Visão Geral
Este Curso IPv6 Implementation é um curso técnico prático e aprofundado que cobre tecnologias, design, implementações e migração IPv6.
Objetivo
Ao participar do Curso IPv6 Implementation, os participantes aprenderão:
- Recursos e benefícios do IPv6
- Estrutura do formato de endereço IPv6
- Capacidades avançadas de IPv6
- Estratégias de implementação para serviços e aplicações IPv6
- DHCP e DNS em uma rede IPv6
- Diferenças entre DHCPv6 e DHCP
- Implemente IPv6 em redes EIGRPv6, OSPFv3, IS-ISv6, BGP e MPLS
- Implemente a configuração automática para gerenciar endereços IPv6
- Conceitos de multicast e unicast IPv6
- Preocupações de segurança relacionadas ao IPv6 e como proteger a infraestrutura da sua empresa contra novas vulnerabilidades do IPv6
- Por que o IPv6 fornece IPSec aprimorado e QoS mais confiável
- Como o IPv6 fornece suporte aprimorado para IP móvel e dispositivos de computação móvel
- Planeje e gerencie a migração da sua rede para IPv6
- Estratégias de implantação a serem consideradas ao migrar para IPv6
- Como garantir uma transição tranquila do IPv4 e a coexistência com redes IPv4
- Configure as diferentes ferramentas de migração IPv6, como pilhas duplas e tunelamento, para facilitar a transição
- Configure diferentes métodos de transição IPv6 para encapsular o tráfego IPv6 nas redes IPv4 atuais
- Como encapsular IPv6 em uma rede IPv4
- Como o IPv6 é suportado no software Linux, UNIX, Windows e Cisco IOS
Publico Alvo
Este Curso IPv6 Implementation é ideal para arquitetos de rede e engenheiros de projeto, engenheiros e técnicos de operações que lidam com configuração de IPv6 e serviços de suporte, gerenciamento e operações de rede, engenheiros de sistema, verificação de sistema, validação e teste de administradores de rede.
Materiais
Inglês + Exercícios + Lab Pratico
Conteúdo Programatico
Overview of IPv6
- IPv6 in a nutshell
- Key differences between IPv4 and IPv6
- The Fields in the IPv6 Header
- Detailed overview of IPv6 headers and extension headers
- The Structure of the IPv6 Protocol
- IPv6 Deployment Strategies
- Planning to Deploy IPv6
- Identifying Requirements
- Selecting a Deployment Strategy
- Deployment Strategies: Primary Uses, Benefits, and Limitations
- Deploying IPv6 over IPv4 Tunnels
- Deploying IPv6 over Dedicated Data Links
- Deploying IPv6 over MPLS Backbones
- Deploying IPv6 Using Dual-Stack Backbones
- Protocol Translation Mechanisms
IPv6 Address Architecture
- The IPv6 Address Space
- Differences from IPv4 (e.g., no broadcast, minimum MTU, no fragmentation, etc.)
- Link- and Site-Local Addresses
- Global Routing Prefixes
- Unicast, multicast, and anycast
- Global Unicast Address
- Special addresses
- Address types, notations, and prefixes
- Jumbograms
- Advanced IPv6 Addressing
- Advanced Subnetting
ICMPv6
- Differences from IPv4
- Path MTU discovery
- Neighbor Discovery (ND)
- Network Renumbering
- Multicast Listener Discovery (MLD)
- Multicast Router Discovery (MRD)
- Neighbor Solicitation
- Neighbor Advertisement
- Router Solicitation
- Router Advertisement
Autoconfiguration
- Stateless and stateful
- Neighbor discovery and secure neighbor discovery
- Router advertisement and solicitation
- Duplicate address detection
- DHCPv6
- Ethernet Support
- Layer 2 Support for IPv6
- Ethernet frame differences from IPv4
- VLAN support
- How IPv6 discovers MAC addresses for remote hosts (ARP equivalent)
- How IPv6 discovers local static IPv6 addresses based on MAC address
- Detecting Network Attachment (DNA)
Multicast Services
- Differences from IPv4
- Multicast address space and reserved/special addresses
- MLDv2 for IPv6
- IGMPv3
Securing IPv6 networks
- IPv6 and IPv4 Threat Comparison
- Mitigating IPv6 Threats
- IPv6 end-to-end security
- IPsec, VPNs, IKE, PKI
- Threat Analysis Attacks in IPv6
- ICMP, ICMP Attack, Ping Attack, Smurf Attack, PING Flood,Pingof Death
- Reconnaissance Unauthorized Access
- Header Manipulation and Fragmentation
- Layer 3-Layer 4 Spoofing ARP and DHCP Attacks Broadcast Amplification Attacks (smurf)
- Routing Attacks
- Viruses and Worms
- Application Layer Attacks
- Rogue Devices
- Flooding Denial of service attacks (DOS)
- Man-in-the-middle attacks
- ARP poisoning and ICMP redirect
- Port scanning
- Authentication and Encryption
- IPSec
- Differences from IPv4
- Key Management
- Security Associations
- Tunnel vs. transport mode
- ESP
- AH
- Operational issues
- Transition and IPv4 Interoperability
- Basic Transition Mechanisms for IPv6 Hosts and Routers
Transition and Implementation Mechanisms
- Dual IP stack implementation
- IPv4-mapped IPv6 addresses
- Tunneling
- Automatic tunneling
- Configured and automated tunneling (6in4)
- Proxying and translation for IPv6-only hosts Dual stack
- Dual-Stack
- DS-Lite (Dual-Stack Lite)
- 6over4
- BIS-Bump-in-the-Stack (RFC 2767)
- BIA-Bump-in-the-API (RFC 3338)
- Automatic and configured tunneling
- 6to4
- IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
- Teredo
- DSTM
- IPv6 Tunnel brokers
- IPv6 Tunnel Broker with the Tunnel Setup Protocol (TSP)
- 4in6
- 6in4
- ISATAP
- Translations
- SIIT6over4
- NAT-PT
- NAPT-PT
- Stateless IP/ICMP Translation (SIIT)
- Transport Relay Translation (TRT)
- Socks-based Gateway (RFC 3089)
Differences in Transport and Application Protocols from IPv4
- DNS in IPv6
- Changes to DNS for IPv6
- IPv6 AAAA resource records
- PTR records and IPv6
- Reverse lookups in IPv6
- ip6.arpa. & ip6.int.
- IPv6 in BIND and MS DNS
- IPv6 and EDNS0
- SNMP
- DHCP
- FTP
- Trivial File Transfer Protocol
- SSH/SFTP/SCP
- syslog SIP/SIPS
- HTTP/HTTPS
- TLS/DTLS
- RTP/SRTP/cRTP
- RTCP
- RTSP
- UDP
- TCP
- SCTP
IPv6 Routing Protocols
- IPv6 Dynamic Routing
- ICMPv6 Redirects
- RIPng
- OSPF for IPv6 (OSPFv3)
- BGP-4 Support for IPv6
- OSPFv3
- IS-IS and IPv6
- IGRPv6
- BGPv4 & IPv6
- IPv6 Multicast Routing
- IPv6 Multicast Routing
- IPv6 PIM-DM
- IPv6 PIM-SM
- Advertising IPv6 addresses on an IPv4 network
- Advanced IS-IS
- NAT-PT
- 6PE
- 6VPE
IPv6 and QoS
- Traffic classes in IPv6
- Flow label
- Differential services (DiffServ)
- Integrated services (IntServ)
- RSVP (Resource Reservation Protocol)
- Explicit congestion notification (ECN)
IPv6 for Windows
- IPv6 Deployment Strategies for Windows 2000
- Microsoft .NET
- Application Changes
- IPv6 ping, telnet and FTP
- Mail systems and IPv6
- IPv6 enabled web-servers
- The Programming Interface
- Socket Library changes for IPv6
- IPv6 Code Migration Tools
- Sockets & Winsock APIs
- Perl, Java, C# support for IPv6
IPv6 Linux Programming APIs
- Linux IPv6 Programming Interface
- Port and Sockets
- Socket Library for IPv6
- The updated Socket API
- IPv6 Socket Programming
- Socket Programming with TCP
- Changes socket API for IPv6 Support
- IPv6 Code sequence
- Socket Interface
- Address data structures
- Name-to-address translation functions
- Address conversion functions
- Perl, Java, C# support for IPv6
- IPv6-ready system check
- Configuring interfaces
- Configuring normal IPv6 routes
- Neighbor Discovery
- Kernel settings in /proc-filesystem
- Netlink-Interface to kernel
- Address Resolver
- Network debugging
- Support for persistent IPv6 configuration in Linux distributions
- Auto-configuration
- Mobility
- Firewalling
- Security
- Encryption and Authentication
- Quality of Service (QoS)
- IPv6-enabled daemons
Building the Linux kernel for IPv6 support
- Configuring a Linux server for IPv6
- Linux IPv6 protocol implementation
- Setting system parameters
- Resolving names
- IP address configuration
- DNS configuration (client and server)
- SNMP configuration
- xinetd configuration
- ip6tables configuration
- NTP configuration
- NFS configuration (NFS packet security emphasis)
- sshd configuration
- syslog configuration
Getting connected
- Tunnel types
- Setting up the tunnel
- Allowing proto-41 traffic
- Setting up an IPv6-capable gateway
- Enabling forwarding
- apache/lighttpd configuration
- other services (instructor suggestions requested)
- IPSec Key Management
Cisco IOS Router IPv6
- Preference
- Privacy Extensions
- Packet Filter/Firewall
- Access control lists (ACLs)
- Tunneling IPv4/IPv6
- Configured tunnels
- DHCPv6
- PPPv6
- Routing
- Management
- User Access and Privilege Levels
- TACACS+
- Using privacy and temporary addresses
- Enabling IPv6 Routing and Configuring IPv6 Addressing
- Mapping Host Names to IPv6 Addresses
- Monitoring and Maintaining IPv6
TENHO INTERESSE