DEPLOYING IP 6 IN V BROADBAND ACCESS NETWORKS DEPLOYING IP 6 IN V BROADBAND ACCESS NETWORKS Adeel Ahmed Salman Asadullah Copyrightr2009byJohnWiley&Sons,Inc.Allrightsreserved. PublishedbyJohnWiley&Sons,Inc.,Hoboken,NewJersey. PublishedsimultaneouslyinCanada. Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmittedinany formorbyanymeans,electronic,mechanical,photocopying,recording,scanning,orotherwise, exceptaspermittedunderSection107or108ofthe1976UnitedStatesCopyrightAct,without eitherthepriorwrittenpermissionofthePublisher,orauthorizationthroughpaymentofthe appropriateper-copyfeetotheCopyrightClearanceCenter,Inc.,222RosewoodDrive,Danvers, MA01923,(978)750-8400,fax(978)750-4470,oronthewebatwww.copyright.com.Requeststo thePublisherforpermissionshouldbeaddressedtothePermissionsDepartment,JohnWiley& Sons,Inc.,111RiverStreet,Hoboken,NJ07030,(201)748-6011,fax(201)748-6008,oronlineat http://www.wiley.com/go/permission. LimitofLiability/DisclaimerofWarranty:Whilethepublisherandauthorhaveusedtheirbest effortsinpreparingthisbook,theymakenorepresentationsorwarrantieswithrespecttothe accuracyorcompletenessofthecontentsofthisbookandspecificallydisclaimanyimplied warrantiesofmerchantabilityorfitnessforaparticularpurpose.Nowarrantymaybecreatedor extendedbysalesrepresentativesorwrittensalesmaterials.Theadviceandstrategiescontained hereinmaynotbesuitableforyoursituation.Youshouldconsultwithaprofessionalwhere appropriate.Neitherthepublishernorauthorshallbeliableforanylossofprofitoranyother commercialdamages,includingbutnotlimitedtospecial,incidental,consequential,orother damages. Forgeneralinformationonourotherproductsandservicesorfortechnicalsupport,pleasecontact ourCustomerCareDepartmentwithintheUnitedStatesat(800)762-2974,outsidetheUnited outsidetheUnitedStatesat(317)572-3993orfax(317)572-4002. Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprint maynotbeavailableinelectronicformats.FormoreinformationaboutWileyproducts,visitour websiteatwww.wiley.com. LibraryofCongressCataloging-in-PublicationData: Ahmed,Adeel. DeployingIPv6inbroadbandaccessnetworks/ AdeelAhmedandSalmanAsadullah Includesbibliographicreferencesandindex ISBN978-0-470-19338-9 PrintedintheUnitedStatesofAmerica 10 9 8 7 6 5 4 3 2 1 Idedicatethisbooktomyparentsforeverythingtheyhavedoneforme;Icould neverrepaythem.Tomywife:forherlove,support,andpatiencethroughoutthe writingofthisbook.Tomylovelychildren:Asad,Aashir,andZeerak,youaremy inspiration and my pride and joy. I love you all very much. I would also like to dedicate the book to all the people suffering in this world and to those people who work endlessly to help others and to make the world a better place. Adeel Ahmed Idedicatethisbooktoallwhoaresufferingandgoingthroughtribulations,and tothosewhoareworkingtorelievethoseinpainandsuffering.Ialsodedicatethis work to my loving parents, brothers, and two lights of my life: Bahira and Fatimah! Salman Asadullah CONTENTS Foreword xi Preface xiii Acknowledgments xv About the Authors, Contributors, and Reviewers xvi 1 IPv6 Drivers in Broadband Networks 1 1.1 IPv6-Based Services 2 1.2 Broadband Access Models 3 1.2.1 ISP-Operated Deployment Model 5 1.2.2 Wholesale Deployment Model 6 1.3 Summary 7 References 7 2 IPv6 Overview 9 2.1 IPv6 Protocol Basics 9 2.1.1 IPv4 and IPv6 Header Comparison 9 2.1.2 IPv6 Extension Headers 11 2.1.3 IPv6 Addressing 12 2.1.4 ICMPv6 19 2.1.5 Neighbor Discovery 20 2.1.6 Secure Neighbor Discovery 27 2.1.7 Provisioning 27 2.2 Summary 34 References 35 3 Deploying IPv6 in Cable Networks 37 3.1 Cable Network Elements 37 3.2 Cable Networks Today 38 3.2.1 Bridged CMTS Networks 39 3.2.2 Routed CMTS Networks 42 3.3 Summary 58 References 58 vii viii CONTENTS 4 IPv6 Deployment in DSL, ETTH, and Wireless Networks 61 4.1 New Remote Access Architecture for IPv6 61 4.2 DSL Networks 61 4.2.1 DSL Network Elements 62 4.2.2 DSL Service Models 64 4.2.3 Protocol Considerations 67 4.2.4 DSL Network Access Technologies 69 4.2.5 PPP Options 70 4.2.6 Addressing and Routing 71 4.2.7 Routing Considerations 72 4.2.8 Routed Bridged Encapsulation 74 4.2.9 IPv6 Security in DSL Networks 74 4.3 Ethernet Networks 75 4.3.1 Ethernet Network Elements 76 4.3.2 Ethernet Deployment Options 76 4.3.3 Subscriber Identification 79 4.3.4 IPv6 Security in Ethernet Networks 79 4.4 IEEE 802.11A/B/G Wireless Networks 80 4.4.1 Wireless Network Elements 81 4.4.2 Layer2 NAP with Layer3 Termination at ER 81 4.4.3 Layer3-Aware NAP with Layer3 Termination at AR 84 4.4.4 IPv6 Security in Wireless Networks 85 4.5 Summary 85 References 86 5 Configuring and Troubleshooting IPv6 on Gateway Routers and Hosts 89 5.1 IPv6 Support on Gateway Routers 91 5.2 IPv6 Support on Windows XP, Windows Vista, and Windows Server 2003 and 2008 95 5.2.1 IPv6 Deployment Options on Windows XP, Windows Vista, and Windows Server 2003 and 2008 96 5.3 IPv6 Support on Linux 105 5.3.1 Deploying IPv6 on Linux 105 5.4 IPv6 Support on MAC OS X 107 5.4.1 Enabling IPv6 on MAC OS X 108 5.4.2 Tunneling IPv6 on MAC OS X 109 5.5 PPPv6 Support on MAC OS X 110 5.6 IPv6 Support on Solaris 110 5.6.1 Manually Activating IPv6 on Solaris 111 5.6.2 Tunneling IPv6 on Solaris 111 CONTENTS ix 5.7 Troubleshooting IPv6 on GWR and Hosts 113 5.8 Summary 115 References 115 6 Configuring and Troubleshooting IPv6 on Edge Routers 117 6.1 IPv6 Configuration on the Edge Router 117 6.1.1 Enabling IPv6 on ER 117 6.1.2 Configuring ER Upstream Interfaces 118 6.1.3 Configuring SP ER Downstream Interfaces 124 6.2 Summary 154 References 155 7 Configuring and Troubleshooting IPv6 on Provisioning Servers 157 7.1 IPv6 Support on DHCP Servers 157 7.1.1 DHCPv6 Support in a Cisco Network Registrar 157 7.1.2 Configuring DHCPv6 on CNR 158 7.1.3 Troubleshooting a CNR DHCPv6 Server 167 7.2 IPv6 Support on DNS Servers 170 7.2.1 IPv6 Support on a DNS Server in a Cisco Network Registrar 170 7.2.2 Configuring a CNR DNS Server for IPv6 170 7.2.3 Troubleshooting a CNR DNS Server 175 7.3 IPv6 Support on TFTP Servers 177 7.3.1 Enabling TFTPv6 on Solaris 10 177 7.3.2 Troubleshooting TFTPv6 179 7.4 IPv6 Support on AAA and RADIUS Servers 180 7.4.1 Generic AAA Configuration on an ER 181 7.5 Troubleshooting IPv6 on an ER and on RADIUS AAA Servers 186 7.5.1 Troubleshooting AAA and IPv6 Configurations on an ER 186 7.5.2 Troubleshooting User Profile and VSA Configurations on a RADIUS AAA Server 187 7.6 Summary 188 References 189 8 Conclusion 191 8.1 IPv6 Addressing Considerations 191 8.2 IPv4-IPv6 and IPv6-IPv6 Interworking 192 x CONTENTS 8.3 Subscriber Logging 192 8.4 Recovery Options 193 8.5 Summary 194 Appendix A IPv6 Case Study 195 Appendix B DHCPv6 Message Types and Option Codes 207 Index 211 FOREWORD TheInternetisbecomingautilitywithanestimated1.5billionusers,commonly referred to as ‘‘netizens,’’ around the world. This large user base is surpassed only by the 3.5 billion mobile (cell) phone users on the planet. Approximately 10% of cell phones in use today are ‘‘smart phones,’’ which also provide Internetservices.TheInternetbackboneisquiterobust;however,thelastmile of the access layer is made up of a fragmented delivery system ranging from very low speed to high-speed (1 Gbps) connections. To put things in perspec- tive, a 1-Gbps connection will allow downloading of a James Bond movie in about20seconds.High-speeddownloadallowsbetteruseofInternetresources thandoeslivestreaming,whichisresourceintensiveduetotimeconstraintson packet delivery and reordering. Broadband provides the Internet with an opportunity to become a robust utility similar to the TV networks. It is interesting to note that TV networks weredesignedwithenoughcapacitytomatchviewerexpectationsforqualityof experience.Thenextstageintheevolutionofbroadbandaccessistomovefrom asymmetric to symmetric provisioning, thus allowing consumers to download and upload at the same speed. IPv6 provides a large address capacity and will be ideal for a commodity addressing scheme that will enable two-way always- on, Internet services. This scenario will signify the most important shift in adoptionoftheInternet,byempoweringuserstobecome‘‘full-timeresidents’’ insteadofsimplysporadicin-and-outconsumers.TheevolvingInternetoffersa bright future by transforming casual users in TV broadcasters, reporters, and remote entertainers, and by creating new jobs and providing unprecedented opportunitiesthat traditionallyrequired expensivesupport infrastructure.The deployment of IPv6 has become an issue of strategic importance for many national economies. Telecom operators and Internet service providers (ISPs) are key players in facilitating the deployment of IPv6 on broadband access networksamidtheobviouscomplexitiesofcoexistingwithorreplacing widely deployed IPv4 services. Evidently, telecom operators and ISPs have to take steps to ensure a workable transition strategy that involves transparent interoperability and integration of mature and advanced applications over bothIPv4andIPv6.thisstrategywillenableacombinationofservicesthatwill allow service providers to explore and exploit richer services offered by IPv6 during a potentially long transition from IPv4. This will also lead to new businessmodelsthatwillgeneratereturnoninvestmentwithoutwaitingforthe ubiquitous deployment of IPv6. xi xii FOREWORD The IPv4 address space is virtually depleted, with just over 14% capacity remaining, and is expected to run out by the end of 2010. It is therefore anticipatedthattheuseofIPv6willgainmomentumandtheenduserwilldrive differentiated services, achieving returns not only in investments but also in service innovations and flexible communication solutions. Solutions for inte- gratinganddeployingbothIPv4andIPv6servicesarematureandavailableto service providers. The authors of this book have the necessary technical expertise and experience to identify the challenges and to propose recommendations and solutions of great value to a world made of heterogeneous and widely un- interoperable networks designed using private addressing schemes that inhibit end-to-end applications and services. Their extensive involvement in standar- dizationbodiessuchastheIETFandknowledgespreadatthecustomerlevelin thedesignanddeploymentofIPv6networksareofparamountvaluetoreaders, whocangainfirst-classknowledgetoempowerthemtotacklethetransitionto IPv6 with greater confidence. Welcometothenewtwo-wayIPv6-basedbroadbandaccesstotheInternet! LATIF LADID President, IPv6 Forum