IPv6 Security Protection measures for the next Internet Protocol As the world’s networks migrate to the IPv6 protocol, networking professionals need a clearer understanding of the security risks, threats, and challenges this transition presents. In IPv6 Security, two of the world’s leading Internet security practitioners review each potential security issue introduced by IPv6 networking and present today’s best solutions. IPv6 Security offers guidance for avoiding security problems prior to widespread IPv6 deployment. The book covers every component of today’s networks, identifying specific security deficiencies that occur within IPv6 environments and demonstrating how to combat them. The authors describe best practices for identifying and resolving weaknesses as you maintain a dual stack network. Then they describe the security mechanisms you need to implement as you migrate to an IPv6-only network. The authors survey the techniques hackers might use to try to breach your network, such as IPv6 network reconnaissance, address spoofing, traffic interception, denial of service, and tunnel injection. The authors also turn to Cisco® products and protection mechanisms. You learn how to use Cisco IOS® and ASA firewalls and ACLs to selectively filter IPv6 traffic. You also learn about securing hosts with Cisco Security Agent 6.0 and about securing a network with IOS routers and switches. Multiple examples are explained for Windows, Linux, FreeBSD, and Solaris hosts. The authors offer detailed examples that are consistent with today’s best practices and easy to adapt to virtually any IPv6 environment. Scott Hogg, CCIE® No. 5133, is Director of Advanced Technology Services at Global Technology Resources, Inc. (GTRI). He is responsible for setting the company’s technical direction and helping it create service offerings for emerging technologies such as IPv6. He is the Chair of the Rocky Mountain IPv6 Task Force. Eric Vyncke, Cisco Distinguished System Engineer, consults on security issues throughout Europe. He has 20 years’ experience in security and teaches security seminars as a guest professor at universities throughout Belgium. He also participates in the Internet Engineering Task Force (IETF) and has helped several organizations deploy IPv6 securely. Understand why IPv6 is already a latent threat in your IPv4-only network Plan ahead to avoid IPv6 security problems before widespread deployment Identify known areas of weakness in IPv6 security and the current state of attack tools and hacker skills Understand each high-level approach to securing IPv6 and learn when to use each Protect service provider networks, perimeters, LANs, and host/server connections Harden IPv6 network devices against attack Utilize IPsec in IPv6 environments Secure mobile IPv6 networks Secure transition mechanisms in use during the migration from IPv4 to IPv6 Monitor IPv6 security Understand the security implications of the IPv6 protocol, including issues related to ICMPv6 and the IPv6 header structure Protect your network against large-scale threats by using perimeter filtering techniques and service provider—focused security practices Understand the vulnerabilities that exist on IPv6 access networks and learn solutions for mitigating each This security book is part of the Cisco Press® Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and mitigate network attacks, and build end-to-end self-defending networks. Category: Networking: Security Covers: IPv6 Security

If your organization is gearing up for IPv6, this in-depth book provides the practical information and guidance you need to plan for, design, and implement this vastly improved protocol. Author Silvia Hagen takes system and network administrators, engineers, and network designers through the technical details of IPv6 features and functions, and provides options for those who need to integrate IPv6 with their current IPv4 infrastructure. The flood of Internet-enabled devices has made migrating to IPv6 a paramount concern worldwide. In this updated edition, Hagen distills more than ten years of studying, working with, and consulting with enterprises on IPv6. It’s the only book of its kind. IPv6 Essentials covers: Address architecture, header structure, and the ICMPv6 message format IPv6 mechanisms such as Neighbor Discovery, Stateless Address autoconfiguration, and Duplicate Address detection Network-related aspects and services: Layer 2 support, Upper Layer Protocols, and Checksums IPv6 security: general practices, IPSec basics, IPv6 security elements, and enterprise security models Transitioning to IPv6: dual-stack operation, tunneling, and translation techniques Mobile IPv6: technology for a new generation of mobile services Planning options, integration scenarios, address plan, best practices, and dos and don’ts

Analyze Key Security Mechanisms and Approaches with this practical primer, the first book on the market to cover critical IPv6 security considerations.Dan Minoli, author of over 50 books on telecommunications and networks, and Jake Kouns, Chairman, CEO and CFO of the Open Security Foundation, discuss IPv6 security vulnerabilities, considerations, a

The Internet Protocol (IP) is an international communications standard that is essential to the operation of both the public Internet and many private networks in existence today. IP provides a standardised 'envelope' that carries addressing, routing, and message-handling information, thereby enabling a message to be transmitted from its source to its final destination over the various interconnected networks that comprise the Internet. The current generation of IP, version 4 (IPv4), has been in use for more than 20 years and has supported the Internet's rapid growth during that time. With the transformation of the Internet in the 1990s from a research network to a commercialised network, concerns were raised about the ability of IPv4 to accommodate anticipated increasing demand for Internet addresses. In 1993, the Internet Engineering Task Force (IETF) began a design and standardisation process to develop a next generation Internet Protocol that would address, among other issues, the predicted exhaustion of available IPv4 addresses. The resulting set of standards, collectively known as IP version 6 (IPv6), was developed over the course of several years. IETF, a stable core of IPv6 protocols emerged by 1998. This book examines the technical and economic issues related to IPv6 adoption in the United States, including the appropriate role of government, international interoperability, security in transition, and costs and benefits of IPv6 deployment.

This is a guide to deploying IPv6 in any campus, WAN/branch, or data center environment. It shows the reader how to review, compare, and choose the right IPv6 implementation options, how to to understand IPv6 services and the features that make them possible, and how to plan, deploy and manage IPv6 services in IPv4 networks.

If you’re ready to join the move to IPv6, this comprehensive guide gets you started by showing you how to create an effective IPv6 address plan. In three example-driven sections—preparation, design, and maintenance—you’ll learn principles and best practices for designing, deploying, and maintaining an address plan far beyond what’s possible with IPv4 networks. During the course of the book, you’ll walk through the process of building a sample address plan for a fictional company. Enterprise IT network architects, engineers, and administrators will see firsthand how IPv6 provides opportunities for creating an operationally efficient plan that’s scalable, flexible, extensible, manageable, and durable. Explore IPv6 addressing basics, including representation, structure, and types Manage risks and costs by using a three-phase approach for deploying IPv6 Dig into IPv6 subnetting methods and learn how they differ from IPv4 Determine the appropriate size and type of the IPv6 allocation you require Apply current network management tools to IPv6 Use IPv6 renumbering methods that enable greater network scale and easier integration Implement policies and practices to keep IPv6 addresses reachable