IPv6 Transition: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
(2 intermediate revisions by one other user not shown) | |||
Line 7: | Line 7: | ||
== Transition Timeline == | == Transition Timeline == | ||
*# Migrate the Network Infrastructure to dual stack | *# Migrate the Network Infrastructure to dual stack (Mid-March) | ||
*## Remove PFSense from the mix | *## Remove PFSense from the mix | ||
*## Migrate to Juniper SSG5 Firewall/Router for edge services | *## Migrate to Juniper SSG5 Firewall/Router for edge services | ||
Line 24: | Line 24: | ||
*##*: IPv4 - 10.40.0.0/24 | *##*: IPv4 - 10.40.0.0/24 | ||
*##*: IPv6 - 2001:470:e186:40::/64 | *##*: IPv6 - 2001:470:e186:40::/64 | ||
*# Add internal BIND daemon with A/AAAA, Dynamic Updates, and DNSSEC | |||
*# Add additional services (OpenVPN which provides IPv4 and v6 over tunnel) | |||
*# Update current space python scripts (Unallobot, occupancy scripts) to work over IPv6 and IPv4 with a preference to v6 | |||
*# Determine feasibility of updating external website to IPv6. | |||
[[Category:Project]] |
Latest revision as of 12:49, 8 January 2023
Unallocated IPv6 Transition
The greatest thing about hackerspaces is the ability to change them and form them in ways that you simply can't do in a larger, more permanent environment. This allows a great test bed for transitions such as IPv6.
I've broken down the transition into a number of steps which also happen to coincide with other changes going on at the space as part of each migration. IPv6 will be included as part of the plan from here on out.
Currently Assigned HE Tunnel Prefix: 2001:470:e186::/48
Transition Timeline
- Migrate the Network Infrastructure to dual stack (Mid-March)
- Remove PFSense from the mix
- Migrate to Juniper SSG5 Firewall/Router for edge services
- Upgrade core network to include multiple subnets (Core, DMZ, LAN, Wireless)
- Assign IPv4 and IPv6 network prefixes to each network
- Core
- IPv4 - 10.10.0.0/24
- IPv6 - 2001:470:e186:10::/64
- LAN
- IPv4 - 10.20.0.0/24
- IPv6 - 2001:470:e186:20::/64
- Wireless
- IPv4 10.30.0.0/24
- IPv6 - 2001:470:e186:30::/64
- DMZ
- IPv4 - 10.40.0.0/24
- IPv6 - 2001:470:e186:40::/64
- Assign IPv4 and IPv6 network prefixes to each network
- Add internal BIND daemon with A/AAAA, Dynamic Updates, and DNSSEC
- Add additional services (OpenVPN which provides IPv4 and v6 over tunnel)
- Update current space python scripts (Unallobot, occupancy scripts) to work over IPv6 and IPv4 with a preference to v6
- Determine feasibility of updating external website to IPv6.
- Migrate the Network Infrastructure to dual stack (Mid-March)