Ipv6 Firewall Features & Benefits
Ipv6 Firewall ďƒ˜
Internet Protocol v6 is the latest version of IP that serves the function of providing a unique identification number to systems connected across the Internet.IPv6 is the improved and advanced version of its predecessor IPv4.
Features of IPv6 Firewall
IPv6 uses a 128-bit processor address which enhances the total number of possible addresses.
IPv6 addresses are expressed as 8-bit values separated by periods.
IPv6 systems don’t need a DCHP server in order to function effectively.
IPv6 systems can have a link local, site local or a multicast address.
The standard size of a subnet is square of the size of the IPv4 address space. This results in lower space utilization as compared to IPv4. However, the system, as compared to IPv4 is more efficient in network management.
Setting up the IPv6 firewall protection It is worth mentioning here that IPv6 is only provided with the advanced networking pack for Windows XP. In order to set up IPv6 Internet Connection Firewall just use the below mentioned commands.
1- Show- Use this command to view the IPv6 ICF configuration.
2- Show global port- Global ports are configured on all network adapters. By using this command you can view these ports.
3- Show adapter- Click on this command in order to view the list of all adapters configured with IPv6. Adding the adapter name would enable you in viewing all the ports that are open. The different types of ports in this category are Effective port, open port and Ignored global port.
4- Show logging- Would help you in figuring out the logging options that are enabled, location of the log file and other logging configuration details.
5- Set global port - Enables you in configuring ports on adapters. You can use this command in order to open a specific port on network adapters in case you have a computer that acts as a web server. There are different commands like port#, name and protocol in order to help you in this regard. ďƒ˜
6- Set adapter - There are different commands like icmp, type#, port#, name etc. that can help you in enabling/disabling IPv6 filtering. ďƒ˜
ďƒ˜
7- Set logging- Helps you in specifying the location where the file is written to.
Types of IPV6 Address IPv4, IPv6 has three different address types that are commonly used; these include:
Unicast
Multicast
Anycast
Unicast ďƒ˜
ďƒ˜
The IPv6 unicast address type operates in the same way as IPv4; a unicast address is used to send traffic from one source device to one destination device.
This is the most used address type as most traffic (currently) is sourced from one place and destined for one other place; this may change as network telephone and video services become used more.
Multicast
The IPv6 multicast address type also operates in the same was as with IPv4; a multicast address is used to send traffic to a group of devices.
This is used when there is a single source that needs to send traffic to multiple destinations; this traffic can be treated differently by the intermediate devices compared with unicast.
If this same traffic would be sent via unicast methods, these devices would need to process each traffic stream from source to destination separately causing additional traffic delay.
Anycast The IPv6 anycast address type is where IPv4 and IPv6 differ. The anycast address type offers something that was not offered with IPv4 which is the ability to send a packet to the closest device. ďƒ˜
When using anycast, a group of devices are given the same anycast address;when a source looks to send a packet to that address, the routing protocol will calculate the closest match to the source device and send the traffic there. ďƒ˜
Advantages of IPv6 Firewall Provides more address space ( which is being needed in larger buisness scales-example comcast)
More powerful internet (128bit versus IPv4's current 32 bit)
Offers and overall larger scale internet-which again will be needed in the future
Address allocation is done by the device itself
Support for security using (IPsec) Internet Protocol Security
Disadvantages of IPv6 Firewall
It will be much harder to remember IP addresses (compared to the addresses now)
Creating a smooth transition from IPv4 to IPv6.
IPv6 is not available to machines that run IPv4.
Any consumer costs in having to replace an IPv4 machine.
Time to convert over to IPv6.
Our Social Reach
Cyberoam Technologies USA Central : +1-732-412-4896 Delhi & NCR : +91-9899150300 Ahmedabad : +91-9925011328 Bangalore: +91-9880345671 Dubai: +971-4-214 9860 North America 505 Thornall Street, Suite # 304 Edison, NJ -08837 USA
Cyberoam House, Saigulshan Complex, Opp. Sanskruti, Beside White House, Panchwati Cross Road, Ahmedabad - 380006, GUJARAT, INDIA.
sales@cyberoam.com