Blog index > Archives > IPv6 in the Fast Lane

Cisco IPv6 for SP Labs: 6PE, 6VPE, QoS with 6VPE, InterAS, CsC, 6RD, Security, Netflow v9, Multicast……

Wednesday, November 23rd, 2011

The IPv6SPSE Course is the CISCO IPv6 Training for the Service Provider


The labs have been redesigned completely to support the SP environment and will follow the order of the transition phase for a Service Provider which is planning a transition to IPv6.

The Labs description is provided below…
Read the rest of this entry »

No Comments

A Short History of Mobile Networks and IPv6: The road to Long Term Evolution (LTE) on IPv6

Thursday, October 6th, 2011

LTE is a 4G Mobile Specification for Multimedia.

It has come a long way since the first generation in 79!

Read the rest of this entry »

No Comments

Recommendation for IPv6 Stateful Firewalls

Monday, September 26th, 2011

IPv6 provides an address for each node on the Internet. So NAT has no more use for address depletion.

NAT also provides some basic security. But NAT as any stateful device can also be the target for DoS attacks. And any NAT device within a network provides an easily exploited opportunity for undetected Man In The Middle (MITM) attacks. Only End-to-End security offers protection from exploits related with ARP or ND+MLD where End-to-End security is likely only possible with IPv6. This does not need to be IPsec.

A RFC was written to explain how to get the security benefits provided by NAT without NAT.
This is rfc4864 Local Node Protection

Read the rest of this entry »

No Comments

IPv6 restoring End to End connectivity, is it a myth ?

Saturday, September 10th, 2011


The IPv6 main drivers for adoption are a large address space which does not require any Network Address Translation (NAT) anymore, a simpler header which should permit a more efficient switching and the Extension headers which allow adding any service at the Network Layer rather than the Transport Layer when needed. A great example of an application which benefits from the Extension headers is the IP Mobility which has been greatly optimized with IPv6.

The eradication of NAT is supposed to get us back to the Internet the way it was designed at the origin, before NAT was introduced as a workaround for address depletion. It will restore the end to end connectivity which will permit IPSec and Peer-to-Peer applications. This is a real benefit in terms of performances and new features for many Voice or Conferencing applications for instance where we will not have to communicate through a server like Skype.

NAT and Transition

But many people still resist against this change because they Read the rest of this entry »

1 Comment