Philip Smith's Internet Development Site - training:itu-ipv6-kh https://bgp4all.com.au/pfs/ 2026-04-04T09:25:20+00:00 Philip Smith's Internet Development Site https://bgp4all.com.au/pfs/ https://bgp4all.com.au/pfs/_media/wiki/dokuwiki.svg text/html 2016-06-19T01:20:04+00:00 Anonymous (anonymous@undisclosed.example.com) 0-setup https://bgp4all.com.au/pfs/training/itu-ipv6-kh/0-setup?rev=1466299204&do=diff IPv6 Infrastructure Lab Objective Using a dual stack topology, this lab investigates securing the router and the routing infrastructure for the network. Lab Topology The initial lab topology sets up 6 autonomous systems, each with four routers. In each AS, one router is the border router (for connecting to transit providers), one router is the core router (representing the rest of the network operator’s core network), one router is a peering router (for connecting to private peers and IXPs),… text/html 2016-06-19T00:52:55+00:00 Anonymous (anonymous@undisclosed.example.com) 1-routing https://bgp4all.com.au/pfs/training/itu-ipv6-kh/1-routing?rev=1466297575&do=diff IPv6 Infrastructure Lab - Routing Setting up OSPF ---------- ### Dual stack OSPF in each AS In each AS configure OSPF routing. As we are running a dual stack network, we need to run OSPFv2 for IPv4 routes and OSPFv3 for IPv6 routes. This means setting up the OSPF process, marking text/html 2016-06-19T00:52:13+00:00 Anonymous (anonymous@undisclosed.example.com) 2-securing-router https://bgp4all.com.au/pfs/training/itu-ipv6-kh/2-securing-router?rev=1466297533&do=diff IPv6 Infrastructure Lab - Securing the Router Basic Best Practice ---------- ### Getting used to IPv6 show commands in IOS Try the following IPv6 show commands: show ipv6 interface show ipv6 neighbors show ipv6 route show ipv6 routers show ipv6 ospf neighbors show ipv6 ospf rib show ipv6 traffic show bgp ipv6 unicast summary show ipv6 ? text/html 2016-06-19T00:53:36+00:00 Anonymous (anonymous@undisclosed.example.com) 3-traffic-filters https://bgp4all.com.au/pfs/training/itu-ipv6-kh/3-traffic-filters?rev=1466297616&do=diff IPv6 Infrastructure Lab - Traffic Filters ### Configuring IPv6 Traffic Filters We now configure a traffic filter to only allow traffic from just your address block out of your network (this is BCP38 requirement). Note this configuration goes on the text/html 2016-06-19T00:54:30+00:00 Anonymous (anonymous@undisclosed.example.com) 4-routing-security https://bgp4all.com.au/pfs/training/itu-ipv6-kh/4-routing-security?rev=1466297670&do=diff IPv6 Infrastructure Lab - Routing Protocol Security OSPF neighbour authentication ---------- ### Remove the packet filters from the previous examples We need OSPFv3 and BGP to work for the remainder of the lab, so we will remove the packet filters we installed in the previous exercise. Simply go to the interfaces where you defined the “traffic-filter” commands and remove those. Also delete the “ipv6 access-list” configurations for these two traffic filters text/html 2016-06-19T00:56:12+00:00 Anonymous (anonymous@undisclosed.example.com) 5-netflow https://bgp4all.com.au/pfs/training/itu-ipv6-kh/5-netflow?rev=1466297772&do=diff IPv6 Infrastructure Lab - Netflow Exploring Netflow ---------- Netflow identifies anomalous and security-related network activity by tracking network flows. NetFlow data can be viewed and analysed via the command line interface (CLI), or the data can be exported to a commercial or freeware NetFlow collector for aggregation and analysis. NetFlow collectors, through long-term trending, can provide network behaviour and usage analysis. NetFlow functions by performing analysis on specific attri… text/html 2016-06-19T00:58:25+00:00 Anonymous (anonymous@undisclosed.example.com) address-plan https://bgp4all.com.au/pfs/training/itu-ipv6-kh/address-plan?rev=1466297905&do=diff Address Space Allocation This document describes the IP address plan we will use for this set of workshop exercises. Wherever possible the plan tries to replicate real life as closely as possible. The IPv4 address space used in these exercises is from subnets of 100.64.0.0/10 which is an [IPv4 Shared Address]( text/html 2017-10-12T08:00:56+00:00 Anonymous (anonymous@undisclosed.example.com) agenda https://bgp4all.com.au/pfs/training/itu-ipv6-kh/agenda?rev=1507795256&do=diff Agenda Time Schedule Session 1 08:30 - 10:00 Break 10:00 - 10:30 Session 2 10:30 - 12:00 Lunch 12:00 - 13:00 Session 3 13:00 - 14:30 Break 14:30 - 15:00 Session 4 15:00 - 16:00 Instructors FL First Name Organisation text/html 2016-06-19T00:59:23+00:00 Anonymous (anonymous@undisclosed.example.com) lab-access https://bgp4all.com.au/pfs/training/itu-ipv6-kh/lab-access?rev=1466297963&do=diff Lab Access Instructions Introduction ---------- This lab runs on a virtualised environment for Cisco IOS called “Dynamips”. To join the network which the lab environment is on, associate your laptop with the wireless network called NSRC-PFS text/html 2016-06-19T01:01:05+00:00 Anonymous (anonymous@undisclosed.example.com) participants https://bgp4all.com.au/pfs/training/itu-ipv6-kh/participants?rev=1466298065&do=diff Participants First Name Last Name Organisation Country text/html 2017-10-12T07:59:56+00:00 Anonymous (anonymous@undisclosed.example.com) start https://bgp4all.com.au/pfs/training/itu-ipv6-kh/start?rev=1507795196&do=diff IPv6 Infrastructure Workshop Wiki Access * Wireless network * Wireless password * Website URL Workshop Goals This is a three day IPv6 Workshop, teaching about IPv6 and IPv6 Infrastructure deployment. Target Audience Policy makers, regulators, and technical staff involved in the Internet.