https://bgp4all.com.au/pfs/ 2026-04-04T09:32:31+00:00 https://bgp4all.com.au/pfs/ https://bgp4all.com.au/pfs/_media/wiki/dokuwiki.svg text/html 2018-11-23T18:04:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/0-setup?rev=1542996295&do=diff IPv6 Lab Objective Using a dual stack topology, this lab investigates securing the router and the routing infrastructure for the network. Lab Topology The initial lab topology sets up 6 autonomous systems, each with four routers. In each AS, one router is the border router (for connecting to transit providers), one router is the core router (representing the rest of the network operator’s core network), one router is a peering router (for connecting to private peers and IXPs), and one router… text/html 2018-11-23T18:08:59+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/1-routing-isis?rev=1542996539&do=diff IPv6 Lab - IS-IS Configuring IS-IS Each team will need to configure IS-IS between the four routers in their AS. The core router should be straightforward to configure. It has one loopback interface, one interface connecting to the peering router, and one interface connecting to the border router. And even though we are using ethernet to connect the routers, these are only point-to-point links and IS-IS should be configured as such. text/html 2019-01-15T06:06:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/2-bgp?rev=1547532392&do=diff IPv6 Lab - BGP Configuring iBGP The next step is to configure iBGP mesh between the four routers in each autonomous system. We’ll use a route-reflector set up to handle this, as this is very common practice today, and full mesh iBGP does not scale, as was covered in the presentations. text/html 2019-01-16T05:53:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/3-securing-router?rev=1547618006&do=diff IPv6 Lab - Securing the Router Basic Best Practice Getting used to IPv6 show commands in IOS Try the following IPv6 show commands: show ipv6 interface show ipv6 neighbors show ipv6 route show ipv6 routers show ipv6 ospf neighbors show ipv6 ospf rib show ipv6 traffic show bgp ipv6 unicast summary show ipv6 ? text/html 2018-11-23T18:15:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/5-securing-isis?rev=1542996927&do=diff IPv6 Lab - Securing IS-IS IS-IS neighbour authentication Configuring Neighbour Security for IS-IS Network operators consider it more and more important to turn on neighbour authentication inside their networks as attacks on infrastructure increase and operators seek to use all available tools to secure their networks. text/html 2018-11-23T18:16:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/6-securing-bgp?rev=1542996965&do=diff IPv6 Lab - Securing BGP BGP neighbour authentication Configure passwords on the iBGP sessions Passwords should now be configured on the iBGP sessions. Go back to the peer-groups which were configured earlier in this workshop and now add passwords to them. For example, here is the peer-group on the Core router: text/html 2018-11-23T18:16:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/7-netflow?rev=1542996998&do=diff IPv6 Security Lab - Netflow Exploring Netflow Netflow identifies anomalous and security-related network activity by tracking network flows. NetFlow data can be viewed and analysed via the command line interface (CLI), or the data can be exported to a commercial or freeware NetFlow collector for aggregation and analysis. NetFlow collectors, through long-term trending, can provide network behaviour and usage analysis. NetFlow functions by performing analysis on specific attributes within IP pack… text/html 2018-11-23T18:06:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/address-plan?rev=1542996413&do=diff Address Space Allocation This document describes the IP address plan we will use for this set of workshop exercises. Wherever possible the plan tries to replicate real life as closely as possible. The IPv4 address space used in these exercises is from subnets of 100.64.0.0/10 which is an [IPv4 Shared Address]( text/html 2019-01-16T08:03:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/agenda?rev=1547625835&do=diff Agenda Time Schedule Session 1 09:00 - 11:00 Break 11:00 - 11:30 Session 2 11:30 - 13:00 Lunch 13:00 - 14:00 Session 3 14:00 - 16:00 Break 16:00 - 16:30 Session 4 16:30 - 18:00 Instructors FL First Name text/html 2019-02-13T01:42:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/d-6rd?rev=1550022132&do=diff IPv6 Lab - 6rd Exploring IPv6 “Rapid Deploy" 6rd is a technology which allows network operators to deploy IPv6 to end users without having to upgrade the entire infrastructure between them and their customer to support IPv6. This is typically the case where the ISP has old DSLAMs which don’t support IPv6 framing, or are leasing a third party’s access network which perhaps also is not quite IPv6 ready. text/html 2019-01-15T08:54:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/d-dhcpv6pd?rev=1547542486&do=diff IPv6 Lab - DHCPv6-PD Exploring DHCPv6 Prefix Delegation In IPv4 there was no mechanism apart from email for an operator to let their customer know what IPv4 address block they could use. This isn’t scalable, obviously, and needs weeks if not months notice for any changes to be made to the customer address space. text/html 2019-01-15T08:11:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/d-static?rev=1547539902&do=diff IPv6 Lab - Customer Connections Background This series of small labs is going to focus on how to deploy IPv6 into a customer’s network. Several technologies will be examined, including: * static configuration with static route * DHCPv6-PD * text/html 2018-11-23T18:25:59+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/dynamips?rev=1542997559&do=diff Dynamips Configuration This workshop labs uses Dynamips to support all the routers used. Below is the configuration file used. # IPv6 Security Workshop # Using c7200-advipservicesk9-mz.152-4.S7 model = 7200 [localhost:7200] udp = 40100 workingdir = /home/user/Workshop/cache [[7200]] image = /home/user/bin/c7200-1524S7.bin ram = 176 npe = npe-400 ghostios = True sparsemem = True idlepc = 0x631891f8 [[ROUTER b1]] console = 2011 aux = 301… text/html 2018-11-23T18:08:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/lab-access?rev=1542996492&do=diff Lab Access Instructions Introduction This lab runs on a virtualised environment for Cisco IOS called “Dynamips”. To join the network which the lab environment is on, associate your laptop with the wireless network called IPv6. The password for this network is text/html 2019-01-13T09:35:23+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/participants?rev=1547372123&do=diff Participants Name Organisation Country Contact Prasanna Darshana Kotuwegedara Srilanka Prasanna(dot)Kotuwegedara(at)dialog(dot)lk Sujan Shrestha Nepal ersujan(at)gmail(dot)com Labone Khatun Tohura Labone Bangladesh labone(dot)tohura(at)gmail(dot)com text/html 2019-01-16T06:31:47+00:00 Anonymous (anonymous@undisclosed.example.com) https://bgp4all.com.au/pfs/training/sanog33/start?rev=1547620307&do=diff IPv6 Deployment Workshop * Date: 12th to 16th January, 2019 * Venue: Namgay Heritage Hotel, Thimphu, Bhutan Workshop Goals This five-day IPv6 Deployment Workshop, teaches network operators how to deploy IPv6 on their network infrastructure.