Case Study 5 Paper Final

Jake Lube
Will Steahr
Jake Panzer
Chaz Jensch
Derek Ellwein
ABC CORPORATION CASE STUDY
Cisco Crusaders

1
Table of Contents
Table of Figures ............................................................................................................................................................. 2
Executive Summary ....................................................................................................................................................... 3
Problem Statement ....................................................................................................................................................... 3
Goals and Objectives ..................................................................................................................................................... 3
Existing Network Analysis .............................................................................................................................................. 3
Business Needs ................................................................................................................................................ 3
Technical Needs .............................................................................................................................................. 3
Constraints ...................................................................................................................................................... 4
Existing Network Problems ............................................................................................................................. 4
Existing Topology ............................................................................................................................................. 4
Assumptions .................................................................................................................................................... 5
Proposed Network Design ............................................................................................................................................. 6
Proposed Network Topology ........................................................................................................................... 6
Layer 3 Regional Topology .............................................................................................................................. 6
Branch Topology .............................................................................................................................................. 7
IP Addressing and VLAN Scheme ..................................................................................................................... 7
Protocol Design ............................................................................................................................................... 9
Security ............................................................................................................................................................ 9
Performance .................................................................................................................................................... 9
Implementation ........................................................................................................................................................... 10
Migration Plan ............................................................................................................................................... 10
Acceptance Test Plan .................................................................................................................................... 10
Pilot Network Implementation ...................................................................................................................... 10
Project Timetable ........................................................................................................................................................ 11
Detailed Budget ............................................................................................................................................. 11
Total Budget .................................................................................................................................................. 12
Evaluation of Changes ................................................................................................................................................. 12
Risks ............................................................................................................................................................... 12
Benefits ......................................................................................................................................................... 12
Conclusion ................................................................................................................................................................... 12
Appendix ...................................................................................................................................................................... 13

2
Table of Figures
Figure 1-1 Existing Network Topology ........................................................................................................................... 4
Figure 1-2 Internal Building Topology............................................................................................................................ 5
Figure 2-1 Layer 3 Regional Topology ............................................................................................................................ 6
Figure 2-2 IPv6 Branch Topology ................................................................................................................................... 7
Figure 2-3 Regions ......................................................................................................................................................... 8
Figure 2-4 Buildings ....................................................................................................................................................... 8
Figure 2-5 Floors ............................................................................................................................................................ 8
Figure 2-6 VLANs............................................................................................................................................................ 8
Figure 2-7 Hosts ............................................................................................................................................................. 9
Figure 3-1 Professional Services Budget ...................................................................................................................... 11
Figure 3-2 Gantt Chart ................................................................................................................................................. 12

3
Executive Summary
ABC Corporation is a private sector company that works with various government agencies. They have
offices in three regions around the world; North America, Asia, and Europe. They would like Cisco
Crusaders to provide a migration strategy for the transition to IPv6. A pilot network that mirrors the
enterprise network must be created to test out the implementation strategy and find any problems that
may arise. A new IPv6 addressing scheme needs to be created to simplify routing and manageability
Cisco Crusaders plans to implement IPv6 in a pilot network to test out the new IPv6 addressing scheme.
Dual Stacking technology will also be tested to ensure that existing services relying on IPv4 will not be
interrupted. A implementation and migration plan will then be presented based on the findings and
results of the pilot network test.
With the upgrades performed by Cisco Crusaders, ABC Corporation will have a clear understanding of
what an IPv6 migration will mean for their company, and a strategy for the successful implementation of
IPv6 in the enterprise network. Utilizing dual-stack technology, Cisco Crusaders expects nearly zero
downtime for the project. ABC will be able to support their IPv6 customers completely after the
transition.
Problem Statement
ABC Corporation has offices in North America, Asia, and Europe. They work with many government
agencies that have already migrated to IPv6. In order to continue working effectively, ABC would like to
begin migrating to IPv6. They require an IPv4 to IPv6 migration plan to help make the transition as
seamless as possible. A successful pilot network implementation will be needed to understand how IPv6
will work in their network. ABC also requires an IPv6 network migration plan, a benefit and costs
analysis, and an acceptance test plan. The migration needs to be completed with little to no network
disruption.
Goals & Objectives
ABC in conjunction with Cisco Crusaders has the following goals for their IPv6 implementation.
Plan, design, and implement a pilot network for IPv6 integration
IPv6 design must coexist with current IPv4 network for the foreseeable future
Test and verify successful implementation
Existing Network Analysis
Business Needs
Because the transition to IPv6 will take a considerable amount of time, network downtime caused by
the implementation will be unacceptable. The approach will have to ensure that no network downtime
is encountered while the integration of IPv6 is completed.
Technical needs
ABC is not transitioning to IPv6 all at once, so it will be necessary to run both IPv4 and 6 at the same
time in order to maintain current network services. ABC also desires to use Windows Server 2008

4
DHCPv6 servers to hand out IPv6 addresses to clients. They would like to stick with OSPF for their
routing protocol, and they use Frame Relay for their point-to-point connections.
Constraints
ABC Corporation has outlined the following constraints for this project:
The IPv6 pilot network implementation must mirror the current enterprise network
IPv4 and IPv6 must work together without issue
The implementation must work with their existing network topology
Existing Network Problems
ABC currently is running IPv4 exclusively. They work with many government agencies that are federally
mandated to switch to IPv6. ABC would like to implement IPv6 in order to better support their
customers.
Existing Topology
Their current topology (figure 1-1) consists of point-to-point frame relay connecting the regions,
headquarters, and offices together. The internal topology (figure 1-2) consists of a router, a Windows
2008 server, and layer 2 access switches. IPv4 addressing is used exclusively.
Figure 1-1 Existing network topology

5
Figure 1-2 - Internal Building Topology

Assumptions
There are a few assumptions related to IPv6 implementation in an enterprise environment that Cisco
Crusaders is going to make.
IPv6 ready networking devices
IPv6 ready end-user devices
All security standards are met
Internal support has a grasp of IPv6 and how it works

6
Proposed Network Design
Proposed Network Topology
For the proposed network topology no changes to the physical hardware will be taking place. ABC
Corporation is asking for implementation of IPv6 to be able to run simultaneously with IPv4 for the
foreseeable future.
Layer 3 Regional Topology
For the layer 3 topology we will be going off of the existing topology as stated before with only a few
changes. Along with receiving an IPv4 address the network will also distribute IPv6 addresses to the
different regions, building, VLANs, and floors throughout the entire network. Also, the three regional
Windows 2008 servers will also be able to support IPv6 addressing along with DNS and DHCP that was
already installed.
Figure 2-1 Layer 3 Regional Topology

7
Branch Topology
As you can see in figure each device now has an IPv4 address as well as an IPv6 address. The clients will
still receive DHCP from the server for IPv4 addresses. They auto-configure their IPv6 addresses based on
their gateways IPv6 network address, which is also provided by the subnet/vlan. Their default gateway
is the link-local address of the default gateway.
Figure 2-2 IPv6 Branch Topology

IP Addressing and VLAN Scheme
Cisco Crusaders recommends a simple IPv6 addressing scheme that will maximize summarization,
conform to standards, and efficiently utilize the address space. It is broken down into the following
areas.
As you can see in figure 2-3 , each region is identified by the first number in the segment, starting with
1000 for North America and ending with 3000 for Asia. This will be the first place to summarize. This
represents the first 4 bits of the third segment, and gives a possibility of 16 different networks for the
regional section.

8

Regions figure 2-3

The next step is the buildings. Each building will count up by one, utilizing the remaining 12 bits of the
third segment. This gives the possibility of 4096 different networks for buildings in each of the 16
regions. See figure 2-4
Buildings figure 2-4

After the network is divided into the buildings, it then gets broken down by floor. The floors count up by
one, and use the first 8 bits of the fourth segment. This gives the possibility of 256 floors per building.
See figure 2-5
Floors figure 2-5
Floor Network
Floor 1 2001:db8:1001:100::/56
Floor 2 2001:db8:1001:200::/56
Floor 3 2001:db8:1001:300::/56

The last division of the network before the host portion is the VLAN portion. Each VLAN (data, voice,
wireless, management, etc) will get its own network on each floor. The VLANs count up by 1, and are
represented by the last 8 bits of the fourth segment. This gives the possibility of 256 VLANs per floor, a
number that they should have no problem keeping below. See figure 2-6
VLANS figure 2-6
VLAN Network
1 2001:db8:1001:101::/64
2 2001:db8:1001:102::/64
3 2001:db8:1001:103::/64

Region Network
North America 2001:db8:1000::/36
Europe 2001:db8:2000::/36
Asia 2001:db8:3000::/36
Building Network
Building 1 2001:db8:1001::/48
Building 2 2001:db8:1002::/48
Building 3 2001:db8:1003::/48

9

After the network is divided down to the VLAN level, the remaining four segments are available for
hosts. By devoting 64 bits to the host portion, there are 2^64 addresses available. This scheme
conforms to the IPv6 standard of giving a /64 segment for the host addresses. See figure 2-7
Hosts - figure 2-7
Hosts Network
Host 1 2001:db8:1001:100::1/64
Host 2 2001:db8:1001:100::2/64
Host 3 2001:db8:1001:100::3/64

Protocol Design
The Cisco Crusaders will be implementing two new protocols in Company ABCs network. The two
protocols are IPv6 and OSPFv3. IPv6 is being implemented in Company ABSs network as a result of a
federal mandate that requires businesses that work with government agencies to transition from IPv4 to
IPv6. Company ABC has been given the 2001:db8::/32 block to divide accordingly. Because IPv6 is being
implemented, there needs to be a new routing protocol implemented as well. OSPFv3 will be used to
provide full connectivity throughout the network. OSPFv2 and OSPFv3 have a lot in common but there
are a couple of differences in the way the two protocols operate. One of the differences is there are two
LSA types added, Link LSA and Intra-area Prefix LSA. Another change is OSPFv2 used its configured IPv4
interface address to form adjacencies while OSPFv3 uses it IPv6 link-local address to form adjacencies.
Security
The Cisco Crusaders assume that all of the necessary IPv4 security measures are already in place and
running in the network. However, because the Cisco Crusaders are implementing IPv6 into the network,
there is an additional security measure that needs to be implemented to make sure packets maintain
their integrity. The security measure we are adding is OSPFv3 authentication. OSPFv3 authentication
uses IPSec to make sure that packets are not intercepted, altered, and then sent back into the network.
This is able to be done by adding IPv6 authentication header or IPv6 ESP header to ensure integrity and
confidentiality when transmitting packets. The IPv6 ESP header may be used in combination with IPv6
authentication header. Using both security features will provide both authentication and encryption and
the Cisco Crusaders will be implementing both into Company ABCs network.
Performance
Network performance will increase as a result of implementing IPv6. This is a result of more efficient
routing. IPv6 reduces the size of routing tables and makes routing more efficient while making a more
hierarchical design. More efficient packet processing will also cause network performance to increase.
IPv6 has a simplified packet header as a result of the removal of IP-level checksum. In IPv4 the checksum
would need to be recalculated after every router hop but most link-layer technologies contain a
checksum and error control capabilities making a checksum in IP-level not necessary.

10
Implementation
Migration Plan
Cisco Crusaders aims to add IPv6 functionally with little to no downtime of network services.
The first phase of migration consists of setting up dual-stacking on network equipment. Everywhere an
IPv4 address exists, an IPv6 must be added as well. This will cause no downtime as it never takes the
interfaces offline. Also, OSPFv3 will be added to the network after the interfaces to allow routing of IPv6
addresses. After this is completed, all clients will use stateless autoconfiguration automatically to create
their own IPv6 address based on the /64 network and their own MAC address.
The second phase of migration consists of adding static IPv6 addresses to servers. Again, no downtime
would happen because the interface is never taken down. All servers will now have an IPv4 and IPv6
address.
The third phase of migration consists of adding a group policy to Active Directory to have a login script
for every client machine. The login script will execute the command netsh interface ipv6 add dnsservers
"INTERFACE" IPV6-ADDRESS as to add the DNS servers IPv6 address. Cisco Crusaders recommends
having all DNS servers dynamically update the client addresses. IPv6 addresses are very complex and
would be hard to remember. Dynamic DNS will allow clients to tell the DNS server their IPv6 address.
After all of these phases are complete, IPv6 will work throughout the network.
Acceptance Test Plan
In order to completely test the IPv6 implementation, Cisco Crusaders will setup a script that will ping the
IPv6 addresses in all areas of the network. A small sample of client machines will be examined to verify
IPv6 address stateless autoconfiguration and DNS server configuration. Successful results will validate
the implementation of IPv6 for the ABC Corporation.
Pilot Network Implementation
Cisco Crusaders has created a pilot network in a virtual lab environment. Refer to Appendix A4-1 for the
pilot network topology. This pilot network mirrors ABC Corporations current network in a minimalist
fashion. Both IPv4 and IPv6 are coexisting without any interference to each other. Appendix A1-1 to A1-
3 shows each clients IP configuration. The IPv4 addresses are assigned through the locations DHCP
server while the IPv6 addresses are automatically configured through stateless address
autoconfiguration. Appendix A2-1 to A2-3 shows IPv4 working throughout the network. Each client is
able to ping the other clients. Appendix A3-1 to A3-3 shows IPv6 working through the network. Because
of IPv6 address complexity, DNS will likely be required to connect to addresses.
The pilot network uses dual-stacking of every interface. Every router, server, and client computer has an
IPv4 and IPv6 address.
Refer to Appendix A4-2 to A4-5 for the configuration of each network router used in the pilot network.

11
Project Timetable & Budget Summary
Detailed Budget
Cisco Crusaders primary focus for ABC Corporation is to provide a swift network migration from a
standalone IPv4 network to a IPv4 and IPV6 dual stack network. In terms of professional services, Cisco
Crusaders will assist ABC Corporation with six CCNP certified professionals to cover thirty offices around
the world and one CCIE certified expert in design. The CCIE certified expert will develop an efficient
strategy to dual stack the existing IPv4 network with the new IPv6 network. See figure 3-1 for more
information.
The Cisco Crusaders project plan will span approximately twenty-four days. The first three days of the
project will be assigned to the CCIE, giving them twenty-four paid hours to design the IPv6 migration and
implementation. After the initial design phase, the six CCNPs will be given paid travel time of
approximately twenty-four hours to commute to the appropriate sites. Upon arrival, they will officially
begin phase two of the migration, creating IPv6 configurations for the network and server equipment.
After a day of creating configurations, the CCNP professionals will begin installing the IPv6
configurations on the network equipment. Over the course of fifty-six hours, each CCNP will install IPv6
network configurations at each office they are assigned to. Once finished with network equipment, the
CCNP professionals will then have eight hours dedicated to applying IPv6 server configurations at each
office. Upon completion of the previous tasks, the CCNP team will be given fifty-six hours to
troubleshoot any problems with the network and servers. See figure 3-2 for a Gantt chart of
professional services.

Figure 3-1 Professional Services Budget

12

Figure 3-2 Gantt Chart

Total Budget
The total budget is $58,320, which is all professional services.
Evaluation of Changes
The proposed IPv6 plan for ABC Corporation utilizes a pilot network to test the implementation strategy
for IPv6. Successful tests in the pilot network will show how IPv6 can be implemented in their enterprise
network
Risks
There are minimal risks in this project. Because Cisco Crusaders is implementing dual-stack technology,
no currently active IPv4 services will be interrupted.
Benefits
IPv6 implementation allows for efficient communication with government customers running
IPv6.
Address space is nearly limitless.
Less configuration time for new devices (stateless autoconfiguration).
Future proof ABC will not have to switch over to IPv6 if/when it is mandated by law at a later
date.
Conclusion
The IPv6 implementation plan proposed by Cisco Crusaders will allow ABC Corporation to successfully
integrate IPv6 into their current IPv4 network with minimal downtime or outages. Dual-stack technology
will keep current IPv4 addresses on all devices, and still allow new IPv6 addresses to be configured.
Successful pilot tests conducted by Cisco Crusaders will guide the migration of IPv6 into ABCs enterprise
network. An acceptance test plan will be created as a final validation step for the implementation.

13
Appendix
A1-1 Client 1 IPConfig


14

A2-1 Client 1 IPv4 Pings

15


16


17

18
A4-1 Proof-of-concept Network Topology

A4-2 Proof-of-concept Network R1 Configuration

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5

19
ip cef
!
!
!
!
no ip domain lookup
ip domain name lab.local
!
ipv6 unicast-routing
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.1.1 255.255.255.0
no snmp trap link-status
ipv6 address 2001:DB8:1001:106:1:1:1:1/64
ipv6 ospf 1 area 0
!
ip address 192.168.110.1 255.255.255.0
ip helper-address 192.168.1.10
ipv6 address 2001:DB8:1001:101:1:1:1:1/64
ipv6 dhcp relay destination 2001:DB8:1001:106:1:1:1:2
ipv6 ospf 1 area 0
!
interface Serial0/0
bandwidth 128
no ip address
encapsulation frame-relay
clock rate 128000
!

20
interface Serial0/0.102 point-to-point
ip address 192.168.10.1 255.255.255.252
ipv6 address 2001:DB8:F001::1/64
ipv6 ospf 1 area 0
frame-relay interface-dlci 102
!
ip address 192.168.10.5 255.255.255.252
ipv6 ospf 1 area 0
!
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.0 0.0.0.3 area 0
network 192.168.10.4 0.0.0.3 area 0
network 192.168.110.0 0.0.0.255 area 0
!
!
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
router-id 192.168.1.1
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous

21
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
End


version 12.4
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

22
!
!
no ip address
duplex auto
speed auto
!
ip address 192.168.2.1 255.255.255.0
ipv6 address 2001:DB8:2001:106:1:1:1:1/64
ipv6 ospf 1 area 0
!
ip address 192.168.120.1 255.255.255.0
ipv6 address 2001:DB8:2001:101:1:1:1:1/64
ipv6 ospf 1 area 0
!
interface Serial0/0
bandwidth 128
no ip address
clock rate 128000
!
ip address 192.168.10.9 255.255.255.252
ipv6 ospf 1 area 0
!
ip address 192.168.10.2 255.255.255.252
ipv6 ospf 1 area 0
!
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
!
router ospf 1
network 192.168.2.0 0.0.0.255 area 1
network 192.168.10.0 0.0.0.3 area 0
network 192.168.10.8 0.0.0.3 area 0
network 192.168.120.0 0.0.0.255 area 1

23
!
!
!
no ip http server
!
ipv6 router ospf 1
router-id 192.168.2.1
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
End


version 12.4
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5

24
ip cef
!
!
!
!
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
no ip address
duplex auto
speed auto
!
ip address 192.168.3.1 255.255.255.0
ipv6 address 2001:DB8:3001:106:1:1:1:1/64
ipv6 ospf 1 area 0
!
ip address 192.168.130.1 255.255.255.0
ipv6 address 2001:DB8:3001:101:1:1:1:1/64
ipv6 ospf 1 area 0
!
interface Serial0/0
no ip address
clock rate 2000000
!

25
ip address 192.168.10.6 255.255.255.252
ipv6 ospf 1 area 0
!
ip address 192.168.10.10 255.255.255.252
ipv6 ospf 1 area 0
!
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2
no ip address
shutdown
clock rate 2000000
!
interface Serial0/3
no ip address
shutdown
clock rate 2000000
!
router ospf 1
network 192.168.3.0 0.0.0.255 area 2
network 192.168.10.4 0.0.0.3 area 0
network 192.168.10.8 0.0.0.3 area 0
network 192.168.130.0 0.0.0.255 area 2
!
!
!
no ip http server
!
ipv6 router ospf 1
router-id 192.168.3.1
!
!
!
!
!
control-plane
!
!
!
!
!

26
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
End

A4-5 Proof-of-concept Network FR Configuration

version 12.4
!
hostname FR
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
!
!
!
frame-relay switching
!
!
!
!
!
!
!
!
!

27
!
!
!
!
!
!
!
!
!
!
!
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
clock rate 2000000
frame-relay intf-type dce
frame-relay route 102 interface Serial0/2 201
!
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
clock rate 2000000
!
interface Serial0/2
no ip address
clock rate 2000000
!
interface Serial0/3
no ip address
shutdown
clock rate 2000000
!
!
!
no ip http server
!
!

28
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

Case Study 5 Paper Final

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Case Study 5 Paper Final

Uploaded by

Copyright:

Available Formats

Jake Lube

You might also like