This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/ipv6-wg@ripe.net/
[ipv6-wg] Request to verify ipv6 addressing scheme in my diagram
- Previous message (by thread): [ipv6-wg] Request to verify ipv6 addressing scheme in my diagram
- Next message (by thread): [ipv6-wg] Request to verify ipv6 addressing scheme in my diagram
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Alex Saroyan
alexsaroyan at gmail.com
Fri Jun  7 11:02:51 CEST 2013
Hi,
I'm not sure if this list is the right place but I can make at least 
several suggestions.
These are not rules - but suggestions.
1. Assign /64 for each Vlan.
2. Keep 4 bit boundary logic when dividing to subnets: e.g. /64, /60, 
/56, /52, /48 and so on.
If I would on your place I would do something like this.
2001:a5d:4b1a::/48
     2001:a5d:4b1a::/52    Infrastructure SCOPE
         2001:a5d:4b1a::/56    Loopbacks
             256*/64s are here for assigning to loopbacks - just in case
         2001:a5d:4b1a:100::/56    Network Links
             2001:a5d:4b1a:100::/64    Router-Internet-DMZ
             2001:a5d:4b1a:101::/64    BB1-BB2
             ---//--- And so on 254 /64s are left
     2001:a5d:4b1a:1000::/52    Service SCOPE
         2001:a5d:4b1a:1000::/56    Common Services
             2001:a5d:4b1a:1000::/64    DNS1   because there are lot of 
IP addresses you can assign 2001:a5d:4b1a:1000::53/64 to DNS and 
2001:a5d:4b1a:1001::53/64 to send DNS...
             2001:a5d:4b1a:1001::/64    DNS2
             2001:a5d:4b1a:1002::/64    Web Servers
             2001:a5d:4b1a:1003::/64    Mail Servers
             2001:a5d:4b1a:1004::/64    DataBase Servers
             ---//-- And so on...
     2001:a5d:4b1a:2000::/52    Local User SCOPE
         2001:a5d:4b1a:2000::/56    Building 1
             2001:a5d:4b1a:2000::/64    Building 1 Vlan A
             2001:a5d:4b1a:2001::/64    Building 1 Vlan B
             ---//--- rest /64s
         2001:a5d:4b1a:2100::/56    Building 2
             2001:a5d:4b1a:2100::/64    Building 2 Vlan X
             2001:a5d:4b1a:2101::/64    Building 2 Vlan Y
             ---//--- rest /64s
     2001:a5d:4b1a:3000::/52    Remote User SCOPE
         2001:a5d:4b1a:3000::/56 Common VPN space
             2001:a5d:4b1a:3000::/64    VPN Department 1
             2001:a5d:4b1a:3001::/64    VPN Department 2
     ---//--- rest of /52s
Regards.
/Alex
On 06/07/2013 02:42 AM, Maninder Singh wrote:
> Hi Team,
>
> I have created a small IPv6 based corporate network diagram and want an
> expert to validate if the addressing scheme used is fine or not. I am
> attaching the diagram where I have created the network. Can you please
> assist me with validation of the address scheme and the network. If need
> be, I can speak to you on telephone or Skype too. But request you to help
> me by checking the diagram.
>
>
> Thanks
> Maninder Singh
- Previous message (by thread): [ipv6-wg] Request to verify ipv6 addressing scheme in my diagram
- Next message (by thread): [ipv6-wg] Request to verify ipv6 addressing scheme in my diagram
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ ipv6-wg Archives ]