shtsuchi ipv6

26
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Shishio Tsuchiya [email protected] ある企業のIPv6対応

Upload: shishio-tsuchiya

Post on 09-Jun-2015

295 views

Category:

Technology


0 download

TRANSCRIPT

Page 1: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 Cisco Confidential 1 © 2010 Cisco and/or its affiliates. All rights reserved.

Shishio Tsuchiya

[email protected]

ある企業のIPv6対応

Page 2: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

ある企業って??

シスコのIPv6対応のお話

Page 3: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3

シスコって? §  90カ国300拠点

§  450+のビル

§  51 データセンターとサーバールーム

§  世界で1500+ラボ (500+ @San Jose)

§  66,000+ 従業員

20,000 チャネルパートナー

§  110+ アプリケーション・サービス・プロバイダー

§  210+ Business and Support Development パートナー

世界で180,000を超える人々がシスコファミリーとして働いている

Page 4: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4

何が目的?

•  Eating your own dog food!!

•  自分でまず食え!!

•  Cisco on Cisco - Inside Cisco IT http://www.cisco.com/go/ciscoit http://www.cisco.com/web/JP/ciscoitatwork/index.html

•  あと枯渇もね。BOYD(bring your own device)

Page 5: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

World IPv6 Launch @ Cisco

www.cisco.com www.webex.com home.cisco.com

5

Page 6: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6

World IPv6 Launch MEASUREMENTS 1-11 http://www.worldipv6launch.org/measurements/

Page 7: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

World IPv6 Launch MEASUREMENTS 12-26 http://www.worldipv6launch.org/measurements/

Page 8: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

World IPv6 Launch MEASUREMENTS 27-45 http://www.worldipv6launch.org/measurements/

Page 9: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

OSの割合

•  Windows7が既に40%

•  端末をリースなどでリフェッシュする企業や入れ替わりが激しい大学の割合が高い

•  明日のSPの姿かも!?

•  シスコや企業・大学の人にお願いする予定でしたが・・・

http://gs.statcounter.com/

Page 10: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Cisco IT Stack

Page 11: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

IPv6 ターゲット

• 顧客・パートナー企業・社員からの接続

• 世界中の拠点からのアクセス

Page 12: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

IPv6の旅路

Page 13: Shtsuchi ipv6

© 2012 Cisco and/or its affiliates. All rights reserved. COCRST-3464 Cisco Public

Short  Term  Plan  •   Regional  tunnel  head-­‐ends  •   Anycast  ISATAP  Service  •   Training    •   SLA/Formal  Support  •   Dual  Stack  ISP  connec@vity  •   www.ipv6.cisco.com  •   IPv4  Address  Conserva@on  

2010/2011  

IPv6  Planning  •   Business/Technical  Drivers  •   Use  Cases  •   Risk  Assessment  •   Resourcing  

Lab  Deployment  •   6  Bone  •   ARIN  Address  Alloca@on  •   Tunnel  overlay  •   Single  Tunnel  Head-­‐end  •   6in4  for  Labs,  Internet  •   ISATAP  for  desktops  •   No  SLA  –  Best  Effort  

           2003   2005-­‐2009  

Alpha  IPv6  •   Non-­‐Produc@on  test  networks  •   2  Buildings  and  1  DC  •   DNS  –  AAAA  •   Address  Management  

June  2011  

Long  Term  Plan  •   Formal  IT-­‐wide  IPv6  Program    •   Network  •   Security  •   Endpoints  •   Applica@ons  /  Services  

Mar  2012  

Dual  Stack  Roll-­‐outs    •   Global  Backbone  •   Internet  edge/DMZ  •   Data  center  •   User  access,  DHCPv6  •   Remote  Access  •   Network  Management  

June  2012    2012    On  

IPv6  Lifecycle  

Deployment  everywhere  

IPv6への旅路 詳細

www.cisco.com  

www.cisco.com  

13

Page 14: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14

IPv6アドレス割り当て

Page 15: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

IPv6アドレス管理

Page 16: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

学んだ事

•  IT Stackを超えたチームワークが必要 ネットワークチームがリードを取って、速い段階でセキュリティチームと調整。その後インフラ・アプリチームが続いた

• 運用の準備 スタッフのトレーニング

ネットワーク管理やツール

Lessons

Page 17: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

www.cisco.comのIPv6化

Page 18: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

www.cisco.com

Page 19: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

www.cisco.com IPv6 page views

Page 20: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

world IPv6 launch traffic

Page 21: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21

world IPv6 launch traffic

Page 22: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

Page 23: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

その他

•  cisco.webx.comもIPv6化 3ヶ月で5000以上のIPv6アクセス(0.06%くらい)

•  tools.cisco.com,sso.cisco.com,aps.cisco.com もIPv6化

•  CVO(Cisco Virtual Office)とAnyconnectのIPv6化のデザインを検討中

Page 24: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24

なんで落ちたか?@JAONG32

• なんか”へーー“って感じ?

Page 25: Shtsuchi ipv6

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

参考URL

•  Cisco on Cisco IPv6 Implementation http://www.cisco.com/en/US/solutions/collateral/ns340/ns1176/borderless-networks/IPv6-Implementation_CS.html

• シスコ IT が加速させる IPv6 の導入 http://www.cisco.com/web/JP/ciscoitatwork/doc/Cisco_IT_Case_Study_IPv6.pdf

•  EMAN Automates Services Lifecycle Management at Cisco

http://www.cisco.com/web/about/ciscoitatwork/downloads/ciscoitatwork/pdf/Cisco_IT_Case_Study_EMAN.pdf

Page 26: Shtsuchi ipv6

Thank you.