通過思科 Meraki 體驗僅 IPv6 之旅.pdf

1、#CiscoLive#CiscoLiveRaul Ricano-Leader,Technical MarketingCubanExplorerBRKMER-1752Unleashing the FutureExperience the Journey to IPv6-Only With Cisco Meraki 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEnter your personal notes hereCisco Webex App Questions?Use Cisco We

2、bex App to chat with the speaker after the sessionFind this session in the Cisco Live Mobile AppClick“Join the Discussion”Install the Webex App or go directly to the Webex spaceEnter messages/questions in the Webex spaceHowWebex spaces will be moderated by the speaker until June 9,2023.12343https:/

3、2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKMER-17523Agenda 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicA Brief HistoryConnectivity&SecurityStreamlined OperationsWhats NextBRKMER-17524A Brief History 2023 Cisco and/or its affiliates.All rights reserved.Ci

4、sco Public#CiscoLiveA Little HistorySource:https:/www.vyncke.org/ipv6status/plotpenetration.php?country=wwBRKMER-17526 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveA Little HistorySource:https:/www.vyncke.org/ipv6status/plotpenetration.php?country=wwBRKMER-17527 2023 Ci

5、sco and/or its affiliates.All rights reserved.Cisco PublicNow,who made it successful?Service ProvidersContent ProvidersCellular CarriersBRKMER-17528 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveElements of IPv6 Success(Historical)AutomationBRKMER-17529 2023 Cisco and/or

6、 its affiliates.All rights reserved.Cisco Public#CiscoLiveElements of IPv6 Success(Historical)AutomationScaleBRKMER-175210 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveThe World TodayInternetClient OSEnterprise NetworkISPHigh level generalizationBRKMER-175211 2023 Cisco

7、 and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveMaking the Transition to Intuitive IPv6AutomationSecurityConnectivityBRKMER-175212Connectivity&SecurityIn a Dual-Stack World 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveThe Journey BeganBRKMER-175214 2023

8、 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveThe Journey BeganDeploying IPv6 to all systemsEnsuring IPv4 remained stabledDashboard accessible via IPv6In the cloudBRKMER-175215 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveThe DashboardVisibility

9、Providing traffic informationTrackable address changeInstant window into the networkBRKMER-175216 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFull StackEnd-to-End IPv6ISP supportRoutingAutoVPNClient VPNL3 FirewallSLAAC supportClient visibilityManagementL3 FirewallSLAAC

10、 supportWireless clientsL3 FirewallSecurity(RADIUS)IPv6 Device CompatibilityBRKMER-175217 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveMX and IPv6Static DHCPv6 IA_NA SLAACWAN IPv6 Address PriorityOne GUA IPv6 Address OnlyBRKMER-175218 2023 Cisco and/or its affiliates.Al

11、l rights reserved.Cisco Public#CiscoLiveAuto VPNIPv4IPv6IPv6IPv4Tunnel built over IPv4 automatically usingAuto VPNBRKMER-175219 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAuto VPN:IPv6 OverlayIPv4IPv6IPv6IPv4IPv6-as-a-ServiceBRKMER-175220 2023 Cisco and/or its affilia

12、tes.All rights reserved.Cisco Public#CiscoLiveFirewall RulesType of ruleSecurity&SD-WAN FirewallBRKMER-175221 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEvent logL7 Firewall RulesSecurity&SD-WAN FirewallSame experience enhanced to include IPv6BRKMER-175222 2023 Cisco

13、and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSyslog OutputURL and FlowsSecurity EventsApr 30 14:05:10 10.11.11.15 1 1651345510.097208790 KIAH_MX67 urls src=2601:2c3:887f:3c0:4c6d:7e4c:3890:5c70:52337 dst=2607:f8b0:4000:806:2003:80 mac=3C:06:30:20:E7:07 agent=Mozilla/5.0(Macintosh;

14、Intel Mac OS X 10.15;rv:99.0)Gecko/20100101 Firefox/99.0 request:POST http:/ocsp.pki.goog/gts1c3Dec 20 07:51:14 10.11.11.15 1 1640008274.282059695 KIAH_MX67 security_event security_filtering_file_scanned url=http:/ src=2601:2c3:887f:3c0:251b:6a13:900d:6ff3:52058 dst=2600:1404:bc00:b833:791b:80 mac=0

15、0:0C:29:DE:B3:A5 name=sha256=78c62cf461624edf8f90e14ecdf9c4cdcd8713a3cc6433521c8a93621914a6cd disposition=malicious action=blockBRKMER-175223 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIPv6IPv4BRKMER-175224DHCPv6&RA GuardEarly Access on MSStreamlined Operations 2023 C

16、isco and/or its affiliates.All rights reserved.Cisco Public#CiscoLive 2022 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow do we.calculate IPv6 address distribution?manage IPv6?memorize IPv6 addresses?control IPv6 access?troubleshoot IPv6 issues?get IPv6 visibility?BRKMER-1

17、75226 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveOne Click/No Click-ReadySecurity&SD-WAN Addressing&VLANsTurn on IPv6 on LANOn by default!BRKMER-175227 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDHCPv6-PD Goodness/56DUID type 3 BRKMER-1

18、75228 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveProvider Aggregable(PA)-IPv6 from an ISP(Auto)Automated Prefix DistributionProvider Independent(PI)-Owned IPv6 space(manual)Security&SD-WAN Appliance statusPrefix DelegationIPv6 Prefixes tabN+1 Delegation RequiredBRKMER

19、-175229 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDynamic VLANs FW ObjectsObject offset No need to memorizeIP addressesBRKMER-175230 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAddress Type Detection-RoutesLink-local detection forces a

20、VLAN selectionBRKMER-175231 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting Tools Live toolsPingTracerouteDNS LookupMTRAutomatically run both IP stacksTools tabBRKMER-175232 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubles

21、hooting Deriving Functional AddressesSame link-local and solicited node multicast for all VLANsUseful to analyzing pcaps and general IPv6 troubleshootingBRKMER-175233 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDynamic Routing Making scaling a breezeA newly redesigned

22、experience to manage routing peersWhen in VPN Concentrator modeBRKMER-175234 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAlerts Never Miss Whats ImportantUplink DADDHCP-NA or PD renumberingVLAN Prefix shortageBRKMER-175235Whats Next?2023 Cisco and/or its affiliates.All

23、 rights reserved.Cisco Public#CiscoLiveLate butLeading major transitions since 200637 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKMER-1752 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIPv6 OnlyIntuitiveScalableSimple38 2023 Cisco and/or its affil

24、iates.All rights reserved.Cisco PublicBRKMER-1752Demo 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFill out your session surveys!Attendees who fill out a minimum of four session surveys and the overall event survey will get Cisco Live-branded socks(while supplies last)!

25、These points help you get on the leaderboard and increase your chances of winning daily and grand prizesAttendees will also earn 100 points in the Cisco Live Challenge for every survey completed.BRKMER-175240 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicContinue your educationVisit the Cisco Showcase for related demosBook your one-on-oneMeet the Engineer meetingAttend the interactive education with DevNet,Capture the Flag,and Walk-in LabsVisit the On-Demand Library for more sessions at www.CiscoL you#CiscoLive