CGN—IPv6快速增量部署方案

HUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialSecurity Level:2010-4-9CGN - IPv6 IncrementalDeployment SLiu XuebinHuawei Carrier IP Senior Marketing ManagerHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 2IPTV、M2MVoIP、VPNBIG ICPSmallICPservicesEnclosedSP OwnedOpenedBig ICPOpenedSmall ICPnetworkterminalIPv4IPv6IPv6 Evolution StrategyHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 3Most challenges of IPv6 Migration comefrom Application, Terminal & ServiceEdgeBRASAudioWebVideoNATPAccessEdgeCoreApplicationFixedAccessDHCPPPPCTVToIPHGWTerminalDNSMostly pipeMostly pipe1st, but outof scope3rd, undercontrol2nd, partlyundercontrolMetroMobileAccessHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 4No “one-fit-all”, should be CustomizedDual-StackTunnelingTranslationAdvs.Simple & Matured,without ALG&MTUlimitationGood at scalability,reliability, performanceThe most effective way ofisland connection,without ALG limitationNAT64: the only way ofIPv6-only host accessIPv4-only serviceNAT444: prolong IPv4Cons.No help with IPv4address exhaustionHG UpdateNAT444：ALG limitation &weak scalabilityNAT64： ALG limitation &weak scalabilitySuggs.1st priority in early stepsCoordinating with othertechs6PE/6VPE in backboneDS-Lite (CGN) in metroReduce NAT deploymentAvoid 2 level NATIPv6 EvolutionHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 5DS + NAT444Seamless IPv6evolutionIPv6DS-Lite+ NAT6412Delay IPv4 address exhaustionIPv46RD fast IPv6intrduceFlexible Evolution PathDS-lite accelerateIPv6 evolution6RD3DS or DS-Lite can make IPv6 evolution seamlessly, while 6RDneed more step to DS ore DS-Lite, and no help to delay IPv4address exhaustionHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 6DS-Lite with 6PE/6vPE accelerates IPv6Incremental Deployment (CGN Solution)HomeDSLAMDSLAMIPv4IPv6IPv6 / IPv4 MPLS MetroIPv4IPv6LAN: DualStackWAN : IPv6 only4-in-6 tunnelingBridged or Routed modeCGN: DS-Lite Concentrator withNAT44BNG: DHCPv6 or PPPoEv6 subsmgmt6PE/6VPEDS-Lite principle: Native IPv6 Ocean with IPv4 home network and IPv4 serviceislandIPv4 subscriber management using IPv6 BNG only4-in-6 tunneling between CPE and CGN, address translation at CGNIPv6 enabled transport network using 6PE & 6vPE technologiesCGN/BNGHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 7CPECGNIPv4 headerVLANEthernetpayloadIPv6 headerIPv6 headerIPv4 headerMPLS label stackVLANEthernetpayloadIPv4 headerVLANEthernetpayloadIPv6 headerpayloadIPv4 headerEthernetIPv6 headerIPv4 headerMPLS label stackVLANEthernetpayloadIPv4 headerVLANEthernetpayloadIPv6 headerpayloadIPv4 headerEthernetIPv4 headerVLANEthernetpayloadIPv6 headerIPv6 routed modeIPv4/v6 LANIPv4HostIPv4 traversing DS-Lite Network4-in-6 tunnelv4 public6PE tunnelIPv4/MPLSnetworkIPV4DS-LiteDS-Lite6PE6PEHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 8MetroTunneling,6PE, 6vPEHorizontal Scaling with CGNsAudioWebVideoPCoreApplicationPPBRASBNGEdgeCGNDNSTunneling,6PE, 6vPEBRASBNGEdgeDNSCGNDistributed CGNs deployed for load-balancing,redundancy and scalability considerationsAccessFixedAccessPCTVToIPHGWTerminalMobileAccessHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 9Advantages of DS-Lite CGN &6PE/6vPECGN (DS-Lite)Single NAT, no need of multiple layers of NATonly enable NAT in operators networkNo impact on applications running behind NAT (i.e.SIP, Skype, online gaming, UPnP etc)Each home can use the full RFC 1918 addressspaceSingle BNG based on IPv6No need of private IPv4 addresses in SP networkEasy and simple tunnel establishmentTunnel endpoint is discovered with StatelessDHCPv6No signaling required between CPE and AFTRA lightweight solution for providing IPv4 connectivityover IPv6 only accessmetro and backboneinfrastructureControl plane (IGP, BGP,LSP ) sessions continue tobe signaled over IPv4P routers does not need anymodificationMinimizes operational costand risk6PE/6vPELeverages on existing MPLSVRRP gropu 2VRRPgruop2-1VRRPgroup2-2VRRP group1HUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 10BFDHRPVRRP for CGNOne anycast address for multi-CGNs; Active sends VRRP Hello packet to Backupperiodically, then Backup will be changed to Active when it can not receive VRRP Hellopacket more than 3 times; link state is detected by BFD less than 50ms, the switchover timecould be less than 30msCGN State Synchronization HRP “ Huawei Redundancy Protocol “ NAT hot standby “draft-xu-stateful-nat-standby”SCSP “draft-xu-nat-state-sync-00”different anycast address formulti-VRRP groupseach group is associated withdifferent anycast addressCGN Hot-standby & Load BalancingCGN1 Priority=90ActiveCGN1 Priority=10BackupInternet v4CGN2 Priority=10BackupCGN1 Priority=90ActiveHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 116vPE16vPE3P1P2CE1IPv6 VPNAIPv6 VPNAIP/MPLSCE2 2001:A304:6101:1:E0:F726:4E58 /641.1.1.1/322.2.2.2/326vPE routing tableDestination address:2001:A304:6101:1:E0:F726:4E58/64Next hop：1.1.1.1/32Backup next hop：2.2.2.2/32Problem definition: One PE2 failure, service convergence timedepends on time required to update the FIBentries in PE1 with the alternative routesVPN FRR working principle Routing information of both PE2 and PE3 arestored in FIB of PE1 When PE2 node failure is detected at PE1,traffic is immediately switched to standbyVPN FRR route6vPE FRR can guarantee 200ms convergence when 6vPE node failure occurs6vPE FRR ensures 200ms Protection6vPE2NATAddressHUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 123-tuple on CPE with Session Mappingon CGN ensures Real-nameRegistrationDS-LiteCGNDS-LiteIPv4HostCPETimestampIPv6 orIPv4/MPLSMetroHash Key1Source AddressSource PortTunnel IDSource Address afterSource Port after NATTunnel IDDestinationDestination Port3-tuplefrom CPE6PEIPv4/MPLS BackboneCoreHash Key26PEIPV4Hash Key3HUAWEI TECHNOLOGIES CO., LTD.Huawei ConfidentialPage 13SummaryCore routers are hardware capable to support IPv6 and dual stackoperation modeMetro Access, Metro Core routers, Multi-service Edge, BRAS, BNGplatforms areSupport 6PE and 6vPE for transit services between address familiesHardware capable to support IPv6 and dual stackCGN SolutionRouter based platform, can be deployed pluggable cards or standalonedevicesScalability (number of tunnels, and sessions)Resiliency (1:1, 1+1, N:1, Load balancing)Access Node MA5600T seriesSupport for dual stack operation in both bridged and routed modeHuawei Confidential Mature commercial deploymentHUAWEI TECHNOLOGIES CO., LTD.Huawei CGN & BNG HighlightsCGN highlights Centralized or distributed deployment flexibility Integrated CGN card in NE80E/NE40E/ME60 Industry leading load balancing, hot standbyreliabilityIPv6 BNG highlights Includes Industry leading features like BRASpool, 5-level QoS, PPP/IPoE hot standby,40G/100G interfaces, value added serviceslike DPI, SBC, firewall, etcStandalone CGNIntegratedCGN cardME60 X3ME60-X8Page 14ME60-X16Thank