IP Address Management

TIMOTHY ROONEY has worked with IP technologies in various capacities over the last sixteen years, including systems engineering and development. He has an extensive background not only in IP, but also in telecommunications, wireless services, and software, having worked at Bell Laboratories, AT&T Wireless, Lucent Technologies, and BT. In his current role as Director of Product Management with BT Diamond IP, Rooney is responsible for the overall BT Diamond IP product life cycle, managing product features and releases, as well as supporting sales and marketing.

"The book aims to be a must-to-have reference for every network engineer. Whenever one encounters a networking issue (not only basic), an answer to the question or the information in which RFC the answer is located can be found." (IEEE Communications Magazine, 1 August 2011) "This guide to Internet Protocol address management (IPAM) presents a practical, technical overview of each part of the IP environment and provides advice on best practices for creating an effective, integrated management plan . . . the work includes numerous illustrations and code examples and would be appropriate for advanced computer science students as well as network administrators and designers. Rooney is an IPAM expert and senior director for an IPAM consulting firm." (Booknews, 1 April 2011)"Today, there is no single book that covers the management of these linkages and services they provide; IP Address Management Principles and Practice will fill that gap. While several books are available for leading vendors' DHCP and DNS services implementations, few exist for IP address planning, and none exist that unifies these three topics." (Security @ ITBusiness Net.com, 28 February 2011)

• Preface xiAcknowledgments xvPart I IP Addressing1 The Internet Protocol 31.1 Highlights of Internet Protocol History 31.2 IP Addressing 71.3 Classless Addressing 131.4 Special Use Addresses 142 Internet Protocol Version 6 (IPv6) 152.1 Introduction 152.2 IPv6 Address Allocations 212.3 IPv6 Address Autoconfiguration 302.4 Neighbor Discovery 302.5 Reserved Subnet Anycast Addresses 332.6 Required Host IPv6 Addresses 343 IP Address Allocation 353.1 Address Allocation Logic 383.2 IPv6 Address Allocation 493.3 IPAM Worldwide’s IPv6 Allocations 533.4 Internet Registries 573.5 Multihoming and IP Address Space 623.6 Block Allocation and IP Address Management 63Part II DHCP4 Dynamic Host Configuration Protocol (DHCP) 674.1 Introduction 674.2 DHCP Overview 684.3 DHCP Servers and Address Assignmen 754.4 DHCP Options 784.5 Other Means of Dynamic Address Assignment 895 DHCP for IPv6 (DHCPv6) 905.1 DHCP Comparison: IPv4 Versus IPv6 915.2 DHCPv6 Address Assignment 925.3 DHCPv6 Prefix Delegation 935.4 DHCPv6 Support of Address Autoconfiguration 945.5 Device Unique Identifiers 975.6 Identity Associations 995.7 DHCPv6 Options 996 DHCP Applications 1096.1 Multimedia Device Type Specific Configuration 1106.2 Broadband Subscriber Provisioning 1116.3 Related Lease Assignment or Limitation Applications 1156.4 Preboot Execution Environment Clients 1157 DHCP Server Deployment Strategies 1187.1 DHCP Server Platforms 1187.2 Centralized DHCP Server Deployment 1197.3 Distributed DHCP Server Deployment 1207.4 Server Deployment Design Considerations 1227.5 DHCP Deployment on Edge Devices 1258 DHCP and Network Access Security 1278.1 Network Access Control 1278.2 Alternative Access Control Approaches 1328.3 Securing DHCP 137Part III DNS9 The Domain Name System (DNS) Protocol 1439.1 DNS Overview—Domains and Resolution 1439.2 Name Resolution 1459.3 Zones and Domains 1489.4 Resolver Configuration 1599.5 DNS Message Format 16110 DNS Applications and Resource Records 17610.1 Introduction 17610.2 Name–Address Lookup Applications 17810.3 Email and Antispam Management 19110.4 Security Applications 20510.5 Experimental Name–Address Lookup Records 21710.6 Resource Record Summary 21811 DNS Server Deployment Strategies 22311.1 General Deployment Guidelines 22411.2 General Deployment Building Blocks 22411.3 External–External Category 22611.4 External–Internal Category 23111.5 Internal–Internal Category 23211.6 Internal–External Category 23711.7 Cross-Role Category 24311.8 Putting it All Together 25312 Securing DNS (Part I) 25412.1 DNS Vulnerabilities 25412.2 Mitigation Approaches 25812.3 Non-DNSSEC Security Records 25913 Securing DNS (Part II): DNSSEC 26413.1 Digital Signatures 26513.2 DNSSEC Overview 26613.3 Configuring DNSSEC 26813.4 The DNSSEC Resolution Process 29013.5 Key Rollover 297Part IV IPAM Integration14 IP Address Management Practices 30514.1 FCAPS Summary 30614.2 Common IP Management Tasks 30714.3 Configuration Management 30714.4 Fault Management 32414.5 Accounting Management 33414.6 Performance Management 33814.7 Security Management 34014.8 Disaster Recovery/Business Continuity 34014.9 ITIL Process Mappings 34214.10 Conclusion 34615 IPv6 Deployment and IPv4 Coexistence 34715.1 Introduction 34715.2 Dual-Stack Approach 34915.3 Tunneling Approaches 35315.4 Translation Approaches 36815.5 Application Migration 37415.6 Planning the IPv6 Deployment Process 374Bibliography 383Glossary 392RFC index 394Index 408