IPv6 Evolution Solution

IPv6 Evolution Overview Broadband Access Solution 4: WLAN Access Service System Reconstruction Solution
Network Reconstruction  The BRAS allocates user addresses and Supports IPv6 NE management. Supports IPv6-related attributes. Supports the extraction of Enables the CRM and billing
Key points for IPv6 evolution: Costs and Difficulties IPv6 Evolution Supports the management of IPv6 resources Supports CGN-related attributes. IPv6 and private IPv4 systems to support IPv6
CAPWAP Tunnel authenticates users.
and services. Reconstructs the interfaces addresses of users. addresses, private IPv4
IPv6 AAA Server  The AC manages and controls APs in a
Resolve the WLAN Authentication Flow Supports the management of CGN resources interconnecting the AAA server Reconstructs the interfaces addresses, and port ranges.
Win the
IPv4 address
Only WLAN IPv4 Flow AC unified manner. and services. and the BRAS/log server/billing interconnecting the portal Reconstructs the interfaces
competition
insufficiency DS- Reconstructs the interfaces interconnecting system/portal server/OSS. server and the AAA server. interconnecting the BSS and
issue WLAN IPv6 Flow
IPv6 DS+N Lite Access Solution 1: Private Network Dual-stack Solution
the OSS and the AAA server/BSS/ITMS. the AAA server/OSS/ITMS.
NAT Aggregation
Evolution AT AP Switch
Switch IPv4
NAT 64  Access authentication: Use portal
Remain Ensure
good user network 444 authentication as an example. The WLAN
experience security CR
terminal uses the IPoE access mode and the
Mainstream Evolution Solution
IPv4 web+portal authentication mode.
AP BRAS Embedded with CGN IPv6 Dual-stack AAA Server Portal Server
Auxiliary Solution at Later Dual-stack  The portal server must be upgraded to obtain
Stages of IPv6 Evolution
and BRAS Traffic Forwarding Portal Server OSS
IPv4 Terminal the public and private IPv4 and IPv6 BSS
What are the main IPv6 evolution techniques? NAT44
Only Private addresses of users.
Dual-stack: Dual-stack is enabled for all devices on the network. Network Private IPv4 Public IPv4
AP Bridged Mode  NAT: Divert the service traffic in the WLAN
DS-Lite: IPv6 is deployed and DS-Lite tunnels are established between B4 and AFTR to carry IPv4 traffic. Dual- NAT44+IPoE
private user domain to the CGN for NAT.
Network IPv6 Progress stack IPv6 HG CGN
NAT: CGN gateways are deployed to allocate private IPv4 addresses, which helps to reduce public IPv4 Solution BRAS CR
OLT
address consumption. This technique usually works with the dual-stack technique. Solution 2: Public Network Dual-stack Solution ITMS
Dual-stack DNS Server
NAT64: This technique is used to deploy a gateway for translating the IPv6 addresses of an IPv6-only Public Log Server
Network
Public IPv4  Access authentication: The WLAN
AP Bridged Mode
terminal to an IPv4 address. It is a supplement to the dual-stack technique. Dual- Dual-stack+IPoE terminal uses the IPoE access mode and
stack IPv6 the IPv4 web+portal authentication mode.
Solution
 The portal server must be upgraded to
Supports IPv6 HG management. Provides a syslog interface for communicating Supports AAAA and A records.
IP Core Network Solution As the portal protocol is carried over IPv4, this solution supports only dual-stack terminal access, not IPv6-only terminal access.
obtain the IPv4 and IPv6 addresses of Supports IPv6 HG information with the CGN. Supports AAAA and A record
users. exchange with the OSS. Provides an interface for querying information query over IPv4/IPv6.
from the background system.
Dual-stack Solution 6PE/6vPE Solution

CR (Dual-stack)
MAN MAN
PE(Dual-stack)
Broadband Access Solution 5: Wireless Access
PE(Dual-stack)
CE (Dual-stack) IPv4
IPv4 IPv4 MPLS Internet Terminal IP RAN PS Core IP Core Service
IP Core
PE(Dual-stack) Internet
PE(Dual-stack) Tunnels between the terminals and GGSN/SAE GW carry IPv4/IPv6 packets.
Gi/SGi Solution 1: CGN Reliability Solution
Dual-stack+NAT44
Dual-stack P(IPv4)
IGW (Dual-stack)
BTS/NodeB BSC/RNC NAT Address Pool 2
Primary NAT Address Pool 1 NAT Address Pool 2 Secondary
NAT Address Pool 1
Dual-stack Primary Secondary
IGW (Dual-stack) GGSN/PDSN IPv4 Traffic
6PE/6vPE Terminal SGSN Slot 2 User Address Pool 1 User Address Pool 2 CGN 1
IPv6 GERAN
Slot 1 CR1 PE1
PE(Dual-stack) IPv6 MME HSS/HLR PCRF IPv6 Traffic
Internet MAN PE(Dual-stack) BRAS 1
MAN Internet UTRAN GTP/PPP over IPv4 Primary
CR (Dual-stack) CE (Dual-stack) NAT Instance 1 Secondary
Solution 2:
 Dual-stack must be enabled for the PE/CE/IGW. Intermediate nodes support IPv4-only. NAT OLT 1
IPv6-only+NAT64 HA VRRP HA VRRP
MPLS must be deployed at the core of the network. Address
 Dual-stack must be enabled for all Layer 3 devices. IPv4 Pool
 6PE/6vPE tunnels must be established between PEs to deliver dual-stack routing NAT44 Secondary NAT Instance 2 Primary
 Dual-stack routes between all Layer 3 devices must be reachable.
information. IPv6-only eNodeB LTE
SAE GW IPv6 Traffic
Terminal
NAT64
IPv4 Traffic BRAS 2
OLT 2 NAT Address Pool 1 NAT Address Pool 2
CR2 PE2
Broadband Access Solution 1: Dual-stack+NAT Solution 1: Dual-stack+NAT44
 Terminals support dual-stack, IPv6 and/or private IPv4 address.
Solution 2: IPv6-only+NAT64 Secondary
User Address Pool 1 User Address Pool 2
Primary CGN 2
 Terminals support IPv6 and be allocated with IPv6-only addresses.
Secondary NAT Address Pool 1 NAT Address Pool 2 Primary
 The IP RAN is an IPv4 network.  The IP RAN is an IPv4 network.
CGN inter-board hot backup: Distributed CGN inter-chassis hot backup: Centralized CGN inter-chassis hot backup:
Terminal Access Metro Core Servers In this scenario, NAT, dual-stack, and dual-  The PS core network must support dual-stack. The PS core system  The PS core network must support dual-stack. The PS core system
 Two CGN boards form a backup group to which a NAT  Two CGN boards on different BRASs form a backup  Two CGN boards in different CGN chassis form a
stack+NAT can be separately deployed. must support IPv6 management. IPv4 tunnels must be established to must support IPv6 management. IPv4 tunnels must be established to
BRAS CR instance is bound. group. backup group.
IPv4/IPv6 transparently transmit IPv4/IPv6 packets. transparently transmit IPv4/IPv6 packets.  Two CGN boards share the same NAT address pool.  A NAT instance is configured for every chassis, and  A NAT instance is configured for every chassis,
CGN DS+NAT+PPPoE:
 The IP core network must support dual-stack.  The IP core network must support dual-stack. NAT64 gateways and  Two instances can be configured to dynamically balance the CGN boards back up each other. and the CGN boards back up each other.
IPv4 LSW  Metro network: BRASs and CRs must support
IP Core IPv4  Peripheral systems must be upgraded to support IPv6 management. DNS64 servers must be deployed. traffic load.  The user and NAT address pools back up each  The NAT address pools of the two instances back
IPv4/IPv6 dual-stack. The CGN can be inserted into a
 Gi/SGi interfaces must support dual-stack and route IPv4 packets to the  Peripheral systems must be upgraded to support IPv6 management. other. up each other.
HG BRAS or be deployed in standalone mode.
NAT44 gateway for NATing.  Gi/SGi interfaces must support dual-stack and route IPv6 packets to
OLT  Access network: Network reconstruction is not
BRAS CR the NAT64 gateway for translating IPv6 addresses into IPv4 addresses.
IPv6 required.
CGN IPv6
 Home area network: Bridged HGs do not
NAT44
Private IPv4 Private IPv4
NAT44
Public IPv4 DS+NAT+PPPoE
require reconstruction or upgrade. Routed HGs IPv6 Security Solution
PPPoE HG Routed Mode
must be upgraded to support IPv6.
IPv6
DS+NAT+IPoE: Government/Enterprise Leased Line Access Solution
NAT44
Private IPv4 Public IPv4 DS+NAT+PPPoE  Metro network: BRASs and CRs must support Customer Access Aggregation SPOP Core OAM/Service
PPPoE HG Bridged Mode
IPv6 dual-stack. The CGN can be deployed in
Internet Leased Line Solution VPN Leased Line Solution Untrust Domain Trust Domain
distributed or centralized mode. STB/TV MxU OLT Trust or Untrust Domain
NAT44 NAT44 CGN
Private IPv4 Private IPv4 Public IPv4  Access network: The network must be SOHO/Small-sized Enterprise IGW
DS+NAT+IPoE UPE
reconstructed to support IPv6. Dial-up Leased Line (PPPoE)
BRAS (Dual-stack) HG AGG
IPv6 HG Routed Mode PC
Aggregation
 Home area network: Routed or hybrid HGs
L2VPN Network
Core
NAT44
must be upgraded to support IPv6. Phone ACC-LSW U2520 U2000 DHCP AAA
Private IPv4 Public IPv4 DS+NAT+IPoE CPE UPE (Dual- UPE (Dual- Server Server
HG Bridged Mode (Dual- The BRAS allocates an IPv6 address CPE stack) stack) CPE BRAS/SR
IPv6 with the IA_NA/IA_PD option.
stack) CPE
Government/Medium-sized
Enterprise
Layer 2 Leased Line (IPoE) BRAS (Dual-stack) VLL/VPLS E-Line/E-LAN Corporation
E-Line/E-LAN

IPv4 MPLS NGN/IMS IPTV HE

Broadband Access Solution 2: DS-Lite CPE
(Dual-
The IPv6 address with the IA_NA/IA_PD
option must be manually configured or Access device: UPE/AGG/BRAS/SR: CGN: IGW:
stack) allocated by the BRAS. IPv6 L3VPN Supports DHCPv6 option 18/37  Enables DHCPv6/ND snooping  Checks user validity.  Filters invalid IPv6
SoftX VoD BTV
At present, PPPoE access is used for the DS-Lite Enables DHCPv6/ND snooping  Enables authentication for IPv6 IGP/BGP.  Restricts the tunnel and routes advertised by
Large-sized
SR (Dual-stack) UPE (Dual- UPE (Dual-
solution. An IPv6 network is deployed between Layer 3 Leased Line (IPoE) CPE stack)
CPE  Enables IPv6 URPF to defend against IP session quantities. EBGP neighbors.
Enterprise stack) spoofing attacks.  Discards invalid IPv6
Terminal Access Metro Core Servers the HG and CGN. traffic.
L3VPN
IPv4/IPv6 BRAS CR  Metro network: The BRAS supports IPv6-only. An CPE
(Dual- Note: The IPv6 security solution be deployed under original IPv4 security solution conditions.
IPv6-only network is deployed between the BRAS The static IPv6 address must
CGN (AFTR) stack) be configured.
and CGN. A dual-stack network is deployed between
IPv4 DSLAM IP Core IPv4
IPv6-only Dual-stack the CGNs and CRs.

HG (B4)  Access network: Network reconstruction is not

required.
IPv6 OLT CR
BRAS CGN (AFTR) IPv6
 Home area network: HGs that work in routed mode Data Center Solution E2E O&M Solution
must be upgraded to support the DS-Lite.
NAT44  The DS-Lite solution has special requirements on
Dual-stack Solution NAT64 Dual-stack Solution (Dual-stack Users Access the
Private IPv4 4in6 Tunnel Public IPv4 Routed HG HGs. Therefore, it is usually used for new users. Dual-stack Server)
DS-Lite+NAT Network Service Fault Locating Network
IPv6  The combined use of the dual-stack+NAT and DS-Lite DNS NAT64 Solution (IPv6 Users Access the IPv4 Server)
Dual-stack User IPv6 User IPv4 User DNS64
Dual-stack+AAAA Add DNS64. Deployment Provisioning Monitoring
solutions is recommended. The two solutions can be
switched to each other as needed. Users are unwilling to switch from IPv4 to Independent U2000 In-home service CPE status management and information query (ITMS and U2000) U2000/U2520
Enable dual-stack IP LCT deployment provisioning Optical path diagnosis and alarm monitoring on access networks performance
Dual-stack+EBGP4+ IPv6 because IPv6 resources are insufficient.
for the egress router. Service provisioning (by the N2510 and U2000) monitoring
Therefore, dual-stack reconstruction of the by the U2000 Alarm monitoring and fault information collection on metro and IP
Egress Router
IDC is very important in IPv6 evolution. Service provisioning core networks (by the U2000 and SmartKit)
Broadband Access Solution 3: NAT64 NAT64 LogServer
by the AAA server
Add a NAT64 gateway Dual-stack solution for the IDC :
Core Layer and a log server.  It is the mainstream solution for the IPv6
Access an IPv4 Server Security Security
Terminal Access Metro Core Servers Service PoD Service PoD Dual-stack+OSPFv3 evolution of the IDC.
Access an IPv6 Server  The dual-stack reconstruction involves a large
BRAS CR
NAT6 P Aggregation CSS IDC reconstruction is
scope and a long period.
NAT64 solution for the IDC:
IPv6 Evolution Professional Service Solution
NAT64
4 Objectives: Layer not required.
IPv6 User DSLAM  As a supplement to the IDC dual-stack
Dual-stack Dual-stack IPv4 Server To allow IPv6 users to access IPv4 server over
reconstruction solution, this solution applies to
an IPv6 network.
HG PE PE Reconstruction is a scenario where IPv6-only terminals access Protect network investments, and achieve smooth network evolution and hitless service migration
Usage scenario: Access ...... not required. controllable services or simple applications.
OLT BRAS CR Layer
At later stages of network evolution, IPv6-only iStack iStack iStack  IDC reconstruction is not required and the
IPv6 User DNS64 P IPv6 Server Consultation Network Integration Service Service Network
users access the IPv4 servers in the Internet. EOR/MOR TOR TOR deployment period is short. However, NAT64
NAT64 Service Design Test Migration Verification Optimization
Service Area 1 Service Area N Service Area N gateways may not support some ALGs.
IPv6 IPv4 IPv4 Server NAT64 gateways and DNS64 servers must Server ...... Dual-stack+Service
Therefore, NAT64 gateways may become
support dual-stack. Dual-stack IPv6 IPv4 Reconstruction Project Management and Process Control Capabilities Throughout the Network Construction Period
IPv6 IPv6 Server network bottlenecks.
Storage

Huawei Network Product Series Providing the E2E IPv6 Solution

VSUFs and SPs can be combined in
Eudemon 1000E-X3&X5 Terms
S9303 different ways to provide a maximum
of 40G, 80G, 120G, or 160G forwarding
performance. AFTR Address Family Transition Router
CX600-X1
S9306 B4 Base Bridging BroadBand element
CX600-X3 ME60-X3 NE40E-X3 Eudemon 8000E-X3

CX600-X2 VSUF-160 VSUF-80 CGN Carrier Grade NAT

(80G mother board) (40G mother board)
ONT
DNS64 Domain Name System IPv6&IPv4

Huawei Confidential
DS-Lite Dual-Stack Lite
SP-160 SP-80
ONT S9312 MA5600T CX600-X8 CX600-X16 ME60-X16 (40G daughter board) (40G daughter board) NE80E NE5000E Cluster Eudemon 8000E-X8 Eudemon 8000E-X16
ME60-X8 NE40E-X8 NE40E-X16 NAT Network Address Translation

HG Access Metro Edge CGN Backbone Firewall