How To Manage Ipv6 Networks On A Network With Ipvv6 (Ipv6) On A Pc Or Ipv4 (Ip6) (Ip V6) Or Ip V6 ( Ipv5) ( Ip V5

Transcription

1 IPv6 networks management

2 Contribs Bernard Tuy, Renater Simon Muyal, Renater Ralf Wolter, Cisco Patrick Grossetête, Cisco Munechika Sumikawa, Hitachi Patrick Paul, 6WIND Simon Muyal 6net/Spring - 05/2004

3 Agenda Introduction Management network IPv6 MIBs: current status Managing IPv6 networks IPv6 MIBs implementation Netflow SNMPv6 Management platforms Management tools IPv6 LAN IPv6 MAN/WAN Examples Conclusion Demo Simon Muyal 6net/Spring - 05/2004

4 Introduction Manage a network: What is it? A set of functions permitting: Monitoring Security Topology Inventory... Simon Muyal 6net/Spring - 05/2004

5 Simon Muyal 6net/Spring - 05/2004 Introduction IPv6 networks deployed: Most are dual stack LANs (campuses, companies, ) MANs (RAP, ) WANs -ISPs (Géant, NRENs, IIJ, NTT/Verio, Abilene, ) IXes Testbed, pilote net, production => Management tools are needed Which applications are available for managing these nets? Equipment, configurations, IP services (servers : DNS, FTP, HTTP, )

6 Simon Muyal 6net/Spring - 05/2004 Introduction SNMP Model:

7 IPv6 MIBs Status

8 Simon Muyal 6net/Spring - 05/2004 IPv6 MIBs status MIBs are essential for the network management. SNMP-based applications are widely used but others exist too (NetFlow, ) SNMP rely upon MIBs =>Need to have MIBs to collect IPv6 information as well as get MIBs reachable from an IPv6 address family.

9 IPv6 MIBs /2 Standardization status at IETF: At the beginning: IPv4 and IPv6 MIBsdissociated. Today : Unified MIBs are on standardization track. Simon Muyal 6net/Spring - 05/2004

10 Simon Muyal 6net/Spring - 05/2004 IETF MIB Status /3 draft-ietf-ipv6-rfc2096-update-07.txt IP Forwarding Table MIB (02/2004) proposed standard RFC (in the RFC Editor's queue can be considered as done) draft-ietf-ipv6-rfc2013-update-03.txt UDP MIB (04/2004) this hasn't been submitted for publication yet draft-ietf-ipv6-rfc2012-update-06.txt TCP MIB (02/2004) draft-ietf-ipv6-rfc2011-update-07.txt IP MIB, last call Jan 04 v09.txt (04/2004) These two are "Proposed Standard, IESG Evaluation: Revised ID Needed".

11 IETF MIB Status /4 BGP MIB v6: not stabilized yet. The current document is draft-ietf-idr-bgp4-mibv2-04.txt (01/2004) Note that the same folks are working on draft-ietf-idr-bgp4-mib-14.txt (04/2004), update of RFC >Neither of these has had a request for publication yet. Simon Muyal 6net/Spring - 05/2004

12 Managing an IPv6 Network

13 Managing an IPv6 network Dual stack IPv6 networks IPv6 only There are not the main case Important to keep in mind DS is not for ever One IP stack should be removed one day No reasons for netadmins to face twice the amount of work Simon Muyal 6net/Spring - 05/2004

14 Dual Stack IP networks Part of the monitoring via IPv4 Connectivity to the equipment Tools to manage it (inventory, configurations «counters», routing info, ) Remaining Part needs IPv6 MIBs IPv6 support NetFlow (v9) Simon Muyal 6net/Spring - 05/2004

15 IPv6 only networks Topology discovery (LAN, WAN?) IPv6 SNMP agent SNMP over IPv6 transport => Need to identify the missing parts Simon Muyal 6net/Spring - 05/2004

16 IPv6 MIBs implement

17 Simon Muyal 6net/Spring - 05/2004 IPv6 MIBs implement /1 Cisco Private Cisco MIBs implement ID-00 of RFC 2011 & 2096 updated drafts But, no distinction between IPv4 and IPv6 traffic at the interface level from the MIBs (available when new IETF MIB get implemented) Information available from CLI show interface accounting

18 Simon Muyal 6net/Spring - 05/2004 IPv6 MIBs implement /2 Juniper MIB based on RFC 2465 with different counters for IPv4 and IPv6 traffic? Or based on filters to collect IPv6 traffic

19 Simon Muyal 6net/Spring - 05/2004 IPv6 MIBs implement /3 Hitachi Routers (GR2000/GR4000) and Switches (GS4000) support IPv6 standard MIBs: RFC 2452: TCP/IPv6 RFC 2454: UDP/IPv6 RFC 2465: Textual conventions for IPv6 RFC 2466: ICMPv6 The unified MIBs are not implemented yet.

20 Simon Muyal 6net/Spring - 05/2004 IPv6 MIBs implement /4 6WIND MIBs based on RFC 2465 and RFC 2466 To be checked at our lab

21 Netflow

22 Netflow Simon Muyal 6net/Spring - 05/2004

23 NetFlow for IPv6 /1 IETF IPFIX WG Cisco Netflow for IPv6 on Cisco IOS 12.3(7)T Compliant Netflow v9 Still use an IPv4 transport to export the data Needs to update your own Netflow Collector Cisco NFC v5.0 available Other collectors are available too =>Netflow is not yet there for GSRs though Simon Muyal 6net/Spring - 05/2004

24 NetFlow for IPv6 /2 Hitachi Support sflow ( and Netflow is on the roadmap. 6WIND: Not available Simon Muyal 6net/Spring - 05/2004

25 SNMP over IPv6

26 SNMP over IPv6 Cisco: SNMP over IPv6 is shipping in 12.0(27)S1. (This is the "limited" version that 6Net tested, so the transport is there, but some features (snmp proxy, infra mibs) still lack IPv6 capability) The plan is to have full SNMP over IPv6 in future releases Today, syslog messages related to IPv6 are sent over an IPv4 transport. Later, syslog will run over IPv6 as well Hitachi: SNMP over IPv6 is available 6WIND SNMP over IPv6 is available Simon Muyal 6net/Spring - 05/2004

27 Management platforms

28 Simon Muyal 6net/Spring - 05/2004 Management platforms Commercial ISPs use to have integrated management platforms (NRENs folks mostly use GPL or Home made tools) HP-OV proposes a version with IPv6 features: NNM 7.0 (sept 2003). Ciscoworks: IPv6 version for Campus Manager under tests Application note on IPv6 management Netview (IBM) doesn t propose any IPv6 features Tivoli : no information Infovista : «no IPv6 plan at themoment»

29 Simon Muyal 6net/Spring - 05/2004 «Top ten» HP Openview Ciscoworks 2000 (Campus Manager) IBM Netview Infovista, Tivoli IPv6 ready IPv6 not ready

30 Monitoring tools

31 Simon Muyal 6net/Spring - 05/2004 Monitoring tools for IPv6 networks For a LAN: Nagios Argus MRTG For a MAN/WAN: AS PATH tree Weather map Netflow Rancid Looking Glass

32 6Net and IPv6 monitoring tools 6Net wp6 : managing large scale IPv6 nets Tests lot of ipv6 ready tools Port many others to ipv6 Simon Muyal 6net/Spring - 05/2004

33 6Net outcome 30+ monitoring tools for IPv6 Tested Implemented Documented URL: To be publicly available in a few weeks Simon Muyal 6net/Spring - 05/2004

34 Examples

35 IPv6 LAN management: Nagios URL:// Administration of network: PCs Switches Routers Administration of services: http, ftp, dns... Evolution: new features can be added with plug-ins Simon Muyal 6net/Spring - 05/2004

36 Nagios Simon Muyal 6net/Spring - 05/2004

37 Simon Muyal 6net/Spring - 05/2004 IPv6 MAN/WAN management: AS Path Tree Display BGP4+ «topology» from BGP4+ routing table. Generate HTML pages.

38 AS Path Tree Simon Muyal 6net/Spring - 05/2004

39 IPv6 MAN/WAN management Looking Glass Get information on a router w/o direct connection Web Interface Final user don t need a login Allow the user to detect causes of failures w/o asking the NOC Simon Muyal 6net/Spring - 05/2004

40 Looking Glass Simon Muyal 6net/Spring - 05/2004

41 Simon Muyal 6net/Spring - 05/2004 Inventory : Architecture 1'' 4'' Utilisateur Serveur WEB PHP Polling SNMP 1 GIP RENATER 2'' 3'' FTP 3' Collecteur SNMP 2 RENATER 3 Serveur BD Mysql SSH 1 MySql 2 Serveur Perl crontab NOC RENATER

42 Inventory: Interfaces Simon Muyal 6net/Spring - 05/2004

43 Inventory: BGP Peerings Simon Muyal 6net/Spring - 05/2004

44 Conclusion ISPs and any other organisationsneed monitoring tools to launch a new service/protocol into production Lot of monitoring tools are now ready for IPv6 networks But : Q1: are my usual tools (used for IPv4 monitoring) available for IPv6 too? Q2: what I need to stress to my favourite vendor to be ready and manage my IPv6 network? Simon Muyal 6net/Spring - 05/2004

45 Simon Muyal 6net/Spring - 05/2004 Retrieve this information -> Présentations -> RFCs

46 Simon Muyal 6net/Spring - 05/2004 Demos:

47 Simon Muyal 6net/Spring - 05/2004