CERN Accelerating science

Implementation Template

Type:

ADDRESS MANAGEMENT

  • Get a public prefix assignment
  • Define addressing plan and assignment rules
  • Add IPv6 support to the address management database and related tools
  • DNS Name resolution policies

PROCUREMENT

  • Public address space
  • Network devices with IPv6 support
  • Software licences for IPv6 support
  • IPv6 Internet upstream

NETWORK EQUIPMENT

  • Verify that the network devices (routers, switches, WIFi APs...) support:
    • IPv6 Routing protocols (OSPFv3, ISIS, PIM, BGP...)
    • DHCPv6 relay
    • hardware forwarding of IPv6 packets
    • hardware filtering of IPv6 Access Control Lists
    • management over IPv6 restriction (vty acls, SNMP RW authorizations)
    • VRRPv6

PROVISIONING

  • Provide IPv6 training to Network engineers and Network Software developers
  • Add IPv6 suport to the generator of Network device configurations
  • Add IPv6 support to consistency checker of Network device configurations
  • Configure IPv6 connectivity in:
    • core of the network
    • firewall and external network
    • access network, cabled and wireless

CONNECTIVITY

  • Connection to the IPv6 Internet upstream
  • IPv4 and IPv6 interconnection: protocol gateways, dual-stack

NETWORK SERVICES

Provide:

  • IPv6 connectivity for servers
  • StateLess Address Auto Configuration
  • DHCPv6 service
  • DNS service over IPv6 and with IPv6 records
  • RADIUS/TACACS service over IPv6
  • NTP service over IPv6

MONITORING

  • IPv6 statistics
  • SNMP polling over IPv6
  • IPv6 connectivity status

SECURITY

  • Central Firewall policies
  • Local firewalls policies
  • NAT co-existence
  • Visitor registration service (WIFI)

OPERATIONS

  • Training for support lines
  • Operational procedures for IPv6 deployment
  • Operational procedures for IPv6 issues
  • Training for End-Users