Ipv6 Firewall

Features & Benefits

Ipv6 Firewall

Internet Protocol v6 is the latest version of IP that serves the function of providing a
unique identification number to systems connected across the Internet.IPv6 is the
improved and advanced version of its predecessor IPv4.

Features of IPv6 Firewall

IPv6 uses a 128-bit processor address which enhances the total number of
possible addresses.

IPv6 addresses are expressed as 8-bit values separated by periods.

IPv6 systems dont need a DCHP server in order to function effectively.

IPv6 systems can have a link local, site local or a multicast address.

The standard size of a subnet is square of the size of the IPv4 address space. This
results in lower space utilization as compared to IPv4. However, the system, as
compared to IPv4 is more efficient in network management.

Setting up the IPv6 firewall protection

It is worth mentioning here that IPv6 is only provided with the advanced networking pack for
Windows XP. In order to set up IPv6 Internet Connection Firewall just use the below
mentioned commands.

1- Show- Use this command to view the IPv6 ICF configuration.

2- Show global port- Global ports are configured on all network adapters. By using this
command you can view these ports.

3- Show adapter- Click on this command in order to view the list of all adapters configured
with IPv6. Adding the adapter name would enable you in viewing all the ports that are open.
The different types of ports in this category are Effective port, open port and Ignored global
port.

4- Show logging- Would help you in figuring out the logging options that are enabled,
location of the log file and other logging configuration details.

5- Set global port - Enables you in configuring ports on adapters. You can use this command in
order to open a specific port on network adapters in case you have a computer that acts as a web
server. There are different commands like port#, name and protocol in order to help you in this
regard.

6- Set adapter - There are different commands like icmp, type#, port#, name etc. that can help
you in enabling/disabling IPv6 filtering.

7- Set logging- Helps you in specifying the location where the file is written to.

Types of IPV6 Address

IPv4, IPv6 has three different address types that are commonly used; these include:

Unicast

Multicast

Anycast

Unicast

The IPv6 unicast address type operates in the same way as IPv4; a unicast address
is used to send traffic from one source device to one destination device.

This is the most used address type as most traffic (currently) is sourced from one
place and destined for one other place; this may change as network telephone and
video services become used more.

Multicast

The IPv6 multicast address type also operates in the same was as with IPv4; a
multicast address is used to send traffic to a group of devices.

This is used when there is a single source that needs to send traffic to multiple
destinations; this traffic can be treated differently by the intermediate devices
compared with unicast.

If this same traffic would be sent via unicast methods, these devices would need to
process each traffic stream from source to destination separately causing additional
traffic delay.

Anycast
The IPv6 anycast address type is where IPv4 and IPv6 differ. The anycast address type
offers something that was not offered with IPv4 which is the ability to send a packet to the
closest device.

When using anycast, a group of devices are given the same anycast address;when a
source looks to send a packet to that address, the routing protocol will calculate the closest
match to the source device and send the traffic there.

Advantages of IPv6 Firewall

Provides more address space ( which is being needed in larger buisness scales-example
comcast)

More powerful internet (128bit versus IPv4's current 32 bit)

Offers and overall larger scale internet-which again will be needed in the future

Address allocation is done by the device itself

Support for security using (IPsec) Internet Protocol Security

Disadvantages of IPv6 Firewall

It will be much harder to remember IP addresses (compared to the addresses now)

Creating a smooth transition from IPv4 to IPv6.

IPv6 is not available to machines that run IPv4.

Any consumer costs in having to replace an IPv4 machine.

Time to convert over to IPv6.

Our Social Reach

Cyberoam Technologies
USA Central : +1-732-412-4896
Delhi & NCR : +91-9899150300
Ahmedabad : +91-9925011328
Bangalore: +91-9880345671
Dubai:
+971-4-214 9860
North America
505 Thornall
Street, Suite # 304
Edison, NJ -08837
USA

Cyberoam House,
Saigulshan Complex,
Opp. Sanskruti,
Beside White House,
Panchwati Cross Road,
Ahmedabad - 380006,
GUJARAT, INDIA.

sales@cyberoam.com