What You'll Learn

• Understand the basics of IPv6 Security
• Plan ahead to avoid IPv6 security problems before widespread deployment
• Implement secure IPv6 infrastructure, standards and processes to protect your IPv6 network
• Secure transition mechanisms in use during the migration from IPv4 to IPv6
• Secure mobile IPv6 networks to against threats and attacks
• Protect service provider networks, perimeters, LANs, and host/server connections
• Utilize IPsec in IPv6 environments
• Understand the vulnerabilities that exist on IPv6 access networks and learn solutions

Pre-requisites

A good knowledge of general IPv4 & IPv6 networking concepts is assumed. Knowledge on the level of IPv6 Forum Certified Network Engineer Course (Sliver) or Cisco Certified Network Associate (CCNA) would be an added advantage.

Course Outline

Day 1

IPv6 Revisited

• Motivation For IPv6
• Brief Comparison Between IPv6 And IPv4
• Stateless And Stateful Address Configuration
• IPv6 Header Structure
• Comparison With IPv4 Header
• IPv6 Addressing
• IPv6 DNS And DHCP
• Basic Transition Mechanisms
• IPv6 Auto-Configuration
• IPSec Architecture
• Exercise: Refresher (Quiz)

IPv6 Security Features

• IPSec Architecture
• Privacy Addresses
• Temporary Addresses
• Cryptographically Generated Addresses(CGA)
• SEcure Neighbor Discovery (SEND)
• Mobile IPv6 Security
• Dynamic Routing Security
• Question and Answer
• Exercise: IPSec Configuration (Hands-on)

Day 2

IPv6 Security Issues

• Similar IPv4/IPv6 Network Security Issues
• Debunking IPv6 Security Myths
• Morning Break
• Issues Related to Lack of IPv6 Expertise (i.e. Training)
• IPv6 Transition Security Issues
• Security Implication Of Mixed IPv4/IPv6 Network
• Exercise: IPv6 Security (Quiz)
• Impact of Network Address Translation Removal (NAT)
• IPv6 Filtering by Legacy Firewalls
• IPv6 DNS threats
• Rogue IPv6 Networks and Nodes
• Question and Answer

IPv6 Security Monitoring

• Managing and Monitoring IPv6 Networks
• IPv6 Forensics
• Exercise: IPv6/IPv4 Network Monitoring using iNetmon (Hands-on)

Day 3

IPv6 Network Attacks

• Introduction and Effects of IPv6 Network Attacks
• IPv6 Spoofing
• ICMP Attack, Ping Attack, Smurf Attack, PING Flood, Ping of Death
• Port Scan Attack
• RIPng Routing Attack
• DHCPv6 Attack
• ICMPv6 Attack
• IPv6 DAD (Duplicate Address Detection) DoS Attack
• Demonstration of IPv6 Network Attacks (Case Examples)

IPv6 Security Threat Mitigation

• Firewall for IPv6
• Exercise: Configuring and Deploying IPv6 Firewall (Hands-on)
• DHCPv6 and ICMPv6 Network Attack Mitigation
• CSE-6 Overall Summary

Day 4

Revision

• Creating IPv6 Security Policy (Hands-on)

Certification Exam (Theory)

• Certification Exam

Discussion

• Creating IPv6 Security Policy For Own Organization
• Case Study and Discussion
• Presentation of Certificate of Attendance