IPv6 training guide - Yuval Shaul
0 likes640 views
The document discusses the importance of IPv6 training for IT staff. It states that IPv6 knowledge is lacking and is a limiting factor for IPv6 implementation. It recommends that IPv6 training should be provided to all IT staff across an organization, from technicians to CIOs, and cover topics like networking, security, and platform-specific courses. It provides examples of introductory and advanced technical courses covering topics like addressing, routing, and security. It also outlines steps to build an IPv6 training plan, including designating an IPv6 manager, forming a core training team, setting up an IPv6 lab, and conducting hands-on training activities.
IPv6 training guide - Yuval Shaul
- 2. About IPv6 education IPv6 could be the #1 limiting factor for IPv6 Implementation. While equipment and software still suffer from missing features and bugs, IPv6 knowledge within IT staff is in a much worse condition. 2 www.routing.co.il/ipv6
- 3. IPv6 Training role IPv6 training should be regarded as a broad subject, not a narrow, limited, “for experts”, domain. IPv6 (as a replacement for IPv4) should be present at all IT systems: hosts and servers, Routers and Switches, software and hardware, load-balancers, firewalls, DNS servers, WEB servers, B-RAS servers, storage systems, security servers..etc. 3 www.routing.co.il/ipv6
- 4. Who should I train ? EVERYBODY ! Computer technicians, network admins, security specialists, voice specialists, database administrators, software engineers, storage experts, help-desk at enterprise, help-desk at SP…and above all.. …. CIO !!! 4 www.routing.co.il/ipv6
- 5. What should I teach? IPv6 touches many IT subjects: Networking: Basics of addressing in routers, switches servers and hosts. Software: special courses tailored for programmers. Security: Aspects of IPv6 security. Platform specific courses: IPv6 in: Cisco Microsoft Linux Storage certifications Cloud certifications etc. 5 www.routing.co.il/ipv6
- 6. Example 1: IPv6 Technical Essentials Course Essentials (or basic) course should be taken by all technical levels. This course should be focused on: IPv6 addressing ICMPv6 (SLAAC, Path MTU Discovery) Basics of IPv6 security (protocol vulnerabilities, + IPSec) Networking and Routing (L2 support, routing) Upper layer protocols (TCP, UDP, DNS) Transition: manual tunneling, dual stack 6 www.routing.co.il/ipv6
- 7. Example 2: IPv6 Advanced Technical Course Advanced course (for SP) , should be taken by network experts only: This course is Cisco focused, and includes: Lab setup with 9 routers, 6 computers DNS + DHCPv6 lab (including DHCP-PD) Routing (OSPF, IS-IS, MP-BGP) 6RD Lab 6PE (MPLS) lab QoS + Netflow labs Basic Cisco security (IOS Firewall) IPv6 Multicast 7 www.routing.co.il/ipv6
- 8. IPv6 at Cisco Training CCNA – RS: mentioned in some places. CCNP – Route exam: Participants should be able to implement ipv6 d design/routing/redistribution, including “IPv6 inter- operation with IPv4” CCIE: What you need to accomplish in the LAB: 8 www.routing.co.il/ipv6
- 9. Build your IPv6 training Plan
- 10. IPv6 training plan – IPv6 manager IPv6 training should have a cross-organization manager. Training dept. can help, but manager should be able to lead technical effort. IPv6 manager should be responsible to the creation and the implementation of the IPv6 training program. Other managers should participate and support this effort !!! 10 www.routing.co.il/ipv6
- 11. IPv6 training plan - team START TODAY → create a “core team”. Not all team members should be “top experts”. Core team should be enthusiasts, “teachers” for all else. Should have access to the IPv6 Lab Should come from remote corners of the organization. 11 www.routing.co.il/ipv6
- 12. IPv6 training plan - Training Lab Lab should be “IPv6 only” lab (this is hard..) Should be big enough for needs (need will vary on time) Should be used for real IPv6 implementation experiments, side by side with other people doing their first steps. Lab should have a time-table. Lab should be the center of the IPv6 training plan. 12 www.routing.co.il/ipv6
- 13. IPv6 training plan - Training Lab(cont.) Use free tools whenever you can. Use old equipment if you find it (try to upgrade software) Use virtual equipment whenever possible. Use free/open source tools.. ...but..if you don't find what you need – Buy !!! (The price of your team not ready for the job will be much higher later) 13 www.routing.co.il/ipv6
- 14. IPv6 training plan - Training Lab(cont.) Equipment that should be used: Windows workstations (All needed OS versions) Windows servers (all needed OS versions) Unix/Linux servers Routers (L3 switches) L2 Switches Firewalls Load balancers Software servers (WEB, DHCP, DNS,ERP, CRM, IPAM, etc.) IT Services from outside: cloud services, web hosting, storage etc. Inside applications 14 www.routing.co.il/ipv6
- 15. IPv6 training plan - activities IPv6 training activities should be small, and carry immediate results (even if activity is an instructor led course). Each activity should be carried by all relevant participants, and guided by a single participant that has prepared the session (and thus became an “expert”). Some Examples: IPv6 session: configure IPv6 addresses on hosts and routers. IPv6 session: capture ICMPv6 traffic. Identifying the way that ICMPv6 resolve MAC addresses. IPv6 session: Configure IPv6 on a DNS/WINS server. Adding AAAA records. IPv6 session: Configure 6RD setup. Etc. 15 www.routing.co.il/ipv6
- 16. Minimum IPv6 training ? Anything is better than nothing: If you have a single computer you can IPv6-ping the loopback address: ping ::1 If you have 2 computers (and a cross cable) you can configure static ipv6 addresses. 16 www.routing.co.il/ipv6
- 17. More than a minimum IPv6 training.. Linux is free, Apache is free, bind is free, Wireshark is free, Firefox is free. One computer can “browse” a web-site located in the other computer. Bind will support DNS and allow us a domain name. Apache will be the web server. Wireshark will show us what is really happening. 17 www.routing.co.il/ipv6