IPv6 is Broccoli: IPv6 in action in the network​

Hello, good morning, everybody. Thank you for taking the time again to join the session. The 3rd session in the series of IPV six today. Again, we have our.00:09Our special presenter, Nicole Nicole Warger, who's the technical solution architect and chief and CSO.00:20For those who do not know, Nicole is the distinguished speaker recognized multiple times at multiple events for the expertise she brings to table on IPV six, so I hope you're able to make the most out of the session that Nicole has to offer today. It's a privilege to host this session and thank you for.00:33Taking the time to be here and learn from, learn from Nicole on the topic IPv six in ash action in the network. The.00:52There were two sessions in the, in the last two weeks. There's one upcoming in the next week also, so, we look forward to seeing you in the next ones as well, but for today, IPv six in action in the network, Nicole, the floor is yours. Thank you.01:03My father, thank you so much and hello everybody. Correct action in the network, right? And I mean we we continue talking our discussions about brocacoly. A little bit about myself as you might have noticed by the accent a little bit because I am Dutch and.01:19And that's why also mentioned the CSO because I'm also besides the technical solution architect in Cisco, I'm also the chief stroke platform officer, and you can already see the delicious cookie in my hand, which I tend to walk around with on the the every Cisco live.01:39Events giving them out for free for everybody who's hungry or is willing to challenge me on IPV six. Personally, I prefer also to talk forever about formula one cars for that matter and of course and for this weekend for the people that are also.01:59But.02:19We will have Japan coming up as well. So, but we are going, as I said, we are going to talk about IPv six and in the network today. So as in, you know, what's happening there and and what are you encountering, you know, Nicole, I am actually going to share best practices what I've seen.02:20Myself. So this is really.02:40From the heart, from what I've learned and oh boy, I mean it was those catch your moments like aha. And I will tell it in a very fluent and nice way because that also then means, you know, you have a memory on how that works. So practical lessons I've learned best practices, you know, what you.02:43You should do, what makes sense a lot, and then real world strategies for IPv six deployment.03:02If this is your 1st session, I always say it's very overwhelming what I'm telling, but if you, for one thing you need to remember, you know, about this, well, maybe 45 min ish between an hour depending on how many questions there will be, IPV six is Broccoli.03:11You probably think like, but hold on hold on. I was going to learn something technical here and then you're, you're throwing this brocalye this this this vegetable in there nicole. Well, I'll leave it up to you. And for the people that have seen my previous sessions.03:30They already know and they probably it's so engraved that the moment they see your brococalyte, the 1st thing they go, yeah, we're gonna talk IPV six. So, and here's the thing. Practical lessons, right? So we are going to talk about RFC 67th.03:4624.04:07Which is if you have trouble sleeping a very nice RFC to read before bedtime, it's a lot of ascii. But that RFC is very let's say your, your, your head hold as in how does this work or I didn't know IPv six was tried 1st. And we also have.04:08Something that's called path NTU discovery but oh boy.04:28Because that's the other thing where in the legacy protocol we sort of fixed it in the network path MTU discovery yet in IPv six, it's between the sender and the receiving host, you know, to come with an agreement which MTU you're gonna use.04:31So, story number one, you know, did you know that already, let's say in your household, because that makes my life a little bit easier. So in your house, most likely it's a layer two environment specifically if you have kids and they have an X box and all those things, but also in your.04:51Surprise network, you are already communicating over IPV six. And I have stories, war stories and and nicole's stories to explain because that makes it easier for you to go like oh that's how it works. So.05:12It's a story with my husband because rule number one of my husband in his life is to annoy his wife on a daily basis, and in the beginning of when we we started meetings so even before we were married, he would say ah I don't need IPv six because you know if I'm running juice stack, you know, what's the benefit?05:30With of you know losing the legacy protocol because.05:50It's still there. I'm running dual stack. So he's like, ah I don't need this until one day. So we were already married back then, I think just about we are now married 20 years and he was going to a customer. So at the dinner table, he said to me hey.05:53People.06:13I was going to the customer and because I had to upgrade my VMware service and and so ok great yeah and so I was busy doing my work and I noticed I was missing missing a batch for my VMware. And he said, Oh, you know what? I needed to, you know, download this VMware patch, but I didn'.06:15Didn't have any.06:35Legacy IP towards the internet. I have NO default gateway. And, and he said that's quite old. And I just looked at him. Yeah yeah now that makes sense, and if you have don't have a legacy default gateway, of course you can't get to the internet et cetera. Still I am thinking where the heck is this going with this?06:37You know, with his story because he sort of said, Well, but you know what, I was connecting to the VMware service because that was working perfectly fine. And.06:57Then he said, Well, you know what? Well, looking more deeper in into the the packet captures, he said, I was connecting over IPv six and I said yes. And he looks at me. And then I I said to him yes, makes sense because your clients.07:08Which is a dual stacked because every client has legacy IP and IPv six enabled. So there's an IP address, an IPv six address on there. And when you are the on the local link, well guess what?07:27All other servers nowadays by default also have IPv six enabled, so they also have a link local address and so that means they start communicating with each other because they find through neighbor discovery, they find each other. So they are already talking on V six.07:43And why is that the case? Well, guess what? RFC 6724. Before we even, you know, think about the legacy protocol, I mean the defaults or the link local address in IPv six has a higher preference.08:01A preference of 40 compared to the legacy protocol, which is only a 35. So address selection because this is how this RFC is, is known for, address source selection says, well, if you have IPV six, then 1st we try.08:18IPv six link local, and then if that's not working, so if the VMware service didn't have any IPv six, we would fall back to the legacy protocol. And so this is why, you know, you, you would able and even you don't know that you are talking IPv six because that's the cool thing.08:38Over the years, you know, the, the ITF and let's say the industry try to make the transition to IPv six, you know, as, as, as peaceful and and like it works versus the, oh, you know what if we don't.08:58If we don't do this, you know, and people are, yeah, this is too difficult, let's not do it. We never get there because in the age of AI, we really need to move, you know, for scalability, we really need to move to IPv six and we need everybody.09:16So and because there of course there are still corner cases that things are not working. Last week my cousin, he was still he was angry at me because he says Nicole, it's your fault, I turned on IPV six and something was not working. And when I turned it off, you know, it's it stopped it was working fine. So it's your fault, and then he said.09:33Yes and then in the end he figured out, of course, the technical reasons and then so he was still happy for me.09:53So, this is the 1st thing, you know, on the best practices in the network whilst you are exploring and getting your, your, your hands dirty or your feet wet depending on on what you prefer.09:59You will always use IPv six. Ipv six is tried 1st. So that's the cool thing. Also, you need to keep in mind that if it's still working. So then we go, you know, to the to to to 2nd story because of course there's more.10:14In a dual stack environment, there's always two, I would say. This is the one that would kick you in the butt a lot because until you are transitioning to IPv six only.10:31Always in the dual stack environment, you will always hit this challenge. I will not say a problem. It's called the tired nickel and making errors in access lists. And.10:48This one, if you are not working on your network on a daily basis, because that's the thing, right? You, you install something, it's working specifically on IPv six. I mean at Cisco live, you know, you, you're they've been running for Juicy for a very long time. In Amsterdam for the last two years, we did even IPV.11:03V six mostly but in the julistic environment, you always need to remember there's two.11:23Because, you know, it's it's works perfectly fine, you know, when you have everything running double because the cool thing is that if it doesn't work on IPV six it will fall back to the legacy protocol. So.11:31You don't need to tunnel MTU challenges are are less the the the you don't need you actually need less net, so that's also a quite a cool thing and in case you still have legacy applications, you know, you can still fall back on the legacy.11:45If that is really needed. But in this example, as you can see here, everything is capable of running both address families?12:05So the downside of course is that everything double the CPU, double the RAM and all those things. So we are now in 2026I mean it's really time to consider IPv six only because there are tons of examples that are running it as we speak and.12:14And.12:33And you might still consider legacy islands if needed for specific things. I would say don't say IoT because my IoT environment at least for the last year and a half, I can, that's where I noticed myself, my IoT devices are also running IPv six now. So.12:35The market is.12:55Making that transition and if you have people that are just coming back from college or university, to be honest, they really, really want to work with IPV six. So embrace it. I mean, they are the future and they need to run the future networks and not the, these old ones. But.12:57Reality, back to reality. Oops, there goes it. In a dual stack environment, we have both running. So what does that mean? There are pros, like I said just before, so the classic model legacy applications, and, and you can make it.13:17Decision you know if you still wanted to have the legacy applications services running or you make the transition to IPv six.13:37But like I said remember, in the previous story where my husband annoyed me, right? It doesn't solve the legacy exhaustion because we are still using it. Apex and OpEx double because two address families.13:46Still scale could be a concern, and there and now we come to the challenge where my story number two comes policy synchronization, because that makes it sort of of a challenge. Because here we are. It's already 14 yamming time flashed, 14 years ago.14:02I was working together with my colleague Andrew. We were in charge in the knock of the IPV six environment. And so, again, like I said, the, the network core was running dual stack.14:22And we were also known as the two people, the two crazy people because yes, we're doing this fancy IPv six stuff. And so, but we didn't give up. So, before the event we made everything working, we fixed all the problems, and then for your for your perception and and imagination.14:35So during Cisco live, so there's a whole mock team of, let's say.14:56Ten people. It's a quite a big crew and what we basically do, the majority comes in at 7aM. In the morning and looks at the network, you know, everything is still running fine honkey dory, and and the day runs making sure that everybody is, is working fine. So looking at.15:00At the, the, the dashboards, checking if nothing is is helping there looking at social media, if people are complaining that wireless is not working and all those kinds of things. And if, if they see it, they immediately jump on it because of course they are also curious to see where the problem is.15:20So then the majority of the of specifically in 2012 for sure, I mean because we were also back in the day running a lot of data code as well, so some stuff didn't work, so we worked directly with the business units and what would happen is that easily we would work till 10pM.15:41At night and then after that you would we would go back to the back to the bar, have a few drinks, and so then around 02:00 A.M. ish.16:01Depending on how much fun it was and and how adult you would go to sleep and then rinse and repeat so at six, you know, you would wake up 06:30 ish breakfast back at 07:00 A.M., you know. You can imagine that a bit of lack of sleep, you know, you get tired, you potentially can make.16:09Mistakes, well.16:29Of course, you know where I'm going. So here we are on Friday morning and in Europe Friday morning Friday is still a half day and there's where, where two rounds of presentations are happening. Exams are still being taken. And we were looking as a whole, so not IPv six related as a whole.16:31Oh, we were looking over the over the network and said, oh, we need to block some traffic because we there was some traffic we did not like that was going out. So we decided, ok, we need to make an access list and let me just quickly see. Yes. And so here we are, you know, that.16:50Oh, we initially, you know, my colleague Andrew who was working at tech at the firewall back in the day, he said, I should not make this change because I'm tired. And we sort of all said, well, we're all tired. It doesn't matter who. So.17:12But for your extra information, so he worked at tech at the firewalls, our two routers towards the internet, our ASR one case, and so he actually had to make an access list on the legacy IP. So he opened two windows, he put the access.17:32This list in there, we looked with two other people, so there were four so eight eight eyes, so four set of eyes looking at the access list. And of course, I mean, I always joke about the fact, I mean, when you're in a enterprise in a conference, you know, you don't do one and test it. No, you open the two windows in an.17:52The environment, you copy and paste on the same moment and on the moment when you say go, you hit go on the two of them and I still remember Andrew knocking, you know, and, but it didn't move, so for the people that know this quite well, you know, the CLI should move and it didn't move anymore.18:12Only one German noticed this and he bends over and he says, Hey dude, you put in the wrong network mask because that's what you do in in the legacy, right? In in IPV six you don't put in the mask, you just give a prefix. And so there was a split second and then.18:30Everybody knows like, oh, nobody can reach the internet now because we are even looked out.18:50I've never seen men run so quickly. Oh my god, because the data center where the, the, the routers were, they were because it's the London excel. It was 2 km. I kick you not, it was very far. And so they were running very fast. So and and of course you got like oh shoot shoot shoot.18:56Now, as you notice, right? We were, so we rebooted the machines, of course they came back up and and I'm not sure whether anybody noticed, but at the end of the, of the conference, so let's say let's say 6 h later, you know, we were sort of.19:16You know debriefing ourselves, you know, what happened. But together with a guy from.19:36On the dashboards and he was listening to the whole story and then he he just politely said, why did you run? You could have reached the boxes over IPV six, because remember, we made, we made the the access list only on the legacy IP and we didn't change any, anything on IP for.19:41Two six.20:01That was a nice one, right? So this is like the, ah, good to know. Literally. So that one, I can, it's it's a almost it's not a NO brainer, but I can safely say that you will forget one or the address families unless you're really.20:03Not in a hurry, think about, ok, what am I trying to block here? So basically, I mean if you are blocking, you know, the Telnet for, which is a very good reason, you could block just the ports by itself, so then you're done because then you're already also blocking it automatically for IPv six.20:22But if you're doing something specifically or you're doing an allow port for instance, consider also allowing it.20:42For the IPv six because most likely that user is coming into that area on IPv six related. I can safely say, if you don't do it on a daily basis, story number two definitely will hit you.20:50So now here we go to story number three. I mean, there there's tons of one. I mean, this is my favorite, you know, because I I always then say people in the room raise your hand if you are in security based. And if it makes you know if if you're really passionate about.21:09And then I look at them and I say do not block ICMP. Then they start laughing and I say, No, definitely don't do it because IPV six relies heavily on multicast, but the multicast messages that are coming back and forth, so neighbor solicitation.21:27Neighbor advertisements which I I used in the previous sessions and router solicitations, which are part of the neighbor discovery protocol.21:47Are all ICMPV six messages. So that means that if you are blocking ICMP, in general, you are also blocking IPv six communication. This basically means that IPv six will not work. That's, that's that's I can safely say that's almost.21:56A NO brainer. So, should I block ICMP V six? So short answer, NO. Because one of the things besides one of the things is also path MTU discovery.22:16Like I already said at the beginning of this session, because it's between the source and the destination, we need to come to an agreement which MTU MTU we are going to use. But how's it gonna work? Because on the link, you know, this source address, it has an MTU of a 1500 and then it the packet traverses.22:35Towards the internet or towards over the the routers towards the destination. However, in this story, you know, router two says you know what, my MTU is actually smaller, 1400. So what it does.22:55It sends an ICMP V six packets to Bigbag. You can already imagine that if you are, let's say on router one blocking ICMPV six. Yes, that means that the source will never know.23:12That he needs to make two packets. So he just sits there and waits and waits and waits for the connection to happen because it did have the connection is, you know, the, the initial TCP, you know, to the destination, but now you know while sending packets.23:28It needs to know, you know, that he needs to actually make the packets in two.23:49The behavior what you will see here in this is in specifically in web browsers because that's where you can let's say, the moment is that it's a white space and it circles forever. And when you are looking in your web browser and you have your your nice little extension IP full.23:55An IP four is a very nice extension where you can see.24:15If it's connecting over IPv six because then it's green Green is brokenly and or red legacy but then you also know that specifically if you see a green that it's establishing off V six and you don't get any traffic you got like ah.24:20Story number three discovery because the source needs to, so in this case now the packet did come back and then I'm sending the two packets towards the destination for a good communication. So fun facts.24:37This was similar behavior in the legacy days. So do not fragment. However, IT administrators did not really understand back in the day, you know, what they had to do on their web service in order to fix this problem. So, the, the.24:55The the companies like Cisco HP or let's say all the that make routers what they did, they fragmented.25:14The the packets on the router itself, and that's also why you needed a lot of memory because there's a lot of CPU involved and now with IPv six, that's actually quite cool because the router doesn't need to do this anymore. So, it's less CPU intensive on that matter.25:22But still should not block ICMP because that way otherwise you will not see any connections and, the, the user experience will definitely be degraded.25:40So yeah, slow connection because that's how you that's how you feel feel about it. And, but mainly it for you to remember, do I see my packet to be coming back?25:59It's one of those things. So here we go to number four, because of course I mean in all my, my series, you know, I have tons of stories. I can do a a with an adult beverage I can talk forever before you fall asleep.26:14But you know.26:34One of the things, you know, when you are making changes to your network, and so in the previous story where in the story number two when I was talking about access list on the legacy, and then when we forgot to take, we we've sort of forgot that we had a IPV six running as well.26:36Well, this is another one. I always joke about the fact if you are making changes in the network and on an IPV six, make sure you know you take the Monday off and turn off your phone. Because of course, I mean one of the the standard stuff you would do is is making sure that things that are not allowed.26:56In a legacy world's you know you would also, you know, end with the last line denying deny IPv six any any actually deny IP four any any anywhere. So.27:16But you see where I'm heading here. In this case, you know, I'm permitting some host towards a web server and like I said, always make sure you know you take the Mondays off because if you are making an access list like this.27:29Well, guess what? Your manager will not be happy and probably when you come back to the office on Monday or on Tuesday for sure actually to be honest, your manager probably will drive to your house and knock on your door.27:46As in why don't you answer the phone? Because nobody can work on IPv six anymore because we forgot something and that's why, you know, when you're looking at this space, you go like nickel, I think I should, you know, I missed a couple of lines.28:01Definitely. So because this is also to learn about how is the IPv six behaving? Because one of the things you need to permit as well is neighbor discovery. So neighbor solicitation neighbor advertisement, so trying to figure out who's my neighbor.28:22So in this case, you know, so Bafana is this, we are using we just used a neighbor solicitation which she sent to me and I actually sent her back a neighbor advertisement. So this is how, you know, you are creating your your cash state machine and if you are not putting them in.28:41As an accept. Well, guess what? I am not able even to reach the web server, because the web server doesn't see those messages because you you're actually doing a neighbor solicitation and you're expecting a neighbor advertisement.29:01One of the other things which is key as well is that, I remember, I didn't put it down as a story, but my colleagues a couple of years ago, he was implementing in his lab IPv six and then he said to me Nicole, I love this IPv six but I don't know why, but it's, you know, it always stops working after.29:18For a while.29:38And then I said like, ok, look, show me your configuration. And then what he had in his, on his ports towards the the clients. He had neighbor discovery suppress. And then I said to him, you must not do that. And he's like, but I don't want, well, NO, you need.29:39The router advertisements arriving to the clients because the clients on the moment when it gets a global address through either DHCP V six or stateless address out of configuration, after 15 min it still needs to make sure that the router.29:59The prefix is still allowed to be used. So it needs to get that periodic router advertisement. If it doesn't get that.30:19Well, guess what? Then the the hosting's up, there's NO IPv six and it will just drop the global address. It will still of course keep the link local address, but you would fall back to the legacy. So, and that's not where we're going because remember, our goal is to IPv six only.30:29So that's where we're going. So now in the 1st 30 min we've been talking about, you know, the, the, the stories, the war stories Nicole has experienced over, well, I've noticed almost over my 14 years, at least 14 years. I started in 2012.30:47Of in London at the NOC, but you know what, there is tons of best practices as well for you to adhere because that makes you know life easier. And you know what, I can safely say it's not an Ikea.31:07So I would definitely say, it's, it's less painful, but, everybody, you know, has their own approach. And the 1st one is actually quite simple because on the moment when you're making the decision saying, you know what? Yes, let's let's do this IPv six in our enterprise.31:24At home you actually are getting a prefix anyway from your, from your service provider. Potentially you could do the same, you know, best practice at your house. I'm a lazy person, so I just I didn't bother to.31:45Address plan my home because, well, you know what there's I have a/forty eight, I have a lot of addresses there that you know, I don't care which address is being used. However, if you are going to deploy IPv six.32:04Rule number one, let's go of your legacy thinking. Very important and I I pause for a reason is and that's why I also wrote this, this article already in in four years ago, 2022.32:19You will, I can safely say because still till this day when I talk to any customer, they always have that, but I don't want to waste IPV six addresses. So I know, and then I say NO this is the best part you are in the candy store.32:37You.32:57Have enough money to buy the whole candy store, you can pick and choose whatever you like. There's NO concessions if you want a big candy or you know what, if you're into cars. If you want a big maybuck or a bram, a German car, Mercedes whatever or.32:58Any American car that, well, because actually there's equivalents Holdens, you can have it. That's the best that you don't need to be afraid doesn't fit on the roads? You know, and all those reasons. So that's why, but I like the candy store because I'm a sweet tooth.33:18So, when you are going to make a address plan, you know, there are four rules for you to, let's say, not adhere, but you make use of them. And the 1st one is keep it simple.33:36And it's very blunt reason because you don't want to spend weeks explaining to somebody else. I was called rubber ducks, you know, you do rubber duck troubleshooting where you put ducks in a row, you explain it to the ducks. And then when the duck's not, you know, then you know that.33:51It was easy enough to understand.34:11Not everybody has ducks, I have a couple of them, but if you don't have ducks, use a colleague. And in a address plan you, I would highly recommend to involve even the security departments because perhaps the security department has some good ideas to make the address plan, let's say a little.34:15Bit different because then it will reduce access lists, you know, lines.34:34Win win, and security people are really nice people. I'm one of the security people as well besides networking. So, and I can still smile and talk IPv six. So simple, don't make it over complicate. We as in the IT I mean, we tend to start very simple and then add compli.34:39Complexity to it, but don't.34:59Simply don't. So that was rule number one. Rule number two, you can actually embed information in your address plan because that's the cool thing. So in the prefix area, you can actually, where you get from, from either your service provider or from Aaron.35:01You can make location country, place in the network, you can address VLANs. You can, you can do all funky stuff in the prefix part of your, of your address plan. So how does that work?35:21So like I said, I have here at home a/forty eight. And so keep remember that I said in the earlier sessions an IPv six address is a hundred and 28 bit address and normally for, for best practices you will use only so the/sixty four.35:38Is let's say, the part.35:58Like that you will use. And that means that the last part is your host addressing because that's used for stateless address auto configuration. If you are addressing clients, if you are addressing servers, you could potentially work there, but keep in mind that if you are reusing that space, I mean.36:01We that/sixty four is reserved for stateless address out of configuration.36:21So in a/sixty four at what you get, let's say at the 1st part, like I said/forty eight, that means that I have 16 bits to play with to do location country.36:27Legacy addresses, link local global addresses to embed in there and 16 bits. So that is 65530 six/sixty four, so options.36:44But that's a lot of options. If you think you need more than 65 thousands because you want to address every VLAN, for instance, as an example, you know, you can add more/forty eights to a branch as an example, because that's quite one of the other best practices, a/forty eight to a branch because also if you want to use B.36:59GP, that is the the smallest block.37:19That, the IPv six global routing table will take. So/forty eight, don't go smaller for branches. Don't make your life too difficult. Because here comes the scary part because once you now, you know, make let's say, well, you know what?37:22But my 1st my 1st bit number one is the, the Americas, and then let's say we also need to address Europe and Asia pacific. But rule number three before.37:42I even said number two is Europe and number three is Asia Pacific, built in reserve. Because in my session, the 1st session I showed that you will never run out of legacy of of IPv six addresses.37:57I explained that if I give you 10 million addresses per second, a/sixty 4a/sixty four will take 58494 years to exhaust a/sixty four, and so now I have a/forty eight, so.38:14I can easily build in a reserve because you don't run out. The cool part is, is that if you have, let's say one and so bit one and bit two, number one and number two for the Americas, then it also is nicely for those access lists again. So the security department.38:33Would definitely love you and you will not run out of IP addresses.38:53Also in the early in the in the days, you know, really sh engineers really struggle with a/sixty four on the point to point link. But then I said, what if it doesn't become a point to point link in future? So, but.39:00You'll be fine. And then last but not least on the four number rules, you know, make a good aggregation because if you have a good block, you know, it scales really nice and it's also stable, you know, throughout throughout your network. Like I said, access lists, your security department will love you for that.39:16So those are the four rules, you know, to keep it you know to make it life simple. And then always remember rule number one, keep it simple.39:37Because that's the thing to always come back. Did I keep it simple? Cause we tend to love, start simple, and then in the end you go like, oh, this is a challenge to remember remember. Actually to be honest, you know, a hand has five fingers, so there isn't secret rule of number five.39:52Remember, don't fear the waste of addresses. That point to point link has an 18.4 quintillion addresses and knowing that you only need 212, picks people out.40:10I can imagine, but you will not run out of IP addresses. And if you do, please send me a message and you'll get some scope off will send to you. But so far all all time when I made this statement.40:27Nobody has that, you know, has come back to me or demanding more stock vifles for the facts. I will not sing, but it's it's let it go. Let go of legacy thinking and you'll be definitely fine.40:43The one of the other best practices before we are almost reaching it to an end, because some of the things, ok, should I use stateless address auto configuration? Should I use DHCP three six? Well Nicole, you know, I have Android in my environments. That means you actually need to.41:03To use stateless address out of configuration.41:23In conferences we are using stateless address auto configuration because it's, it's sort of not scared to to have clients actually auto generate their addresses, but I can understand that you, if you want to keep control, you can potentially create two VLANs.41:27Where, you know, you put the androids through a mechanism of identity service engine in a different VLAN and you give them slack. And then where the other clients you actually give them an IP address through DHCP V six. So that's one of the ways you can do it. There are.41:45In the works that, that Slack could potentially at some point address it in DHCPV six, but that's an ITF which is still far away. Make sure that, you know, on the moment that.42:05You say to yourself, well, you know what? I am not running IPv six at this moment. Well, like I said, remember story number one with my husband and they were communicating. Check your firewall and make sure you have already the appropriate IPv six.42:20Access lists in play because it might be that it's already working. Reminds me of another story back in when I just joined Cisco 18 years ago where in the Netherlands students actually figured out.42:37That's certain websites, if you search them over IPV six, they were working fine. But if they, if you searched them on the the legacy protocol, they were blocked. So this is how I remember that still, you know, where the the customer came to me saying we need, we need the IPV six.42:52X access list. So besides from the security reasons, well guess what? Are you already monitoring and logging traffic for IPV six? If not, why not? You know, probably do because you'll be highly surprised.43:12That there is more IPv six traffic than that you know already. And maybe there's traffic you don't want to happen, you know, going back and forth. And that's similar, you know, when DNS supports so make sure that besides.43:31That you are capable of the DNS records. Keep in mind that quotes A records, so IPV six records, are able to traverse over the legacy protocol.43:47So if there's a IPV six quad A, so if there's a quad A record, it will be sent back to the client and if the client has a linked local address and maybe perhaps the server is on the same link. Well, guess what? Remember RC 6724?44:03IPv six and it will communicate over IPv six. So think about perhaps enabling DNS also on V six and again monitor how many quad A records responds.44:21So I I'm so proudable, not proud of myself, but 45 min in because you know, I would safely say that a good hygiene or a good health, right? Because from a long term perspective, you know, IPV six is really brookly because that's where I'm going actually with my statement.44:39Because it's internet brokely and it's.44:59Seriously good for us in the long run. We know it's healthy, but you know, by even eating brokerly now, you know, you go like, yeah, you don't see the benefit, you don't feel the benefit. You only see it, you know, when you in future, when you are, you know, years old etc. So.45:02Start deploying it now. Yes, NO sugar rush, but you will definitely enjoy and, and see the benefits of the future of the network. So one of the things to remember, right? So don't be scared.45:21I mean, I am here. We are here to help you. There's a lot of forums that are keen to, to assist you for any question. Other things so duel stack. I mean, for sure, if you are running duel stack, you'll, you'll definitely forget one address family.45:36Because it can be that you are so focused on V six that you forget the legacy address family. Security wise, by the way, secure your your IPv six like you secure your IP your legacy. If you don't do any security on legacy, don't bother doing it on IPv six as well because.45:55IPV six is just as secure or just as insecure depending on my look at it glass half full glass half empty as the legacy protocol. So there's NO more secure or is there's NO less secure.46:17And then rule number four on this one, let go when it comes on address plan address planning. Definitely think about, you know, ELSA and sing. Let it go, let it go and be that kid in the candy store.46:34You can have it all. If you want it, you can have it. If you need more addresses, go to your service provider, go to Aaron, they will give you a very chunk because they are not afraid. And if you think, you know, after this, this session, you think to yourself, yeah, you know what Nicole, I really, you know, want to learn.46:49And and and I'm keen to ask questions, you know, we, I had created this Webex room some time ago and I would say.47:09Scan the QR code code, join the Webex, and, I am randomly putting stuff in there which makes sense for the the the the field because it's an external, so people are in there from worldwide. It's also community driven, so there's a lot of people that are curious.47:17On the moment you ask a question, everybody jumps in. So it's not only Nicole that's responding. Everybody's keen and and curious about your learning curve, they are experi telling their learning curve, so definitely join that.47:37And if you think, you know what, I would like to follow you Nicole on LinkedIn, definitely, I would say please follow me on LinkedIn and you can click on the connect button there and you will see a lot of.47:53IPV six posts mostly because that's I think it will benefit as well. So next week, by the way, we're almost there, then the the 4th of the series will happen and NO it's not an April footh joke and NO, I will not tell that IPV six was one April fool, not at all, but.48:09Next week we'll talk about IPV six trends challenges and success stories, and that will be the last one in the series.48:30So with that, do we have any questions? Thank you, Nicole for the great presentation today. Like always, I think we have learned a lot on how the IPv six come comes to value in the real time scenarios. Thank you for the story sticking the story and it's interesting to see.48:38See how your close people that you work with and connect with on a daily basis are getting affected and, you know, seeing value with IPv six. I hope that in this today also, you know, see, much value into in in transforming into IPV six and.48:58With that, I think like Nicole said, we have one last session coming up next Wednesday at the same time. We hope to see you all come back and extract the most of it. The recordings of this session will be on the community page. The community page is work in progress.49:17Yes at this time. So I'll keep you, I'll share the share it on the next session when you're when everybody's like you know on the next session because that's the final one. But again, thank you so much for taking the time and being with us today. If there's any questions that you all have, we'll wait for an, 2 min you can raise your hand.49:37And then I'll unmute you to ask your questions with Nicole.49:57Alright, I think the recording will be uploaded onto the SharePoint and we'll share the SharePoint link on the next session. Thank you everybody for your time again. I appreciate it.50:07