Little-Miss Posted February 4, 2011 Posted February 4, 2011 World shrugs as IPv4 addresses finally exhausted ? The Register This is probably old news again lol, but i found it interesting! 3
srochford Posted February 4, 2011 Posted February 4, 2011 We are getting ready - most of our machines now have both IPv4 and IPv6 addresses. Our mail gateways have IPv6 addresses and the infrastructure is moving forwards. The biggest change Ipv6 will bring is the end of NAT and the security that that can bring but I think we're still quite a way away from that (are any "home" ISPs yet using IPv6??)
Hightower Posted February 4, 2011 Posted February 4, 2011 We are getting ready - most of our machines now have both IPv4 and IPv6 addresses. But IPv4 should work in your network fine still right? Unless every PC is visible to the internet?
Soulfish Posted February 4, 2011 Posted February 4, 2011 But IPv4 should work in your network fine still right? Unless every PC is visible to the internet? Well with IPv6 the idea is that every device has a publicly accessible IP . No more NAT! All of our infrastructure has been designed with IPv6 support in mind, but need to check with our LEA what their plans are to support it.
Domino Posted February 4, 2011 Posted February 4, 2011 as I saw on twitter yesterday; I came here to kick ass and give out IPV4 Addresses ...And I'm all out of IPV4 Addresses
srochford Posted February 4, 2011 Posted February 4, 2011 But IPv4 should work in your network fine still right? Unless every PC is visible to the internet? Every PC is visible to the internet ... (eg I'm sitting at phws325-002.ph.ic.ac.uk - you should be able to do an NSLookup for it and I think it will respond to a ping)
Hightower Posted February 4, 2011 Posted February 4, 2011 Every PC is visible to the internet ... (eg I'm sitting at phws325-002.ph.ic.ac.uk - you should be able to do an NSLookup for it and I think it will respond to a ping) No reply on a ping. What are the security implications of each machine being publicly accessible?
localzuk Posted February 4, 2011 Posted February 4, 2011 I wonder if anyone who is implemented IPv6 in their school would like to write a post about what they did, as a sort of guide to give others an idea of what they need to look at. Eventually we'll all need to look at this I'm guessing, so it may be nice to start planning to do it.
srochford Posted February 4, 2011 Posted February 4, 2011 No reply on a ping. What are the security implications of each machine being publicly accessible? they're all firewalled so it's not much of an implication but it means that staff/students can connect to the VPN and then access their machine from outside without any weirdness that you'd get with NAT. We have loads of collaborative working so you'll get users on the other side of the world who've remote desktopped into their own machine. We now also have a system where they can remote WoL their machine (all part of our power saving initiative)
powdarrmonkey Posted February 5, 2011 Posted February 5, 2011 (are any "home" ISPs yet using IPv6??) Mine does, natively. Well with IPv6 the idea is that every device has a publicly accessible IP Not quite; every device has a globally routable address. Whether it's publicly accessible or not depends on local router policy.
glennda Posted February 5, 2011 Posted February 5, 2011 So in real terms how do people think this will affect schools or any network? I (like most people i think- or maybe just me!) have heard alot about this but don't really know much about it. All i know is that its going to replace IPv4 and the address involves using the machines mac address.
powdarrmonkey Posted February 5, 2011 Posted February 5, 2011 So in real terms how do people think this will affect schools or any network? I (like most people i think- or maybe just me!) have heard alot about this but don't really know much about it. In the short term, very little. You will only start to notice problems when sites appear that are only available on IPv6, and no sane provider is going to start doing that yet. the address involves using the machines mac address. Not always. You can hand out addresses on a DHCP-like basis if you like (originally engineered by Microsoft in Server 2008, to alleviate privacy concerns). The trade-off is that you then can't use things like multicast router provision, self-generating addresses, and so on.
edutech4schools Posted February 5, 2011 Posted February 5, 2011 Google facebook and yahoo are testing ipv6 on June the 8th so no ipv4 access. All my schools have 2003 server so probably going to need a bit more work/testing to get things running.
m25man Posted February 5, 2011 Posted February 5, 2011 Room362.com - Blog and good old Mubix have been teaching your kids for years about IP V6 exploits. Hak5 did a good episode recently on it and I have seen at least one incident of a home users Vista Laptop under the control of a Syrian IP V6 host Enabling Teredo Tunneling and exploiting the victims unprotected systems is going to be very a very interesting sport for the next few years and is going to be a major money spinner for the AV and firewall manufacturers.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now