Details

<p>Preface xi</p> <p>Acknowledgments xv</p> <p><b>Part I IP Addressing</b></p> <p><b>1 The Internet Protocol 3</b></p> <p>1.1 Highlights of Internet Protocol History 3</p> <p>1.2 IP Addressing 7</p> <p>1.3 Classless Addressing 13</p> <p>1.4 Special Use Addresses 14</p> <p><b>2 Internet Protocol Version 6 (IPv6) 15</b></p> <p>2.1 Introduction 15</p> <p>2.2 IPv6 Address Allocations 21</p> <p>2.3 IPv6 Address Autoconfiguration 30</p> <p>2.4 Neighbor Discovery 30</p> <p>2.5 Reserved Subnet Anycast Addresses 33</p> <p>2.6 Required Host IPv6 Addresses 34</p> <p><b>3 IP Address Allocation 35</b></p> <p>3.1 Address Allocation Logic 38</p> <p>3.2 IPv6 Address Allocation 49</p> <p>3.3 IPAM Worldwide’s IPv6 Allocations 53</p> <p>3.4 Internet Registries 57</p> <p>3.5 Multihoming and IP Address Space 62</p> <p>3.6 Block Allocation and IP Address Management 63</p> <p><b>Part II DHCP</b></p> <p><b>4 Dynamic Host Configuration Protocol (DHCP) 67</b></p> <p>4.1 Introduction 67</p> <p>4.2 DHCP Overview 68</p> <p>4.3 DHCP Servers and Address Assignmen 75</p> <p>4.4 DHCP Options 78</p> <p>4.5 Other Means of Dynamic Address Assignment 89</p> <p><b>5 DHCP for IPv6 (DHCPv6) 90</b></p> <p>5.1 DHCP Comparison: IPv4 Versus IPv6 91</p> <p>5.2 DHCPv6 Address Assignment 92</p> <p>5.3 DHCPv6 Prefix Delegation 93</p> <p>5.4 DHCPv6 Support of Address Autoconfiguration 94</p> <p>5.5 Device Unique Identifiers 97</p> <p>5.6 Identity Associations 99</p> <p>5.7 DHCPv6 Options 99</p> <p><b>6 DHCP Applications 109</b></p> <p>6.1 Multimedia Device Type Specific Configuration 110</p> <p>6.2 Broadband Subscriber Provisioning 111</p> <p>6.3 Related Lease Assignment or Limitation Applications 115</p> <p>6.4 Preboot Execution Environment Clients 115</p> <p><b>7 DHCP Server Deployment Strategies 118</b></p> <p>7.1 DHCP Server Platforms 118</p> <p>7.2 Centralized DHCP Server Deployment 119</p> <p>7.3 Distributed DHCP Server Deployment 120</p> <p>7.4 Server Deployment Design Considerations 122</p> <p>7.5 DHCP Deployment on Edge Devices 125</p> <p><b>8 DHCP and Network Access Security 127</b></p> <p>8.1 Network Access Control 127</p> <p>8.2 Alternative Access Control Approaches 132</p> <p>8.3 Securing DHCP 137</p> <p><b>Part III DNS</b></p> <p><b>9 The Domain Name System (DNS) Protocol 143</b></p> <p>9.1 DNS Overview—Domains and Resolution 143</p> <p>9.2 Name Resolution 145</p> <p>9.3 Zones and Domains 148</p> <p>9.4 Resolver Configuration 159</p> <p>9.5 DNS Message Format 161</p> <p><b>10 DNS Applications and Resource Records 176</b></p> <p>10.1 Introduction 176</p> <p>10.2 Name–Address Lookup Applications 178</p> <p>10.3 Email and Antispam Management 191</p> <p>10.4 Security Applications 205</p> <p>10.5 Experimental Name–Address Lookup Records 217</p> <p>10.6 Resource Record Summary 218</p> <p><b>11 DNS Server Deployment Strategies 223</b></p> <p>11.1 General Deployment Guidelines 224</p> <p>11.2 General Deployment Building Blocks 224</p> <p>11.3 External–External Category 226</p> <p>11.4 External–Internal Category 231</p> <p>11.5 Internal–Internal Category 232</p> <p>11.6 Internal–External Category 237</p> <p>11.7 Cross-Role Category 243</p> <p>11.8 Putting it All Together 253</p> <p><b>12 Securing DNS (Part I) 254</b></p> <p>12.1 DNS Vulnerabilities 254</p> <p>12.2 Mitigation Approaches 258</p> <p>12.3 Non-DNSSEC Security Records 259</p> <p><b>13 Securing DNS (Part II): DNSSEC 264</b></p> <p>13.1 Digital Signatures 265</p> <p>13.2 DNSSEC Overview 266</p> <p>13.3 Configuring DNSSEC 268</p> <p>13.4 The DNSSEC Resolution Process 290</p> <p>13.5 Key Rollover 297</p> <p><b>Part IV IPAM Integration</b></p> <p><b>14 IP Address Management Practices 305</b></p> <p>14.1 FCAPS Summary 306</p> <p>14.2 Common IP Management Tasks 307</p> <p>14.3 Configuration Management 307</p> <p>14.4 Fault Management 324</p> <p>14.5 Accounting Management 334</p> <p>14.6 Performance Management 338</p> <p>14.7 Security Management 340</p> <p>14.8 Disaster Recovery/Business Continuity 340</p> <p>14.9 ITIL Process Mappings 342</p> <p>14.10 Conclusion 346</p> <p><b>15 IPv6 Deployment and IPv4 Coexistence 347</b></p> <p>15.1 Introduction 347</p> <p>15.2 Dual-Stack Approach 349</p> <p>15.3 Tunneling Approaches 353</p> <p>15.4 Translation Approaches 368</p> <p>15.5 Application Migration 374</p> <p>15.6 Planning the IPv6 Deployment Process 374</p> <p>Bibliography 383</p> <p>Glossary 392</p> <p>RFC index 394</p> <p>Index 408</p>

"The book aims to be a must-to-have reference for every network engineer. Whenever one encounters a networking issue (not only basic), an answer to the question or the information in which RFC the answer is located can be found." (IEEE Communications Magazine, 1 August 2011) <p> "This guide to Internet Protocol address management (IPAM) presents a practical, technical overview of each part of the IP environment and provides advice on best practices for creating an effective, integrated management plan . . . the work includes numerous illustrations and code examples and would be appropriate for advanced computer science students as well as network administrators and designers. Rooney is an IPAM expert and senior director for an IPAM consulting firm." (Booknews, 1 April 2011)</p> <p> "Today, there is no single book that covers the management of these linkages and services they provide; IP Address Management Principles and Practice will fill that gap. While several books are available for leading vendors' DHCP and DNS services implementations, few exist for IP address planning, and none exist that unifies these three topics." (Security @ ITBusiness Net.com, 28 February 2011)</p>

<p><b>TIMOTHY ROONEY</b> has worked with IP technologies in various capacities over the last sixteen years, including systems engineering and development. He has an extensive background not only in IP, but also in telecommunications, wireless services, and software, having worked at Bell Laboratories, AT&T Wireless, Lucent Technologies, and BT. In his current role as Director of Product Management with BT Diamond IP, Rooney is responsible for the overall BT Diamond IP product life cycle, managing product features and releases, as well as supporting sales and marketing.

<p><b>A hands-on resource for rigorous, state-of-the-art management of today's IP networks</b> <p>Effective IP address management (IPAM) is a key ingredient in an enterprise or service provider IP network management strategy. The practice entails the application of network management disciplines to Internet Protocol (IP) address space and associated network services, namely Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS). <p>As a natural follow-up to the author's previous book, <i>Introduction to IP Address Management,</i> this resource uniquely unifies all three foundational IP address management technologies, fully addressing their interrelationships and their cohesive management. It also describes the relevant protocols, configuration examples for the market-leading reference implementations from the Internet Systems Consortium (ISC), and techniques that can be employed to structure, monitor, secure, and manage them. <p>The first part of the book provides a detailed overview of IPv4, IPv6, and IP allocation and subnetting techniques. In the second, DHCP for IPv4 and IPv6 is reviewed, with explanations of applications that rely on DHCP (such as VoIP device provisioning, broadband access provisioning, and PXE client initialization), DHCP server deployment strategies, and DHCP and relevant network access security. The third part reviews the DNS protocol, DNS applications (such as name resolution, services location, ENUM, anti-spam techniques via black/white listing, and Sender ID), deployment strategies and associated configurations, and security. <p>Finally, the text brings together the preceding parts, discussing techniques for cohesively managing IP address space, including impacts to DHCP and DNS. Everyday IP address management functions are described—including IP address allocation and assignment, renumbering, inventory assurance, fault management, performance monitoring, and disaster recovery—as are coexistence strategies. <p><i>IP Address Management Principles and Practice</i> utilizes realistic scenarios throughout to further enhance the learning process. It will educate readers responsible for managing IP address space and DHCP and DNS server configurations, such as IP network planners, engineers, and managers, including those who need to deploy IPv6 networks. It is also ideal for those responsible for managing an IP network with over 5,000 IP nodes, several DNS or DHCP servers, mixed DHCP and DNS vendor deployments, or IPv4 and IPv6.

SG