Upload
others
View
5
Download
0
Embed Size (px)
Citation preview
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
GO LIVE = Monday, June 6, 2016
IPv6 Implementation
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Agenda
What is IPv6
IEEE Xplore enables IPv6 authentication
Processing v6 IP amendments
IPv6 FAQ’s
Q&A
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
What is IPv6
Every device on the internet (computers,
digital notebooks, PDA’s, etc.) is assigned an
IP address for identification and location
purposes
Currently, most devices have an IP address
assigned in IPv4 version, and looks
something like this:
100.64.1.150
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
What is IPv6
Due to the number of devices and users
around the world, the pool of available IPv4
addresses has been exhausted. As a result,
all new IP addresses are created in IPv6
format, and look much different than IPv4 . . .
2001:0db8:0000:0000:0000:ff00:0042:8329 (expanded version)
2001:db8::ff00:42:8329/64 (compressed version with bit prefix)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
What is IPv6
Putting it in perspective . . .
Total number of possible IPv4 addresses:
4,300,000,000
Total number of possible IPv6 addresses:
340,000,000,000,000,000,000, 000,000,000,000,000,000
340 undecillion!
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
What is IPv6
Putting it in perspective . . .
Total number of possible IPv4 addresses:
4,300,000,000
A single 48-bit range contains more
than 130,000 IP’s
A single 32-bit range contains more
than all the available IPv4 addresses
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
We initially launched IPv6 authentication
back in 2014 but had to quickly “unflip” the
switch because customers were largely
unprepared for it
Many customers didn’t even realize they had
v6-formatted IP addresses
We learned that a successful IPv6 launch
required extensive customer communications
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
Our first email
was sent on
May 3rd
This message
was sent to
4,575 Xplore
Primary, Xplore
Alert contacts
Dear William, IEEE offers several different authentication methods for our institutional customers in order to provide users with the most seamless and convenient access to subscribed content. One of the most popular methods of authentication is IP address authentication which is the same method that your organization uses to ensure convenient and seamless access to your IEEE Xplore subscription for your users. To keep up with the growing number of internet connected devices, IEEE Xplore will become IPv6 compliant in June 2016. In the coming weeks, we will provide you with more information on the implementation of IPv6 to IEEE Xplore, and what actions are needed from your organization in order to become compliant In preparation to the IPv6 release, we will need you to provide us with a list of all IPv6 addresses you would like to add to your subscription. There are two ways to submit new IPv6 addresses: Fill out this form with the new IP addresses: IP Amendment Form Send new addresses directly to [email protected] Sincerely, IEEE Online Support
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
A second
message was
emailed May 17th
This notice
gave more
details about
IPv6, including
a link to online
info
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
The online info
contains the
most current
details we have
about IPv6,
including what it
is and what our
requirements are
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
The online IP
amendment form
has been
expanded to
include v6-
formatted IP
addresses
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
Our third and
final email is
being sent out
this Thursday or
Friday
This notice will
highlight the 48-bit
prefix requirement
*Please disregard this email if you have already responded and provided your IPv6 addresses.
Dear [name],
As previously communicated, IEEE Xplore will enable IPv6 IP addresses effective 6 June 2016. It is important your account administrator provides IEEE with an updated list of any IPv6-formatted IP address blocks that should have access to your subscription.
Due to system capacity and security protocols, any IP range submitted in less than a 48-bit prefix cannot be accepted by IEEE. IEEE Xplore account administrators should be submitting IPv6 address ranges in a 48-bit prefix or greater.
Here are a few key items your IEEE Xplore account administrator should be aware of:
IEEE Xplore will continue to support IPv4 IP addresses
If your organization does not have IPv6, you will not need to do anything
IPv6 ranges must be submitted to IEEE in 48-bit prefix or greater
IPv6 IP addresses that are not registered on your IEEE account will not be able to download content through your IEEE Xplore subscription.
Contact your IT Department/Help Desk to find out if you have IPv6 IP addresses
To submit new IPv6 IP addresses, your IEEE Xplore account administrator can complete this online IP Amendment Form, or they can submit a list of IPv6 addresses via email directly to [email protected].
To learn more about IPv6 and how it can affect your IEEE Xplore subscription, please visit the IEEE Xplore Help & Resources page. http://ieeexplore.ieee.org/Xplorehelp/#/administrators-and-librarians/account-management
Sincerely, IEEE Online Support
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
IEEE sales staff was advised of IPv6 plans
during the 2016 Winter Sales meeting
Dealers were informed of the IPv6 plans
during the APAC and EMEA/LA dealer
meetings in February and March
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
The May 9th
edition of the
Global Sales
Newsletter
provided an IPv6
update to IEEE
sales staff and
dealers
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
During two May
17th Webex
Marketing
updates (8am
and 8pm), IEEE
sales staff and
dealers were
given an IPv6
update
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
Sounds like a lot of communication, yes?
So come June 6th, no surprises, right?
What could possibly go wrong???
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IEEE Xplore enables IPv6 authentication
Of course, something has to go wrong! Someone will claim they knew nothing about it
It’s gonna happen, so just roll with it
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
IEEE is instructing customers to submit v6
addresses in a compressed format, and with
a 48-bit or greater prefix
2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)
2001:db8:a0b:12f0::1
(compressed version)
2001:db8:a0b:12f0::1/64
(compressed version w/prefix)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
IEEE is instructing customers to submit v6
addresses in a compressed format, and with
a 48-bit or greater prefix
2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)
2001:db8:a0b:12f0::1
(compressed version)
2001:db8:a0b:12f0::1/64
(compressed version w/prefix)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)
v6 IP’s have eight alpha-numeric segments (four
characters per segment, separated by colons), with
numbers ranging from 0-9; alpha from a-f
Compression occurs by removing any lead zeros
within a segment
2001:db8:a0b:12f0::1
(compressed version)
Multiple consecutive segments that are fully
compressed are indicated by a double colon (::)
1 2 3 4 5 6 7 8
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
If you receive an IP amendment form with an
expanded v6 IP address, you can obtain the
compressed format by going to:
http://subnettingpractice.com/ipv6_subnetting.html
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
http://subnettingpractice.com/ipv6_subnetting.html
Paste expanded
IPv6 address
Press
“Calculate”
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
http://subnettingpractice.com/ipv6_subnetting.html
Compressed IPv6
without prefix
You cannot calculate
prefix (customer
must provide)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
With compressed IPv6 number in hand,
verify in eRights if address is currently active
Search user
Select “IP6 Address Search”
Enter IPv6 on address line without slash
or prefix (example: 2001:db8:a0b:12f0::1)
Enter only compressed formatted v6
addresses into eRights to avoid duplicate
addresses from being added. eRights
cannot differentiate between expanded
and compressed IPv6 addresses
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
If the IPv6 address is not on an eRights
account, verify ownership in WebWiz:
https://network-tools.webwiz.co.uk/whois-lookup.htm
If search result is something other than the
customer name (such as an ISP), the
address needs to be verified with the
customer, confirming it is for exclusive use
Once ownership is verified, the compressed
IPv6 address can be entered into eRights
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
Entering IPv6 addresses in eRights:
Go to “AuthProfile”
Click on yellow edit box
Click “Add Bulk IPv6”
Add compressed IPv6 address, including the
slash and prefix into the IPv6 address box
More than one IPv6 compressed
address may be added at a time
(Example: 2001:db8:a0b:12f0::1/64)
Update task, save all changes
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
Entering an IPv6 address range:
Be sure you have the v6 address in
compressed format with prefix
After confirming bit range is 48 or
greater, go to:
(Example: 2620:3b:0:107c::/64 to 2620:3b:0:1081::/64)
https://www.ultratools.com/tools/rangeToipv6CIDR
Enter the range excluding the prefix
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Processing v6 IP amendments
Paste ranges
Press
“Go”
Enter results in eRights
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
What is IPv6? Why do I need it? Do I have
to have an IPv6 address? What are your
requirements for an IPv6 amendment?
Send/quote appropriate text from
customer explanation letter (see
standard text)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
Why doesn’t IEEE support an IPv6 address
with a bit range less than /48?
The current access control software in place
does not have the capacity to efficiently
support an IPv6 address range less than a 48-
bit prefix. We do anticipate modifying our
access control software to accommodate 32-bit
prefixes and greater by the latter portion of
2017, but for now we ask that you submit your
updated IPv6 addresses in a manageable
number of 48-bit (or greater) ranges so that we
may update your records accordingly
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
What if our organization is not able to
provide IPv6 addresses with a bit prefix of
/48 or greater at this time?
Your network administrator can block the IEEE
Xplore IPv6 addresses from your server, which will
then default your search to using the IPv4
formatted addresses only. The risk is you may have
users with only v6 IP’s assigned to their computers
and they will not be able to authenticate
2620:104:c000:8193::112 2600:1108:8:2::251
Xplore Primary: Xplore Failover:
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
Can IEEE exclude specific addresses from
within an IPv6 range?
Just as with IPv4 addresses, IEEE cannot
exclude specific addresses within a given
range. We can, however, enter individual
addresses and simply skip specified IP’s
provided we are given a manageable
amount of addresses to work with
Having said this, there is no easy way to
breakdown the sequence of v6 characters
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
We cannot access our Xplore subscription
Verify if customer sees Xplore log-in (If
customer sees error message, it’s
likely something other than a v6 issue)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
We cannot access our Xplore subscription
Have customer confirm their IP address by
going to http://whatismyv6.com (verify both
the v4 and v6 addresses)
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
We cannot access our Xplore subscription
If the customer’s v4 address is in eRights
but the v6 is not, then we need an updated
list of v6 IP’s from the customer
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
We cannot access our Xplore subscription
If none of these symptoms is present, then
the issue is likely something other than v6,
and you should follow SOP’s to determine
the cause
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
IPv6 FAQ’s
Why can’t I see more than ten v6’s in eRights?
If an existing eRights account has more
than ten v6 addresses, they will spill over
to page two, however, due to a flaw in
eRights you will not be able to see them
unless there are more than ten v4’s that
have flowed over to page two
You must go into edit mode in eRights to
see the complete listing
There is no Toolkit for IPv6
12-C
RS-0
106 R
EVIS
ED
8 F
EB 2
013
Q&A