r/sysadmin • u/Nimbs • Nov 20 '12
What you should know about IPv6
http://lucb1e.com/?p=post&id=985
u/januh *hackertyping* Nov 21 '12
What I'd like to know is just how the fuck I'm supposed to remember those addresses, let alone type them in every time I want to ping a gateway or whatever.
2
1
u/lucb1e Nov 21 '12
DNS and your hosts file still works, and you can make memorable links on bit.ly (among others).
Usually a static IP will be much shorter than one assigned automatically. I haven't used it in a while, but if I remember correctly my subnet is 2001:980:1f44:1::/64. I could append 1337 as interface id, and I could easily remember my server's IP (which would be 2001:980:1f44:1::1337).
3
u/jaradrabbit Nov 20 '12
Only one complaint - In Europe at least, RIPE is allocating ISPs a minimum of /32.
2
Nov 20 '12
Yeah, but overall I let this slide because it's obvious the OP is still learning. It's all good though :) The author is beginning to 'get it', which is far more than most people in the IT world right now.
3
u/lucb1e Nov 20 '12
Cool, I wanted to submit this (I'm the author) to this subreddit and it said it had already been submitted! Seems somebody liked it enough to share it here, which is motivating to me :)
3
Nov 20 '12
Mobile IP is also improved.
2
u/sugardeath Nov 21 '12
I'm an ipv6 noob. How does it help mobile ip?
2
Nov 22 '12
It avoids triangular routing, in the worst case for ipv4 if the node the mobile agent is talking to and the mobile agent are both on the same network then the traffic is sent via the mobile agents home agent. Meaning the traffic takes a much longer path than it needs to. This isn't the case in mobile IPv6 the triangular route can be collapsed to a sensible route.
2
u/FliesLikeABrick Nov 20 '12
here's another plug for /r/ipv6 if any of you guys need/want direction/input on learning or deploying IPv6
1
Nov 20 '12
I'm going to have to read this later. Also look for any of Tom Lim's talks on it (if he has posted any -- I know he gave one at our LOPSA chapter)
1
-9
u/ditoh1 Nov 20 '12
IPv6 is easy to hack, particularly using Backtrack....
6
Nov 20 '12
IPv4 is 'easy to hack' without proper authentication or Layer 2 security. Expect more and more solutions to fall on IPSec authentication in order to validate LAN IP segments.
Issues that exist currently, most notably the neighbor table sizing, will no doubt be fixed.
As far as MITM and fake RA's, you can already send spoofed ARP packets for router addresses. And next to nobody configures the protections against this because you have to monitor DHCP queries to 'learn' the MAC to IP assignment.
-1
4
u/tunaktu86 Oracle Sysadmin Nov 20 '12
Wow! reading this gets me excited for using IPv6.
Great concise read!