ccna 3 scaling networks pdf

ccna 3 scaling networks pdf.Device roaming - one-by-one mobile IPoQuality of service - RSVPoAddress scarcity - DHCP, NAT, CIDR, VLSMoUnfortunately, along with the transition to IPv6, IPv6 attacks are becoming more and more prevalent. This is due in part to the transitional nature of the IPv4 to IPv6 transition. IPv4 will not disappear overnight; it will coexist with IPv6 for a while and then gradually be replaced by IPv6. This will undoubtedly lead to security vulnerabilities. A security-related example is an attacker using IPv6 to find IPv4 vulnerabilities in a dual stack. A dual-stack is an integrated approach in which a node has two connections to both IPv4 and IPv6 networks. As a result, the node, and the corresponding router, also have two protocol stacks.By combining multiple techniques, an attacker can exploit hosts with dual stacks installed, rogue Neighbor Discovery Protocol (NDP) messages, and tunneling techniques to achieve stealthy attacks that create trust vulnerabilities. The attacker gets a foothold in the IPv4 network. An infected host sends rogue router announcements that trigger a dual-stack host to acquire an IPv6 address. An attacker can also cause routing headers to change with multiple hosts in the internal network, and then send the traffic out.There is a need to develop and implement a strategy to mitigate attacks against IPv6 infrastructure and protocols. This mitigation strategy should use multiple techniques (e.g., IPv6 ACLs) to implement filtering at the edge.4.1.9.2 Extending IPv6 ACLsStandard ACLs in IPv6 function similarly to standard ACLs in IPv4. These ACLs determine which traffic is blocked and which traffic is forwarded at the router interface. They allow filtering based on source and destination addresses, inbound and outbound for a particular port. IPv6 ACLs are defined in global configuration mode using the ipv6 access-list command with the deny and permit keywords.The standard IPv6 ACL functionality was extended in Cisco IOS 12.0(23) and 12.2(13)T or subsequent releases. Similar to the extended ACLs in IPv4, it can support traffic filtering based on IPv6 option headers and optional upper-layer protocol type information (for more granular control). To configure an IPv6 ACL, first enter IPv6 access list configuration mode.Router(config)# ipv6 access-list access-list-name