阿朗——IPv6 transition solution

1、ipv6 transition solutions alcatel-lucent shanghai bell all rights reserved alcatel-lucent 2010 content 1. ipv6 transition background 2. ipv6 network transition solutions 3. summary ipv6 transition background all rights reserved alcatel-lucent 2010 1 ipv6 transition environment public ipv4 public ipv

2、4 private ipv4ipv6 today: 2 address families talk to each other requires address translation: 44 requires address translation: 44, 64 all rights reserved alcatel-lucent 2010 tomorrow: 3 ip address families must talk to one another private ipv4 tic bsa/ean broadband rt multi tenant unit spo tran a al

3、l rights reserved alcatel-lucent 20105 transition scope and requirements 5750 ssc centralized policy management ip/mpls optical core 7750 sr personalized iptv broadband internet services enterprise ip communications 5620 sam element and network management rg l isam family 7450 ess service aggregator

4、 bsan broadband service access node mtu/pop op 7750 sr bng/mse broadband service edge residential gateway cle customer location equipment digital home smb lan vll vpls vprn voice iptv internet network infrastructureip hostsip hosts existing ipv4 hosts/routers may be independently upgraded to ipv6 at

5、 any time new ipv6 hosts/routers can be installed at any time without any prerequisites ipv4 hosts/routers that upgrade to dual stack can keep their existing ipv4 address all rights reserved alcatel-lucent 2010 ipv6 transition problems problem ipv4 and ipv6 are not interoperable networks/hosts/serve

6、rs are not upgraded to ipv6 simultaneously v4 and v6 may co-exist for long time. requirement for mechanisms to support communication between ipv4 and ipv6 endpoints solution hosts are ipv4+ipv6 dual-stack today network to support ipv4+ipv6 dual-stack support on hosts and networks to allow transition

7、 period but remaining time too short to have a smooth transition complex mechanisms required with operational challenges: dual-stack, tunnels, nat ipv4 network ipv4+ipv6 network ipv4 hosts ipv4+ipv6 hosts ipv6 hosts/ network ipv6 hosts/ network ipv6 network transition solutions all rights reserved a

8、lcatel-lucent 2010 2 all rights reserved alcatel-lucent 20108 ipv6 backbone transport ipv4/ipv6 dual-stack on pe and p routers to support transition ipv6 traffic is natively routed over the backbone ipv6 routing protocols: ospfv3, isis ipv6, mp-bgp for ipv6 support ipv6 ipv4 ipv6 ipv4 ipv4 ipv6 ipv6

9、 ipv4 pe p ipv6 ipv4 p ipv6 ipv4 ipv6 pipv4 pe pe pe all rights reserved alcatel-lucent 20109 phase 1 early adopters: ipv6 in ipv4 tunneling for experimental use using e.g., 6to4, ipv6 over ipv4 tunnel without the help from the operator, customers independently connect to ipv6 networks for e.g., res

10、earch or experimental purposes phase 2: distributed ipv6 over ethernet/pppoe for unicast services residential gateway supports dual stack give access to ipv6 services without jeopardizing ipv4 service full qos and policy control over both ipv4 and ipv6 phase 3: ipv6 over ethernet for unicast and mul

11、ticast services set-top box supports dual stack maintain ipv4 for some ipv4 multicast services, local lan traffic and/or internet applications after completion of stb upgrades migrate channel by channel to ipv6 mld-enabled access network ipv6 metro transition phases introduce ipv4 overloading (nat)

12、introduce dual stack ip v6 ad op tio n today ee dr all rights reserved alcatel-lucent 201010 residential service migration to ipv6 motivation: exhaustion of ipv4 public addresses growth of ip endpoints; mobile/nomadic users, sensory networks applications requiring ip public address; peer-to-peer, mu

13、lti-party multimedia combined approaches: ipv4 continuity ipv6 migration transition (x months) ip v4fr ad es se s all rights reserved alcatel-lucent 201011 no change to current ipv4 cpe there is a limited amount of private ipv4 addresses, and collisions between home and service provider can cause si

14、gnificant issues some application servers (such as iptv vod servers for ipv4) can reside within the carriers private ipv4 network without nat existing bras/bng continues to classify, account and enforce ipv4 ipv4 internet private ipv4 access networklarge scale nat server nat44 large scale nat (4-4-4

15、) private ipv4 network private ipv4 network private ipv4 network stateful nat44 all rights reserved alcatel-lucent 201012 ipv4 internet ipv6 access network dual stack lite (4-6-4) softwire server tunnelroute sof twire nat private ipv4 network private ipv4 network concentrator private ipv4 network so

16、ftwire/ipv4/port softwire_1/10.0.0.1/tcp 10000 ipv4/port 129.0.0.1/tcp 5000 4 6 4 new cpe to route and tunnel ipv4 traffic inside ipv6 all ipv4 traffic is tunnelled and then subject to nat44. no nat in the home all ipv4 traffic is subject to nat may impact iptv current bras cannot inspect the conten

17、ts of the dual stack lite tunnel. it is all encapsulated in ipv6 so ipv4 may become best effort perhaps best as a ipv4-retirement approach. all rights reserved alcatel-lucent 201013 nat64 & dns64 ipv6 access network large scale nat server route ipv6 network dns response a 1.2.3.4 ipv4 internet dns r

18、esponse aaaa pref64:1.2.3.4 ipv6 network dns64 stateful nat64 ipv6 only networks: consider the majority of hosts are not ipv6-enabled to the host, everything is ipv6 a nat64 in the carrier translates as needed requires a helper function to synthesise dns responses dns64 current bras cannot inspect t

19、he contents of the dual stack lite tunnel. it is all encapsulated in ipv6 so ipv4 may become best effort ipv4 host all rights reserved alcatel-lucent 201014 nat64 for lte nat64 ipv6 network ipv6 network ipv4 network nat44 dual-stack apn stateful lte-handsets & mids lte-dongle in existing laptops new

20、 lte devices can be ipv6-only, no change to current ipv6 host lte handsets do not require ipv4 addresses, use nat64 to access ipv4 as not all existing laptops can operate in an ipv6-only environment, a dual-stack apn with large scale nat (and private ipv4/nat44) is provided only assign (private) ipv

21、4 addresses to devices that need them stateful ipv6-only apn dual stack lite tunnel concept using l2 delimiters (802.1q, 802.1ad, pppoe, mac, l2tp) no change required on cpe (performs nat44) ipv4 address allocated to cpe can be identical since l2 delimiter is used to create nat binding table by inte

22、grating the nat/napt component into the bng we can use subscriber id as a key for all nat sessions, instead of relying on a unique inside source ip ipv6 connections are natively routed byall2-stackreserved alcatel-lucent 2010rights cpe and bng ipv4 internet large scale nat server layer2-aware nat al

23、u implementation for ipv4 continuity private ipv4 network private ipv4 network private ipv4 network ipoe pppoe l2tp ipv4 4 6 nat44 route layer 2 delim 6 4 6 nat44 route all rights reserved alcatel-lucent 201016 l2-aware nat - detail internetaccess bng ethernet rfc 2684 atm dsl tcpudp ip ethernet udp

24、tcp nat function 802.1ad ethernet 802.3 phy ip nat gateway private a.b.c.d a.b.c.d tcpudpudptcp nat function all subs have the same address demux on layer 2 (vlan, pppoe, l2tp, mac)public public ipoe ppp l2tp rfc1918 rfc1918 a.b.c.d+1 nat gateway summary all rights reserved alcatel-lucent 2010 3 ipv

25、6 dual stack capability introduce ipv4 overloading (nat) today early adopters tunnel v4 es do tio 18 ip fre e ad dr se s ip v6 a p n ipv6 transition roadmap transition (? months) runout (12+ months) 2009 2010 2011 all rights reserved alcatel-lucent 2010 2012 ipv4 continuation/ipv6 transition solutio

26、ns l2-aware nat no cpe change (double- nat) or single nat44 and ipv4 routing at cpe reuse of private addresses at cpe wan to overcome address overlap concurrent support for ipv4-only and dual-stack hosts if cpe is dual- stack capable provides mechanism to extend life of ipv4 with least impact on network ds-lite cpe change required to support ds-lite only ipv6 address assigned to cpe facilitates ipv6 migration concurrent support for ipv4-only and dual- stack hosts facilitates migration to ipv6 provides intra-af connectivity all rights reserved alcatel-lucent 2010