IPv6 Security - Laura Jeanne Knapp

®IBM TivoliIPv6 Introductionand IPv4/IPv6CoexistenceShare User GroupSession 3128Laura Knappljknapp@us.ibm.com1-919-949-1617© 2008 IBM Corporation2008 : IBM Software Group : Conferences

What is IPv6IBM Software GroupUpdated version of the Internet Protocol (IPv4)Defined in RFC 1752New featuresLarger address spaceEncapsulationClass of service for audio, video, etc.Multicast t supportAuthenticationEncryptionAutomatic configuration/reconfigurationSupport for non-IP protocolsCoexist with IPv4Networking – Connecting People to Information through Technology2

IBM Software GroupWhy Do We Need More Address Spaces?April 15, 2009…ARIN Letter Subject: Notice of Internet Protocol version 4(IPv4) Address DepletionNetworking – Connecting People to Information through Technology3

IBM Software GroupIPv4 address allocation by /8128IPv4 lifetime IANAPoolJan '00 history basis96664 4IPv4 lifetime IANAPoolJan '00 history basis32320Jan-950Jan-07Jan-08Jan-09Jan-10Jan-11Jan-05Jan-07Jan-09Jan-11Update to: http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_8-3/ipj_8-3.pdfNetworking – Connecting People to Information through Technology4

IBM Software GroupApplications are ChangingNetworking – Connecting People to Information through Technology5

IBM Software GroupWhy IPv4 is not Sustainable Long Term• Trading smaller and smaller blocks will cause the global IPv4routing table to explode.• Small blocks make it difficult for large service providers toacquire enough space to sustain the business needs.• The IPv4 address shortage will disproportionately harm theaccess providers relative to the content providers due to theirimbalanced needs for additional addresses.• If content providers require growth beyond the availability ofIPv4, they can deploy IPv6, and then wait for the accessproviders to connect the content customers.• Shortage driven IPv4 address block hijackings will becomeroutine, which in turn will result in the routing table beingpoliticized.Networking – Connecting People to Information through Technology6

IBM Software GroupParallel Connections Problems• Google Maps opens ~ 70 parallel connections• iTunes store has been shown to open as many as 300 parallelconnections• IPv4/nat multiplexes es multiple users s through the port range, so 64kdivided by 300 parallel connections results in ~200 customers per ISPbased nat address (assuming each customer is only allowed to runone simultaneous instance of iTunes or similar apps).• Services generally don‘t allow connections from the same host tospan multiple public side addresses, so use of more ports on anotheraddress will cause the application to fail.• Reuse of port pairs can‘t be guaranteed with a high rate of churn inthe port pool, so the likelihood of matching src/dst port pairs topopular sites will expose the probability of TCP sequence numberoverlap between unrelated connections.Networking – Connecting People to Information through Technology7

IBM Software GroupIPv6 Address Size207.217.125.50/24IPv4(4 bytes - 32 bits)2001:0DB8::15:219:D1FF:FE10:74EE/64C LIPv6(16 bytes - 128 bits)Asia feeling address squeeze fastest due to receiving addresses lastMobil digital telephony pressuring existing IPv4 networkICANN continues to handle overall addressing issuesShortcuts like dropping L eading zeros or C ontiguous zeros permittedNetworking – Connecting People to Information through Technology8

IBM Software GroupIPv6 HeaderNetworking – Connecting People to Information through Technology9

IBM Software GroupIPv6 Extension HeadersUsual trafficIPv6HeaderNext Header =TCPIPv6HeaderNext Header =TCPTCPHeader+DataUDPHeader+DataHop by hop options = 0Information for all devices in the pathDestination options = 60Destination information for all devicesRouting = 43Specify route for a datagramFragment = 44Breaks datagram if MTU exceededSpecial routing Encapsulating Security Payload = 50Encryption type and parametersIPv6HeaderNext Header =RoutingRoutingHeaderNext Header =TCPTCPHeader+DataAuthentication = 51Hash type and parametersIf fragmentedIPv6HeaderNext Header =RoutingRoutingHeaderNext Header =FragmentFragmentationHeaderNext Header =TCPTCPHeader+DataDestination options = 60Information only for destination hostProtocolsTCP = 6, UDP = 17, RSVP = 46, ICMP = 58Networking – Connecting People to Information through Technology11

IBM Software GroupIPv6 Fragmentation HeaderIPv6HeaderNext Header= RoutingRoutingHeaderNext Header= FragmentFragmentHeaderNext Header= TCPTCPHeader+DataIn IPv4 routers handled fragmenting framesIf needed, IPv6 hosts fragment framesHosts use:Increased guaranteed minimum MTU of 1280Path MTU discovery to find maximum fragment size for a pathNetworking – Connecting People to Information through Technology12

IBM Software GroupIPv6 SecurityIPv6HeaderNext Header =AnyAnyHeaderNext Header =AH or ESPAH or ESPHeaderNext Header =TCPTCPHeaderData (finally)AH or ESPTrailerAuthentication - AH headerPacket authentication and integrity without confidentialityAlgorithm independent – MD5 (Message Digest) 128 bitsSHA1 (Secure Hash Algorithm) 160 bitsData Privacy – ESP header(Encapsulating Security Payload)Message, including next header(s), encryptedMandatory support of DES-CBC(Data Encryption Standard - Cipher Block Chaining) 56 bitsOther processes including AES-CBC(Advanced Encryption Standard) 128 bitsMay also include authentication, no separate headerNetworking – Connecting People to Information through Technology13

IBM Software GroupIPv6 Address Typesunicast:for one-to-onecommunicationmulticast:anycast:for one-to-manycommunicationfor one-to-nearestcommunicationUMMMAAANetworking – Connecting People to Information through Technology14

IBM Software GroupIPv6 Address: Site and LinkIPv62001:0DB8::15:219:D1FF:FE10:74EE/64MulticastPrefix=FF00::/8112 bit group IDUnicastTLA=2000::/3NLA IDInterface ID2001:0408/32 ATT2001:0506:0000/48 Verizon Business2001:4840/32 Earthlink2001:49C0/32 IBM2001:0200--039F 12 ISPs in KoreaFC00::/7 Unique Local – Internet router will discardFE80::/10 Link Local – Non-routeableNetworking – Connecting People to Information through Technology15

IBM Software GroupGlobal Unicast AddressTLA=2000::/3NLA IDInterface IDTLA : Top Level Aggregation - 3 bytes (21 bits; First three bits of byte 1 are 001)IANA allocates address blocks to the regional Internet registriesThey allocate portions of their block to national registries or to ISPsNLA : Next Level Aggregation - 5 bytesHigh order part assigned to smaller or regional ISPs, large companiesHolders of an NLA block assign partsof their block to their customersThey assign middle chunks to locationsLow order numbers identify subnetsInterface ID : host interface (64 bits)Assigned by the owning organizationIEEE has defined a 64 bit NIC address known as EUI-64NIC driver for IPv6 will convert 48 bit NIC to 64 bit NICStructure greatly reduces the entries in the routing table....only one entry neededin a US router to define all the networks in a region or countryNetworking – Connecting People to Information through Technology16

IBM Software GroupBoundariesSiteGlobalLinkSiteLinkLinkNetworking – Connecting People to Information through Technology17

IBM Software GroupIPv6: AutoconfigurationCombinationARP : ICMP router discovery : ICMP redirectNeighbor discoveryMulticast and unicast datagramsEstablishes MAC address on same networkICMPv6 router solicitationICMPv6 router advertisementICMPv6 neighbor solicitationICMPv6 redirectICMPv6 includes IGMP protocol for Multicast IPReduces impact of finding hostsStateless: router configures a host with IPv6 addressStateful: DHCP for IPv6Link Local Address: IPv6 connectivity on isolated LANsNetworking – Connecting People to Information through Technology18

IBM Software GroupIPv6 Auto-configurationHost 1 comes on line and generates a link local addressHost 1 sends out a query called neighbor discovery to the same address toverify uniqueness. If there is a positive response a random numbergenerator is used to generate a new addressHost 1 multicasts a router solicitation message to all routersRouters respond with a router advertisement that contains an aggregatableglobal address (AGA) prefix and other informationHost 1 automatically configures its global address by appending its interfaceID to the AGAHost 1 can now communicateNetworking – Connecting People to Information through Technology19

IBM Software GroupChanges Needed to Implement IPv6HostsImplement IPv6 code in operating systemTCP/UDP aware of IPv6Sockets/Winsock library updates for IPv6Domain Name Server updates for IPv6Domain Name Server (DNS)Many products already support 128 bit addressesUses ‘AAAA’ records for IPv6IP6.INT (in_addr_arpa in IPv4)RoutersIPv6 forwarding protocolsRouting protocols updated to support IPv6Management needs to support ICMPv6Implement transition mechanismsIPv6 Protocol StatustRIPv6 - Same as RIPv2OSPFv6 - Updated for IPv6EIGRP - Extensions implementedIDRP - Recommended for exterior protocol over BGP4BGP4+ - Preferred implementation in IPv6 todayNetworking – Connecting People to Information through Technology20

IBM Software GroupApplications• NTT ‘Earthquake Alert ServiceOn detecting P-wave an S-wave alert is deliveredIPv6 Multicast is adopted• Low delay delivery is achieved• IPv4 is not suitable for a push-type service due to NAT• Sensor Arrays6LoWPAN (RFC 4919and 4944) based networksRouting over low poer and Lossy Netwroks• Sensors on aging infrastructure• Fire sensors• Chinese Academy of SciencesIntegrated wireless, control and precision agriculture technologies linked• Accurate watering of farmland• Water/soil pollution monitoringNetworking – Connecting People to Information through Technology21

IBM Software GroupNTT and IPv61996: NTTLabs startedone of theworld’slargest globalIPv6 researchnetworks1998: Veriobeginsparticipationin PAIXnative IPv6 IX1999: NTTCom beginsIPv6tunnelingtrial forJapanesecustomers2000: Verioobtains IPv6sTLA fromARIN2001: NTT Compioneers worldsfirst IPv6connectivityservices on acommercialbasis2002: WorldCommunicationsAwards (WCA)awards NTTCommunicationswith “BestTechnologyForesight” for itsIPv6 Globalproducts2003: NTT/VERIOlaunches IPv6Native, Tunneling,and Dual Stackcommercialservice in NorthAmerica2003:CommunicationsSolutionsmagazine namesNTT/VERIO IPv6Gateway Services“Product of theYear”2004: NTT IPv6Native andDual Stackservicesavailablearound theglobe2004: NTT Comwins the WorldCommunicationsAwards “Best NewService” award forIPv6/IPv4 GlobalDual Service2005: Dual stackVirtual PrivateServer released.First ISP to offeran IPv6 managedfirewall service10/2006 –Launched theNTTCommunicationsIPv6 TransitionConsultancy2/2007 –Awarded GSASchedule 70contract forIPv6 IP transitNetworking – Connecting People to Information through Technology22

IBM Software GroupGlobal Crossing• October 2005 IPv6 natively deployed• End-to-end security, auto-configuration and mobile IP networkingenable next generation of Internet services and applications.• Meets enhanced requirements of government purveyors and systemsintegrators as they comply with federal mandates.• IPv6 simplifies mobile IP networking with improved routing andsecurity capabilities• MPLS VPN is fully IPv6• Irelnd’s national research network leverages the IPv6 netwrokNetworking – Connecting People to Information through Technology23

IBM Software GroupComcast and IPv6• 100 Million IP Addresses (doesn’t include Digital voice/data)• Exhaused NET 10 (RFC1918) for managing cable modemsThis space exhaused in 2005• In the control plane all devices need to be remotely managed so NATis not an option• Move to IPv6 will not happen overnightAsk ARIN for address spaces every time they can justify itUse already located non-globally routed IPv4 address spaceSubdivide the network into independently managed domains…loss ofglobal visibility• Deployment PlansStarted in 2005Start with control plane for the management and operation of edge devicesDual stack t the core, IPv6 t the edgesNetworking – Connecting People to Information through Technology24

IBM Software GroupGoogle and IPv6• Google engineers say it was not expensive and required only a small team ofdevelopers to enable all of the company’s applications to support IPv6, along-anticipated upgrade to the Internet’s main communications protocol.(Network World March 2009)• We can provide all Google services over IPv6,” said Google network engineerLorenzo Colitti during a panel discussion held here Tuesday at a meeting ofthe Internet Engineering Task Force (IETF). Production January 2009• Business Case: Colitti said the business case for IPv6 is that new devicessuch as set-top boxes will increasingly support IPv6. In addition, IPv6 willreduce the infrastructure and support costs associated with the alternative toIPv6, which is multiple layers of network address translators (NATs) beinginstalled on the Internet• Colitti warned that IPv6 traffic “will appear overnight,” as Google experiencedin March when its IPv6 traffic grew three-fold after Google Maps was IPv6-enabled.Networking – Connecting People to Information through Technology25

IBM Software GroupIPv6 Transition MethodsTunnelingIPv6 only systems communicate across an IPv4 networkNew “6to4” protocol from IETFHeader translationIPv6 system communicates with an IPv4 system(header conversion, transport relay, application proxy)Dual StackNetworking – Connecting People to Information through Technology26

IBM Software GroupIPv6 Transition PathsNetworking – Connecting People to Information through Technology27

IBM Software GroupWhy IPv6 in Korea?Prepare IPv4AddressDepletionUsage ratio of assigned IP addresses : 96.2% (Mar. 2006)More IP addresses to be needed for the future IT839StrategyPromotingNewServicesIPv6 based Home Network ServiceIPv6 Service over 2.3 GHz based WiBroIPv6 based VoIP ServiceIPv6 based Telematics Service, and many othersIT839 NewGrowthEngineA master plan for the IT industryEffort to gain more growth momentum from the IT sectorsNetworking – Connecting People to Information through Technology

IBM Software GroupIPv6 Transition Roadmap – Leading Korean ISPExpanded with country wide support services6NGIX provides exchange among ISPsKorea dvanced Network providing IPv6 for orgnizations nowBy end of 2009 3 new ISPs moving to IPv6 backbonesPublic Sector transition planned for 2011Networking – Connecting People to Information through Technology29

IBM Software Group6to4 TunnelingIPv6 traffic tunneled to go through an IPv4 networkwww.sixxs.net – Worldwide tunnel brokerAddress - 2002:wwxx:yyzz::/48wwxx:yyzz is both the NLA and the colonhexadecimalrepresentation of an IPv4 addressassigned to the site or host2002:wwxx:yyzz:[Subnet]:{Interface ID}6to4 host - an IPv6 host that is configuredwith at least one 6to4 address6to4 router - an IPv4/IPv6 router that forwards6to4 traffic between 6to4 hosts within a siteor 6to4 relay routers on the IPv4 Internet6to4 relay router - an IPv4/IPv6 router thatforwards 6to4 addressed traffic between6to4 routers on the IPv4 Internet and hosts onIPv6 networksAnycast2002:C058:6301::Networking – Connecting People to Information through Technology30

IBM Software GroupTeredo• 6to4 tunnels requires the tunnel end point to bepublic IPv4 address…..so for many that t means theNAT device…Many NAT devices cannot beupgraded• Teredo encapsulates IPv6 in UDP/IPv4 datagrams.Diagnoses UDP over IPv4 (UDPv4) connectivity anddiscovers the kind of NATassigns a globally-routable unique IPv6 address to each hostusing it;encapsulates IPv6 packets inside UDPv4 datagrams fortransmission over an IPv4 network (this includes NATtraversal);routes traffic between Teredo hosts and native (or otherwisenon-Teredo) IPv6 hosts.Networking – Connecting People to Information through Technology31

IBM Software GroupIPv6 TranslationsNAT-PT (Network Address Translation and Protocol Translation)\Translates by mapping each IPv6 address onto one from a pool of IPv4addressesUpside: easy to implement and understandDownside: Limits simultaneous access to multiple services with a networkBreaks end-end networkingSingle point of failureNAPT-PT (Network Address Translation plus Port Translation)Protocol gateway translates the IPv4/IPv6 network addresses and also maps portacross boundariesUpside: Easy to implement, adds support for more simultaneous sessionsDownside: Breaks end-end networking, single point of failureSIIT (Stateless IP/ICMP Translation)IP packets and ICMP messages are translated between IPv4 and IPv6 withtemporary assignments of IPv4 addresses creating a one-one mappingUpside: Does not require state detail to be maintainedDownside: Does not save on IP addresses, single point of failureNetworking – Connecting People to Information through Technology32

IBM Software GroupIPv6 Penetration WorldwideAllocated - visibleAllocated - not visibleNetworking – Connecting People to Information through Technology33

IBM Software GroupIPv6 Migration PlansDefine topology and functions on hosts, routers, andservice machinesUpgrade DNS, DHCP, ARP servers to handle IPv6addressesIntroduce dual stack systems that support IPv4 and IPv6Configure to Internet using IPv6Rely on tunnels to connect IPv6 islands separated byIPv4 networksGradually remove IPv4 from systemsWork closely with ISP for connections to the InternetNetworking – Connecting People to Information through Technology34

IBM Software GroupIPv6 Milestones• 2007 May 15 ARIN tables policy of IPv6 addresses for large contiguous blocks. Discontinue IPv4 allocations for thispurpose http://www.arin.net/announcements/2007/20070521.htmlnet/announcements/2007/20070521 html• 2007 Oct 24 Japan Emergency Earthquake Alert Service launched, based on IPv6http://www.ntt.com/release/2007NEWS/0010/1023.html• 2008 Feb 04 IANA add the AAAA records for IPv6 addresses to the four root servers. Now possible for two internethosts to communicate without IPv4 DNS http://en.wikipedia.org/wiki/IPv6• 2008 Mar 12 Google launches an IPv6 web interface to its search engine at the URL http://ipv6.google.comhttp://en.wikipedia.org/wiki/IPv6• 2008 Apr 30 IPv6Now launches first Australian commercial IPv6 Tunnel Service with SLAshttp://www.ipv6now.com.au/transition.php• 2008 May 28 European Commission announced initiative for 25% users to adopt IPv6 by 2010http://ec.europa.eu/information_society/policy/ipv6/index_en.htm• 2008 Jun 18 IPv6Now web hosting services become available on dual-stack IPv4/IPv6 servershttp://www.ipv6now.com.au/innovation.php• 2008 Jun 30 US OMB Mandate for all US Government Systems to be IPv6 capable by 2008 achievedhttp://www.whitehouse.gov/omb/egov/b-1-information.html#IPV6• 2008 Jul 19 Internode launches native IPv6 transit via direct Ethernet and 6in4 tunnelled servicehttp://ipv6.internode.on.net/• 2008 Aug 08 2008 Olympic Games and Paralympic Games first major world events on IPv6,http://ipv6.beijing2008.cn/en http://en.beijing2008.cn/news/official/preparation/n214384681.shtmlshtmlNetworking – Connecting People to Information through Technology35

IBM Software GroupHindiRussianArabicGrazieItalianTraditional ChineseThankEnglishYouSimplified ChineseThaiGraciasDankeGermanSpanishObrigadoBrazilian PortugueseMerciFrenchTamilJapaneseKoreanNetworking – Connecting People to Information through Technology36

IBM Software GroupIPv6 ReferencesIPv6 Home Pagehttp://www.ietf.org/http://playground.sun.com/pub/ipng/html/ipng-main.htmlhttp://www.getipv6.info/index.php/IPv6_Presentations_and_Documentshttp://www.6ren.nethttp://www.ipv6forum.comhttp://arin.nethttp://www.internet2.eduhttp://www.ipv6.orghttp://ipv6.or.kr/english/natpt.overviewhttp://www.research.microsoft.com/msripv6com/msripv6http://www.ipv6.org.ukBooksNew Internet Protocol - Prentice Hall - ISBN 0-13-241936-xIPNG and the TCP/IP Protocols - John Wiley and Sons - ISBN-0-471-13088-5IPv6 The New Internet Protocol - ISBN-0-13-24-241936IPNG Internet Protocol Next Generation - ISBN-0-201-63395-7Internetworking IPv6 with Cisco Routers - ISBN 0-07-022831-1Networking – Connecting People to Information through Technology37

IBM Software GroupIPv6 RFC’sNetworking – Connecting People to Information through Technology38

IBM Software GroupIPv6 RFC’s2732 URL Format2874 DNS Ext. to Support Addr. Aggr. and Renum.2894 Router Renumbering2928 IPv6 TLA Assignments3019 MIB for Multicast Listener Discovery3041 Privacy Extensions3056 Connection of IPv6 Domains via IPv4 Clouds3122 Ext. to IPv6 Neighbor Disc. for Inv. Disc.3142 An IPv4-IPv6 Transport Relay Translator3146 Transmission of IPv6 Packets over IEEE 1394networks3162 Radius and Ipv63175 Aggregation of RSVP for IPv4 and IPv6Reservations3178 IPv6 Multihoming Support at Site Exit Routers3226 DNNSSEC and IPv6 A6 aware server/resolvermessages3266 Support for IPv6 in Session DescriptionProtocol3306 Unicast-Prefix-based IPv6 Multicast Address3307 Allocation Guidelines for IPv6 MulticastAddresses3314 IPv6 in third generation Partnerships3315 DHCPfor IPv63316 IPv6 for some second and third gen Cellular hosts3319 DHCP for IPv6 and SIP3456 DHCP configuration of IPsec tunnel Mode3457 Requirements for IPsec Remote Access3484 Default Address Selection for IPv63513 IPv6 Address Architecture3572 IPv6 over MPOS3582 Gols for IPv6 Site-Multihoming Architectures3587 IPv6 Global Unicast address format3596 DNS extensions to support IPv63633 IPv6 Prefix Options for DHCP3646 DNS Configuration options for DHCP3681 Delegation of E.F.F.3.IP6.ARPAF 3697 IPv6 Flow Label Specification3701 6Bone Phaseout3756 IPv6 Neighot Discovery Trust Models3769 Requirements for IPv6 Prefix Delegation3755 Mobility Support in IPv6Networking – Connecting People to Information through Technology39

IBM Software GroupIPv6 RFC’s3776 IPSec to support mobile IPv63831 Support of IPv6 over Fiber Channel3849 IPv6 Address Space reserved fordocumentation3901 DNS IPv6 Operational Transport Guidelines3904 Evaluation of IPv6 Transition Mechanisms forunmanaged networks3964 Security Considerations for 6to44007 IPv6 Scoped Address Architecture4025 A Method for Storing IPsec Keying Material inDNS4029 Scenarios and Analysis for Introducing IPv6into ISP Networks4057 IPv6 Enterprise Network Scenarios4068 Fast Handovers for Mobile IPv64135 Goals of detecting network attachment inIPv64140 Hierarchical Mobile IPv6 MobilityManagement4147 Proposed Changes to the format of the IANAIPv6 Registry4177 Architectural Approaches to Multi-Homing forIPv64192 Procedures for Renumbering n IPv6 Network4214 Intra-site Automatic Tunnel Addressing4215 Analysis on IPv6 Transition in third generationpartnership4218 Threats Relating to IPv6 Multihoming Solutions4219 Things Multihoming in IPv64225 Mobile IPv6 Route Optimization Security4241 Model of IPv6/IPv4 Dual Stack Internet AccessService4260 Mobile IPv6 Handovers for 802.11 Networks4291 IPv6 Addressing Architecture4294 IPv6 Node Requirements4295 Mobile IPv6 Management Information base4311 IPv6 Host-Router Load Sharing4330 SNTP for IPv64338 Transmission of IPv6 over Fiber Channel4339 IPv6 Host Configuration of DNS Server Info4489 A Method for Generating Link-scoped IPv6 Multicastaddresses4584 Extension to Sockets API for Mobile IPv6Networking – Connecting People to Information through Technology40

IBM Software GroupIPv6 RFC’s4622 IPv6 Node Information Queries4640 Problem Statement for Bootstrapping MobileIPv64668 RADIUS Client MIB for IPv64669 RADIUS Server MIB for IPv64670 RADIUS Accounting Client MIB for IPv64671 RADIUS Accounting Server MIB for IPv64672 RADIUS Dynamic authorization client MIB forIPv64673 RADIUS Dynamic Authorization server MIBfor IPv64676 DHCP option for Civic Addresses4727 Experimental Value in IPv6 headers4779 ISP IPv6 Deployment Scenarios in Broadbandaccess Networks4798 Connecting IPv6 islands over IPv4 MPLSusing IPv6 Provider Edge Routers4843 An IPv6 Prefix for ORCHID4852 IPv6 Enterprise Network Analysis4861 Neighbor Discovery for IPv64862 IPv6 Stateless Address Autoconfiguration4877 Mobile IPv6 Operation with IKEv24882 IP Address Location Privacy nd Mobile IPv64891 Using IPsec to secure IPv6-in-IPv4 tunnels4919 IPv6 over Low-Power Wireless PON4941 Privacy Extensions for Stateless AddressAutoconfiguration in IPv64942 IPv6 Transition/co-existence security considerations4943 IPv6 Neighbor Discovery on-link assumption4944 Transmission of IPv6 Packets over 802.15.4 Networks4968 Analysis of IPv6 Link Models for 802.16 Networks4994 DHCPv6 Relay agent Echo Request5006 IPv6 Router Advertisement Option for DNSConfiguration5007 DHCPOv6 Leasequery5014 IPv6 Socket API for Source Address Selection5026 Mobile IPv6 Bootstrapping in Split Scenrio5072 IPv6 over PPP5075 IPv6 Router Advertisement Flags Option5094 MIPv6 Vendor Specific Option5095 Deprecation of Type 0 Routing Headers in IPv65096 MIPv6 Experimental MessagesNetworking – Connecting People to Information through Technology41

IBM Software GroupIPv6 RFC’s5118 SIP Torture Test Messages for IPv65121 Transmission of IPv6 via IPv6 ConvergenceSublayer over IEEE 802.165156 Special use IPv6 Addresses5157 IPv6 Implications for Network Scanning5158 6to4 Reverse DNS Delegation Specification5172 Negotiation of IPv6 Datagram Compressionusing IPv6 Control Protocol5175 IPv6 Router Advertisement Flags Options5180 IPv6 Benchmarking Methodology for NetworkInterconnect Devices5181 IPv6 Deployment Scenarios in 802.16Networks5213 Proxy MIPv65268 MIPv6 Handovers5269 Distributing a Symmetric Fast MIPv6Handover Key using SEND5270 MIPv6 Fast Handovers over IEEE 802.16eNetworks5271 MIPv6 Fast Handovers for 3G CDM5308 Routing IPv6 with IS_IS5340 OSPF for IPv65375 IPv6 Unicast Address Assignment Consideration5419 Why the Authentication Data Suboption is needed forMIPv65447 Diameter MIPv65453 Reserved IPv6 Interface Identifiers5454 Dual Stack MIPv65460 DHCPv6 Bulk Leasequery5514 IPv6 over Social Networks5533 SHIM65534 Failure Detection and Locator Pair ExplorationProtocol for IPv6 Multihoming5555 MIPv6 support for Dual stacks and routers5568 MIPOv6 Fst Handovers5570 CALIPSONetworking – Connecting People to Information through Technology42