네트워크 엔지니어를 위한 차세대 인터넷 프로토콜 IPv6 기본 원리 (제2판)

릭그라지아니

앱토스소재의카브릴로대학에서컴퓨터네트워킹과컴퓨터사이언스과정을,산타크루즈의캘리포니아대학교컴퓨터공학부에서네트워킹과정을가르치고있다.시스코네트워킹아카데미의커리큘럼엔지니어링팀에소속되어있다.이전에는산타크루즈오퍼레이션,탠덤컴퓨터,록히드미사일·스페이스의정보기술분야에서근무했으며미국해안경비대에서5년간복무했다.

Introduction

PartIIntroductiontoIPv6
Chapter1IntroductiontoIPv6
IPv6IsHere
WhyTransitiontoIPv6?
IPv4AddressDepletion
AccesstoIPv6-OnlyCustomers
BetterPerformance
SecuringYourCurrentNetwork
IPv4
IPv4AddressDepletion
CIDR
NATwithPrivateAddresses
ProblemswithNAT
NATisNotSecurity
NATExample
WhatAboutIPv5?
TheFascinatingHistoryofIPv6
SomeBackground
IPv4AddressExhaustionandtheNeedforMoreInternationalInvolvement
ACallforProposals
AMoreIPVersionofIPv6
IPv6:MoreThanJustLongerAddresses
IPv6Myths
TransitioningtoIPv6
Summary
ReviewQuestions
References
RFCs
Websites

Chapter2IPv6Primer
HexadecimalNumberSystem
IPv6AddressTypes
GlobalUnicastAddress(GUA)
Link-LocalUnicastAddress
UnspecifiedAddress
Solicited-NodeMulticastAddress
AddressTerminology
ICMPv6NeighborDiscoveryProtocol(NDP)
NeighborSolicitation(NS)andNeighborAdvertisement(NA)Messages
RouterSolicitation(RS)andRouterAdvertisement(RA)Messages
DynamicAddressAllocation
Summary
ReviewQuestions
References
RFCs

Chapter3ComparingIPv4andIPv6
ComparingtheIPv4andIPv6Headers
TheIPv4andIPv6VersionFields
IPv4InternetHeaderLength(IHL)Field
IPv4TypeofService(ToS)andIPv6TrafficClassFields
IPv6FlowLabelField
IPv4TotalLengthField,IPv6PayloadLengthField,andIPv6Jumbograms
IPv4andIPv6MTUs
IPv4Fragmentation
IPv6Fragmentation:IPv6SourceOnly
IPv4ProtocolandIPv6NextHeaderFields
IPv4TimetoLive(TTL)andIPv6HopLimitFields
Checksums:IPv4,TCP,andUDP
IPv4andIPv6SourceAddressandDestinationAddressFields
IPv4OptionsandPaddingFields,IPv6FixedLength
IPv6overEthernet
PacketAnalysisUsingWireshark
ExtensionHeaders
Hop-by-HopOptionsExtensionHeader
RoutingExtensionHeader
FragmentExtensionHeader
IPsec:AHandESPExtensionHeaders
TransportandTunnelModes
EncapsulatingSecurityPayload(ESP)ExtensionHeader
AuthenticationHeader(AH)ExtensionHeader
DestinationOptionsExtensionHeader
NoNextHeader
ComparingIPv4andIPv6ataGlance
Summary
ReviewQuestions
References
RFCs
Websites
PartIIIPv6Addresses

Chapter4IPv6AddressRepresentationandAddressTypes
RepresentationofIPv6Addresses
Rule1:OmitLeading0s
Rule2:OmitAll-0sHextets
CombiningRule1andRule
PrefixLengthNotation
IPv6AddressTypes
IPv6AddressSpace
UnicastAddresses
GlobalUnicastAddress
Link-LocalUnicastAddress
LoopbackAddresses
UnspecifiedAddresses
UniqueLocalAddresses
ULAandNAT
LFlagandGlobalID
Site-LocalAddresses(Deprecated)
IPv4EmbeddedAddress
IPv4-MappedIPv6Addresses
IPv4-CompatibleIPv6Addresses(Deprecated)
MulticastAddresses
Well-KnownMulticastAddresses
Solicited-NodeMulticastAddresses
Anycast주소
Summary
ReviewQuestions
References
RFCs
Websites
Book

Chapter5GlobalUnicastAddress
StructureofaGlobalUnicastAddress
GlobalRoutingPrefix
SubnetID
InterfaceID
ManualConfigurationofaGlobalUnicastAddress
ManualGUAConfigurationforCiscoIOS
ManualGUAConfigurationwithEUI-64forCiscoIOS
ManualGUAConfigurationwithIPv6UnnumberedforCiscoIOS
ManualGUAConfigurationforWindows,Linux,andMacOS
ImplementingStaticRoutingandVerifyingConnectivitywithPing
RecognizingthePartsofaGUAAddressandthe3？1？4Rule
ExaminingOtherPrefixLengths
SubnettingIPv6
ExtendingtheSubnetPrefix
SubnettingonaNibbleBoundary
SubnettingWithinaNibble
Subnetting/127Point-to-PointLinks
NDPExhaustionAttack
/127SubnettingonPoint-to-PointLinks
ipv6gen:AnIPv6SubnettingTool
PrefixAllocation
Provider-Aggregatable(PA)andProvider-Independent(PI)AddressSpace
Provider-AggregatableAddressSpace
Provider-IndependentAddressSpace
GeneralPrefixOption
DynamicAddressingMethodswithSLAACandDHCPv6
Summary
ReviewQuestions
References
RFCs
Websites

Chapter6Link-LocalUnicastAddress
StructureofaLink-LocalUnicastAddress
AutomaticConfigurationofaLink-LocalAddress
EUI-64GeneratedInterfaceID
VerifyingtheRouter’sLink-LocalAddressonEthernetandSerialInterfaces
RandomlyGeneratedInterfaceID
ZoneID(%)onLink-LocalInterfaces
ManualConfigurationofaLink-LocalAddress
Link-LocalAddressandDuplicateAddressDetection
Link-LocalAddressesandDefaultGateways
ipv6enable:IsolatedLink-LocalAddress
PingingaLink-LocalAddress
Summary
ReviewQuestions
References
RFCs

Chapter7MulticastAddresses
Scope
MulticastwithLink-LocalScopeVersusLink-LocalUnicastAddresses
Well-KnownMulticastAddresses
Solicited-NodeMulticastAddresses
MappingUnicastAddresstoSolicited-NodeMulticastAddress
MappingtotheEthernetMACAddress
MappingSolicited-NodeMulticasttoEthernetMACAddresses
MappingWell-KnownMulticasttoEthernetMACAddresses
VerifyingtheAddressMappingsonCiscoIOS,Windows,andLinux
MultipleDevicesUsingtheSameSolicited-NodeMulticastAddress
OneSolicited-NodeMulticastAddressforMultipleUnicastAddresses
MulticastListenerDiscovery
MLDSnooping
Summary
ReviewQuestions
References
RFCs
Websites,Videos,andBooks

PartIIIDynamicIPv6Addressing

Chapter8BasicsofDynamicAddressinginIPv6
DynamicIPv4AddressAllocation:DHCPv4
DynamicIPv6AddressAllocation
ICMPv6RouterSolicitationandRouterAdvertisementMessages
RouterAdvertisementMethodsandtheA,O,andMFlags
Method1:StatelessAddressAutoconfiguration(SLAAC)
Method2:SLAACwithStatelessDHCPv6
Method3:StatefulDHCPv6
DHCPv6Services
DHCPv6TerminologyandMessageTypes
DHCPv6Communications
Summary
ReviewQuestions
References
RFCs
Website

Chapter9StatelessAddressAutoconfiguration(SLAAC)
TheRAMessageandSLAAC
On-LinkDetermination
GeneratinganInterfaceID
GeneratingtheInterfaceIDUsingtheEUI-64Process
ConfiguringaWindowsHosttoUseEUI-64
PrivacyExtensionforStatelessAddressAutoconfiguration
PrivacyExtensionandGeneratingRandomizedInterfaceIDs
PrivacyExtensionandTemporaryAddresses
DisablingtheUseofTemporaryAddresses
AutoconfiguredAddressStatesandLifetimes
Example:AutoconfiguredAddressStatesandLifetimes
DisplayingIPv6LifetimesandStateInformationonWindows,Linux,andMacOS
RouterAdvertisementFieldsandOptions
ExaminingtheRouterAdvertisementwithWireshark
ModifyingtheValidLifetimeandPreferredLifetimeintheRAMessage
IncludingtheDNSAddressintheRouterAdvertisement
RouterAdvertisementConfigurationOptions
DefaultAddressSelection
ConfiguringtheRouter’sInterfaceasaSLAACClient
Summary
ReviewQuestions
References
RFCs
Websites
Other

Chapter10StatelessDHCPv6
SLAACwithStatelessDHCPv6
ImplementingStatelessDHCPv6
ConfiguringtheRAMessage’sOtherConfigurationFlag
WiresharkAnalysisofRouterAdvertisement:SLAACandStatelessDHCPv6
ConfiguringaRouterasaStatelessDHCPv6Server
VerifyingStatelessDHCPv6onaWindowsClient
VerifyingtheRouterasaStatelessDHCPv6Server
DHCPv6Options
rapid-commitOption
ConfiguringtheRapid-CommitOption
RelayAgentCommunications
DHCPv6RelayAgentConfigurationCommands
ConfiguringaUnicastDHCPv6RelayAgent
ConfiguringaDHCPv6RelayAgentUsingaMulticastAddress
Summary
ReviewQuestions
References
RFCs
Websites

Chapter11StatefulDHCPv6
StatefulDHCPv6MessagesandProcess
ImplementingStatefulDHCPv6
ConfiguringtheRAMessageMFlagandAFlag
SettingtheMFlagto1withanAFlagSetto1
ConsequencesofDisablingtheRAMessageorOmittingthePrefix
SettingtheMFlagto1andModifyingtheAFlagto0
WiresharkAnalysisofRouterAdvertisement:StatefulDHCPv6
ConfiguringaRouterasaStatefulDHCPv6Server
TheAddressPrefixCommand
VerifyingStatefulDHCPv6onaWindowsClient
VerifyingtheRouterasaStatefulDHCPv6Server
DHCPv6Options
IPv6PrefixDelegationOptionsforDHCPv6
SampleConfiguration:PrefixDelegationwithDHCPv6
DHCPv6-PDProcess
HOMERouter(RequestingRouter)ConfigurationandVerification
ISPRouter(DelegatingRouter)ConfigurationandVerification
VerifyingPrefixDelegationwithDHCPv6onWinPC
Summary
ReviewQuestions
References
RFCs
Websites

PartIVICMPv6andICMPv6NeighborDiscovery
Chapter12ICMPv6
GeneralMessageFormat
ICMPErrorMessages
DestinationUnreachable
PacketTooBig
PathMTUDiscovery
TimeExceeded
ParameterProblem
ICMPInformationalMessages
EchoRequestandEchoReply
PingingaGlobalUnicastAddress
PingingaLink-LocalAddress
Summary
ReviewQuestions
References
RFCs

Chapter13ICMPv6NeighborDiscovery
NeighborDiscoveryOptions
DefaultRouterandPrefixDetermination
RouterSolicitationMessage
RouterAdvertisementMessage
AddressResolution
TheAddressResolutionProcess
CharacteristicsoftheNeighborSolicitationMessage
FormatoftheNeighborSolicitationMessage
FormatoftheNeighborAdvertisementMessage
NeighborCache
DestinationCache
DuplicateAddressDetection(DAD)
NeighborUnreachabilityDetection(NUD)
RedirectMessage
Summary
ReviewQuestions
References
RFCs

PartVRoutingIPv6
Chapter14IPv6RoutingTableandStaticRoutes
ConfiguringaRouterasanIPv6Router
UnderstandingtheIPv6RoutingTable
Codes:NDpandND
Code:Connected
Code:Local
ConfiguringIPv6StaticRoutes
StaticRouteswithaGUANext-HopAddress
StaticRouteswithaLink-LocalNext-HopAddress
StaticRouteswithOnlyanExitInterface
DefaultStaticRouteswithLink-LocalNext-HopAddresses
VerifyingIPv6StaticRoutes
SummarizingIPv6Routes
IPv6SummaryStaticRoute
CEFforIPv6
Summary
ReviewQuestions
References
RFCs
Websites
Books

Chapter15EIGRPforIPv6
ComparingEIGRPv4andEIGRPv6
ClassicEIGRPforIPv6
ConfiguringClassicEIGRPforIPv6
VerifyingClassicEIGRPforIPv6
EIGRPNamedModeforIPv6
ConfiguringEIGRPNamedModeforIPv6
VerifyingEIGRPNamedModeforIPv6
ComparingEIGRPNamedModeforIPv4andIPv6
Summary
ReviewQuestions
References
RFC
Websites
Books

Chapter16OSPFv3
ComparingOSPFv2andOSPFv3
TraditionalOSPFv3
ConfiguringTraditionalOSPFv3
ASBRandAdvertisingaDefaultRoute
AreaBorderRouterwithTotallyStubbyArea
InternalRouter:TotallyStubbyArea
AdvertisingaDefaultRoute
VerifyingTraditionalOSPFv3
OSPFv3withAddressFamilies
ConfiguringOSPFv3withAF
ASBRandAdvertisingaDefaultRoute
ABRwithTotallyStubbyArea
InternalRouter:TotallyStubbyArea
VerifyingOSPFv3withAF
ConfiguringOSPFv3foranIPv4Island
Summary
ReviewQuestions
References
RFCs
Websites
Books

PartVIImplementingIPv6
Chapter17DeployingIPv6intheNetwork
IPv6AddressPlanConsiderations
EncodingInformationintheSubnetID
VLAN-MappedSubnetID
IPv6AddressPlans
IPv6VLANs
IPv6FirstHopRedundancyProtocols
ICMPv6NeighborDiscovery
HSRPandVRRP
GLBP
SelectinganFHRP
DualStack
IPv6AddressFormatinURLSyntax
DNS
DNSQueryandResponse
HappyEyeballs
IPv6AccessControlLists
ConfiguringIPv6ACLs
TransitionTechnologies
TranslationwithNAT64
TrafficInitiatedfromIPv6-OnlyClientstoIPv4-OnlyServers
TrafficInitiatedfromIPv4-OnlyClientstoIPv6-OnlyServers
OtherTranslationTechniques
TunnelingIPv6
Conclusion
Summary
ReviewQuestions
References
RFCs
Websites

Appendixes
AppendixAConfiguringNAT64andIPv6Tunnels
ConfiguringNAT64
ConfiguringIPv6Tunnels
ManualTunnels
6to4Tunnels
6to4TunnelsandLoopbackInterfaces
ISATAP

AppendixBIPv6CommandQuickReference
CiscoIOSCommands
AddressingCommands
GlobalUnicastAddressandUniqueLocalUnicastAddresses
Link-LocalUnicastAddress
GeneralPrefix
DNShostcommands
VerifyingAddressInformation
ICMPv6RouterAdvertisementCommands
EnablingICMPv6RouterAdvertisements
인터페이스상에서RouterAdvertisement파라미터를수정한다
VerifyingRouterAdvertisements
ConfiguringaDHCPv6Server
StatelessDHCPv6ConfigurationPoolCommands
StatefulDHCPv6ConfigurationPoolCommands
AssociatingtheDHCPv6PooltoanInterface
DHCPv6Relay
VerifyingDHCPv6Information
IPv6AccessControlLists
ConfiguringIPv6ACLs
VerifyingIPv6ACLs
StaticRoutes,DisplayingtheRoutingTable,andCEFforIPv6
StaticRoutes
VerifyingStaticRoutes
CEFforIPv6
EIGRPforIPv6
ClassicEIGRPforIPv6
EIGRPNamedMode
EIGRPforIPv6VerificationCommands
OSPFv3
ConfiguringTraditionalOSPFv3
VerifyingTraditionalOSPFv3
ConfiguringOSPFv3withAddressFamilies
VerifyingOSPFv3withAddressFamilies
HostOperatingSystemCommands
WindowsOS5
GeneralCommands
InterfaceAddressesInformation
SLAACInterfaceID
LinuxOS
GeneralCommands
AddressConfigurationCommands
MacOSX
GeneralCommands
AddressConfigurationCommands

AppendixCAnswerstoReviewQuestions

Index

책속에서

“쉬운일은아니지만,무리를마을로몰고오는데한마리도잃어버리지않는다면,세상에서그런기분을느끼기힘들겁니다.”

―고양이목동,XXXIV(34회)슈퍼보울에서방송된EDS(ElectronicDataSystems)의광고

IPv6를배우는것은고양이를키우는것과약간비슷하다.어디에서시작할까?많은새로운개념들이있고,여러분이어디에서시작하든언제나다른것부터시작하는것이더나았으리라생각하게된다.이것은각주제를이해하기위해서얽혀있는다른주제를이해하고있어야하기때문이다.이장은책의나머지부분을더잘이해하는데필요한개념,프로토콜,용어에관한간략한소개를제공한다.또한,이장은IPv6및ICMPv6(InternetControlMessageProtocolVersion6)와관련된프로토콜에대한변경사항에관한더나은이해를할수있게해준다.
-59쪽,中

globalunicast주소(GUA)는IPv6네트워크상에서전세계적으로라우팅(globallyroutable)되고,접근가능하다.이주소는IPv4에서공인IPv4주소에해당한다.GUA주소는4장“IPv6AddressRepresentationandAddressTypes”에서언급했듯이“aggregatable(축약가능)globalunicast주소”라고도한다.GUA주소는Figure5-1에표시된여러유형의IPv6unicast주소중하나이다.이번장에서는4장에서언급한다음내용에대해자세히설명한다.

이장에서는위의주제와추가적인주제에관해좀더자세하게설명을하겠다.globalunicast주소의구조를살피고,시스코IOS,Windows,Linux,MACOS에서GUA주소를수동설정하는방법을알아보겠다.
-145쪽,中

이장에서는IPv4의DHCP와비슷한방법인statefulDHCPv6에대해중점을두고설명했다.또한,ISP가고객에IPv6주소정보를할당할때사용할수있는DHCPv6프리픽스위임옵션에관해서도설명하였다.

이장에서는statefulDHCPv6에사용되는프로세스와메시지에관해확인해보았다.라우터는M플래그(ManagedAddressConfigurationflag)가“1”로설정된ICMPv6RouterAdvertisement메시지를보낸다.이렇게하면globalunicast주소및기타설정정보를statefulDHCPv6에서받을수있음을호스트에알려준다.M플래그는다음의인터페이스명령을사용하여“1”로설정할수있다.
-353쪽,中

EnhancedInteriorGatewayRoutingProtocol(EIGRP)은IOS9.21과함께1992년에소개되었으며,시스코가만든distance-vector,classless라우팅프로토콜이다.이름에서짐작하겠지만EIGRP는시스코의InteriorGatewayRoutingProtocol(IGRP)의개선판이다.EIGRP를개발한시스코의주요목적은IGRP의classless버전을만드는것이었다.EIGRP는IGRP와RoutingInformationProtocol(RIP)과같은다른distance-vector라우팅프로토콜에서일반적으로찾을수없는몇가지특징을포함하고있다.

시스코는EIGRP의기본기능을RFC7868“Cisco’sEnhancedInteriorGatewayRoutingProtocol(EIGRP)”을통해개방표준으로공개했다.다른장비제조사도시스코혹은또다른제조사의EIGRP를올린장비와연동하기위해EIGRP를구현할수있다.그러나EIGRP의향상된기능(DMVPN구현을위해필요한EIGRPstub같은)은IETF에공개되지않았다.RFC7868은정보RFC1이므로시스코는EIGRP에대한통제를계속유지할것이다.
-421쪽,中

IPv6를적용하는것은광범위한주제이며네트워크와사용자의필요에달려있어다양한많은것들을의미할수있다.이장의목적은여러분들이네트워크에IPv6를적용할때고려할만한몇가지주제를소개하여적절한결론으로인도하기위한것이다.

…(중략)…

이책이후에추천할만한IPv6적용에대한가이드는TimMartin의CiscoPressvideoseries“IPv6DesignandDeploymentLiveLessions”이다.이비디오시리즈는네트워크에IPv6를적용하는데관한전체적이고깊은이해를제공한다.다음은IPv6를구현할때고려해야할주제에대한멋진통찰을제공하는비디오시리즈의전체적인요약이다.
-519쪽,中