Course 603: IPv6 Implementation Training Bootcamp: Hands-on 501 - TONEX.com

What will you learn at the TONEX IPv6 Implementing Training Bootcamp?

Tonex IPv6 Implementation Training boot camp is a hands-on in-depth technical course covering IPv6 technologies, design, implementations and migration.  Our experienced instructors work with you, tailoring the Boot Camp content to your needs.

We conduct this Bootcamp onsite at your business location! Using real-life examples and interactive exercises, we teach practical ways to maintain your valuable customer base, win repeat business, and measure your organization’s ability to meet customer expectations

What is a TONEX Boot Camp?

TONEX Boot Camps are intensive learning experiences that cover the essential elements of your chose subject. Boot camps are ideal for busy professionals who want to stay current in their fields but have limited time to be away from the office.

All boot camp includes:

• Experienced instructors including senior technology leaders, project managers, technical authors, engineers, educators, consultants, course developers, and CTOs.
• Real life examples and practices.
• Small class size.
• Personalized instructor mentoring.
• Pre-training discussions
• Ongoing post-training support via e-mail, phone and WebEx.

.

What You'll Learn 

• Features and benefits of IPv6
• Structure of the IPv6 address format
• Advanced capabilities of IPv6
• Implementation Strategies for IPv6 services and applications
• DHCP and DNS in an IPv6 network
• Differences between DHCPv6 and DHCP
• Implement IPv6 over EIGRPv6, OSPFv3, IS-ISv6, BGP, and MPLS networks
• Implement auto-configuration to manage IPv6 addresses
• IPv6 multicast and unicast concepts
• Security concerns related to IPv6 and how to protect your company's infrastructure from new IPv6 vulnerabilities
• Why IPv6 provides enhanced IPSec and more reliable QoS
• How IPv6 provides enhanced support for mobile IP and mobile computing devices
• Plan and manage the migration of your network to IPv6
• Deployment strategies to consider when migrating to IPv6
• How to ensure a smooth transition from IPv4 and coexistence with IPv4 networks
• Configure the different IPv6 migration tools such as dual-stacks and tunnelling in order to facilitate the transition.
• Configure different IPv6 transition methods for tunneling IPv6 traffic over current IPv4 networks
• How to tunnel IPv6 over an IPv4 network
• How IPv6 is supported in Linux, UNIX, Windows and Cisco IOS software

 Overview of IPv6

• IPv6 in a nutshell
• Key differences between IPv4 and IPv6
• The Fields in the IPv6 Header
• Detailed overview of IPv6 headers and extension headers
• The Structure of the IPv6 Protocol
• IPv6 Deployment Strategies
• Planning to Deploy IPv6
• Identifying Requirements
• Selecting a Deployment Strategy
• Deployment Strategies: Primary Uses, Benefits, and Limitations
• Deploying IPv6 over IPv4 Tunnels
• Deploying IPv6 over Dedicated Data Links
• Deploying IPv6 over MPLS Backbones
• Deploying IPv6 Using Dual-Stack Backbones
• Protocol Translation Mechanisms

IPv6 Address Architecture

• The IPv6 Address Space
• Differences from IPv4 (e.g., no broadcast, minimum MTU, no fragmentation, etc.)
• Link- and Site-Local Addresses
• Global Routing Prefixes
• Unicast, multicast, and anycast
• Global Unicast Address
• Special addresses
• Address types, notations, and prefixes
• Jumbograms
• Advanced IPv6 Addressing
• Advanced Subnetting

ICMPv6

• Differences from IPv4
• Path MTU discovery
• Neighbor Discovery (ND)
• Network Renumbering
• Multicast Listener Discovery (MLD)
• Multicast Router Discovery (MRD)
• Neighbor Solicitation
• Neighbor Advertisement
• Router Solicitation
• Router Advertisement

Autoconfiguration

• Stateless and stateful
• Neighbor discovery and secure neighbor discovery
• Router advertisement and solicitation
• Duplicate address detection
• DHCPv6

Ethernet Support

• Layer 2 Support for IPv6
• Ethernet frame differences from IPv4
• VLAN support
• How IPv6 discovers MAC addresses for remote hosts (ARP equivalent)
• How IPv6 discovers local static IPv6 addresses based on MAC address  
• Detecting Network Attachment (DNA)

Multicast services

• Differences from IPv4
• Multicast address space and reserved/special addresses
• MLDv2 for IPv6
• IGMPv3

securing IPv6 networks

• IPv6 and IPv4 Threat Comparison
• Mitigating IPv6 Threats
• IPv6 end-to-end security
• IPsec, VPNs, IKE, PKI
• Threat Analysis Attacks in IPv6
• ICMP, ICMP Attack, Ping Attack, Smurf Attack, PING Flood,Pingof Death
• Reconnaissance Unauthorized Access
• Header Manipulation and Fragmentation
• Layer 3-Layer 4 Spoofing ARP and DHCP Attacks Broadcast Amplification Attacks (smurf)
• Routing Attacks
• Viruses andWorms
• Application Layer Attacks
• Rogue Devices
• Flooding Denial of service attacks (DOS)
• Man-in-the-middle attacks
• ARP poisoning and ICMP redirect
• Port scanning
• Authentication and Encryption
• IPSec
• Differences from IPv4
• Key Management
• Security Associations
• Tunnel vs. transport mode
• ESP
• AH 
• Operational issues

Transition and IPv4 Interoperability
• Basic Transition Mechanisms for IPv6 Hosts and Routers
• Transition mechanisms
• Dual IP stack implementation
• IPv4-mapped IPv6 addresses
• Tunneling
• Automatic tunneling
• Configured and automated tunneling (6in4)
• Proxying and translation for IPv6-only hosts Dual stack
• Dual-Stack
• DS-Lite (Dual-Stack Lite)
• 6over4
• BIS-Bump-in-the-Stack (RFC 2767)
• BIA-Bump-in-the-API (RFC 3338)
• Automatic and configured tunneling
• 6to4
• IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
• Teredo
• DSTM
• IPv6 Tunnel brokers
• IPv6 Tunnel Broker with the Tunnel Setup Protocol (TSP)
• Teredo
• 4in6
• 6in4
• ISATAP
• Translations
• SIIT6over4
• NAT-PT
• NAPT-PT
• Stateless IP/ICMP Translation (SIIT)
• Transport Relay Translation (TRT)
• Socks-based Gateway (RFC 3089)

Differences in Transport and Application Protocols from IPv4  

• DNS in IPv6
• Changes to DNS for IPv6
• IPv6 AAAA resource records
• PTR records and IPv6
• Reverse lookups in IPv6
• ip6.arpa. & ip6.int.
• IPv6 in BIND and MS DNS
• IPv6 and EDNS0
• SNMP
• DHCP
• FTP
• TFTP
• SSH/SFTP/SCP
• syslog SIP/SIPS
• HTTP/HTTPS
• TLS/DTLS
• RTP/SRTP/cRTP
• RTCP
• RTSP
• UDP
• TCP
• SCTP

IPv6 Routing Protocols

• IPv6 Dynamic Routing
• ICMPv6 Redirects
• RIPng
• OSPF for IPv6 (OSPFv3)
• BGP-4 Support for IPv6
• OSPFv3
• IS-IS and IPv6
• EIGRPv6
• BGPv4 & IPv6
• IPv6 Multicast Routing
• IPv6 Multicast Routing
• IPv6 PIM-DM
• IPv6 PIM-SM
• Advertising IPv6 addresses on an IPv4 network
• Advanced IS-IS
• NAT-PT
• 6PE
• 6VPE

IPv6 and QoS

• Traffic classes in IPv6
• Flow label
• Differential services (DiffServ)
• Integrated services (IntServ)
• RSVP (Resource Reservation Protocol)
• Explicit congestion notification (ECN)

IPv6 for Windows

• IPv6 Deployment Strategies for Windows 2000
• Microsoft .NET
• Application Changes
• IPv6 ping, telnet and FTP
• Mail systems and IPv6
• IPv6 enabled web-servers
• The Programming Interface
• Socket Library changes for IPv6
• IPv6 Code Migration Tools
• Sockets & Winsock APIs
• Perl, Java, C# support for IPv6

IPv6 Linux Programming APIs

• Linux IPv6 Programming Interface
• Port and Sockets
• Socket Library for IPv6
• The updated Socket API
• IPv6 Socket Programming
• Socket Programming with TCP
• Changes socket API for IPv6 Support
• IPv6 Code sequence
• Socket Interface
• Address data structures
• Name-to-address translation functions
• Address conversion functions
• Perl, Java, C# support for IPv6
• IPv6-ready system check
• Configuring interfaces
• Configuring normal IPv6 routes
• Neighbor Discovery
• Kernel settings in /proc-filesystem
• Netlink-Interface to kernel
• Address Resolver
• Network debugging
• Support for persistent IPv6 configuration in Linux distributions
• Auto-configuration
• Mobility
• Firewalling
• Security
• Encryption and Authentication
• Quality of Service (QoS)
• IPv6-enabled daemons

Building the Linux kernel for IPv6 support

• Configuring a Linux server for IPv6
• Linux IPv6 protocol implementation
• Setting system parameters
•  Resolving names
•  IP address configuration
• DNS configuration (client and server)
• SNMP configuration
• xinetd configuration
• ip6tables configuration
• NTP configuration
• NFS configuration (NFS packet security emphasis)
• sshd configuration
• syslog configuration

Getting connected

• Tunnel types
• Setting up the tunnel
• Allowing proto-41 traffic
• Setting up an IPv6-capable gateway
• Enabling forwarding
• apache/lighttpd configuration
• other services (instructor suggestions requested)
• IPSec Key Management

Cisco IOS Router IPv6

• Preference
• Privacy Extensions
• Packet Filter/Firewall
• Access control lists (ACLs)
• Tunneling IPv4/IPv6
• Configured tunnels
• DHCPv6
• PPPv6
• Routing
• Management
• User Access and Privilege Levels 
• TACACS+ 
• Using privacy and temporary addresses
• Enabling IPv6 Routing and Configuring IPv6 Addressing
• Mapping Host Names to IPv6 Addresses
• Monitoring and Maintaining IPv6

basic Labs  

• Router Advertisements Lab
• IPv6 Deep Packet Inspection
• Analyzing IPv6 packets
• IPv6 Packet Capture and Analysis
• Routing Labs
• Configuring basic IPv6 using Cisco® IOS
• Configuring OSPFv3 for IPv6 Routing
• Configuring with IS-IS for IPv6 Routing
• Configuring with EIGRP for IPv6 Routing
• Configuring BGP and MP-BGP for IPv6 Routing
• IPv6 Addressing Lab
• IPv6 Anycast Lab
• IPv6 Multicast LabIPv4 and IPv6 Dual Stack Lab
• Implementing Tunnels for IPv6 Labs
• Teredo Tunneling Lab
• 6in4 Tunneling Lab
• 6to4 Tunneling Labels
• ISATAP Tunneling Lab
• Configuring Connectivity using a Tunnel Broker
• IPv6 Security Lab
• Implementing IPsec and IKE
• Configuring Cisco IOS Firewall
• IPv6 QoS Lab
• IPv4 IPv6 NAT Lab

elective Hands-on Labs, Demonstrations and Exercises

• Configuring Linux systems for IPv6 support:
• Configuring Linux Interfaces
• Upgrading and configuring IPv6
• Capturing and decoding IPv6 datagrams
• Configuring RIPng for IPv6 Routing
• Configuring OSPFv3 for IPv6 Routing
• Configuring MP-BGP for IPv6 Routing
• Configuring IPv6 auto-configuration
• Configuring IPv6 dynamic routing
• Security configuration using IPv6 IPSec
• Configuring IPv6 transition mechanisms
• Configuring 6to4, ISATAP, Teredo, and NAT-PT 
• Configuring IPv6-in-IPv4 tunnels
• Configuring IPv4-in-IPv6 tunnels
• Configuring and testing Mobile IPv6
• Upgrading and configuring IPv6 DNS servers
• Configuring IPv6 applications and services
• Upgrading and configuring BIND for IPv6
• Configuring Access Control for IPv6
• Configuring IPv6 IPSec
• Configuring IPv6 firewalls
• Configuring a Basic MPLS P Router
• Configuring a Basic MPLS PE Router
• Configuring Basic MPLS CE Routers
• Configuring MPLS over ATM
• Configuring CEF and Distributed CEF Switching for IPv6
• Configuring IPv6 ICMP Rate Limiting
• Configuring Static Cache Entries for IPv6 Neighbor Discovery
• Configuring IPv6 Duplicate Address Detection
• Configuring IPv6 Redirect Messages
• Configuring IPv6 ATM and Frame Relay Interfaces
• Configuring IPv6 Access Control Lists
• Configuring IPv6 RIP
• Configuring IPv6 IS-IS
• Configuring Multiprotocol BGP Extensions for IPv6
• Configuring Dual Protocol Stacks and IPv6 Overlay Tunnels
• Configuring IPv6 Provider Edge Routers over MPLS