38
GO LIVE = Monday, June 6, 2016 IPv6 Implementation

IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

  • Upload
    others

  • View
    5

  • Download
    0

Embed Size (px)

Citation preview

Page 1: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

GO LIVE = Monday, June 6, 2016

IPv6 Implementation

Page 2: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Agenda

What is IPv6

IEEE Xplore enables IPv6 authentication

Processing v6 IP amendments

IPv6 FAQ’s

Q&A

Page 3: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

What is IPv6

Every device on the internet (computers,

digital notebooks, PDA’s, etc.) is assigned an

IP address for identification and location

purposes

Currently, most devices have an IP address

assigned in IPv4 version, and looks

something like this:

100.64.1.150

Page 4: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

What is IPv6

Due to the number of devices and users

around the world, the pool of available IPv4

addresses has been exhausted. As a result,

all new IP addresses are created in IPv6

format, and look much different than IPv4 . . .

2001:0db8:0000:0000:0000:ff00:0042:8329 (expanded version)

2001:db8::ff00:42:8329/64 (compressed version with bit prefix)

Page 5: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

What is IPv6

Putting it in perspective . . .

Total number of possible IPv4 addresses:

4,300,000,000

Total number of possible IPv6 addresses:

340,000,000,000,000,000,000, 000,000,000,000,000,000

340 undecillion!

Page 6: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

What is IPv6

Putting it in perspective . . .

Total number of possible IPv4 addresses:

4,300,000,000

A single 48-bit range contains more

than 130,000 IP’s

A single 32-bit range contains more

than all the available IPv4 addresses

Page 7: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

We initially launched IPv6 authentication

back in 2014 but had to quickly “unflip” the

switch because customers were largely

unprepared for it

Many customers didn’t even realize they had

v6-formatted IP addresses

We learned that a successful IPv6 launch

required extensive customer communications

Page 8: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

Our first email

was sent on

May 3rd

This message

was sent to

4,575 Xplore

Primary, Xplore

Alert contacts

Dear William, IEEE offers several different authentication methods for our institutional customers in order to provide users with the most seamless and convenient access to subscribed content. One of the most popular methods of authentication is IP address authentication which is the same method that your organization uses to ensure convenient and seamless access to your IEEE Xplore subscription for your users. To keep up with the growing number of internet connected devices, IEEE Xplore will become IPv6 compliant in June 2016. In the coming weeks, we will provide you with more information on the implementation of IPv6 to IEEE Xplore, and what actions are needed from your organization in order to become compliant In preparation to the IPv6 release, we will need you to provide us with a list of all IPv6 addresses you would like to add to your subscription. There are two ways to submit new IPv6 addresses: Fill out this form with the new IP addresses: IP Amendment Form Send new addresses directly to [email protected] Sincerely, IEEE Online Support

Page 9: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

A second

message was

emailed May 17th

This notice

gave more

details about

IPv6, including

a link to online

info

Page 10: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

The online info

contains the

most current

details we have

about IPv6,

including what it

is and what our

requirements are

Page 11: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

The online IP

amendment form

has been

expanded to

include v6-

formatted IP

addresses

Page 12: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

Our third and

final email is

being sent out

this Thursday or

Friday

This notice will

highlight the 48-bit

prefix requirement

*Please disregard this email if you have already responded and provided your IPv6 addresses.

Dear [name],

As previously communicated, IEEE Xplore will enable IPv6 IP addresses effective 6 June 2016. It is important your account administrator provides IEEE with an updated list of any IPv6-formatted IP address blocks that should have access to your subscription.

Due to system capacity and security protocols, any IP range submitted in less than a 48-bit prefix cannot be accepted by IEEE. IEEE Xplore account administrators should be submitting IPv6 address ranges in a 48-bit prefix or greater.

Here are a few key items your IEEE Xplore account administrator should be aware of:

IEEE Xplore will continue to support IPv4 IP addresses

If your organization does not have IPv6, you will not need to do anything

IPv6 ranges must be submitted to IEEE in 48-bit prefix or greater

IPv6 IP addresses that are not registered on your IEEE account will not be able to download content through your IEEE Xplore subscription.

Contact your IT Department/Help Desk to find out if you have IPv6 IP addresses

To submit new IPv6 IP addresses, your IEEE Xplore account administrator can complete this online IP Amendment Form, or they can submit a list of IPv6 addresses via email directly to [email protected].

To learn more about IPv6 and how it can affect your IEEE Xplore subscription, please visit the IEEE Xplore Help & Resources page. http://ieeexplore.ieee.org/Xplorehelp/#/administrators-and-librarians/account-management

Sincerely, IEEE Online Support

Page 13: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

IEEE sales staff was advised of IPv6 plans

during the 2016 Winter Sales meeting

Dealers were informed of the IPv6 plans

during the APAC and EMEA/LA dealer

meetings in February and March

Page 14: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

The May 9th

edition of the

Global Sales

Newsletter

provided an IPv6

update to IEEE

sales staff and

dealers

Page 15: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

During two May

17th Webex

Marketing

updates (8am

and 8pm), IEEE

sales staff and

dealers were

given an IPv6

update

Page 16: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

Sounds like a lot of communication, yes?

So come June 6th, no surprises, right?

What could possibly go wrong???

Page 17: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IEEE Xplore enables IPv6 authentication

Of course, something has to go wrong! Someone will claim they knew nothing about it

It’s gonna happen, so just roll with it

Page 18: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

IEEE is instructing customers to submit v6

addresses in a compressed format, and with

a 48-bit or greater prefix

2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)

2001:db8:a0b:12f0::1

(compressed version)

2001:db8:a0b:12f0::1/64

(compressed version w/prefix)

Page 19: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

IEEE is instructing customers to submit v6

addresses in a compressed format, and with

a 48-bit or greater prefix

2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)

2001:db8:a0b:12f0::1

(compressed version)

2001:db8:a0b:12f0::1/64

(compressed version w/prefix)

Page 20: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

2001:0db8:0a0b:12f0:0000:0000:0000:0001 (expanded version)

v6 IP’s have eight alpha-numeric segments (four

characters per segment, separated by colons), with

numbers ranging from 0-9; alpha from a-f

Compression occurs by removing any lead zeros

within a segment

2001:db8:a0b:12f0::1

(compressed version)

Multiple consecutive segments that are fully

compressed are indicated by a double colon (::)

1 2 3 4 5 6 7 8

Page 21: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

If you receive an IP amendment form with an

expanded v6 IP address, you can obtain the

compressed format by going to:

http://subnettingpractice.com/ipv6_subnetting.html

Page 22: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

http://subnettingpractice.com/ipv6_subnetting.html

Paste expanded

IPv6 address

Press

“Calculate”

Page 23: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

http://subnettingpractice.com/ipv6_subnetting.html

Compressed IPv6

without prefix

You cannot calculate

prefix (customer

must provide)

Page 24: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

With compressed IPv6 number in hand,

verify in eRights if address is currently active

Search user

Select “IP6 Address Search”

Enter IPv6 on address line without slash

or prefix (example: 2001:db8:a0b:12f0::1)

Enter only compressed formatted v6

addresses into eRights to avoid duplicate

addresses from being added. eRights

cannot differentiate between expanded

and compressed IPv6 addresses

Page 25: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

If the IPv6 address is not on an eRights

account, verify ownership in WebWiz:

https://network-tools.webwiz.co.uk/whois-lookup.htm

If search result is something other than the

customer name (such as an ISP), the

address needs to be verified with the

customer, confirming it is for exclusive use

Once ownership is verified, the compressed

IPv6 address can be entered into eRights

Page 26: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

Entering IPv6 addresses in eRights:

Go to “AuthProfile”

Click on yellow edit box

Click “Add Bulk IPv6”

Add compressed IPv6 address, including the

slash and prefix into the IPv6 address box

More than one IPv6 compressed

address may be added at a time

(Example: 2001:db8:a0b:12f0::1/64)

Update task, save all changes

Page 27: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

Entering an IPv6 address range:

Be sure you have the v6 address in

compressed format with prefix

After confirming bit range is 48 or

greater, go to:

(Example: 2620:3b:0:107c::/64 to 2620:3b:0:1081::/64)

https://www.ultratools.com/tools/rangeToipv6CIDR

Enter the range excluding the prefix

Page 28: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Processing v6 IP amendments

Paste ranges

Press

“Go”

Enter results in eRights

Page 29: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

What is IPv6? Why do I need it? Do I have

to have an IPv6 address? What are your

requirements for an IPv6 amendment?

Send/quote appropriate text from

customer explanation letter (see

standard text)

Page 30: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

Why doesn’t IEEE support an IPv6 address

with a bit range less than /48?

The current access control software in place

does not have the capacity to efficiently

support an IPv6 address range less than a 48-

bit prefix. We do anticipate modifying our

access control software to accommodate 32-bit

prefixes and greater by the latter portion of

2017, but for now we ask that you submit your

updated IPv6 addresses in a manageable

number of 48-bit (or greater) ranges so that we

may update your records accordingly

Page 31: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

What if our organization is not able to

provide IPv6 addresses with a bit prefix of

/48 or greater at this time?

Your network administrator can block the IEEE

Xplore IPv6 addresses from your server, which will

then default your search to using the IPv4

formatted addresses only. The risk is you may have

users with only v6 IP’s assigned to their computers

and they will not be able to authenticate

2620:104:c000:8193::112 2600:1108:8:2::251

Xplore Primary: Xplore Failover:

Page 32: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

Can IEEE exclude specific addresses from

within an IPv6 range?

Just as with IPv4 addresses, IEEE cannot

exclude specific addresses within a given

range. We can, however, enter individual

addresses and simply skip specified IP’s

provided we are given a manageable

amount of addresses to work with

Having said this, there is no easy way to

breakdown the sequence of v6 characters

Page 33: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

We cannot access our Xplore subscription

Verify if customer sees Xplore log-in (If

customer sees error message, it’s

likely something other than a v6 issue)

Page 34: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

We cannot access our Xplore subscription

Have customer confirm their IP address by

going to http://whatismyv6.com (verify both

the v4 and v6 addresses)

Page 35: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

We cannot access our Xplore subscription

If the customer’s v4 address is in eRights

but the v6 is not, then we need an updated

list of v6 IP’s from the customer

Page 36: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

We cannot access our Xplore subscription

If none of these symptoms is present, then

the issue is likely something other than v6,

and you should follow SOP’s to determine

the cause

Page 37: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

IPv6 FAQ’s

Why can’t I see more than ten v6’s in eRights?

If an existing eRights account has more

than ten v6 addresses, they will spill over

to page two, however, due to a flaw in

eRights you will not be able to see them

unless there are more than ten v4’s that

have flowed over to page two

You must go into edit mode in eRights to

see the complete listing

There is no Toolkit for IPv6

Page 38: IPv6 Implementation Round 2 - IEEE...IPv6-formatted IP address blocks that should have access to your subscription. Due to system capacity and security protocols, any IP range submitted

12-C

RS-0

106 R

EVIS

ED

8 F

EB 2

013

Q&A