Project

General

Profile

Commonly used IPv6 networks » History » Version 10

Nico Schottelius, 03/11/2021 05:57 PM

1 1 Nico Schottelius
h1. Commonly used IPv6 networks
2
3 3 Nico Schottelius
h2. By ungleich
4
5 1 Nico Schottelius
Assuming that you have a /48 per location/site, there are some specific /64 sub networks that we usually use at ungleich.
6 4 Nico Schottelius
As an example let's take **2001:db8:a::/48**, then the we often use these networks:
7 1 Nico Schottelius
8
| Network | Description |
9 6 Nico Schottelius
| 2001:db8:a::/64 | The network 0 is usually internal |
10 8 Nico Schottelius
| | For netboot, untrusted equipment, IPMI and co. Usually firewall for no incoming traffic at all |
11
| 2001:db8:a:1::/64 | Servers, sensible equipment: stuff we trust ssh is safe |
12 7 Nico Schottelius
| | For accessing servers, usually only port 22 (ssh) or an alternative SSH port (222,2202,2222) open |
13 9 Nico Schottelius
| 2001:db8:a:8::/64 | Transfer network |
14 10 Nico Schottelius
| | For routing, might contain /124 or smaller sub networks for "point to point" |
15 5 Nico Schottelius
| 2001:db8:a:a::/64 | DNS network: houses DNS servers in the network.  |
16 1 Nico Schottelius
| | Regular DNS servers are usually 2001:db8:a:a::a and 2001:db8:a:a::b |
17
| | DNS64 enabled servers are usually 2001:db8:a:a::64 and 2001:db8:a:a::65 |
18 6 Nico Schottelius
| 2001:db8:a:bee::/64 | LAN network: usually wifi/coworking |
19 7 Nico Schottelius
| | "bee" is something people can easily pronounce; ssh open from outside |
20 6 Nico Schottelius
| 2001:db8:a:cafe::/64 | LAN network: usually wired/regular clients |
21 9 Nico Schottelius
| 2001:db8:a:d::/64 | Downstream network: routing to physically present downstreams |
22
| 2001:db8:a:d::/80 | Static IP addresses OUR side |
23
| 2001:db8:a:d:1::/80 | Static IP addresses DOWNSTREAM |
24 6 Nico Schottelius
| 2001:db8:a:7ea::/64 | LAN network: Usually 2nd wifi network |
25 2 Nico Schottelius
| 2001:db8:a:b00::/96 | Incoming NAT64 prefix: mapping IPv4 islands: 2001:db8:a:b00::192.168.1.1 is IPv6 reachable |
26
| 2001:db8:a:c001::/96 | Outgoing NAT64 prefix: mapping the IPv4 Internet, allowing IPv6 only hosts to reach the IPv4 Internet |
27 3 Nico Schottelius
28
h2. In other places
29
30
* "Address plan from Peter H. Jin":https://www.peterjin.org/wiki/Peterjin.org:IP_Addressing_Plans