INTRODUCTION TO IP ADDRESS MANAGEMENT ffffiirrss..iinndddd ii 88//22//22001100 22::5588::4499 PPMM IEEE Press 445 Hoes Lane Piscataway, NJ 08854 IEEE Press Editorial Board Lajos Hanzo, Editor in Chief R. Abari M. El-Hawary S. Nahavandi J. Anderson B. M. Hammerli W. Reeve F. Canavero M. Lanzerotti T. Samad T. G. Croda O. Malik G. Zobrist Kenneth Moore, Director of IEEE Book and Information Services (BIS) Technical Reviewers Janet Hurwitz Alex Drescher Brian Hart Michael Dooley Books in the IEEE Press Series on Network Management Telecommunications Network Management Into the 21st Century, Co-Editors Thomas Plevyak and Salah Aidarous, 1994 Telecommunications Network Management: Technologies and Implementations, Co-Editors Thomas Plevyak and Salah Aidarous, 1997 Fundamentals of Telecommunications Network Management, by Lakshmi Raman, 1999 Security for Telecommunications Management Network, by Moshe Rozenblit, 2000 Integrated Telecommunications Management Solutions, by Graham Chen and Quinzheng Kong, 2000 Managing IP Networks: Challenges and Opportunities, Co-Editors Thomas Plevyak and the late Salah Aidarous, 2003 Next Generation Telecommunications Networks, Services, and Management, Co-Editors Thomas Plevyak and Veli Sahin, 2010 Introduction to IP Address Management, by Timothy Rooney, 2010 ffffiirrss..iinndddd iiii 88//22//22001100 22::5588::4499 PPMM INTRODUCTION TO IP ADDRESS MANAGEMENT Timothy Rooney IEEE Press Series On Network Management Thomas Plevyak and Veli Sahin, Series Editors A JOHN WILEY & SONS, INC., PUBLICATION ffffiirrss..iinndddd iiiiii 88//22//22001100 22::5588::4499 PPMM Copyright © 2010 by Institute of Electrical and Electronics Engineers. All rights reserved. Published by John Wiley & Sons, Inc., Hoboken, New Jersey. Published simultaneously in Canada. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 750-4470, or on the web at www.copyright.com. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permission. Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts in preparing this book, they make no representations or warranties with respect to the accuracy or completeness of the contents of this book and specifi cally disclaim any implied warranties of merchantability or fi tness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Neither the publisher nor author shall be liable for any loss of profi t or any other commercial damages, including but not limited to special, incidental, consequential, or other damages. For general information on our other products and services or for technical support, please contact our Customer Care Department within the United States at (800) 762-2974, outside the United States at (317) 572-3993 or fax (317) 572-4002. Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic formats. For more information about Wiley products, visit our web site at www.wiley.com. Library of Congress Cataloging-in-Publication Data: Rooney, Timothy. Introduction to IP address management / Timothy Rooney. p. cm. Includes bibliographical references and index. Summary: “The book begins with a basic overview of IP networking, followed by chapters describing each of the three core IPAM technologies: IPv4 and IPv6 addressing, DHCP, and DNS. The next three chapters describe IPAM management techniques and practice, followed by chapters on IPv4-IPv6 co-existence, security and the IPAM business case”– Provided by publisher. ISBN 978-0-470-58588-7 (pbk.) 1. Internet domain names. 2. Internet addresses. 3. TCP/IP (Computer network protocol) I. Title. TK5105.8835.R659 2010 004.67'8–dc22 2010016634 Printed in Singapore. 10 9 8 7 6 5 4 3 2 1 ffffiirrss..iinndddd iivv 88//22//22001100 22::5588::4499 PPMM CONTENTS Preface ix Acknowledgments xiii 1 IP NETWORKING OVERVIEW 1 IP Networking 101 1 IP Networking 102 9 Highlights of Internet Protocol History 21 2 INTERNET PROTOCOL ADDRESSING 25 The IP Header 25 Binary Review 25 IP Addressing 26 Classless Addressing 33 Special Use IPv4 Addresses 34 IP Version 6 (IPv6) 35 IPv6 Address Allocations 39 IPv6 Address Autoconfi guration 41 Required Host IPv6 Addresses 45 Regional Internet Registries 46 Key IP Addressing Management Challenges 49 3 DYNAMIC HOST CONFIGURATION PROTOCOL (DHCP) 53 Introduction 53 DHCP Overview 54 DHCP for IPv6 (DHCPv6) 59 DHCP Server Deployment Considerations 64 Other Means of Dynamic Address Assignment 67 Key DHCP Management Challenges 67 v ffttoocc..iinndddd vv 77//2277//22001100 1100::2244::2233 AAMM vi CONTENTS 4 THE DOMAIN NAME SYSTEM (DNS) 69 DNS Overview—Domains and Resolution 69 Name Resolution 71 Zones and Domains 74 Resolver Confi guration 79 DNS Update 80 Resource Records 80 DNS Server Deployment Considerations 82 Key DNS Management Challenges 84 5 IP ADDRESS MANAGEMENT OVERVIEW 85 Key Elements of IP Address Management 85 Applications of Address Management Technologies 87 Potential Impacts of Inadequate IP Address Management 95 IP Address Management as Network Management 95 IP Address Management Business Benefi ts 96 Common Approaches and IPAM Evolution 99 6 IP ADDRESS MANAGEMENT PRACTICES 101 FCAPS Summary 101 Common IP Management Tasks 102 Confi guration Management 102 Fault Management 122 Accounting Management 126 Performance Management 130 Security Management 132 Disaster Recovery/Business Continuity 133 ITIL® Process Mappings 134 7 IP ADDRESS MANAGEMENT WORKFLOW 139 What Is Workfl ow? 140 Workfl ow Realization 144 Workfl ow Benefi ts 145 Workfl ow Scenarios 147 Summary 153 8 IPv6 DEPLOYMENT AND IPv4 CO-EXISTENCE 155 Why Implement IPv6? 156 Dual Stack Approach 157 ffttoocc..iinndddd vvii 77//2277//22001100 1100::2244::2233 AAMM CONTENTS vii Tunneling Approaches 160 Translation Approaches 164 9 SECURITY CONSIDERATIONS 169 DHCP and Network Access Security 169 Network Access Control (NAC) 170 Alternative Access Control Approaches 175 Securing DHCP Servers 179 DNS Vulnerabilities 182 Mitigation Approaches 186 DNS Security Extensions (DNSSEC) 187 10 IP ADDRESS MANAGEMENT BUSINESS CASE 197 Business Case Overview 198 Business Case Cost Basis 198 Savings with IPAM Deployment 221 Business Case Expenses 222 Netting It Out: Business Case Results 224 Conclusion 225 Appendix A IPv4 DHCP Options 227 Appendix B DHCPv6 Options 241 Appendix C DNS Resource Record Summary 249 Glossary 253 Bibliography 255 Index 261 ffttoocc..iinndddd vviiii 77//2277//22001100 44::0055::1122 PPMM PREFACE Today ’ s IP networks are growing increasingly complex, as new IP services and technologies are deployed. The increasing proliferation of IP - based devices and applications serves only to accentuate the importance of the performance of the IP network supporting these business - critical applications. If end - user devices such as laptops or VoIP phones cannot obtain an IP address via DHCP (Dynamic Host Confi guration Protocol), they will be rendered unproductive and users will call the help desk. Likewise, if DNS (Domain Name System) is down, application navigation by name, phone number, or web address will likewise impair produc- tivity and induce help desk calls. Hence, effective IP Address Management (IPAM) has become critical to maintaining high - performing IP services such as data, video, and Voice over IP (VoIP). The practice of IPAM entails the application of network management disci- plines to IP address space and associated network services, namely DHCP and DNS. The consequence of inaccurately confi guring DHCP is that end users may not be able to obtain IP addresses to access the network. Without proper DNS confi guration, usability of the network will greatly suffer because the name - to - address lookup process may fail. Imagine having to navigate to a website or send an email or an instant message by IP address instead of by name! It ’ s equally important that these DHCP and DNS confi gurations be based on a common IP address plan, which maps out the IP address hierarchy, subnets, address pools, and domains. The linkages among the IP address plan, DHCP server confi guration, and DNS server confi guration are inseparable; a change of an IP address will affect DNS information and perhaps DHCP as well. These critical network functions provide the foundation for today ’ s converged services IP networks, which com- prise most enterprise and service provider networks, so they must be managed using a rigorous approach. This book provides a concise introduction to the technologies of IP address- ing, DHCP, and DNS, as well as IPAM practice and techniques needed to manage them cohesively. A companion book, IP Address Management Principles and Practice , provides a deeper dive into IPAM technologies and techniques. The objectives of this book are to help you: (cid:129) Learn the basics of IPv4 and IPv6 addressing and subnetting, DHCP, and DNS networking technologies ix ffpprreeff..iinndddd iixx 77//2277//22001100 1100::2244::2211 AAMM x PREFACE (cid:129) Understand IPAM practices, including managing your IP address inventory and tracking of address transactions, such as allocating and splitting address space, discovering network occupancy, and managing faults and performance (cid:129) Understand the costs and justifi cations for properly implementing an IPAM strategy (cid:129) Learn about IPv4 - IPv6 co - existence technologies and approaches CONVENTIONS This book is typeset in Times Roman font. T imes Roman italic font is used for terms introduced for the fi rst time or to provide emphasis. To differentiate prose from example confi guration information within a DHCP or DNS server for example, Courier font is used in the following manner: Courier plain font — denotes keywords or literal text within a confi gura- tion fi le or screen. Courier italic font — denotes a parameter name that in practice is sub- stituted for a value refl ecting the denoted data element or type. ORGANIZATION The book begins with a basic overview of IP networking, followed by chapters describing each of the three core IPAM technologies: IPv4 and IPv6 addressing, DHCP, and DNS. The next three chapters describe IPAM management tech- niques and practice, followed by chapters on IPv4 - IPv6 co - existence, security, and the IPAM business case. Chapter 1 — IP Networking Overview. The opening chapter provides a very basic overview of IP networking, including a discussion of protocol layer- ing, addressing, and routing. Chapter 2 — Internet Protocol Addressing. C hapter 2 describes the Internet Protocol (IPv4 and IPv6) primarily from an IP addressing perspective. Chapter 3 — Dynamic Host Confi guration Protocol (DHCP). C hapter 3 provides an overview of the DHCP protocol for IPv4 and IPv6 address assignment, including a discussion of basic operation and additional parameter assignment functions core to many advanced IP services such as broadband service or voice over IP. Chapter 4 — The Domain Name System (DNS). C hapter 4 provides a basic DNS overview, including a discussion of DNS concepts, the basic resolu- tion process, the domain tree for forward and reverse domains, and resource records. ffpprreeff..iinndddd xx 77//2277//22001100 1100::2244::2211 AAMM PREFACE xi Chapter 5 — IP Address Management Overview. T his chapter introduces the concepts of IP address management (IPAM), including its major components, motivation, benefi ts, and basic approaches. Chapter 6 — IP Address Management Practices. E veryday IP address management functions are described in Chapter 6 , including IP address allocation and assignment, renumbering, moves, splits, joins, DHCP and DNS server confi guration, inventory assurance, fault management, perfor- mance monitoring, and disaster recovery. This chapter is framed around the FCAPS network management model, emphasizing the necessity of a disciplined “ network management ” approach to IPAM. Chapter 7 — IP Address Management Workfl ow. T his chapter describes various approaches to automating IPAM functions through workfl ow. An introduction to workfl ow begins the chapter, followed by intra - and extra - IPAM automation examples, benefi ts, and scenarios. Examples such as IP address requests, Internet Registry reporting, and asset tracking are described. Chapter 8 — IPv6 Deployment and IPv4 Co - Existence. Chapter 8 describes various technologies and strategies for deploying IPv6 over an existing IPv4 network. Chapter 9 — Security Considerations. T his chapter describes security related topics with respect to DHCP network access control approaches, DNS vulnerabilities and mitigation, and DNSSEC. Chapter 10 — IP Address Management Business Case. Chapter 10 provides a business - oriented conclusion to the book, describing the business case for IPAM. This includes derivation of the business case cost basis, identifi cation of savings when using an IP address management system, associated costs, and fi nally net results. An example business case is also provided. ffpprreeff..iinndddd xxii 77//2277//22001100 1100::2244::2211 AAMM