TTC Shelbyville – Technical Blog

It's not where you are at today, it is where you are going tomorrow. ~Steve Mallard

Archive for June 30th, 2010

Test Your Network and ISP for IPv6 Readiness

with one comment

Want to test your network for IPv6 readiness?   Go to http://areyou.v6ready.info/ .

Our Articles on IPv6

Also see the countdown clock.   With all of the devices we have, tablets, laptops, desktops, servers, routers, phones and other devices, there are only so many left (IPv4 addresses)…

Will IPv4 be gone in 100 days?
As I begin to study IPV6, I have found that yes, we are truly running out.   I also know that many companies don’t use NAT (Network Address Translation) so therefore; we will run out in 2011 or just shortly after this next year.  How many days away are we?  A little over 100.  It’s  crunch time for IT personnel. 

There are two types of IP addresses.  Public and Private.  Private numbers are NATed.  They allowed us to have IP addresses that were 10.x.x.x, or 172.16.x.x or 192.168.x.x.  NAT allows us to have multiple computers in our home and our home router would have one public number supplied by our ISP.   May sound complicated to the novice but actually is pretty easy if you could see it drawn out.    For example our school has four IP addresses that are public (we have four lines coming in) but behind it has hundreds of nodes (computers, Access Points, Bridges, Printers and other devices.)

While studying IPV6, I have also found that while IPV4 allowed for around 4 billion  addresses.  Ok, so I knew that.  But IPV6 will now be implemented and confusing as it is now will provide 3.4×1038 of addresses.
Now that is 340,282,366,920,938,463,463,374,607,431,768,211,456 addresses.    Want to say it?
Ok, I had to look this up – ready?
Three hundred and forty undecillion, two hundred and eighty-two decillion, three hundred and sixty-six nonillion, nine hundred and twenty octillion, nine hundred and thirty-eight septillion, four hundred and sixty-three sextillion, four hundred and sixty-three quintillion, three hundred and seventy-four quadrillion, six hundred and seven trillion, four hundred and thirty-one billion, seven hundred and sixty-eight million, two hundred and eleven thousand, four hundred and fifty-six.
Got it?
So where do you start?  Honestly, you have to start at your ISP.   As ISPs adopt IPV6, routers, DNS Servers and other computers will have to change.   Your webservers will need to be reachable by IPv6.  What about your desktop level?  Linux, MAC and Windows are supporting IPV6.   The operating system folks knew it was coming.   However, some hardware from routers, firewalls, load balancers and other devices may have to be changed or updated.   For several years, IPV4 and IPV6 will be supported, running parallel to one another.    One day we will slowly let go of IPV4 and only us ‘old’ guys will know what it was.

Comment form ARIN’s president

Planning IPv6

ARIN’s PowerPoint

And to add to this post – ARIN’s President and CEO

Very nice post. I’d add that you need to begin planning to have your public servers (web, email, DNS) reachable via IPv6. Talk to your ISP about getting IPv6 over your existing IPv4 service, plan how to add IPv6 addresses to your external servers, and make sure you review your security configuration for handling IPv6 traffic.

For additional information, you can look to ARIN’s wiki for IPv6 information:http://www.getipv6.info

/John

John Curran
President and CEO
American Registry for Internet Numbers (ARIN)

Written by TTC Shelbyville IT Department

Wednesday, June 30, 2010 11:20 pm at 11:20 pm

Posted in Computers

Tagged with , , , , ,

Everything you need to know about IPv6

leave a comment »

Everything you need to know about IPv6.

Just read an article that an unpatched computer can be infected faster than it could download updates.  That once IPv6 is in place if one billion infected computers each were scanning a billion IPv6 addresses per second, it could take up to a hundred million years to scan the IPv6 addresses that have been give out now.

Kame Project shows if you are IPv6 ready.

Written by TTC Shelbyville IT Department

Wednesday, June 30, 2010 11:15 pm at 11:15 pm

Posted in Computers

Tagged with , ,

Testing Your Firewall for IPv6

leave a comment »

Here’s a way to test your Firewall (hardware) for IPv6 compatibility Link (see how to interpret your results)

Preparing for IPv6 is very important at this time.   Early implementation will be the key to successfully making this transition.

All you have to do according to the article is run the dig command (there is a dig program for Windows).

; <<>> DiG 9.5.0-P2 <<>> hk ns@203.119.2.18
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 746
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;hk. IN A
;; ANSWER SECTION:
hk. 360000 IN CNAME hk.connectify.local.
hk. 86400 IN A 203.119.2.28
;; Query time: 9 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Wed Jun 30 22:06:52 2010
;; MSG SIZE  rcvd: 73
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 75
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;ns\@203.119.2.18. IN A
;; AUTHORITY SECTION:
. 10800 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010063001 1800 900 604800 86400
;; Query time: 3240 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Wed Jun 30 22:06:55 2010
;; MSG SIZE  rcvd: 108

; <<>> DiG 9.5.0-P2 <<>> hk ns@203.119.2.18
;; global options:  printcmd

;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 746
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:;hk. IN A
;; ANSWER SECTION:hk. 360000 IN CNAME hk.connectify.local.hk. 86400 IN A 203.119.2.28
;; Query time: 9 msec

;; SERVER: 192.168.2.1#53(192.168.2.1)

;; WHEN: Wed Jun 30 22:06:52 2010;; MSG SIZE  rcvd: 73
;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 75
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION
:;ns\@203.119.2.18. IN A
;; AUTHORITY SECTION:. 10800 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010063001 1800 900 604800 86400
;; Query time: 3240 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Wed Jun 30 22:06:55 2010
;; MSG SIZE  rcvd: 108
Planning for IPv6

IPv6 Can You Confuse Me Anymore

Written by TTC Shelbyville IT Department

Wednesday, June 30, 2010 9:59 pm at 9:59 pm

Follow

Get every new post delivered to your Inbox.

Join 92 other followers