Cisco IPv6 update (in <=5minutes) TF-NGN meeting, Brussels

Transcription

1 Cisco IPv6 update (in <=5minutes) TF-NGN meeting, Brussels Larry Dunn Manager, Advanced Architecture (slides mostly from Patrick Grossetete, Session Number 1

2 The short version For those that have seen Patrick Grossetete s three-phase IPv6 development plan: Phase 1&2 are finished Phase 3 is also pretty much complete (some timing variance by hardware platform) For those who like more detail 2

3 Cisco IOS IPv6 Status Core Positioning General Production Edge & Enterprise Infrastructure L3 switches Technology development Cisco IOS Release 12.3M 12.0S on 12000, IOS-XR 2.0 on CRS S 12.2S-based Derivatives 12.3T Note as well as 12.2S First FCS Date May 2003 Feb 2002 May 2004 Feb 2003 C SX, C EW Aug 2003 IPv6 Start Here documents the IPv6 feature set per Cisco IOS releases 3

4 Cisco IOS 12.3M/T IPv6 Feature Overview Security IPv6 standard ACL IPv6 extended ACL IPv6 IPsec authentication for OSPFv3 IPv6 Firew all Configured & Autom atic Tunnels (RFC 2893) 6to4 (RFC 3056 & 3068) IPv6 over GRE/IPv4 IPv6 over MPLS (6PE) ISATAP Integration NAT-PT Phase I & II (RFC 2765 & 2766) IP over IPv6 Tunnels Routing RIPng OSPFv3 IS-IS for IPv6 MT IS-IS MP-BGP IPv6 Unicast MP-BGP IPv6 Multicast Policy Based Routing IPv6 (RFC 2460) ICMPv6 (RFC 2463) Neighbor Discovery (RFC 2461) Stateless Auto-Configuration Anycast CEFv6/dCEFv6 Core urpf Strict Mode CEFv6 Switched Tunnels Cisco IOS Software Release 12.3M & 12.3T Applications & Mgnt Telnet, TFTP, DNS resolver, HTTP, Ping, Traceroute, SSH Cisco IP & IP-Forwarding MIBs Netflow for IPv6 Broadband Access Cisco VSA AAA Radius AAA (RFC 3162) PPPoA, PPPoE, RBE and ATM 1483 encapsulations DHCPv6 Prefix Delegation (RFC3633) Stateless DHCP (RFC 3646) Generic Prefix Multicast MLDv1 and v2 MLD Access Group PIMv2 SM, SSM, Bi-Dir PIM Embedded RP IPv6 MC over IPv4 tunnels Scope Boundaries Static mroutes QoS IPv6 QoS (MQC) 4

5 CRS-1 IOS XR IPv6 Summary IPv6 Hardware Forwarding up to OC-768 IOS-XR 2.0 Feature Set IPv6, IPv6 address architecture ICMPv6, ND, Stateless Auto-Configuration OSPFv3, IS-IS including Multi-Topology MP-BGP4 dcefv6 including Layer 3 load balancing via CEF RPF Support Loose mode MTU Path Discovery IPv6 ACL Support Pingv6, Traceroutev6, Rlogin support Telnet, FTP Client Post release 2.0 IPv6 QOS IPv6 Multicast IPv6 MIBs IPv6 urpf Strict Mode More. 5

6 Cisco series router IPv6 Roadmap CY01-04 dcefv6 S I/IS-ISv6 22 Plus IOS Phase I features Support on E0/1/2/4 6PE support IPv6 MIB Enhancements to RIPng, dcefv6 SSHv6 23S IPv6/E3 Native H/W Forwarding IPv6 Extended ACLs, LC S/W Configured IPv6 Tunnels, LC S/W IPv6 on DPT LCs IPv6 on 10GE IPv6 on 10xGE L2TPv3 with E2 Tunnel Card CY04/05 OSPFv3 24S S 5 2 IPv6/E3 E-ACLs in E3 H/W 6PE hardware support on E3 IPv6 on E3 4 x GE Multicast on E3/E4+ MT IS-IS 26S S QoS on E328 Planned BSR 1S 3 IPv6 urpf (Strict) IPv6 on OC192/10GE i/fs (Engine 5) 7S 2 6PE acceleration on E4/E4+ IPv6 MC on DPT SNMP over IPv6 6

7 Cisco 7600/Cat series IPv6 Overview IPv6 Basics ICMPv6 ND including static entries Stateless Autoconfig. ACL MIBs, SSH, Telnet DNS, TFTP Routing protocols RIPng, IS-IS for IPv6, MP-BGP4 IPv6 Tunnels Configured, automatic, GRE, 6to4, ISATAP Switching CEFv6 6PE (IPv6 over MPLS) Feature set on 12.2SX IPv6 Hardware Assistance Supervisor Engine 720 IPv6 hardware assisted forwarding native IPv Mpps IPv6 over IPv4 tunnels - 10Mpps dcef720 (PFC3) modules ie: 10GE +200 Mpps CY05 Multicast MT IS-IS QoS Netflow Sup2/MSFC2 support on 12.2(17d)SXA 7

8 Cisco Catalyst 3750 Series IPv6 Roadmap Feature set inherited from 12.2S in CY04 CY06 IPv6 Capable Hw: FCS May E Release No IPv6 software IPv6 Hardware Switching 12.2(25)SEA Release IPv6 EFT in Q IPv6 FCS in Q IPv6 across Cisco StackWise Technology Imbedded management with CMS for IPv6 basic Support IPv6 Features Unicast Routing (Static, RIPng,, OSPFv3) Switching (CEFv6) ACL (Limitation on host routes) Multicast Full ACL MP-BGP 8

9 Catalyst 6500 Series NAM Introducing IPv6 Network Management capabilities IPv6 monitoring and decodes with NAM Can set up alarms with IPv6 addresses Can configure an easy IPv6 capture filter and IPv6- historical reports 9

10 Cisco IPv6 Security Solutions Integration and Coexistence Secure connectivity Now IPSec o IPv4 dynamic IPSec to protect IPv6 over IPv4 tunnels with dynamic IPv4 end point o IPv4 IPSec over UDP to offer protection when crossing a firewall or NAT o IPv6 IPSec to authenticate OSPFv3 12.3(4)T o IPv6 Site-to-Site H2 CY04 Threat protection Packet filtering o Standard, reflexive, extended access control list o Hardware filtering (Cisco Series IP Service Engine, Catalyst 6500 Series Supervisor Engine 720) Protecting your network for IPv IPv6 Firewall Stateful Packet Filtering IOS 12.3(7)T PIX 7.0 later 10

11 2003 Cisco Systems, Inc. All rights reserved. 11