https://bgp4all.com.au/pfs/ 2026-04-04T07:36:55+00:00 https://bgp4all.com.au/pfs/ https://bgp4all.com.au/pfs/_media/wiki/dokuwiki.svg text/html 2016-10-23T05:37:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/0-setup?rev=1477201023&do=diff IPv6 Infrastructure Lab Objective Using a dual stack topology, this lab investigates securing the router and the routing infrastructure for the network. Lab Topology The initial lab topology sets up 6 autonomous systems, each with four routers. In each AS, one router is the border router (for connecting to transit providers), one router is the core router (representing the rest of the network operator’s core network), one router is a peering router (for connecting to private peers and IXPs),… text/html 2016-10-23T05:41:51+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/1-routing?rev=1477201311&do=diff IPv6 Infrastructure Lab - Routing Setting up OSPF Dual stack OSPF in each AS In each AS configure OSPF routing. As we are running a dual stack network, we need to run OSPFv2 for IPv4 routes and OSPFv3 for IPv6 routes. This means setting up the OSPF process, marking text/html 2016-10-23T05:50:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/2-4byte?rev=1477201833&do=diff eBGP using 4-byte ASNs Configuring the link to the Transit Provider The next step is to set up eBGP with the Transit Provider. The lab instructors will be running the routers for the two Transit Providers and will have already configured them. Physical Link text/html 2016-10-23T03:47:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/3-securing-router?rev=1477194460&do=diff IPv6 Infrastructure Lab - Securing the Router Basic Best Practice Getting used to IPv6 show commands in IOS Try the following IPv6 show commands: show ipv6 interface show ipv6 neighbors show ipv6 route show ipv6 routers show ipv6 ospf neighbors show ipv6 ospf rib show ipv6 traffic show bgp ipv6 unicast summary show ipv6 ? text/html 2016-10-23T05:53:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/4-traffic-filters?rev=1477202006&do=diff IPv6 Infrastructure Lab - Traffic Filters Configuring Outbound IPv6 Traffic Filters We now configure a traffic filter to only allow traffic from just your address block out of your network (this is BCP38 requirement). Note this configuration goes on the text/html 2016-10-23T03:53:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/5-routing-security?rev=1477194813&do=diff IPv6 Infrastructure Lab - Routing Protocol Security OSPF neighbour authentication Remove the packet filters from the previous examples We need OSPFv3 and BGP to work for the remainder of the lab, so we will remove the packet filters we installed in the previous exercise. Simply go to the interfaces where you defined the “traffic-filter” commands and remove those. Also delete the “ipv6 access-list” configurations for these two traffic filters text/html 2016-10-23T05:57:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/6-netflow?rev=1477202230&do=diff IPv6 Infrastructure Lab - Netflow Exploring Netflow Netflow identifies anomalous and security-related network activity by tracking network flows. NetFlow data can be viewed and analysed via the command line interface (CLI), or the data can be exported to a commercial or freeware NetFlow collector for aggregation and analysis. NetFlow collectors, through long-term trending, can provide network behaviour and usage analysis. NetFlow functions by performing analysis on specific attributes within I… text/html 2016-10-19T10:50:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/address-plan?rev=1476874228&do=diff Address Space Allocation This document describes the IP address plan we will use for this set of workshop exercises. Wherever possible the plan tries to replicate real life as closely as possible. The IPv4 address space used in these exercises is from subnets of 100.64.0.0/10 which is an [IPv4 Shared Address]( text/html 2017-10-12T07:56:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/agenda?rev=1507794995&do=diff Agenda Time Schedule Session 1 09:00 - 10:30 Break 10:30 - 11:00 Session 2 11:00 - 12:30 Lunch 12:30 - 14:00 Session 3 14:00 - 15:30 Break 15:30 - 16:00 Session 4 16:00 - 17:30 Instructors FL First Name Organisation text/html 2016-10-23T03:20:39+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/lab-access?rev=1477192839&do=diff Lab Access Instructions Introduction This lab runs on a virtualised environment for Cisco IOS called “Dynamips”. To join the network which the lab environment is on, associate your laptop with the wireless network called NSRC-PFS. The password for this network is text/html 2017-10-12T07:55:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/cnnic/start?rev=1507794911&do=diff Internet and IPv6 Infrastructure Security Program Workshop Goals This three-day IPv6 & BGP Workshop, teaching IPv6 and BGP operational skills Target Audience Technical staff involved in the Internet. Workshop Items * Agenda (includes links to presentations and schedule)