FEC0:0:0:0002::/64
– Subnet 3—FEC0:0:0:0003::/64
– Subnet 4—FEC0:0:0:0004::/64
– Subnet 5—FEC0:0:0:0005::/64
– Subnet 6—FEC0:0:0:0006::/64
– Subnet 7—FEC0:0:0:0007::/64
– Subnet 8—FEC0:0:0:0008::/64
– Subnet 9—FEC0:0:0:0009::/64
– Subnet 10—FEC0:0:0:000A::/64

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 69
Site-Local Zones

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 70
Special IPv6 Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 71
Special IPv6 Addresses
• The following are special IPv6 addresses:
• Unspecified address
– unspecified address (0:0:0:0:0:0:0:0 or ::) is only used to indicate
the absence of an address.
– equivalent to the IPv4 unspecified address of 0.0.0.0
– never assigned to an interface or used as a destination address.
• Loopback address
– The loopback address (0:0:0:0:0:0:0:1 or ::1) is used to identify a
loopback interface, enabling a node to send packets to itself.
– It is equivalent to the IPv4 loopback address of 127.0.0.1.
– Packets addressed to the loopback address must never be sent
on a link or forwarded by an IPv6 router.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 72
Multicast IPv6 Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 73
Multicast Address: Overview
• In IPv6, multicast traffic operates in the same way that it does in
IPv4.
• IPv6 nodes can listen for multicast traffic on an IPv6 multicast
address.
• IPv6 nodes can listen to multiple multicast addresses at the same
time.
• Nodes can join or leave a multicast group at any time.
• IPv6 multicast addresses have the first eight bits set to 1111 1111.
• An IPv6 address is easy to classify as multicast because it always
begins with “FF”.
• Multicast addresses cannot be used as source addresses or as
intermediate destinations in a Routing extension header.
• Beyond the first eight bits, multicast addresses include additional
structure to identify their flags, scope, and multicast group.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 74
Multicast Address
• Main goal of multicasting is having an efficient network to save
bandwidth on links by optimizing the number of packets
exchanged between nodes
• In IPv4:
– 224.0.0.0/3, where the high-order 3-bit of the IPv4 address is set to 111
• In IPv6:

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 75
Multicast Address
• IPv6 makes heavy use of multicast addresses in the
mechanisms of the protocol such as
– The replacement of Address Resolution Protocol (ARP) in
IPv4
– Prefix advertisement
– Duplicate Address Detection (DAD)
– Prefix renumbering.
• Format of the multicast address defines several
scopes and types of addresses using the 4-bit fields
Flag and Scope.
• These fields are located after the FF::/8 prefix.
• The low-order 112-bit of the multicast address is the
multicast group ID.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 76
Format of the Multicast Address fields

High-order 3-bit of the Flag field is reserved and is normally initialized using 0
values.
Remaining bit indicates the type of multicast address.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
77
Format of the Multicast Address:
Flags field
– Indicates flags set on the multicast address.
– The size = 4 bits.
– The first low-order bit = Transient (T) flag.
• T = 0  T flag indicates that the multicast address is a permanently assigned
(well-known) multicast address allocated by IANA.
• T = 1  T flag indicates that the multicast address is a transient (not
permanently assigned) multicast address.
– The second low-order bit = Prefix (P) flag
• indicates whether the multicast address is based on a unicast address
prefix.
• RFC 3306 describes the P flag.
– The third low-order bit = Rendezvous Point Address (R) flag
• indicates whether the multicast address contains an embedded
rendezvous point address.
• RFC 3956 describes the R flag.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 78
Format of the Multicast Address:
Scope Field
• Indicates the scope of the IPv6 internetwork for which the multicast
traffic is intended.
• Scope field is 4 bits long.
• In addition to information provided by multicast routing protocols,
routers use the multicast scope to determine whether multicast
traffic can be forwarded.
• The most widespread values for the Scope field are:
– 1 (interface-local scope)
– 2 (link-local scope)
– 5 (site-local scope)
• For example:
– Traffic with the multicast address of FF02::2 has a link-local scope.
– An IPv6 router never forwards this traffic beyond the local link.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 79
Format of the Multicast Address:
Scope Field

Example of Multicast Addresses with Different


Scopes

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
80
Format of the Multicast Address:
Group ID Field
• Identifies the multicast group and is unique within the
scope.
• Group ID field is 112 bits long.
• Permanently assigned group IDs are independent of
the scope.
• Transient group IDs are only relevant to a specific
scope.
• Multicast addresses from FF01:: through FF0F:: are
reserved, well-known addresses.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 81
Multicast Assigned Address

• RFC 2373 defines and reserves several IPv6


addresses within the multicast scope for the
operation of the IPv6 protocol.
• These reserved addresses are called multicast
assigned addresses.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 82
Solicited Node Multicast Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 83
Solicited-Node Multicast Address
• For each Unicast and Anycast address configured on an interface of a
node or router, a corresponding solicited-node multicast address is
automatically enabled.
• The solicited-node multicast address has link local scope.
• Replacement of ARP in IPv6
– ARP is not used in IPv6, the solicited-node multicast address is used by
nodes and routers to learn the link-layer addresses of neighbour nodes and
routers on the same local link.
– As with ARP in IPv4, knowledge of link-layer addresses of neighbour nodes is
mandatory to make link-layer frames to deliver IPv6 packets.
• Duplicate Address Detection (DAD)
– DAD is part of NDP.
– It allows a node to verify whether an IPv6 address is already in use on its local
link before using that address to configure its own IPv6 address with stateless
autoconfiguration.
– The solicited-node multicast address is used to investigate the local link in
search of a specific unicast or Anycast address already configured on another
node.
Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 84
Solicited-Node Multicast Address
Representations
Consists of the prefix FF02::1:FF00:0000/104 + low-order 24-bit of
the unicast or anycast address.

Low-order 24-bit of the unicast or anycast address is appended to the


prefix FF02::1:FF

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
85
Solicited-Node Multicast Address
Representations

Examples of Solicited-Node Multicast Addresses Made


from Unicast Addresses

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
86
Anycast Address

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 87
Anycast Address
• Anycast addresses can be considered a conceptual cross between
unicast and multicast addressing.
– Unicast  send to this one address
– Multicast  send to every member of this group
– Anycast  send to any one member of this group
• In choosing to which member packet should be sent, for efficiency
reasons normally it should be sent to the closest one - closest in
routing terms.
• So, anycast mean “send to the closest member of this group”.
• The network itself plays the key role in anycast by routing the packet to
the nearest destination by measuring network distance.
• Anycast addresses use aggregatable global unicast addresses.
• They can also use site-local or link-local addresses.
• Note: it is impossible to distinguish an anycast address from a unicast
address.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 88
Reserved Anycast Address

• Also called the subnet-router anycast address.


• All IPv6 routers are required to support subnet-router
Anycast addresses for each of their subnet interfaces.
• Mobile IPv6 is an example of a protocol designed to
use Anycast addresses.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 89
IPv6 Interface Identifiers

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 90
IPv6 Interface Identifiers
• The last 64 bit portion of an IPv6 address is the interface
identifier which is unique to the 64-bit prefix of the IPv6 address.
• The following are the ways in which an IPv6 interface identifier
is determined:
– A 64-bit interface identifier that is derived from the Extended
Unique Identifier (EUI)-64 address. The 64-bit EUI-64
address is defined by the Institute of Electrical and Electronic
Engineers (IEEE). EUI-64 addresses are either assigned to a
network adapter or derived from IEEE 802 addresses.
– As defined in RFC 3041, it might have a temporarily
assigned, randomly generated interface identifier to provide a
level of anonymity when acting as a client.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 91
IPv6 Modified EUI-64 Format
• Stateless autoconfiguration is a mechanism that
allows nodes on a network to configure their IPv6
addresses themselves without any device, such as a
DHCP server.
• The link-local address/stateless autoconfiguration is
function of IPv6 that automatically expands the
Ethernet MAC address based on a 48-bit format into
a 64-bit format (EUI-64).
• The conversion from 48-bit to 64-bit is a two-step
operation.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 92
The IPv6 Modified EUI-64 Format
• It is essential that all devices on the same network use the same
mapping technique
– The most common type of layer 2 addresses are IEEE 802 MAC
addresses.
• Layer 2 addresses are 48 bits long, arranged into two blocks of 24.
– Upper 24 bits are organizationally unique identifier (OUI), with
different values assigned to individual organizations
– Lower 24 bits are device identifier
• EUI-64 Format
– It is similar to the 48-bit MAC format, except that while the OUI
remains at 24 bits, the device identifier becomes 40 bits instead of
24.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 93
Converting 48-Bit MAC Addresses to
IPv6 Modified EUI-64 Identifiers

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
94
IPv6 Address with an Embedded IPv4 Address

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 95
IPv6 Address with an Embedded
IPv4 Address
• IPv4-compatible IPv6 address is a special unicast IPv6 address
used by transition mechanisms on hosts and routers to
automatically create IPv4 tunnels to deliver IPv6 packets over
IPv4 networks.
• Address is made up of six high-order fields of 16-bit hexadecimal
digits (bits), represented by X characters, followed by four low-
order fields of 8-bit decimal digits (IPv4 address), represented by
d characters (for a total of 32 bits).

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
96
IPv6 Address with an Embedded IPv4
Address
• Two kinds of IPv6 addresses have an embedded IPv4 address:
1. IPv4-compatible IPv6 address
– Used to establish an automatic tunnel to carry IPv6 packets over IPv4
networks.
– related to a transition mechanism of the IPv6 protocol.
2. IPv4-mapped IPv6 address
– Used only on the local scope of nodes having both IPv4 and IPv6
stacks.
– Nodes use IPv4-mapped IPv6 addresses internally only.
– These addresses are never known outside the node itself and should
not go on the wire as IPv6 addresses.

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 97
IPv6 Address with an Embedded
IPv4 Address
IPv4-compatible IPv6 address

IPv4-mapped IPv6 address


Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
98
IPv6 Address Representation for URL

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 99
IPv6 Address Representation for
URL
• colon (:) character is already defined to specify an optional port
number for example:
– www.example.net:8080/index.html
– https://www.example.com:8443/abc.html
• In IPv6, the URL parser of browsers must be able to differentiate
between the colon of a port number and the colon in an IPv6
address.
• To identify the IPv6 address while still keeping the colon character
for URL format (port number):
– IPv6 address must be enclosed in brackets
– The port number may be added after the brackets, followed by the
directory and filename.
– https://[3ffe:b80:c18:1::50]:8080/index.html
– https://[2001:410:0:1:250:fcee:e450:33ab]:8443/abc.html

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org 100
The End

Engr. Z.A. Solangi © Copyright 2012 Hidaya Trust (Pakistan) ● A Non-Profit Organization ● www.hidayatrust.org / www.histpk.org
101

You might also like