IPv6

IPv6 Security

Overview

128 bit address space

Typical network sizes:

• /32 per ISP
• /48 per location
• /64 per logical network

Types of addresses:

• Link local
  • fe80::/10 — typically /64
• Global Unique Address
  • globally reachable
  • the “normal” IPv6 address
• Unique Local Address
  • For local deployments
  • Can be NAT’ed to GUA

Nodes assign themselves an IPv6 address, after receiving the prefix from the router through a Router Advertisement (RA), and use DAD (duplicate address detection, RFC3484, RFC4429). Simplified: ▶ “Does anybody have this IPv6 address?” ▶ (no answer) ▶ Great, I take it