IPv6 Opportunity and challenge

Transcription

1 Juniper Networks Solution from enterprise to service provider Jean-Marc Uzé 10 May Opportunity and challenge More devices demanding more addresses 3G Mobile IP multimedia specifies Gamers using APAC growth driving Consistent Questions QoS Security of Availability Performance Addressing, tunneling and translation Financially viable deployment, what infrastructure changes are required? 2 1

2 Deployment Requirements End-to-end dual-stack for and and stateful firewall for small and large sites Multiple address allocation and tunneling mechanisms for / corporate access and Internet access CPE with integrated IPSec VPN support Tunnel and Transition schemes eg NAT-PT, 6to4, 4to6 Service Provider DSL Subscriber Management Service Provider edge and core routing in hardware Juniper Networks uniquely provide routed end-to-end 3 Dual-stack end-to-end and simultaneously CPE BRAS CORE EDGE FIREWALL Infranet / / / CPE for routing and stateful inspection firewall Access eg DSL M-series / 4 2

3 Corporate Access for SOHO or Branch Office CPE / routing with stateful Firewall/VPN Initiates PPPoE session over DSL (terminated in the BRAS) Routes corporate traffic into IPSec VPN and non corporate traffic to Internet SOHO user authenticates at the corporate side using XAUTH and Radiusv6 CPE Resolves DNS to correct Domain Using Split DNS resolution Prevents malicious Internet users from learning corporate network information DNS Server: Intranet.corp.com DNS Query: Intranet.corp.com Access eg DSL DNS Query: Internet 5 Enabling Service Providers to Offer Enhanced E-Series BRAS Allocate addresses, use of DHCP-prefix delegation for v6 addressing QoS and hierarchical scheduler support 6PE, directly into MPLS M- and T- Series EDGE and Core Routers Maintain and routing tables, stateless filters, CoS Forward into Core using 6PE, 2547 MPLS VPN, routing Routed BRAS 6PE MPLS LSPs EDGE Router Access eg DSL Internet 2547 VPN 6 3

4 Enterprise Central Site Stateful Firewall Netscreen Central Site Stateful inspection Firewall aware stateful Inspection tunnel authentication and termination M7i Central Site CPE Router routing and packet processing for CoS, filters etc in hardware / 6PE Routed MPLS LSPs Internet 2547 VPN Central Site Firewall and Router 7 Easing Operators Service Deployment M- and T- series Core and Edge Dual stack allows and to operate simultaneously Configured tunnels in routers allows over existing backbones 6PE allows use of existing MPLS backbone E-Series BRAS PPPoE v6 termination or subscribers 6PE in BRAS and edge routers allows in signaled MPLS LSPs In Provider managed Netscreen Security CPE Allow applications to be extended to enterprise sites Routed on LAN and WAN inside IPSec VPN tunnels Tunneling or Translation 6to4 and 4to6 8 4

5 Easing Corporate Deployment Allow mixed and hosts on LAN Netscreen platform performs and stateful firewall at each site Translate for Internet access using NAT-PT 6to4 and 4to6 on LAN WAN offered by Service Provider WAN offered by Service Provider Netscreen CPE encrypts corporate data in IPSec VPN Netscreen CPE encrypts corporate in IPSec VPN on LAN on LAN 9 JUNOS Features (M-series and T-series) T640 M40 M40e M160 T320 M5/M10 M20 Since JUNOS 5.1 November 2001 Addressing & Forwarding Forwarding in hardware Addressing Link, site, global Stateless autoconfiguration Neighbor discovery Packet Filtering EUI 64 Autogeneration Unicast RPF FBF and CBF for Destination/Source Class Usage Routing Protocols T-series M-series IS-IS OSPFv3 MP-BGP over v4/v6 RIPng Static VPN (RFC2547bis) PIM v2 MLD v1, v2 multitopology extensions for ISIS Operations & Transition Common support ICMPv6 SNMP over v6 + MIBs IP applications Transition Ping, telnet, ssh, ftp Configured tunnels Dual stack Transport in MPLS All forwarding in hardware 10 5

6 ERX: JUNOSe Release 5.0 Basic protocol support (RFC 2460) ICMPv6 (RFC 2463) Ping v6 & Traceroute v6 Global and interface configuration CLI command and logging function Routing table change and Static routing Supported Line Card: ATM ERX310 ERX1410 ERX705/710 E-series ERX ERX: JUNOSe Release 5.1 Dual Stack BRAS ATM / Ethernet / Vlan interfaces BRAS / LAC / LNS Radius extensions to support for v6 Radius attributes (RFC 3162 & ERX VSAs) DHCP support for v6 for prefix delegation* Dynamic PPPoE interfaces ERX310 ERX1410 ERX705/710 E-series ERX1440 BGP w/ v4 and v6 routes over TCPv4 Neighbor Discovery for (RFC 2461) - ETH Supported Line Cards ATM, ETH, TSM, Service Module QoS packet classification, coloring, traffic classes As being implemented by Microsoft (v6 PPPoE w/ prefix delegation) 12 6

7 ERX: JUNOSe Release 5.2 BGP support for 6PE DNS client for v6 Router advertisements (stateless and stateful auto configuration) Static v6 host names Internal cross-connect for frames ( bridging ) using MPLS-Martini mechanisms inside the ERX ERX310 ERX1410 ERX705/710 E-series ERX Juniper Networks deployment in R&E and ISP Networks Americas EMEA APAC Osiris 14 7

8 Summary Juniper reduces obstacles in deploying services Flexible capabilities provide financially viable deployment options for Service Providers and Enterprise Proven, stable and scalable implementations Documented configurations eases deployment No compromises Security QoS Availability Performance 15 Thank You 16 8