<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><b><span style="font-weight: bold;"></span></b><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Keith Hare said:<br>> 1. Finding firewall (or whatever vendors are calling it today) <br>> equipment that supports IPv6<br><br><span>From <a target="_blank" href="http://www.getipv6.info">www.getipv6.info</a> click "IPv6 Deployment and Migration Planning," </span><br>then "Device Support." <br><span><a target="_blank" href="http://jitc.fhu.disa.mil/apl/ipv6.html#security">http://jitc.fhu.disa.mil/apl/ipv6.html#security</a></span><br><span><a target="_blank" href="http://www.ipv6-to-standard.org/index.php">http://www.ipv6-to-standard.org/index.php</a></span><br><br>> 2. Finding
an upstream that supports IPv6<br><br><span>From <a target="_blank" href="http://www.getipv6.info">www.getipv6.info</a> click "IPv6 Deployment and Migration Planning," </span><br>
then "Providers Currently Selling IPv6 Transit."<br><br>> The killer question is will we be able to find robust v4 to v6 <br>> solutions when the time comes when we need to get traffic from <br>> v6 only external users or sending traffic to v6 only sites. I am <br>> assuming the answer to that question will be.... yes.....since when <br>> the time comes there is going to be a huge demand for them. <br><br>I'm very skeptical. Stateless NAT46/64 means a 1:1 mapping of<br>addresses, which doesn't help after IPv4 is unavailable. Stateful<br>NAT46 isn't even on the table at IETF yet. Doubtful we'll have a<br>product in time. No equipment vendors say they'll have one-to-<br>many address family translation by EOY 2011.<br><br>> The point at which you need to do something about v6 is when you <br>> are
going to start getting external traffic (SMTP, HTTP, etc.) from <br>> v6 only
users... or when your own users are going to start to want <br>> to access v6
only sites.<br><br>As an enterprise network operator, do you support a VPN for<br>remote employees? Once they can't get a global IPv4 address, if<br>they change ISPs they'll either be behind IPv6 or large-scale NAT<br>(i.e., NAT444). Will your VPN work?<br><br>> lots of network hardware vendors that support IPv6, take a few <br>> minutes
and see if you can find where on their web sites and spec <br>> sheets they
document IPv6 support.<br><br>I went to the websites of half a dozen large network equipment<br>makers and searched for "IPv6." AdTran should be embarrassed,<br>but otherwise, there are hits at all of them. You can complain <br>about features that are late in coming in some edge platforms, but <br>nearly everything will at least allow an IPv6 address now.<br><br>Lee<br></div><br></div>
<!-- cg31.c2.mail.re1.yahoo.com compressed/chunked Thu Dec 10 14:15:25 PST 2009 -->
</div><br>
</body></html>