TweetChat with Shannon McFarland on IPv6 in the Internet Edge

View the transcript from the chat and don't miss the helpful reference links at the end. Shannon McFarland, CCIE #5245, is a Principal Engineer in the Office of the CTO and is focused on Enterprise IPv6 deployment, VDI, and Data Center technologies. Shannon has been responsible for the Enterprise IPv6 design and deployment effort at Cisco for the last 10 years. He has authored many technical papers, Cisco Validated Design guides, a contributor to Cisco Press books and is a frequent speaker at Cisco Live and other industry conferences. He co-authored a Cisco Press book titled “IPv6 in Enterprise Networks”.

  1. Shannon - We are thrilled to have this opportunity to chat with you today on iPV6 and your other areas of expertise. #clus
  2. I am glad to be here. I work on enterprise #ipv6, data center, VDI, OpenStack technologies/designs #clus
  3. I have worked on enterprise #ipv6 for about 10.5 years. I spend most of my time in DC-related design areas these days. #clus
  4. I have two breakout sessions again this year. Search for BRKRST-2301 "Enterprise IPv6 Deployment". #clus
  5. I know your sessions were enormously popular last year for Cisco Live. #clus
  6. So, no takers yet. I will chat briefly about the top issues I am seeing in Internet Edge #ipv6 deployments. #clus
  7. The most common issue we have in edge deployments is poor connectivity to the Internet via IPv6. Many reasons for this to include: SLA #clus
  8. cont... SLA: poor or no SLA in place with ISP guaranteeing adequate latency/BW/availability. Another is: Poor tunnel broker connection #clus
  9. cont:Tunnel brokers are fine if you have a stable tunnel connection.Finally,bad routing:Not having the same quality BGP peering is bad #clus
  10. @eyepv6 Do you see enterprise deployments as edge only? or is there much traction with moving IPv6 to the whole enterprise network? #clus
  11. @jsnyder81 It used to be internal-only.Now it is mostly edge as the starting point but most still plan internal at the same time #clus
  12. As I mentioned, your sessions at Cisco Live are very popular. Can you tell us what will be discusses? #clus
  13. @CiscoLive This year I will have some of the same content as before (designs don't change), but MUCH more on Edge and DC performance. #clus
  14. Other items we are seeing in edge designs are with infrastructure security. ppl are not understanding the differences in IPv6 & IPv4.. #clus
  15. cont.. IPv6 & IPv4 protocol mechanics are different and ppl must understand what that means to security. #clus
  16. For instance, protecting the network infrastructure from DoS attacks like Hop-by-Hop (HbH) extension header attacks can hurt some HW #clus
  17. Could you provide some design guide or best practices to implement #IPv6 #CLUS? #CLUS
  18. @lord2y For sure: You can get three design guides on IPv6 at: bit.ly/brvwck They cover edge, campus and branch #clus
  19. @eyepv6 Can you explain why it is important to move ADC's closer to their content when they do IPv6 translation? #clus
  20. @ehorley Hey Ed! We always recommend moving your ADC as close to content as that allows the most IPv6 visibility north of the ADC #clus
  21. @ehorley This is critical when doing IPv6-to-IPv4 translation in the ADC. We want IPv6 visibility in our DPI, Firewalls, IPS/IDS #clus
  22. @ehorley Most, if not all of those security components sit between the ADC and Internet. Keeping the ADC towards the content is good #clus

Did you find this story interesting? Be the first to or comment.

Liked!

CiscoLive

Cisco Live is Cisco's annual user conference where partners and customers learn new technologies, discuss business trends, share ideas and network. Use #clUS

Total views
121

Storify

@Storify