comp.protocols.tcp-ip
Affichage de l'article :
Re: IPv6 Demonstration - Getting the wow factor?

Date : Le 01 avril 2008
From : Albert Manfredi
Sujet : Re: IPv6 Demonstration - Getting the wow factor?

On Apr 1, 10:32=A0am, Whatever I Fear wrote:
> I am in charge of setting up a demo for a client for a small IPv6 lab
> to demonstrate some of our capabilities. =A0Currently, we are using IPv6
> tunneling through an IPv4 network, with various IPv4 and IPv6 web
> servers and IPv6 network cameras.
>
> It is a pretty quick task to show, hey you can access IPv4 and IPv6
> web pages seamlessly, and you can show feeds of digitial video of IPv6
> cameras, but at the end of the day, this leaves you saying "so what"?
> It is kind of difficult to demonstrate "protocols".
>
> In essence I need something with a little bit of wow factor in
> something that really doesnt have that much.
>
> I am curious about some other good ideas to just show the capabilities
> of IPv6 with a couple IPv4 routers, cameras, enabled workstations,
> etc. =A0I would like to show maybe some security issues, maybe some
> gotchas if you just plug up IPv6 and dont really take security into
> account, just something that makes you say, "hey this IPv6 thing could
> be good for us".
>
> I appreciate any thoughts.

Good luck.

One of the hyped-up "advantages" of IPv6 is the supposed security
advantage. It simply does not exist.

What IPv6 did in the past, at least on paper, is to mandate IPsec in
all hosts and all routers. Guess what? (1) There is nothing to prevent
you from implementing the very same IPsec protocols in IPv4 nodes, and
(2) there are plenty of IPv6 stacks out there that don't do IPsec
anyway.

As a matter of fact, just how much and specifically what security
protocols should be mandated for IPv6 nodes is a matter of debate as
we speak, within the IETF. But be that as it may, there is nothing
INTRINSIC in IPv6 that creates a more secure environment. That's the
bottom line. For what it's worth, RFC 4294 is being updated to reflect
some of these debates.

I know this doesn't help your cause. I'm just trying to introduce some
reality.

Bert

Posez vos questions, réponses et remarques sur les forums de FrameIP