I-Light supports native IPv6 throughout its network via a dual-stack approach. I- Light’s IPv6 addressing plan is as follows:
Implementation of IPv6
IPv6 Address Allocations
The Indiana GigaPOP has a direct IPv6 address allocation from ARIN of 2001:18e8::/32. The GigaPOP delegates prefixes in the range of /40s through /48s to its members depending on the size of their networks. A member with a single campus may receive a /48 whereas a member with 8 campuses may receive a /45. Each GigaPOP member can in turn divide their prefix into a /48 for each campus and further into /64s for individual broadcast domains. (See RFC2374 and RFC3177 for guidelines on address allocation). It is expected that all suballocations are SWIPed to ARIN so that they are documented to the world. Because of the way v6 address space is aggregated, these delegated /48 addresses will (likely) not be accepted from end-sites and routed by other carriers and are not "portable." Allocations made so far by the Indiana GigaPOP for its internal use and to its members are:
Column 1 | Column 2 |
---|---|
2001:18e8::/36 | GigaPOP Member Blocks |
2001:18e8:0000::/44 | Indiana University System |
2001:18e8:1::/48 | IUPUI |
2001:18e8:2::/48 | IUB |
2001:18e8:3::/48 | IUE |
2001:18e8:4::/48 | IUK |
2001:18e8:5::/48 | IUNE |
2001:18e8:6::/48 | IUSB |
2001:18e8:7::/48 | IUS |
2001:18e8:0400::/40 | I-Light |
2001:18e8:0800::/44 | Purdue University System |
2001:18e8:0C00::/44 | Other directly-connected gigapop members |
2001:18e8:c02::/48 | IPGrid (Bloomington) |
2001:18e8:c03::/48 | IPGrid (Indianapolis) |
2001:18e8:ff00::/48 | Indiana GigaPOP Internal |
Prevention IP spoofing
The I-Light Network implements the feature known as unicast reverse path forwarding check to ensuring that packets coming from an I-Light member contain an IP source addresses that is consistent with routing announcements being received from the member. In addition, the I-Light Network implements IP prefix filters, as part of its routing policy, to ensure only pre-approved prefixes are accepted from members.
Through this proposal, I-Light will include in its workshops information concerning the importance of spoof prevention, as well as techniques to effectively prevent spoofing and directed broadcasts at the subnet level.