This book will be the first covering the subject of IP address management (IPAM). The practice of IPAM includes the application of network management disciplines to IP address space and associated network services, namely DHCP (Dynamic Host Configuration Protocol) and DNS (Domain Name System). The consequence of inaccurately configuring DHCP is that end users may not be able to obtain IP addresses to access the network. Without proper DNS configuration, usability of the network will greatly suffer as the name-to-address lookup process may fail. Imagine having to navigate to a website or send an email or an instant message by IP address instead of by name! It’s equally important that these DHCP and DNS configurations be based on a common IP address plan, which maps out the IP address hierarchy, subnets, address pools, and domains.
IPAM applies management disciplines to these core services, including configuration, change control, auditing, reporting and so on, and they are necessary given the absolute requirement for properly managing IP space and DHCP and DNS servers. The linkages among an IP address plan, DHCP server configuration and DNS server configuration are inseparable; a change of an IP address will affect DNS information and perhaps DHCP as well. These functions provide the foundation for today’s converged services IP networks, so they need to be managed using a rigorous approach.
Today, there is no single book that covers the management of these linkages and services they provide; IP Address Management Principles and Practice will fill that gap. While several books are available for leading vendors’ DHCP and DNS services implementations, few exist for IP address planning, and none exist that unifies these three topics.
To obtain a free copy of the IPAM Configuration Guide please send an email to:
[email protected]
Cuprins
Preface.
Acknowledgments.
PART I IP ADDRESSING.
1 THE INTERNET PROTOCOL.
1.1 Highlights of Internet Protocol History.
1.2 IP Addressing.
1.3 Classless Addressing.
1.4 Special Use Addresses.
2 INTERNET PROTOCOL VERSION 6 (IPv6).
2.1 Introduction.
2.2 IPv6 Address Allocations.
2.3 IPv6 Address Autoconfiguration.
2.4 Neighbor Discovery.
2.5 Reserved Subnet Anycast Addresses.
2.6 Required Host IPv6 Addresses.
3 IP ADDRESS ALLOCATION.
3.1 Address Allocation Logic.
3.2 IPv6 Address Allocation.
3.3 IPAM Worldwide’s IPv6 Allocations.
3.4 Internet Registries.
3.5 Multihoming and IP Address Space.
3.6 Block Allocation and IP Address Management.
PART II DHCP.
4 DYNAMIC HOST CONFIGURATION PROTOCOL (DHCP).
4.1 Introduction.
4.2 DHCP Overview.
4.3 DHCP Servers and Address Assignmen.
4.4 DHCP Options.
4.5 Other Means of Dynamic Address Assignment.
5 DHCP FOR IPv6 (DHCPv6).
5.1 DHCP Comparison: IPv4 Versus IPv6.
5.2 DHCPv6 Address Assignment.
5.3 DHCPv6 Prefix Delegation.
5.4 DHCPv6 Support of Address Autoconfiguration.
5.5 Device Unique Identifiers.
5.6 Identity Associations.
5.7 DHCPv6 Options.
6 DHCP APPLICATIONS.
6.1 Multimedia Device Type Specific Configuration.
6.2 Broadband Subscriber Provisioning.
6.3 Related Lease Assignment or Limitation Applications.
6.4 Preboot Execution Environment Clients.
7 DHCP SERVER DEPLOYMENT STRATEGIES.
7.1 DHCP Server Platforms.
7.2 Centralized DHCP Server Deployment.
7.3 Distributed DHCP Server Deployment.
7.4 Server Deployment Design Considerations.
7.5 DHCP Deployment on Edge Devices.
8 DHCP AND NETWORK ACCESS SECURITY.
8.1 Network Access Control.
8.2 Alternative Access Control Approaches.
8.3 Securing DHCP.
PART III DNS.
9 THE DOMAIN NAME SYSTEM (DNS) PROTOCOL.
9.1 DNS Overview–Domains and Resolution.
9.2 Name Resolution.
9.3 Zones and Domains.
9.4 Resolver Configuration.
9.5 DNS Message Format.
10 DNS APPLICATIONS AND RESOURCE RECORDS.
10.1 Introduction.
10.2 Name-Address Lookup Applications.
10.3 Email and Antispam Management.
10.4 Security Applications.
10.5 Experimental Name-Address Lookup Records.
10.6 Resource Record Summary.
11 DNS SERVER DEPLOYMENT STRATEGIES.
11.1 General Deployment Guidelines.
11.2 General Deployment Building Blocks.
11.3 External-External Category.
11.4 External-Internal Category.
11.5 Internal-Internal Category.
11.6 Internal-External Category.
11.7 Cross-Role Category.
11.8 Putting it All Together.
12 SECURING DNS (PART I).
12.1 DNS Vulnerabilities.
12.2 Mitigation Approaches.
12.3 Non-DNSSEC Security Records.
13 SECURING DNS (PART II): DNSSEC.
13.1 Digital Signatures.
13.2 DNSSEC Overview.
13.3 Configuring DNSSEC.
13.4 The DNSSEC Resolution Process.
13.5 Key Rollover.
PART IV IPAM INTEGRATION.
14 IP ADDRESS MANAGEMENT PRACTICES.
14.1 FCAPS Summary.
14.2 Common IP Management Tasks.
14.3 Configuration Management.
14.4 Fault Management.
14.5 Accounting Management.
14.6 Performance Management.
14.7 Security Management.
14.8 Disaster Recovery/Business Continuity.
14.9 ITIL Process Mappings.
14.10 Conclusion.
15 IPv6 DEPLOYMENT AND IPv4 COEXISTENCE.
15.1 Introduction.
15.2 Dual-Stack Approach.
15.3 Tunneling Approaches.
15.4 Translation Approaches.
15.5 Application Migration.
15.6 Planning the IPv6 Deployment Process.
BIBLIOGRAPHY.
GLOSSARY.
RFC INDEX.
INDEX.
Despre autor
TIMOTHY ROONEY has worked with IP technologies in various capacities over the last sixteen years, including systems engineering and development. He has an extensive background not only in IP, but also in telecommunications, wireless services, and software, having worked at Bell Laboratories, AT&T Wireless, Lucent Technologies, and BT. In his current role as Director of Product Management with BT Diamond IP, Rooney is responsible for the overall BT Diamond IP product life cycle, managing product features and releases, as well as supporting sales and marketing.
Mai multe cărți electronice de la același autor (i) / Editor
3.369 Ebooks din această categorie
