Internet Protocol Version 6 (IPv6) Basics cheat sheet – v 0.

4 IPv6 Address Basics

by Jens Roesen – email – www IPv6 address example:

IPv6 quick facts global routing prefix subnet ID

successor of IPv4 • 128-bit long addresses • that's 296 more IPs than IPv4 • that's 2128 or 3.4x1038 or over 340
undecillion IPs overall • a customer usually gets a /64 subnet, which yields 4 billion times the IPs available
by IPv4 • no need for network address translation (NAT) any more • no broadcasts any more • no ARP • 2001:0db8:0000:0000:0000:0000:0000:0001
stateless address configuration without DHCP • improved multicast • easy IP renumbering • minimum MTU
size 1280 • mobile IPv6 • mandatory IPsec support • extension headers • jumbograms up to 4 GiB
subnet prefix /64 interface ID
IPv6 RFCs
Some important IPv6 related RFCs. You can find them online at http://tools.ietf.org/html/rfc[RFC number] IPv6 addresses are written in hexadecimal and divided into eight pairs of two byte blocks, each containing
four hex digits. Addresses can be shortened by skipping leading zeros in each block. This would make
RFC 2460 IPv6 Specifications RFC 4443 ICMPv6 for IPv6 2001:db8:0:0:0:0:0:1 out of the example address.
RFC 4291 IPv6 Addressing Architectures RFC 3587 IPv6 Global Unicast Address Format Additionally, once per IPv6 IP, we can replace MAC 00 03 ba 24 a9 6c
RFC 4861 IPv6 Neighbor Discovery RFC 4193 Unique Local IPv6 Unicast Addresses consecutive zeros with a double colon: 2001:db8::1.
RFC 4862 IPv6 Stateless Address Configuration RFC 2375 IPv6 Multicast Address Assignments
The 64-bit interface ID should be in EUI-64 format. A 48-
bit MAC can be transformed to an 64-bit interface ID by EUI-64 02 03 ba ff fe 24 a9 6c
RFC 1981 Path MTU Discovery for IPv6 RFC 3849 IPv6 Address Prefix For Documentation
inverting the 7th (universal) bit and inserting a ff and fe
byte after the 3rd byte. So the MAC 00:03:ba:24:a9:c6 becomes 0203:baff:fe24:a9c6. See RFC
4291 Appendix A.
IPv& & ICMPv6 Headers
IPv6 header IPv6 Address Scopes
0 8 16 24 32
version traffic class flow label ::/128 unspecified address
payload length next header hop limit ::1/128 localhost
fe80::/10 link local scope
source IPv6 address fec0::/10 site local scope, intended as RFC 1918 successor, deprecated in RFC 3879
fc00::/7 unique local unicast scope, RFC 4193, divided into:
fc00::/8 centrally assigned by unkown (see http://bit.ly/IETFfc00), routed within a site
destination IPv6 address
fd00::/8 free for all, global ID must be generated randomly , routed within a site
ff00::/8 multicast scope, following after the prefix ff there are 4 bits for flags and 4 bits for the
Version (4 bits): IP version. Always 6. scope. Example: ff02::1 reaches all nodes, ff02::2 reaches all routers
Traffic class (8 bits): Used for QoS. Like the TOS field in IPv4. RFC 2474. ::/96 IPv4-Compatible IPv6 Address, example: ::192.168.1.2, deprecated with RFC 4291
Flow label (20 bits): Used for packet labelling, End-to-end QoS. RFC 3697.
::ffff:0:0/96 IPv4-Mapped IPv6 Address, example: ::ffff:192.168.2.1, see RFC 4038
Payload length (16 bits): Length of the payload following the header in bytes. Limits the packet size to 64
KB. 2000::/3 global unicast scope, divided into:
Next header (8 bits): Following header or protocol. Like protocol type field in IPv4. 2001::/16 /32 subnets assigned to providers, they assign /48, /56 or /64 to the customer
Hop limit (8 bits): Number of hops until the packet gets discarded. TTL in IPv4.
2001:db8::/32 reserved for use in documentation
Source address (128 bit): IPv6 source address.
Destination address (128 bits): IPv6 destination address. 2002::/16 6to4 scope, 2002:c058:6301:: is the 6to4 public router anycast (RFC 3068)
3ffe::/16 6Bone scope, returned to IANA with RFC 3701, you should not see these
ICMPv6 header
32
2003:: to 3fff:: to be assigned in the future
0 8 16 24
ICMPv6 type ICMPv6 code ICMPv6 checksum
ICMPv6 data Multicast Scopes Neighbor Discovery Message Options
1 Interface-local 5 Site-local 1 Source Link-Layer Address
ICMP type (8 bits): Error messages have a 0 high-order-bit (types 0 to 127), info messages have a 1 high-
order-bit (types 128 to 255). 2 Link-local 8 Organization-Local 2 Target Link-Layer Address
ICMP code (8 bits): Further specifies the kind of message along with the type. F.i. type 1 code 4 is 4 Admin-local e Global 3 Prefix Information
“destination port unreachable”. 4 Redirected Header
ICMP checksum (16 bits): Checksum to prevent data corruption.
5 MTU (max MTU supported by all segments)
IPv6 Cheat Sheet, 2010, Jens Roesen <jens@roesen.org>. Current versions are available under http://bit.ly/IPv6pdf. This work is licensed under Creative Commons BY – NC – SA License.
Interface Configuration Neighbor Discovery (ND): Router Solicitation (RS) and Router Advertisement (RA)
Linux: In linux you can temporarily configure an IPv6 address with the ifconfig or ip command: Router Solicitation (RS) packets are sent in order to receive a Router Advertisement (RA) message
independently from the periodically send RAs. This is typical while SAC after successful DAD. The source IP
# ifconfig eth0 inet6 add 2001:db8::1/64 used for the RS message can be :: or the link-local IP for this interface.
:: → ff02::2 or fe80::203:baff:fe24:a96c, ICMPv6 type 133 (RS)

ROUTER
# ip addr add 2001:db8::1/64 dev eth0 Option 1 (source link-layer) 00:03:ba:24:a9:6c (only when source IP is not ::)

NODE
fe80::21e:79ff:fe1e:f000 → ff02::1, ICMPv6 type 134 (RA), lifetime 1800s
To check the configuration use ifconfig eth0 or ip -6 addr show eth0. To make this config boot Option 2, Option 3 (prefix information) 2001:db8::/64, pltime = 7d, vltime = 30d
proof you have to add the IP to the network configuration files specific for your distribution. For Debian based
systems use /etc/network/interfaces, for Red Hat based systems use the corresponding ifcfg file After receiving the RS message a router sends a RA message to the all-nodes multicast address. The RA
in /etc/sysconfig/network-scripts/. Restart the network or reboot after editing the files to test the message contains, amongst others, information about the router lifetime (time in seconds the router expects
configuration. to be a default router), all available prefixes and their preferred (pltime) and valid (vltime) lifetimes. When
To use stateless address autoconfiguration (SAC) you normally just have to make sure, that IPv6 is enabled pltime reaches zero the address becomes deprecated and should not be used for new connections. When
along with the interfaces which should be configured automatically at boot time. the vltime reaches zero the address becomes invalid.

Solaris: As usual plumb and then configure the interface with ifconfig: Stateless Autoconfiguration SAC (RFC 4862)and Stateful Autoconfiguration DHCPv6 (RFC 3315)
SAC comes in handy when it's not important which exact address a node uses as long as it's properly
# ifconfig bge0 inet6 plumb up routable. SAC uses mechanisms of Neighbor Discovery.
# ifconfig bge0 inet6 addif 2001:db8::2/64 Steps taken during SAC presuming there were no DAD errors along the way: forming a link-local address →
Created new logical interface bge0:1 DAD for the link-local address → activating the link-local address and sending RS message(s) to ff02::2 →
forming a global address for each received prefix within an RA message with set "autonomous address-
Check the configuration with ifconfig -a6. configuration flag" → DAD for each tentative global address → addresses become valid and preferred (for
To make this permanent and being restored after booting add the line pltime > 0)
DHCPv6 can assign IPs and additional information like DNS/NTP Servers. A client sends a SOLICIT
addif 2001:db8::2/64 up message (type 1) to the All_DHCP_Relay_Agents_and_Servers multicast IP FF02::1:2. Servers answer with
a ADVERTISE message (2). The client chooses a server, sends a REQUEST message (3) and receives a
into the file /etc/hostname6.bge0. If you want to use SAC, simply leave /etc/hostname6.bge0 empty REPLY message (7) with configuration options. DAD has to be performed for every address received!
and have the package SUNWroute installed. Alternatively, and in coexistence with SAC, DHCPv6 can only provide clients with additional information like
DNS and NTP servers. The client sends a INFORMATION-REQUEST message (11) and receives the
Neighbor Discovery (ND): Neighbor Solicitation (NS) and Neighbor Advertisement (NA) options in a REPLY message (7). See RFC 3315 for detailed description of DHCPv6 messages and options.
Neighbor Solicitation (ICMPv6 type 135) messages are send to determine the link-layer address of a
IPv6 and DNS (RFC 3596)
neighbor (multicasts) or the verify that a neighbor is still reachable (unicasts).
The IPv6 equivalent to the IPv4 A Resource Record is the AAAA RR. No big difference there. The A6 RR with
2001:db8::1 → ff02::1:ff00:2 (destination is the solicited-node multicast address) additional fields for prefix length and prefix name defined in RFC 2874 was declared experimental in favour
INITIATOR

TARGET
ICMPv6 type 135, target 2001:db8::2, Option 1 (source link-layer addr) 00:03:ba:24:a9:6c
of AAAA RRs. See RFC 3363 and 3364 for more information and discussion.
2001:db8::2 → 2001:db8::1, ICMPv6 type 136, Flags: S
target 2001:db8::2, Option 2 (target link-layer) 00:03:ba:2e:02:c1 Reverse delegation is written in nibble format with the new domain IP6.ARPA. So 2001:db8::2 becomes
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.. The
In the example above node 2001:db8::1 wants to reach 2001:db8::2 but doesn't know the link-layer shorter bitstring/bitlabel format (RFC 2672 and 2673) was later discarded but may be still used by older
address of 2001:db8::2. So it sends a NS packet to the solicited-node multicast address of 2001:db8::2 resolvers (BIND > 8.3 and < 9.2.3). ipv6calc helps with the conversion!
(ff02::1:ff00:0/104 followed by the last 24 bits of the interface ID) along with its own link-layer
address and receives a NA (ICMPv6 type 136) packet with the targets link-layer address. The host command will look for both A and AAAA records, using dig you have to explicit ask for AAAA
records (dig host.example.com aaaa). Reverse lookups can as usual be done with host without
ND is also used for Duplicate Address Detection (DAD). To perform DAD the NS message is send with the further switches (host 2001:db8::1) or with dig using the -x switch (dig -x 2001:db8::1).
unspecified source IP :: and to the solicited-node multicast address of the IP which should be configured. If
there is already a node using this desired IP it will answer with a NA packet send to the all-node multicast Connect to IPv6 IPs on the Command Line or in a Browser
address ff02::1.
ping 6 IPv6 version of ping. Solaris ping supports IPv6 out of the box.
Connect to IPv6 IPs on the Command Line or in a Browser traceroute6 IPv6 versions of traceroute and tracepath. Also try mtr -6.
tracepath6
CLI # ssh '2001:db8:dead:f00d:203:baff:fe24:a9c6'
ip -6 Configure interfaces, routes, ND, list neighbors, multicasts....
# lynx http://[2001:db8:dead:f00d:203:baff:fe24:a9c6]
ipv6calc Powerful tool for all sorts of conversions and information gathering. See
# wget ftp://[2001:db8:dead:f00d:203:baff:fe24:a9c6] http://www.deepspace6.net/projects/ipv6calc.html
Browser http://[2001:db8:dead:f00d:203:baff:fe24:a9c6] tcpdump ip6 Packet sniffing tools with IPv6 options. Also works with options like icmp6.
snoop inet6