IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management...

98
IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC Deliverable Number: 32603/PSNC/DS/6.2.4 /A1 Contractual Date of Delivery to the CEC: July 2004 Actual Date of Delivery to the CEC: September 23, 2004 Title of Deliverable: Final report on IPv6 management tools, developments and tests Work package contributing to Deliverable: 6 Type of Deliverable*: R Deliverable Security Class**: PU Editors: Bartosz Gajda, Wiktor Procyk (PSNC) Contributors: Lahmadi Abdelkader (LORIA), Isabelle Astic (INRIA), Frank Aune (UNINETT), Bartosz Belter (PSNC), Artur Binczewski (PSNC), Wojbor Bogacki (PSNC), Tim Chown (University of Southampton), Lorenzo Colitti (Universita Roma), Łukasz Dolata (PSNC), Athanassios Duitsis (ntua.gr), Jérôme Durand (RENATER), Rob Evans, Olivier Festor (INRIA/LORIA), Bartosz Gajda (PSNC), Marcin Kamiński (PSNC), Ioannis Kappas (DANTE), Olav Kvittem (UNINETT), Roman Lapacz (PSNC), Simon Leinen (SWITCH), Athanassios Liakopoulos (GRNET), Janos Mohacsi (HUNGARNET), Gabriella Paolini (GARR), Wiktor Procyk (PSNC), Olivier Reuland (UniGE), Fulvio Risso (Politecnico di Torino, GARR.), Christian Schild (Universität Münster), André Stolze (Universität Münster), Maciej Stroiński (PSNC), Robert Szuman (PSNC), Bernard Tuy (RENATER), Jan Węglarz (PSNC) * Type: P - Prototype, R - Report, D - Demonstrator, O - Other ** Security Class: PU- Public, PP – Restricted to other programme participants (including the Commission), RE – Restricted to a group defined by the consortium (including the Commission), CO – Confidential, only for members of the consortium (including the Commission) Abstract: Final document presenting IPv6 management tools and applications which have been used, developed and tested by participants of 6NET project.. Keywords: network management, network monitoring, development, test 1

Transcript of IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management...

Page 1: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Project Number: IST-2001-32603

Project Title: 6NET

CEC Deliverable Number: 32603/PSNC/DS/6.2.4 /A1

Contractual Date of Delivery to the CEC: July 2004

Actual Date of Delivery to the CEC: September 23, 2004

Title of Deliverable: Final report on IPv6 management tools, developments and tests

Work package contributing to Deliverable: 6

Type of Deliverable*: R

Deliverable Security Class**: PU

Editors: Bartosz Gajda, Wiktor Procyk (PSNC)

Contributors: Lahmadi Abdelkader (LORIA), Isabelle Astic (INRIA), Frank Aune (UNINETT), Bartosz Belter (PSNC), Artur Binczewski (PSNC), Wojbor Bogacki (PSNC), Tim Chown (University of Southampton), Lorenzo Colitti (Universita Roma), Łukasz Dolata (PSNC), Athanassios Duitsis (ntua.gr), Jérôme Durand (RENATER), Rob Evans, Olivier Festor (INRIA/LORIA), Bartosz Gajda (PSNC), Marcin Kamiński (PSNC), Ioannis Kappas (DANTE), Olav Kvittem (UNINETT), Roman Lapacz (PSNC), Simon Leinen (SWITCH), Athanassios Liakopoulos (GRNET), Janos Mohacsi (HUNGARNET), Gabriella Paolini (GARR), Wiktor Procyk (PSNC), Olivier Reuland (UniGE), Fulvio Risso (Politecnico di Torino, GARR.), Christian Schild (Universität Münster), André Stolze (Universität Münster), Maciej Stroiński (PSNC), Robert Szuman (PSNC), Bernard Tuy (RENATER), Jan Węglarz (PSNC)

* Type: P - Prototype, R - Report, D - Demonstrator, O - Other

** Security Class: PU- Public, PP – Restricted to other programme participants (including the Commission), RE – Restricted to a group defined by the consortium (including the Commission), CO – Confidential, only for members of the consortium (including the Commission)

Abstract:

Final document presenting IPv6 management tools and applications which have been used, developed and tested by participants of 6NET project..

Keywords: network management, network monitoring, development, test

1

Page 2: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Table of Contents

1. INTRODUCTION................................................................................................................................................... 3

2. TOOLS LIST........................................................................................................................................................... 4

3. PROFORMA ........................................................................................................................................................... 6

4. DETAILED DESCRIPTION OF TOOLS DEVELOPMENT AND TESTS ..................................................... 8 ANALYZER...................................................................................................................................................................... 8 ARGUS.......................................................................................................................................................................... 10 ASPATH-TREE............................................................................................................................................................... 13 CISCO WORKS CAMPUS MANAGER .............................................................................................................................. 15 CORALREEF.................................................................................................................................................................. 24 CRICKET ....................................................................................................................................................................... 26 ETHEREAL .................................................................................................................................................................... 27 FLOW-TOOLS ................................................................................................................................................................ 28 HP OPENVIEW NETWORK NODE MANAGER ADVANCED EDITION ............................................................................... 29 JOIN-TV ...................................................................................................................................................................... 31 IPFLOW ........................................................................................................................................................................ 34 IPM............................................................................................................................................................................... 35 IPV6 LAN DYNAMIC TOPOLOGY DISCOVERY ............................................................................................................... 36 IPV6 LOOKING GLASS .................................................................................................................................................. 41 IPV6 LOOKINGGLASS PHP........................................................................................................................................... 43 IPV6 MANAGEMENT GATEWAY*.................................................................................................................................. 45 IPV6 SUPPORT FOR NETFLOW V9 IN IOS....................................................................................................................... 55 IRRTOOLSET................................................................................................................................................................ 56 JNETTOP........................................................................................................................................................................ 57 MEINBERG LANTIME (HARDWARE NTP APPLIANCE) .................................................................................................... 58 MPING .......................................................................................................................................................................... 60 MRTG.......................................................................................................................................................................... 64 MTR............................................................................................................................................................................. 66 MULTICAST BEACON .................................................................................................................................................... 67 NAGIOS......................................................................................................................................................................... 70 NETFLOW/IPFIX .......................................................................................................................................................... 72 NET-SNMP..................................................................................................................................................................... 73 NETWORK WEATHERMAP............................................................................................................................................. 77 NMIS ........................................................................................................................................................................... 79 NTOP........................................................................................................................................................................... 80 PCHAR........................................................................................................................................................................ 82 POLYPHEMUS................................................................................................................................................................ 85 RANCID ...................................................................................................................................................................... 86 RIPE NCC TEST TRAFFIC SERVER WITH IPV6 SUPPORT............................................................................................... 88 SNMP_SESSION.PM...................................................................................................................................................... 93 WESTHAWK'S JAVA SNMP STACK................................................................................................................................ 94

5. SUMMARY ........................................................................................................................................................... 97

6. BIBLIOGRAPHY ................................................................................................................................................. 98

2

Page 3: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

1. Introduction There are many tools supporting network monitoring and management today. They differ from each other in terms of their complication level and licensing type. Various tools from simple scripts to sophisticated management platforms were proposed and described within the duration of the 6NET project in the previous versions of this deliverable: D6.2.1. D6.2.2, D62.3.

According to [6], fundamental to the successful deployment of IPv6 is the smooth integration of the protocol into network management applications. Several elements must be considered before a fully native IPv6 management solution becomes available; they are:

• IPv6 stack on network management station (NMS)

• IPv6 stack on network devices

• NMS applications running over an IPv6 stack

• SNMP over an IPv6 transport

• IPv6 address family support on public and private MIB when required

As it is expected that both IPv4 and IPv6 must be simultaneously managed for several years, the development of IPv6-specific management applications will be aligned with customer requirements and hardware device instrumentation support over time.

This document is a continuation of Deliverable D6.2.3 and contains final updated descriptions of the network management tools extended with the results of tests performed by WP6 participants. Comparing to the previous version of this deliverable, 4 new tools have been presented, which are:

- Cisco Works Campus Manager

- jnettop

- MTR

- NTOP

and 13 descriptions of the others have been updated

Since the beginning of 6NET project, there has emerged support of IPv6 in two most wanted type of application for network administrators – management platforms which are HP OpenView Network Node Manager and Cisco Works Campus Manager.

Concise descriptions of many tools included in the previous versions of this deliverable: D6.2.1, D6.2.2, D6.2.3 presenting their functionality and destination are very helpful for WP6 participants interested in network monitoring. Those descriptions make it easier to find an appropriate tool to match very specific expectations and requirements. Deployment of every tool is preceded by tests which evaluate their usefulness according to the network operators’ requirements.

For every tool mentioned in this document there is a 6NET participant responsible for their continuous deployment in the IPv6 network. They also perform tests to check the new functionality of the tool in the newer versions if they are available and to estimate and check its interoperability. Some participants are the authors of the tools and perform the implementation on their own. Others add extra functionality to the tool (if the source code is available) to meet their own needs.

3

Page 4: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The real use of the tool in the IPv6 test network in the 6net environment was presented in deliverable D6.3.3 Implementation of tools and operational procedures. It was focused on the evaluation of popularity concerning testing, using and developing network tools.

2. Tools list Comparing to the previous version of this deliverable, 4 new tools have been presented, which are:

- Cisco Works Campus Manager

- jnettop

- MTR

- NTOP

and 13 descriptions of the others have been updated

There is a full list of tools presented in this document:

- Analyzer

- Argus

- ASpath-tree

- Cisco Works Campus Manager

- CoralReef

- Cricket

- Ethereal

- Flow-tools

- HP OpenView Network Node Manager Extended Topology

- JOIN-TV

- IPFlow

- IPm

- IPv6 Lan Dynamic Topology Discovery

- IPv6 Looking Glass

- IPv6 LookingGlass PHP

- IPv6 Management Gateway

- IPv6 support for Netflow v9 in IOS

- IRRToolSet

- jnettop

- Meinberg Lantime (hardware NTP appliance)

- MPing

- MRTG

- MTR

4

Page 5: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

- Multicast Beacon

- Nagios

- Netflow/IPFIX

- Net-snmp

- Network Weathermap

- NMIS

- NTOP

- PCHAR

- Polyphemus

- RANCID

- RIPE NCC Test Traffic Server with IPv6 support

- SNMP_Session.pm

- Westhawk's Java SNMP stack

5

Page 6: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

3. Proforma The following proforma is used for the tools detailed in section 4.

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Name of the considered tool

Last version that will be considered within the 6Net management framework

List of supported platforms

commercial/

shareware/

adware supported/

freeware/

GPL

URL address, list of the names and e-mail addresses of the authors

Yes/No

6NET contact: Is used in 6NET: Date of description

The name of the person and/or institution within 6Net that will be the correspondent for the tool. Yes/No Date of description

IPv6 status:

Short description, if there is support for IPv6 protocol, what has to be done for full support

Brief description of the product (brief functionality etc)

A short description of the tool

Is still under development, what is the next version number?

Information if software is still under development, if yes also next version number – minor or major, what number

Planned extensions, new features, with dates:

DE

VE

LO

PME

NT

List of the planned extensions with dates, for example:

YYYY-MM – access through the web

YYYY-MM – multicast support

Example of running implementations publicity available

Public available URL where one can check running software, for example for MRTG and RRDBAR:

http://www.ipv6.man.poznan.pl/cgi-bin/14.cgi?cfg=tunele.cfg

Other remarks:

Information concerning software and its development which does not fit to any other field

6

Page 7: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

Here is a section for results of the tests which can show functionality of the tool or some important part of the functionality

Test environment description (schemes, topology, configuration) Brief description of test environment including important network configuration, host configuration, network topology, platforms and list of other software used with version numbers if needed and brief description of test scenario. Test description, results (including screenshots, frame captures), observed difficulties Description of each step of the test, test results and encountered difficulties etc.

Test summary, remarks Final test summary, remarks if the test succeed or not, what have to be done to succeed etc.

7

Page 8: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

4. Detailed description of tools development and tests

Name of the tool: Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Analyzer 3.0 alpha 8 (Mar 16th, 2004)

Win32 BSD http://analyzer.polito.it/30alpha/

Fulvio Risso, [email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Fulvio Risso [email protected], Politecnico di Torino, GARR. No March 2004

IPv6 status:

YES

Brief description of the product (brief functionality etc)

Analyzer is an advanced network sniffing and monitoring tool with the following characteristics:

· Customisable protocol decoding engine

· Customisable views of the decoded packets

· Possibility to save captured traces in HTML

· LAN Node Discovery (to discover all the hosts on the LAN)

· LAN Node Activity monitoring (to detect which host are active on the LAN)

· End-to-end Monitorin (to monitor whether remote hosts and remote services are up)

· Traffic monitoring (to monitor the activity of specific hosts, specific protocols, and more)

· Traffic matrix (to monitor the activity between groups of entities)

· HTML statistics generations

Is still under development, what is the next version number?

Analyzer is still under develpment. A Final 3.0 release will be out at the beginning of the autumn

Planned extensions, new features, with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment: None.

Proposed extensions: None.

Planned extensions: None.

Example of running implementations publicity available

None (Analyzer is mainly a standalone tool).

Other remarks:

Application domains in the 6Net management framework: Analyzer can be used mainly to monitor traffic on a local area network.

8

Page 9: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

Analyzer has not been tested because it has not reached a stable release.

9

Page 10: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Argus

3.3 relased 03/23/2004

Linux

freeware/

GPL(?) nothing mentioned

http://argus.tcp4me.com, Jeff Weisberg, [email protected] Yes

6NET contact: Is used in 6NET: Date of description

André Stolze JOIN, [email protected] Yes August 2004

IPv6 status:

IPv6 is supported as far as it is supported in perl or the used probes.

Brief description of the product (brief functionality etc)

Argus is a system and network monitoring application which includes

IPv6 support since version 3.2. It will monitor nearly anything you ask it to

(TCP and UDP applications, IP connectivity, SNMP OIDS, etc). It comes with a

nice and clean, easy to view web interface that will keep both the managers and the technicians happy. Argus contains builtin alert notification via email and

pager (qpage) but is easily extendible to use any other program like i. e.

winpopup etc. It will automatically escalate alerts until they are acknoledged

by resending the alert at different intervals while optionally switching to

other methods of notification or other recipients.

Due to the fact that most of the testing modules are written in perl IPv6

functionality is included in most of them.

Is still under development, what is the next version number?

The tool is under development actual release is 3.3 and was released at 03/23/2004

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

� Distributed Argus Redundancy Protocol

� internationalisation, i18n.

� WAP / WML / XHTML-MP

� SNMPv3

� improved https support

Example of running implementations publicity available

https://www.join.uni-muenster.de/cgi-bin/arguscgi?func=login user:6net password:<any>

Other remarks:

NONE

10

Page 11: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

Test environment description (schemes, topology, configuration) JOIN uses the tool to monitor its Routers and Servers mainly systems within the 6WiN. So we cannot give much configs. The Argus-config for the public part is as following example: Group "6Net" { graph: yes title: Demo for 6Net drawgrid: yes xlabel: Time ylabel: Time to reply Host "ftp6" { details: FTP-Server (v4/v6) title: FTP-Verfügbarkeit (v4/v6) Service Ping { hostname: 128.176.191.21 frequency: 180 details: Ping-Test title: Ping-Statistik (IPv4) } Service Ping { hostname: 2001:638:500:101:201:2ff:fedd:5056 frequency: 180 details: Ping-Test (IPv6) title: Ping-Statistik (IPv6) } Service TCP/FTP { hostname: 128.176.191.21 frequency: 180 details: FTP title: FTP-Availiability (IPv4) } Service TCP/FTP { hostname: 2001:638:500:101:201:2ff:fedd:5056 frequency: 180 details: FTP (IPv6) title: FTP-Availiability (IPv6) } } Host "6-WiN - 6Net Link" { details: 6-WiN - 6Net Link title: 6-WiN - 6Net Link Service Ping { hostname: 2001:798:14:200::2 frequency: 120 details: 6WiN towards 6Net title: 6WiN -> 6Net } Service Ping { hostname: 2001:798:14:200::1 frequency: 120 details: 6Net towards 6WiN title: 6Net -> 6WiN } } }

Test description, results (including screenshots, frame captures), observed difficulties JOIN just configured the tool and waited for output. It should be mentioned, that sometimes a longer or shorter frequency is required.

11

Page 12: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test summary, remarks

The tests were very successful, so that we use the tool in daily work.

12

Page 13: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version andreleased date:

Available platforms:

License type:

Tool location andinformation links, authors:

Is source available:

ASpath-tree 4.2

Solaris, FreeBSD, Linux with Perl

restricted, must beregistered tobe able todownload interpreter

http://carmen.ipv6.tilab.com/ipv6/tools/ASpath-tree/; TILAB, Italy

Yes

6NET contact: Is used in 6NET: Date of description

Isabelle ASTIC, Olivier FESTOR (INRIA), Ioannis Kappas (DANTE); János Mohácsi (NIIF/HUNGARNET) Yes January 2004

IPv6 status:

It is developed for monitor the 6Bone BGP routing table. In version 4.x it is extended to monitor IPv6 RIRaddress space as well. The BGP routing table is obtained via RSH (with some patch via telnet) from the router.If this method does support IPv6, then ASpath-tree is completely IPv6 compliant.

Brief description of the product (brief functionality etc)

ASpath-tree is a tool to perform IPv6 network operation analysis based on the snapshot of the BGP routing table on IPv6 routers running BGP. Originally Aspath-tree designed to be used by an IPv6 site involved in the experimentation of the BGP protocol inside the 6Bone network, it now supports a set of features useful within any operational IPv6 network, which makes use of BGP. The tool currently supports Cisco/Juniper/Zebrarouters. Based on a single snapshot of the IPv6 BGP table, ASpath-tree automatically generates a set of html pages providing a graphical view of the routing paths towards the other IPv6 connected domains. Additionally itprovides pages for the detection of anomalous route entries announced through BGP (invalid prefixes andunaggregated prefixes), anomalous AS numbers (i.e. reserved or private) in use and a set of summary information such as:

• The number of route entries (valid/total/suppressed/damped/history) • The number of AS in table (total, originating only, originating/transit, transit only, private and

reserved) • The number of active AS paths • The number of active BGP neighbours (i.e. announcing routing information) • An analysis of the network size, in terms of AS distances • The number of circulating prefixes (total, 6Bone pTLAs, sTLAs, 6to4, others)

Based on repeated snapshots of the IPv6 BGP table at different points in time, ASpath-tree automatically generates html pages reporting on BGP routing stability (last 24 hours) for:

• 6Bone pTLAs • RIR's assigned sTLAs

Application domains in the 6Net management framework ASpath-tree will be very useful to verify the routing tables of the backbone, to check every configuration and to have some statistics about the backbone routers.

Is still under development, what is the next version number?

Probably version 4.3

DE

VE

LO

PME

NT

Planned extensions, new features ,with dates:

13

Page 14: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Internal modification has done to support downloading the BGP table via telnet interface not only via RSH, This modification available in the FreeBSD port collection.

Example of running implementations publicity available

6NET backbone: http://6nettools.dante.net/ASpath-tree/bgp.html (version3.3)

CERN: http://www-ipv6.cern.ch/ASpath-tree-v3_3/htdocs/bgp/bgp.html (version 3.3)

NIIF/HUNGARNET: http://6net.iif.hu/6netaspathtree/ (version 4.2)

JOIN/DFN: http://www.join.uni-muenster.de/bgp/bgp.html (version 4.1)

PSNC http://www.ipv6.man.poznan.pl/bgp/bgp.html (version 4.1)

SWITCH http://www.switch.ch/network/ipv6/bgp/ (version 3.3)

UNINETT http://drift.uninett.no/ipv6/bgp/bgp.html (version 4.1)

Other remarks:

Could be extended to support Windows environment, but no effort was put on it.

Tests description

The operator of the sites above usually looks everyday to the web pages to find out BGP routing misconfiguration. They use it for everyday operational management to check routing stability and assess IPv6 routing reachability.

Test environment description (schemes, topology, configuration) The sites above use different machines and operating systems (Solaris, Linux and FreeBSD)and the tools seems to be stable and capable of providing information about the IPv6 BGP routing. The tool is tested to collect BGP routing information from Cisco 12404, Cisco 7500 and Cisco 7200 and Cisco 3660 routing platform. Most of the sites are using RSH to transfer BGP routing table. Some test has been done to test telnet BGP routing table collection at 6NET core (by DANTE) and at NIIF/HUNGARNET. Test description, results (including screenshots, frame captures), observed difficulties The telnet interface is working successfully as displayed the above sites. The telnet interface not working properly over IPv6 some work has to be done to support IPv6 properly.

Test summary, remarks The above sites use Aspath-tree for everyday operation. If you need a quick overview of IPv6 routing at your site you can run the tool.

14

Page 15: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type: Tool location and information links, authors: Is source

available:

Cisco Works Campus Manager

4.0 Windows, Solaris Commercial http://www.cisco.com/en/US/products/sw/netmgtsw/ No

6NET contact: Is used in 6NET: Date of description

Ralf Wolter (CISCO) Bartosz Gajda (PSNC) No August 2004

IPv6 status:

Support for Internet Protocol v6 (IPv6) is introduced in a phased manner on Cisco Network Management applications. CiscoWorks Campus Manager 4.0 will be one of the first Cisco NMS applications to deliver a set of IPv6 features, such as:

1. Path trace support between 2 IPv6 hosts

2. User tracking support for showing up IPv6 end devices

As Path trace and User Tracking are built around ANI, basic IPv6 related information for these applications to function properly should be collected as part of Discovery.

Brief description of the product (brief functionality etc)

Campus Manager, a member of the CiscoWorks family of products, is a suite of web-based network management tools that enable administrators to obtain various types of graphical views of their network topology and end-user information. Campus Manager is based on a client/server architecture that connects multiple web-based clients to a server on the network.

The CiscoWorks Server supplies tools and services to the Campus Manager applications, including the Asynchronous Networks Interface (ANI) Server. The ANI Server discovers information about network devices and saves it in the ANI database for Campus applications, to access.

Is still under development, what is the next version number?

Yes, Currently version 4.0 beta is under development

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

A summary of the direction is explained in the Cisco Statement of Direction, which is attached to this document. New features will include IPv6 transport as well as support for the new IPv6 MIBs, which are currently work-in-progress at the IETF.

Example of running implementations publicity available

none

Other remarks:

Tests description

15

Page 16: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test environment description (schemes, topology, configuration)

- Management station: Sun Blade 2000 with Solaris 9 and IPv6 configured interface - Network: 6NET core network with:

12 Cisco 12404 routers with ISO GSR-K4P-M, 12.0(28)S, EARLY DEPLOYMENT RELEASE SOFTWARE

- Local network with: Cisco router 7200 with Cisco IOS ohanami-II EFT release Cisco router 7500 with Cisco IOS geshi-II EFT release Several IPv6 end hosts

- CiscoWorks Campus Manager 4.0 beta is installed in fresh Solaris 9 environment system (upgraded with required Solaris patches)

- PC with Windows XP and IE running as the workstation web client

Figure 1: The main interface window of CiscoWorks

Test description, results (including screenshots, frame captures), observed difficulties 1. Discovering IPv6 Devices

Currently, Campus Manager (CM) discovers and manages devices through IPv4 addresses only. As an added functionality the current discovery will additionally collect IPv6 address and related information from the devices. Users will only be able to manage dual stack (IPv4&v6) enabled network devices from Campus Manger. But, endhost related features will be supported in User Tracking for pure IPv6 endhosts which are part of the IPv6 network. CM discovers devices via SNMP queries and IPv4 transport, future versions will support IPv6 as a transport protocol.

16

Page 17: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Figure 2: Device Discovery Report

2. IPv6 support in Topology Services Topology services

Figure 3: Topology services interface views

17

Page 18: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

View IPv6 addresses

Users can view all IPv6 addresses configured on highlighted devices. After selecting an IPv6 enabled device, users choose from the context menu “IPv6 addresses” item, which displays a window with all IPv6 addresses configured on the device

IPv6 filter

It is also easy to find all IPv6 enabled devices using Topology filters. After applying an IPv6 filter, all IPv6 devices are highlighted on the map.

Find IPv6 enabled device

Users can search for IPv6 enabled devices in Summary tables/Topology maps/Tree views using the enhanced menu option "Find".

In the “Find on Map” window all IPv6 addresses are listed from discovered devices. Users can locate which address belongs to which devices. After entering an IPv6 address in the “Find” window, the corresponding devices is highlighted on the map.

The feature is useful, because it is common that there is more than one address defined on the single interface, so the number of IPv6 addresses is usually higher than IPv4 addresses.

3. IPv6 support in Path Analysis, IPv6 data trace

Users can perform a trace path between IPv6 network devices or end host.

18

Page 19: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Figure 4: Path Analysis view

Path Analysis supports only the same address family (IPv4 to IPv4 or IPv6 to IPv6) for source and destination address. Due to limitations of the Windows environment, Path Analysis is enabled only on Solaris. During the process, address resolution (with AAAA type records) is performed.

There are following Path related Restrictions:

o IPv6 trace will not be supported for CiscoWorks server on Windows platforms due to unavailability of LSR traceroute on Windows platforms

o When NAT-PT (RFC2766) is deployed in between then the trace will stop at the translation point or the router before the translation point. Due to unavailability of MIBs, Path will not be able to trace across NAT-PT.

o When 6to4 tunnels are deployed, the IPv6 trace will stop when a tunnel end point is encountered. This behavior is again due to unavailability of MIB instrumentation in devices for exposing tunnel related IB attributes as specified in RFC2667.

19

Page 20: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

4. IPv6 support in User Tracking

End host reports in User Tracking can now be generated for IPv6 end hosts also.

Test summary, remarks

Cisco implemented usage of following new MIB Objects CISCO-IETF-IP-MIB ftp://ftp.cisco.com/pub/mibs/v2/CISCO-IETF-IP-MIB.my

• cIpv6Forwarding - to find the device routes ipv6 traffic or not.

• cIpv6InterfaceTable - to get per-interface Ipv6 specific information

• cIpvAddressPfxEntry - to get Inet Prefix Table.

• cIpAddressTable - information related to IP v6 addresses configured on the device interfaces.

• cInetNetToMediaTable - used to get mapping from IP Address to Physical address, its type static mapping or dynamic mapping] and state [reachable, stale, delay, etc]

Limitations/Constraints/Dependencies On the build environment, IPv6 support places a requirement on migrating to JDK 1.4+ environment for

using IPv6 support available in Java.

Need different tools like ping for IPv6 with record route option, traceroute for IPv6 with loose source route option, nslookup for IPv6.

Currently SNMP lib provides IPv4Address class, to represent IPv6 address it requires Ipv6Address

Minimum CatOS/IOS version, which supports the feature Minimum Cisco IOS versions that support IPv6 MIB are IOS 12.0(22 S, 12.2(15)T, 12.2(14)S, 12.3(1),

12.3(2)T

The new version of CiscoWorks Campus Manager implements support for the IPv6 protocol. Currently in phase-1, the support for IPv6 is introduced for the following Campus Manager applications: Topology services, Path Analysis and User Tracking. These applications are IPv6 enabled on Solaris platform. For windows platforms, there are some restrictions because of limitations of IPv6 implementation in these operating systems. Before introducing CiscoWorks in the network for IPv6 administration purposes, users should also check which IOS versions are installed on the devices and if they are supported by CiscoWorks.

The number of new introduced IPv6 features is not huge, however they are useful especially for basic network management tasks involved with addresses management, IPv6 trace path and User Tracking can benefit from them.

20

Page 21: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Appendix 1: CiscoWorks IPv6 Statement of direction and feature roadmap

In addition to the existing IPv6 management functionalities of the Early-Field-Trial version of CiscoWorks Campus Manager (for details check the report from Poznan, Bartosz Gajda), more applications from the CiscoWorks suite will adopt network management functionality for IPv6. The first releases of CiscoWorks Apps supporting IPv6 will be available for customers at the end of 2004.

New major releases of CiscoWorks and Cisco Secure products that ship during 2005 will be IPv6 capable. The development of IPv6-specific management applications will continue to be aligned with customer requirements and hardware device instrumentation support. CiscoWorks and Cisco Secure products:

• Network Management Applications: Resource Manager Essentials (RME), CiscoView, Campus Manager and Device Fault Manager.

• IP Telephony Management Applications: IP Telephony Environment Monitor (ITEM) • Security Applications: VPN/Security Management Solution (VMS), Access Control

Server (ACS), Intrusion Detection System (IDS) The following sections provide our Statement of Direction for each group of products: II. Network Management Applications IPv6 capabilities for products in this group will be rolled out in 3 phases: Phase 1: IPv6 Management using IPv4 Transport In this phase, we will manage IPv6 functionality using SNMP over IPv4 Transport, using dual stacks. Initial target delivery dates for releases in this phase begin in at the end of 2004. Phase 2: IPv6 Management over either IPv4 or IPv6 Transport This phase will add support for SNMP, SSH/Telnet over IPv6 Transport. The IPv4 stack will still be required on the CiscoWorks management server. Target delivery dates for products in this phase begin in the 1HCY2005. Phase 3: Support for a “Native” IPv6 Transport In addition to supporting a v4/v6 Dual Stack Network, this phase will also support a “Native” IPv6 Transport, with no requirement for IPv4 stacks anywhere in the network or in the CiscoWorks management servers. This phase will include support for HTTP/SSL over IPv6. Target delivery dates for products in this phase begin in 2HCY2005. These phases will exhibit increasing capability of managing IPv6 functionality, aligned with device instrumentation support III. IP Telephony Management Applications These products depend on the IPv6 roadmaps for Call Manager and VoIPv6 Management Support. We will publish plans for v6 support when those roadmaps are available.

21

Page 22: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

IV. Security Applications Products in this category are classified into the following three phases: Phase 1: IPv6 Packet Flow Control & Analysis, Access Control Packet protocol decode analysis via Network Analysis Module (NAM) and Real Time Monitor (RTM) is available for IPv6 today. Access Control List Manager (ACLM) and Access Control Server (ACS) are targeted for 2005. Phase 2: Configuration and control of security features of IPv6 capable devices VMS Configuration Tools and QoS Policy Manager (QPM) are targeted for 2005. Phase 3: Security Monitoring of IPv6 Networks VMS Monitoring Tools are targeted for 2005.

Other Cisco network Management applications:

NetFlow, which already supports the collection of IPv6 flow records, will increase functionality to export records in native IPv6 format in 2005.

Cisco Network Registrar (CNR) will add IPv6 capabilities in 2005.

Network Management Applications

Fundamental to the successful deployment of IPv6 is the smooth integration of the protocol into network management applications. Several elements must be considered before a fully native IPv6 management solution becomes available; they are:

• IPv6 stack on network management station (NMS)

• IPv6 stack on network devices

• NMS applications running over an IPv6 stack

• SNMP over an IPv6 transport

• IPv6 address family support on public and private MIB when required

As it is expected that both IPv4 and IPv6 must be simultaneously managed for several years, the development of IPv6-specific management applications will be aligned with customer requirements and hardware device instrumentation support over time. Beginning now, integration and coexistence strategy applies to Cisco network management solutions as well.

New major releases of products such as CiscoWorks will be made IPv6 capable beginning in CY04.

In Table 5 below, Cisco NMA (which stands for network management applications) refers to Resource Manager Essentials (RME), CiscoView, Campus Manager, and Device Fault Manager.

22

Page 23: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Table Cisco IPv6 Network Management Solution

Feature Set Solution/Product Status Comments

Cisco-IP and Cisco-IP-Forwarding MIB

Cisco IOS Software Now Based on early IETF draft. Will get aligned on public draft when available.

SNMP over an IPv6 network layer

Cisco IOS Software Now On Cisco 12000 series only, later on other Cisco IOS release trains

NetFlow IPv6 record

Cisco IOS Software Now On Cisco IOS 12.3T release train, later on other Cisco IOS release trains

NetFlow Collector to manage NetFlow IPv6 record

NFC 5.x Now

IPv6 traffic monitoring

Catalyst 6500 NAM module

Now Refer to product bulletin no. 2170.

IPv6 management using IPv4 transport

Cisco NMA H1 CY04

Enable IPv6 management functionality using SNMP over IPv4 transport on dual stacks.

IPv6 management over either IPv4 or IPv6 transport

Cisco NMA H1 CY05

This phase will add support for SNMP, SSH/Telnet over IPv6 transport. The IPv4 stack will still be required on the CiscoWorks management server.

Support for a "native" IPv6 Transport

Cisco NMA H2 CY05

In addition to supporting a v4/v6 dual stack network, this phase will also support a "native" IPv6 transport, with no requirement for IPv4 stacks anywhere in the network or in the CiscoWorks management servers. This phase will include support for HTTP/SSL over IPv6.

Name of the tool:

Version and released date:

Available platforms:

License type: Tool location and information links, authors: Is source

available:

23

Page 24: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

CoralReef Version 3.5.1

FreeBSD,

Linux,

Solaris,

And expected to work on most Unix-like systems

http://www.caida.org/tools/measurement/coralreef Yes

6NET contact: Is used in 6NET: Date of description

[email protected] No January 2004

IPv6 status:

CoralReef was partially ported over IPv6 : the Transport Level and the application making IP-level statistiques (crl_rate) were already IPv6 enabled.

We ported over IPv6 the application which monitor flows (crl_flow) and the HTML pages generator (t2_report)

Brief description of the product (brief functionality etc)

CoralReef is a set of applications to collect, analyses and report IP Traffic. It could work on passive traffic or from trace files given by tcpdump or dagtools.

Its main applications are crl_rate, crl_flow and t2_report.

Crl_rate collects IP statistiques (nb of paquets, nb of bytes, IPv4 packets, IPv6 packets.

Crl_flow distinguishes the multiple flows and make post-analysis report using t2_report. For example, it separates flows depending on the type of Transport Protocol, or on the couple (source address, destination address)

T2_report displays the output of Crl_flow through a Web interface. The user could find the output in txt format and a pie chart summarizing the proportion of each flow among the whole traffic.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Example of running implementations publicity available

http://www.caida.org/dynamic/analysis/workload/sdnap/

Other remarks:

Tests description

We tested it in the context of a Gigabit network.

Test environment description (schemes, topology, configuration)

24

Page 25: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

All our systems were on FreeBSD 4.7. We used it to monitor the traffic between two systems : one generating the traffic, the second monitoring it. Test description, results (including screenshots, frame captures), observed difficulties Coralreef give interesting information when used on a 100Mbits network. But it lost a lot of packet in the case of a Giga network and thus, the information it gave were erroneous.

Test summary, remarks

CoralReef is a very interesting tool to visualize the distribution of the traffic, and to see how the network is used.

25

Page 26: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Cricket 1.0.3 http://cricket.sourceforge.net/

6NET contact: Is used in 6NET: Date of description

6Net Contact: Ioannis Kappas (DANTE), Simon Leinen (SWITCH) Janos Mohacsi (HUNGARNET) Yes January 2004

IPv6 status:

IPv6 Support: NO

Brief description of the product (brief functionality etc)

Network operators require awareness of how well their network performs. Every node in the network keeps statistics on many attributes that affect its performance. The operators would like to constantly monitor these attributes over time and keep track of their intensity.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment The SNMP polling method can be developed further to operate over a native Ipv6 network.

Proposed extensions SNMP is the most supported protocol for accessing attributes from network nodes. It has been proposed in the context of the 6NET project to use SNMPv3 capable tools that can operate inside a native Ipv6 domain. A new polling method that interfaces with an existing Ipv6 SNMPv3 library (e.g. Net-SNMP) can be defined as an alternative to upgrading the internal SNMP polling method.

Example of running implementations publicity available

http://6net.iif.hu/cricket/grapher.cgi (HUNGARNET)

Other remarks:

Application domains in the 6Net management framework The tool can be used by anyone who wants to monitor and plot value variations of network attributes inside their management domain

26

Page 27: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Ethereal 0.9.16 List of supported platforms

GPL http://www.ethereal.com/ Yes

6NET contact: Is used in 6NET: Date of description

Simon Leinen, SWITCH Yes (by several participants) January 2004

IPv6 status:

IPv6 Support: YES

Brief description of the product (brief functionality etc)

Ethereal is a packet analyser with a graphical (GTK) front-end that supports drill-down

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment None. Ethereal fully supports the basic IPv6 protocols, and all TCP- and UDP-based application protocols running over IPv6. It is widely used to develop and troubleshoot IPv6 applications and protocols. Project-relevant protocols that are already supported include: ICMPv6, OSPFv3, IS-IS, SNMP, Netflow (including Netflow v9) and others.

Proposed extensions Protocols that are used or developed within 6NET could be supported with additional or improved dissectors if required.

Example of running implementations publicity available

na

Other remarks:

Application domains in the 6Net management framework Network Element troubleshooting, network fault isolation, intrusion detection

27

Page 28: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Flow-tools 0.66 BSD style

http://www.splintered.net/sw/flow-tools/ Yes

6NET contact: Is used in 6NET: Date of description

Ioannis Kappas (DANTE) No January 2004

IPv6 status:

IPv6 Support: No

Brief description of the product (brief functionality etc)

Network equipment can account and report traffic statistics for the purpose of network management. It is normally a requirement of a network operator to keep track how much and what type of traffic the network clients send and which networks or end systems are receiving it.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment: The tool should be upgraded to include support for Netflow export v9, which can incorporate information about IPv6 flows. It should also be upgraded to use the IPv6 stack in addition to the only one currently supported Ipv4 stack.

Example of running implementations publicity available

Public available URL where one can check running software, for example for MRTG and RRDBAR:

http://www.ipv6.man.poznan.pl/cgi-bin/14.cgi?cfg=tunele.cfg

Other remarks:

Application domains in the 6Net management framework: Flow-tools can be deployed in any of the domains that need to collect flow information for traffic transiting their border routers.

Tests description

The flow-tool is the most popular flow collection and analyses tool in the community and provides many general features that satisfy most of network operators. It supports Netflow v5 and v8 at least; though these versions can only provide IPv4 information about flows but not IPv6. The new netflow specification (v9) is general enough and includes fields specific to IPv6; though because it is a recent standard and is not present yet on production environments cflow-tools does not support it. So it is not possible to perform any tests at this moment.

28

Page 29: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type: Lool location and information links, authors:

Source available: (yes/no)

HP OpenView Network Node Manager Advanced Edition

7.0

HP-UX 11.0 for Workstations and Servers, HP-UX 11.11 for Workstations and Servers, Windows 2000/XP,

Solaris 8.0, 9.0

commercial

http://www.openview.hp.com/products/nnm/index.html no

6NET contact: Is used in 6NET: Date of description

Bartosz Gajda No August 2004

IPv6 status:

Yes When you run IPv6 discovery, Extended Topology discovers global, site-local, and link-local addresses. The management station and all routers must be dual-stacked for IPv6 discovery to function properly.Also IPv6 MIBs must be loaded.

Brief description of the product (brief functionality etc)

HP OpenView Network Node Manager Advanced Edition discovers the existence of IPv6 devices, creates a map showing layer 3 IPv6 device connectivity, then monitors the status of each device. To monitor the address status of a device, NNMuses an IPv6 ping rather than using SNMP requests. NNM considers a device to be down if it doesn't respond to an IPv6 ping.

To obtain a list of devices, MIBs, and connectivity information that supports, point your browser to: http://www.openview.hp.com/go?id=nnmet&page=1

Is still under development, what is the next version number?

yes, but no newer version number is announced

Planned features to do with dates:

DE

VE

LO

PME

NT

unknown

Test environment description (schemes, topology, configuration)

na

Test description, results (including screenshots, frame captures), observed difficulties TE

ST

na

29

Page 30: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test summary, remarks

na

Example of running implementations publicity available

na

30

Page 31: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and informationlinks, authors:

Is source available:

JOIN-TV 0.6.1 Unix/Linux GPL [email protected] Yes

6NET contact: Is used in 6NET: Date of description

André Stolze ([email protected])

JOIN ([email protected]) Yes August 2004

IPv6 status:

Supports IPv6 depending on the IPv6-Support of MRTG.

Brief description of the product (brief functionality etc)

JOIN-TV (JOIN Traffic Visualizer) visualizes the Traffic-flow within a network by interpreting the log-files of the MRTG-Tool written by Tobias Oetiker.

Is still under development, what is the next version number?

Still under development (see below)

Planned extensions, new features, with dates:

DEVELOPMENT

- Detailed documentation

- Localization

- Extended support for background maps

- Finetuning of display output and modular style

- Traffic history

Example of running implementations publicity available

http://www.6win.de/mrtg/index_neu.php?lang=en

http://www.6win.de/mrtg/index_abs.php?lang=en

Other remarks:

Tests description

Test environment description (schemes, topology, configuration) Software: All tests were performed on the JOIN webserver which is currently a dual Intel-Xeon 2.4 GHz 1HE server-system running Mandrake Linux release 9.0 (dolphin) for i586. For security reason the MRTG-tool(2.9.25) is running on a different system, an AIX-System gathering data via IPv4 (this special machine does not support IPv6). Data transfer is done by a cron job executing a simple “scp” command. The interpretation of data is done by the php-module (v4.3.1) for the apache-webserver (2.0.45) with external GD support including full/maximal freetype2-support.

31

Page 32: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Network: JOIN-TV was developed for the 6WiN (http://www.6win.de) – a native IPv6 backbone in Germany – and the tunnel endpoints of the connected members of DFN. Therefore all tests of the tool were done within the 6WiN. All monitored interfaces in the tests are located on Cisco 7206 routers equipped with currently IOS 12.2(15)T. For this reason there are two values for the inner-6WiN-links and only one for customer endpoints.

Test description, results (including screenshots, frame captures), observed difficulties Test results can be viewed at the WWW-Addresses mentioned above. Clicking on a link opens a new window containing the MRTG graphs for the selected link. Figures 4 and 5 show example pictures of JOIN-TV.

: 6WiN traffic overview (bandwidth usage in percent)

32

Page 33: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

: 6WiN traffic overview (absolute bandwidth usage)

33

Page 34: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPFlow 0.49.7pre3 http://www.rrt.cr-picardie.fr/~fillot/nf6/ No

6NET contact: Is used in 6NET: Date of description

Simon Leinen, SWITCH Yes (SURFnet, HUNGARNET) January 2004

IPv6 status:

IPv6 Support: YES

Brief description of the product (brief functionality etc)

IPFlow is a collector for Netflow version v1, v5, v6, v7, v8 and v9. It supports logging flow data to disk, data aggregation according to configuration, port scan detection, storage of aggregated data in RRDtool, and graphical display of flow statistics. The author is Christophe Fillot.

Binaries are available for Linux/Intel, BSD/Intel and Solaris/SPARC, as well as extensive documentation in PDF.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Proposed extensions Support for the IPFIX protocol as it becomes standardized in the IETF. Source availability.

Example of running implementations publicity available

Other remarks:

Application domains in the 6Net management framework See NetflowIpFix

34

Page 35: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPm IPm2.2 List of supported platforms

commercialhttp://www.efficientip.com

[email protected] No

6NET contact: Is used in 6NET: Date of description

Jérôme DURAND tests only February 2004

IPv6 status:

IPm tool make changes to the DNS server via SNMP. Only SNMP over IPv4 is available at that time. Transport over IPv6 could make this tool operational within a native IPv6 environment. Brief description of the product (brief functionality etc)

This tool provides facilities to manage:

Naming

Registry (addressing)

DHCP

Authority management (for network administrtors rights)

Is still under development, what is the next version number?

No information

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

At the time being, there is only support for IPv6 naming. This tool makes it possible to manage easily a DNS server through a web interface. AAAA and PTR records are supported at this time and PTR records are created automatically when new AAAA records are given by the administrator.

The development team is considering about implementing IPv6 support for registry management and DHCPv6.

Example of running implementations publicity available

No running implementation publicly available

Other remarks:

No remarks at this stage

Tests description

No tests performed yet. Should be done soon.

Only installation and global features were seen (nothing in detail)

35

Page 36: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPv6 Lan Dynamic Topology Discovery V1.0 FreeBSD freeware [email protected] Yes

6NET contact: Is used in 6NET: Date of description

Isabelle ASTIC, INRIA-LORIA

Olivier FESTOR, INRIA-LORIA No January 2004

IPv6 status:

Developped for IPv6 LANs.

Brief description of the product (brief functionality etc)

This service dynamically discovers the IPv6 LAN topology, thanks to its hierarchical architecture based on a Local Agent (LA) working on each IPv6 link, and a Global Agent(GA) collecting and correlating all the data received from the LAs. A Visualisation agent (VA) is connected to the GA and periodically display the view of the topology.

Is still under development, what is the next version number?

This service is still under developpement. Some tests need to be perform yet.

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

See test Summary and remarks

Example of running implementations publicity available

Other remarks:

Development description

The current dynamic topology discovery for IPv4 networks rely on ICMP and SNMP. To discover all the nodes of a sub-network, they use exhaustive pings in order to scan all possible addresses and verify that they are used. To discover the multiple sub-networks, SNMP is used to learn the routing table and the « Next Hops » on each route. As mostly SNMP architecture is not available (SNMP over IPv6 is quite rare and the MIB able to manage IPv6 networks too), and as scan all the possible addresses on a sub-network is much more complex now because of the length of the IPv6 addresses, a new LAN dynamic topology services should be design.

36

Page 37: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The study of the IPv4 services, of the available IPv6 protocols to find out a IPv6 network topology, of the specificity of IPv6 (addressing architecture), induce to propose a hierarchical architecture based on several Local Agents (LA), one agent implemented on each local link, collecting the topology of this link, and a unique Global Agent (GA)which receive the information collected by each LA and correlate them in order to establish the real topology of the IPv6 LAN (see Figure 1 below).

The LA algorithm relies on ICMPv6 and Neighbor Discovery protocol. It first send an Echo Request to all the nodes and collect more information about this node, using the neighbor discovery.

The GA algorithm collects all the information from the LA. It correlates them in order to discover interfaces detected by 2 different LAs but owned by the same node. It relies each LA by a traceroute to determine the main routes. So the topology discovered is a N3 topology.

Host

Local Agent

Host Host Host Host

Local Agent

Local Agent

Visualisation Agent Visualisation Agent

Visualisation Part

Gather information

Link topology discovery

Link topology discovery

Figure 1 : IPv6 Lan Topology discovery architecture Way of the data

37

Page 38: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The Visualisation Agent connects itself to the GA. It then receives the topology discovered by the GA and refreshes it periodically. Multiple VA could be connected to a GA. Figure 2 give an exemple of topology as displayed by the VA :

Figure 2 : Exemple of a topology view displayed by the Visualisation Agent

The protocol used between the different agents is UDPv6. The visualisation of the IPv6 LAN topology is made using QT.

This service was implemented in the C language, on a FreeBSD platform (see description of the tests below).

Tests description

The tests made were made in the context of the development of the service.

Test environment description (schemes, topology, configuration) They were made on our IPv6 testbed platform. This platform is linked to the main IPv4 LORIA network by a switch on our testbed platform and a dual stack CISCO router : the LORIA IPv6 gateway. All our systems are under FreeBSD 4.7. A DNS server is available on our file server (Rork). Rork is defined with trunked VLANs which allow it to be joined from every link of our platform. See figure 1 below for a schematic description of our platform.

38

Page 39: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Xl0

Xl0 Xl0

Xl0

Xl0 Xl2

Xl1

Xl2Xl1

Xl1

Xl1

Aria

2001:660:301:40::/64

Router

2001:660:301:32::/64

Rork1 Loria Ipv6 gateway

2001:660:301:33::/64

2001:660:301:34::/64

Garfield

Thorgal

2001:660:301:35::/64

Asterix Rork2

Treize

Sha Rork3

2001:660:301:37::/64

Rork4

2001 :660 :301 :38 ::/64

Rork5

host

Legend :

Crossed wire

Rork6

canardo betelgeuse

Figure 3 : IPv6 LORIA Testbed platform

The Local Agents are set on Thorgal, Treize, Asterix and Aria. The LA sest on Thorgal manages the link connected to its xl1 interface. On Treize, the LA manages the link connected to its xl2 interface. On Asterix, two LAs are set, one for each interface. And at least, the LA sets on Aria manages the link connected to its xl0 interface. The Global Agent is implemented on Aria too.

Test description, results (including screenshots, frame captures), observed difficulties

The results of each Local Agent are summarized into the next table (N means Node, R means Router) (Figure 2):

Local agent Sub-network Name IPv6 link-local address IPv6 global address Link layer address Type

Aria xl0 2001:660:301:32::/64 Rork1 Fe80::201:2ff:fee3:6019 N

Canardo Fe80:2b0:d0ff:fe3f:8260 2001:660:301:32:2b0:d0ff:fe3f:8260 00:b0:d0:3f:82:60 N

Betelgeuse Fe80::260:8ff:fe50:cbe9 2001:660:301:32:260:8ff:fe50:cbe9 00:60:08:50:cb:e9 N

Loria GW Fe80::230:b6ff:fe51:d41c 00:30:b6:51:d4:1c R

Aria Fe80::201:2ff:fee3:608a 2001:660:301:32:201:2ff:fee3:608a 00:01:02:e3:60:8a R

Aria xl1 2001:660:301:33::/64 Rork2 Fe80::201:2ff:fee3:6019 N

Asterix Fe80::201:2ff:fee3:5fcc 2001:660:301:33:201:2ff:fee3:5fcc 00:01:02:e3:5f:cc R

Aria Fe80::201:2ff:fee3:605d 2001:660:301:33:201:2ff:fee3:605d 00:01:02:e3:60:5d R

Asterix xl1 2001:660:301:34::/64 Rork6 Fe80::201:2ff:fee3:6019 N

Treize Fe80::201:2ff:fee3:6013 2001:660:301:34:201:2ff:fee3:6013 00:01:02:e3:60:13 R

Thorgal Fe80::210:4bff:fecd:e299 2001:660:301:34:210:4bff:fecd:e299 00:10:4b:cd:e2:99 R

Asterix Fe80::201:2ff:fee3:6015 2001:660:301:34:201:2ff:fee3:6015 00:01:02:e3:60:15 R

39

Page 40: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Thorgal xl1 2001:660:301:35::/64 Rork3 Fe80::201:2ff:fee3:6019 N

Sha Fe80::2c0:4fff:febb:af7a 2001:660:301:35:2c0:4fff:febb:af7a 00:c0:4f:bb:af:7a N

Thorgal Fe80::2c0:4fff:fe67:6b32 2001:660:301:35:2c0:4fff:fe67:6b32 00:c0:4f:67:6b:32 R

Treize xl2 2001:660:301:37::/64 Rork4 Fe80::201:2ff:fee3:6019 N

Treize Fe80::210:4bff:fecd:defd 2001:660:301:37:210:4bff:fecd:defd 00:10:4b:cd:de:fd R

Garfield xl2 2001:660:301:38::/64 Rork5 Fe80::201:2ff:fee3:6019 N

Garfield Fe80::201:2ff:fee3:6005 2001:660:301:38:201:2ff:fee3:6005 00:01:02:e3:60:05 R

Treize xl1 2001:660:301:40::/64 Garfield Fe80::201:2ff:fee3:6089 2001:660:301:40:201:2ff:fee3:6089 00:01:02:e3:60:89 R

Treize Fe80::250:daff:fedc:8ebb 2001:660:301:40:250:daff:fedc:8ebb 00:50:da:dc:8e:bb R

Figure 4 : Local link discovery algorithm results

The main encountered difficulties were to find out the IPv6 global address of each system. The algorithm is based on the Neighbor Discovery and the ICMPv6 Protocol. These 2 algorithms assure to discover the link-local address and the physical one. If the IPv6 global address of an equipment is not stateless auto-configured, it is sometimes impossible to find out its IPv6 global address. That is the case of the LORIA IPv6 Gateway, which IPv6 global address is missing, and which is manually configured. The second difficulty is to establish that two interfaces are owned by the same system. Using DNS is most of the time sufficient but sometimes more information is needed, as in the case of our file server Rork whom interface owns each a different name. Test summary, remarks Our algorithm gives all the information that it could discovered. Because of the lack of the MIB II for IPv6 networks and, in the case of native networks, of the lack of SNMP over IPv6, the difficulties encountered could not be solved. When the MIB II and SNMP over IPv6 will be widely implemented, then, it will be possible to discover more information on all systems but only the use of protocol like the Matt Crawford one, which is an extension of ICMPv6 (IPv6 Node Information Queries, draft-ietf-ipngwg-name-lookups-09;txt), could help to discover a complete topology.

40

Page 41: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPv6 Looking Glass - - freeware

w6.loria.fr

[email protected]

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Isabelle ASTIC

Olivier FESTOR Yes January 2004

IPv6 status:

Full IPv6 support

Brief description of the product (brief functionality etc)

The Looking Glass is composed of a Web interface generated by a CGI file. This Web interface let the user choose several requests to be sent to CISCO routers. Each request corresponds to a CISCO CLI command. These commands are executed on CISCO routers via a telnet connexion over IPv6.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Extension could be made by extended the Looking Glass to other types of routers.

Example of running implementations publicity available

w6.loria.fr

Other remarks:

Development description

41

Page 42: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The Looking Glass existed for IPv4 networks. Our development consisted on porting it on IPv6 (modification of the Net::telnet::Cisco module) and to define the Web page with the most interesting commands to be sent (see a copy of the HTML page below) :

Tests description

This IPv6 version of Looking Glass was mainly used to manage the IPv6 Pilote of Renater II.

It is useful to verify the behaviour of the routing protocols and the traffic on the network.

42

Page 43: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPv6 LookingGlass PHP v. 2.0

WEB Server with PHP (4.3.X) support

freeware

http://www.6net.garr.it/tools/lg.php

http://www.6net.garr.it/tools/lg.phps

Gabriella Paolini

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Gabriella Paolini (GARR) Yes January 2004

IPv6 status:

Full Ipv6 support.

Brief description of the product (brief functionality etc)

PHP LookingGlass is a PHP script. It can execute all CLI commands in a routers. It supports both IPv4 and IPv6 commands, and Ipv6 transport too. It works only with Cisco routers, using telnet connection.

Is still under development, what is the next version number?

YES, v2.1 or v3.0

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

2004 – Multivendor support (Juniper)

2004 – SSH support

Example of running implementations publicity available

http://www.6net.garr.it/tools/lg.php

Other remarks:

Tests description

This tool is used in the Italian 6net environment. It’s available in the public web site.

Test environment description (schemes, topology, configuration) We are using the Italian 6net routers. (http://www.6net.garr.it/) http://www.6net.garr.it/tools/lg.php

Test description, results (including screenshots, frame captures), observed difficulties

43

Page 44: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test summary, remarks Now, this script works fine. We found some problems of security (possibility of running not allowed commands) and stability (open connections to the routers).

44

Page 45: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and

released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPv6 Management Gateway*

3.0

2003.08.09 Linux GPL

http://www.ipv6.man.poznan.pl

Bartosz Belter: [email protected]

Wojbor Bogacki: [email protected]

Łukasz Dolata:

[email protected]

Marcin Kamiński:

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

[email protected]: http://chives.man.poznan.pl/ (PSNC)

July 2004

IPv6 status:

Support SNMP(without MIB conversion), ICMP and TCP.

Brief description of the product (brief functionality etc)

The main purpose of the developed IPv6 Management Gateway is to enable the existing IPv4 network management platforms to monitor, configure and manage the native IPv6 network. The IPv6 Management Gateway translates SNMP, ICMP and TCP protocol messages between IPv4 and IPv6 networks.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Example of running implementations publicity available

http://chives.man.poznan.pl

Other remarks: * Old name of IPv6 Management Gateway 3.0 was SNMP Transition Tool 2.0

Tests description Test environment description (schemes, topology, configuration)

45

Page 46: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Topology:

IPv4 network IPv6 network

Data Generalbirch.man.poznan.pl10.0.7.3

baobab,man.poznan.pl10.0.7.2

3Com

baobab.man.poznan.pl2001:808:0:1:204:75ff:fec7:c277

3Com

fernek.man.poznan.pl2001:808:0:1:210:4bff:feb8:4da9

fernek,man.poznan.pl10.0.7.4

boletus,man.poznan.pl10.0.7.1

3Co m

birch.man.poznan.pl2001:808:0:1:200:1ff:fe00:c43f

3Com

boletus.man.poznan.pl2001:808:0:1:204:76ff:fee9:59d9

fern.man.poznan.pl10.0.7.5

2001:808:0:1:204:75ff:fec7:5a4b

Server proxy

IPv4 network IPv6 network

Data Generalbirch.man.poznan.pl10.0.7.3

baobab,man.poznan.pl10.0.7.2

3Com

baobab.man.poznan.pl2001:808:0:1:204:75ff:fec7:c277

3Com

fernek.man.poznan.pl2001:808:0:1:210:4bff:feb8:4da9

fernek,man.poznan.pl10.0.7.4

boletus,man.poznan.pl10.0.7.1

3Co m

birch.man.poznan.pl2001:808:0:1:200:1ff:fe00:c43f

3Co m

boletus.man.poznan.pl2001:808:0:1:204:76ff:fee9:59d9

fern.man.poznan.pl10.0.7.5

2001:808:0:1:204:75ff:fec7:5a4b

Server proxy

Configuration:

Computer name: boletus

Processor: Intel Celeron 1.0 GHz

Memory: 256 MB

Network card: 3Com EtherLink XL 10/100 Mbit

Pla form: Linux Red Hat 8.0 t

t

IPv4 address: 10.0.7.1

IPv6 address: 2001:808:0:1:204:76ff:fee9:59d9

Computer name: baobab

Processor: Intel Celeron 1.0 GHz

Memory: 256 MB

Network card: 3Com EtherLink XL 10/100 Mbit

Pla form: Linux Mandrake 9.0

46

Page 47: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

IPv4 address: 10.0.7.2

IPv6 address: 2001:808:0:1:204:75ff:fec7:c277

Computer name: birch

Processor: Intel Celeron 700 MHz

Memory: 256 MB

Network card: 3Com EtherLink XL 10/100 Mbit

Pla form: Linux Suze 8.0 t

t

t

IPv4 address: 10.0.7.3

IPv6 address: 2001:808:0:1:200:01ff:fe00:c43f

Computer name: fernek

Processor: Intel Celeron 1.0 GHz

Memory: 256 MB

Network card: 3Com EtherLink XL 10/100 Mbit

Pla form: Linux PLD 1.0 IPv4 address: 10.0.7.4

IPv6 address: 2001:808:0:1:210:4bff:feb8:4da9

Computer name: fern

Processor: Intel Celeron 1.0 GHz

Memory: 256 MB

Network card: 3Com EtherLink XL 10/100 Mbit

Pla form: Linux PLD 1.0 IPv4 address: 10.0.7.5

IPv6 address: 2001:808:0:1:204:75ff:fec7:5a4b

The computers was connected by HUB 3Com – LinkBuilder TP/8, and the NET-SNMP 5.0.6 was installed on every machine.

Address translation table. 10.0.7.1 2001:808:0:1::11

10.0.7.2 2001:808:0:1::12

10.0.7.3 2001:808:0:1::13

10.0.7.4 2001:808:0:1::14

47

Page 48: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

10.0.7.5 2001:808:0:1::15

2001:808:0:1:204:76ff:fee9:59d9 10.0.7.11

2001:808:0:1:204:75ff:fec7:c277 10.0.7.12

2001:808:0:1:200:01ff:fe00:c43f 10.0.7.13

2001:808:0:1:210:4bff:feb8:4da9 10.0.7.14

2001:808:0:1:204:75ff:fec7:5a4b 10.0.7.15

Test description, results (including screenshots, frame captures), observed difficulties Test 1:

Description:

Every station performs a snmpwalk towards all agents simultaneous using the IPv6 Management Gateway.

The IPv6 Management Gateway translates SNMP packets between IPv4 and IPv6 networks in both directions.

Results:

[bart@birch bart]$ snmpwalk –c public 2001:808:0:1::14

SNMPv2-MIB::sysDescr.0 = STRING: Linux fernek 2.2.22 #1 Sun Nov 17 10:56:45 UTC 2002 i586

SNMPv2-MIB::sysObjectID.0: NET-SNMP-MIB::netSnmpAgentOIDs.10

SNMPv2-MIB::sysUpTime.0 = Timeticks: 0:08:51.31

SNMPv2-MIB::sysContact.0 = STRING: Me <[email protected]>

SNMPv2-MIB::sysName.0 = STRING: fernek

SNMPv2-MIB::sysLocation.0 = STRING: Right here, fight now.

SNMPv2-MIB::sysORLastChange.0 = Timeticks: 0:00:01.42

SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB

SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB

SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB

SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip

SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB

SNMPv2-MIB::sysORID.6 = OID:SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup

SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance

SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance

SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-SM-MIB::usmMIBCompliance

SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module t describe generic objects for Network interface sub-layers

SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities

SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations

[bart@birch bart]$ snmpwalk –c public 10.0.7.14

48

Page 49: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

SNMPv2-MIB::sysDescr.0 = STRING: Linux fernek 2.2.22 #1 Sun Nov 17 10:56:45 UTC 2002 i586

SNMPv2-MIB::sysObjectID.0: NET-SNMP-MIB::netSnmpAgentOIDs.10

SNMPv2-MIB::sysUpTime.0 = Timeticks: 0:08:49.49

SNMPv2-MIB::sysContact.0 = STRING: Me <[email protected]>

SNMPv2-MIB::sysName.0 = STRING: fernek

SNMPv2-MIB::sysLocation.0 = STRING: Right here, fight now.

SNMPv2-MIB::sysORLastChange.0 = Timeticks: 0:00:00.37

SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB

SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB

SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB

SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip

SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB

SNMPv2-MIB::sysORID.6 = OID:SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup

SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance

SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance

SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-SM-MIB::usmMIBCompliance

SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module t describe generic objects for Network interface sub-layers

SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities

SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations

Observed difficulties:

None.

Test 2:

Description:

The Boletus station with HP OpenView on the IPv4 network sends an SNMP request to the Baobab and the Fernek stations on the IPv6 network. They answer to the Boletus station. All SNMP packets are translated by the IPv6 Management Gateway installed on the Fern station.

Screenshots:

49

Page 50: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Observed difficulties:

None.

Test 3:

Description:

The Birch station with MG-SOFT on the IPv4 network send SNMP request to the Baobab and the Fernek stations on the IPv6 network. They answer to the Birch. All SNMP packets are translated by the IPv6 Management Gateway installed on the Fern station.

Screenshot:

50

Page 51: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Observed difficulties:

None.

Test 4:

Description:

The Birch station with SolarWinds on the IPv4 network sends the SNMP request the Baobab and the Fernek stations on the IPv6 network. They answer to the Birch. All SNMP packets are translated by the IPv6 Management Gateway installed on the Fern station.

Screenshot:

51

Page 52: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Observed difficulties:

None. Test 5:

Description:

The Birch station with PSNC Muvi MIB-Browser on the IPv4 network sends an SNMP request to the Baobab and the Fernek stations on the IPv6 network. They answer to the Birch. All SNMP packets are translated by the IPv6 Management Gateway installed on the Fern station.

A similar test is executed on the other side, from IPv6 to IPv4 network.

Screenshots:

52

Page 53: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Observed difficulties:

None.

Test 6:

Description

The Baobab station on the IPv4 network sends the ICMP ping message to the Boletus station on the IPv6 network. It answers to the Baobab. ICMP packets are translated by the IPv6 Management Gateway installed on the Fern station.

Results:

The Baobab station gets correct ICMP ping message from the Boletus station. The IPv6 Management Gateway on the Fern station is transparent either the Baobab station or the Boletus station.

Observed difficulties:

None. Test 7:

Description

The Boletus station on the IPv4 network try to establish ssh connection to the Maple station on the IPv6 network. Maple station accept connection. TCP packets are translated by the IPv6 Management Gateway installed on the Boletus station.

Results:

The Boletus station establish ssh connection with the Boletus station. The IPv6 Management Gateway on the Boletus station is transparent either the Baobab station or the Boletus station.

53

Page 54: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Screenshots:

Observed difficulties:

None.

Test summary, remarks

The IPv6 Management Gateway translates correctly SNMP, ICMP and TCP messages. Tests confirmed the compatibility of the IPv6 Management Gateway with other producers software. It’s also transparent for this software. No problems occurred during tests.

54

Page 55: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IPv6 support for Netflow v9 in IOS

12.3(20030701:153912) [tkiely-geshi 481] (July 2003), and later "Geshi" versions

C3640/ 7200/ 7500

commercial, currently distributed on a restricted basis as an EFT (Engineering Field Trial)

URL address, list of the names and e-mail addresses of the authors

No

6NET contact: Is used in 6NET: Date of description

Simon Leinen, SWITCH Yes (SWITCH, RENATER, SURFnet, DANTE, GRNET)

January 2004

IPv6 status:

IPv6 Support: Yes

Brief description of the product (brief functionality etc)

The metering/exporting side of Netflow v9 has been implemented in Cisco IOS. Currently, 3640 and 7200/7500 routers are supported.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment Transport of flow information over IPv6.

Proposed extensions Support of the emerging IPFIX standard.

Support for GSR (12x00) and Catalyst 6500/7600 OSR routers. The Catalyst 6500/7600 OSR with Supervisor 720 already has an IPv6 Netflow table internally (IOS 12.2(17a)SX1), but cannot export IPv6 flows because of lack of Netflow v9 support.

Example of running implementations publicity available

Other remarks:

Application domains in the 6NET management framework See NetflowIpFix

55

Page 56: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

IRRToolSet

Version: 4.8.1

UNIX

Sun Sparc (SunOS 4.1.3)

Solaris

FreeBSD

DEC Alpha (OSF/1)

BSDI

Linux

NetBSD

BSD http://www.ripe.net/ripencc/pub-services/db/irrtoolset/ Yes

6NET contact: Is used in 6NET: Date of description

Rob Evans Yes January 2004

IPv6 status: Policies used by the IRR ToolSet are expressed in a language called RPSL, as specified in RFC2622 and RFC2650. This language, and the databases it is stored in (the IRRs) need to be modified before the tool can be used for widespread configuration of IPv6 routing policies. There is an effort on the way to do this, under the name of "RPSLng" (Routing Policy Specification Language, Next Generation). The current version of the Internet-Draft can be found on http://www.radb.net/rpslng.html . IRRToolSet 4.8.1 includes some support for RPSLng. In particular, peval, rpslngcheck and RtConfig understand the new information and can be used to generate IPv6 filter configuration. Brief description of the product (brief functionality etc)

The IRRToolSet is a suite of tools for querying the Internet Routing Registries (IRRs) and building routing policies and configurations for devices based on that information.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates: DEVELOPMENT

Example of running implementations publicity available

Other remarks:

Application domains in the 6Net management framework:

Configuration management

56

Page 57: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

jnettop jnettop 0.9

[29 Jul 2003]

Most UNIX systems (tested on Linux)

GPL http://jnettop.kubs.info/ Yes

6NET contact: Is used in 6NET: Date of description

Marcin Kamiński, PSNC Yes August 2004

IPv6 status:

Original application does not support IPv6, but PSNC developed appropiate patch. Patch is available at http://www.ipv6.man.poznan.pl and it supports:

– correct understanding of IPv6 packets

– grouping of IPv6 packets into streams

– resolving of IPv6 addresses into domain names

Brief description of the product (brief functionality etc)

Jnettop allows administrators of routers to watch online traffic coming across the network in a fashion similar to the way top displays statistics about processes. It is useful for quickly evaluating the state of the network. It is console application without web interface.

Is still under development, what is the next version number?

No information at webpage, but PSNC develops new features.

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Some features planned by PSNC:– packet counting and statistics– view of data in stream– more protocol filters

Example of running implementations publicity available

Other remarks:

57

Page 58: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms: License type:

Tool location and information links, authors:

Is source available:

Meinberg Lantime (hardware NTP appliance)

April 2004 N/A

Meinberg LanTime appliance is a commercial product NTP server and is purchasable with IPv6 support.

http://www.meinberg.de N/A

6NET contact: Is used in 6NET: Date of description

JOIN Project Team: [email protected]

Yes August 2004

IPv6 status:

Supports NTP and management access over IPv6

Brief description of the product (brief functionality etc)

The Meinberg Lantime is a 1HU 19” NTP appliance with an internal GPS receiver that is connected to an external GPS antenna. Its software is based on embedded Linux and the NTP daemon from http://www.ntp.org. The hardware is (except for the PC board) manufactured by Meinberg (GPS receiver, LCD controller, etc.).

Is still under development, what is the next version number?

The software is still under development and it is available for testing from Meinberg.

Planned extensions, new features ,with dates:

DEVELOPMENT

NTP IPv6 multicast

Example of running implementations publicity available

Stratum-1 server: time.ipv6.uni-muenster.de (IPv6 only)

time.join.uni-muenster.de (IPv4/IPv6, but same machine as above)

Other remarks:

A test program for 6NET partners is available.

Tests description

58

Page 59: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The Meinberg LanTime appliance was deployed in the premises of the University of Muenster. In cooperation with the manufacturer several features were enhanced with IPv6 functionality

Test environment description (schemes, topology, configuration) The Meinberg Lantime is deployed at the ZIV of the University of Münster to provide IPv4/IPv6 stratum-1 NTP services for the university network. The Lantime is located in a dual-stack server subnet. To provide the NTP server with an accurate time source, an external GPS antenna is mounted on the roof of the ZIV's building. The antenna is connected to the Lantime's internal GPS receiver by a coaxial cable. The initial configuration of the device is done using the built-in LCD and buttons on the chassis.

Test description, results (including screenshots, frame captures), observed difficulties The following features were tested successfully: - NTP over IPv6 - Stateless Address Autoconfiguration - ssh access over IPv6 (for management) - Web access over IPv6 (for management) - SNMP over IPv6

This is a short example how the Lantime acts as a time server over IPv6 (ntp request by a client to the Lantime):

$ ntpdate -q time.ipv6.uni-muenster.de Looking for host time.ipv6.uni-muenster.de and service ntp host found : tmpntpsrv.ipv6.uni-muenster.de server 2001:638:500:101:2e0:4bff:fe04:bc5f, stratum 1, offset -29.299401, delay 0.02609 11 Aug 08:34:15 ntpdate[25975]: step time server 2001:638:500:101:2e0:4bff:fe04:bc5f offset -29.299401 sec Test summary, remarks The Meinberg Lantime appliance is a working product now with more than sufficient IPv6 support. It is a reliable IPv6 NTP server and even management and configuration is manageable over IPv6. The machine that was used for tests is now permanently integrated in the network of the University of Muenster and is used as a primary stratum-1 time server (for IPv6 and IPv4). The server time.join.uni-muenster.de is globally available for everyone.

59

Page 60: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version and released date:

Available platforms: License type:

Tool location andinformation links, authors:

Is source available:

Mping 2.0 RC1

Tested on:

GNU/Linux

FreeBSD

NetBSD

GPL-like

URL: http://mping.uninett.no

Email:

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Olav Kvittem – [email protected]

Frank Aune - [email protected] August 2004

IPv6 status:

Version 2.0 supports IPv6 but is currently in beta testing.

Brief description of the product (brief functionality etc)

The Mping service consists of two parts: The Mping client, written in C, and the web interface extension, written in PERL. Unless otherwise specified, in this document when referring to Mping we are referring to the Mping C-client

Mping is a tool for measuring round-trip delay and packet loss, using the ICMP echo feature, in a TCP/IP based network. Multiple hosts - up to a compile-time define (500), both IPv4 and IPv6 at the same time - can be pinged in a round-robin order. At runtime, the user can set the wait time between each packet sent, number of packets sent and the size of the packets. For each host specified, information about packet loss and minimum/average/maximum response time is displayed. Mping can also display the collected data as median, cube-sum, standard deviation or 10/50/90-percentile at the users request.

Several techniques are implemented into the Mping service, to make sure that the collected data is "statistically" correct:

Mping by default do not send more than 10 ICMP packets per second, thus measured data is independent from the time of measuring.

Mping do not send all ICMP-packets to one 'Gateway' at the same time, rather Mping tries to spread it out in a Round-Robin fashion, thus avoids focusing on local temporary network errors.

Mping starts the pingsweeps at asynchronous intervals. We use a Poisson-distribution, thus avoiding periodic network variance.

Technique 1 and 2 are Mping C-client features, while 3 is implemented in the PERL web interface extension.

A web interface is used for browsing the collected data and for generating reports, graphs and traceroutes for the different hosts we measure. The PERL code is modularized and easily extended to suite other needs. As an example, the language support is modularized and thus adding support for new languages is very easy.

The mping backend performs tracroute to all destiations nightly. The router addresses are added to the ping host list and the route is stored. The we web-interface will show historic routes with historic data, thus monitoring routes over time. The traceroute display will indicate which hop that causes a particular high delay or loss.

60

Page 61: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Is still under development, what is the next version number?

Yes, the next version planned is v2.0.

Planned extensions, new features ,with dates:

DEVELOPMENT

2003-08 – Mping RC1 revision.

2003-08 – Store historical traceroute for each host monitored, so we can see what route the packets travelled for any given date.

2003-08 – Improve graph zooming / scaling / navigation in the web interface.

Example of running implementations publicity available

http://mping.uninett.no

Other remarks:

Tests description

Test environment description (schemes, topology, configuration) SYSTEM CONFIGURATION: Mping 1.3 (IPv4 only) has been tested on the following platforms successfully:

1.FreeBSD 4.8 Production / 5.1 New Technology 2.NetBSD 1.6 STABLE 3.GNU/Linux 2.2.X and 2.4.X

Mping 2.0 (both IPv4 and IPv6) has been tested on the following platforms successfully:

GNU/Linux >= 2.4.18* (See note below) NetBSD 1.6 STABLE (only IPv4 support tested)** (See note below) FreeBSD 4.8 Production / 5.1 New Technology (only IPv4 support tested)** (See note below)

* Mping relies on the ICMP IPv6 packet checksum feature of the Linux 2.4.X kernel series, however we have been seeing strange issues on 2.4.X kernels below 2.4.18. Even on some 2.4.18 kernels, we have observed this issue. For RedHat at least 2.4.18-27.7 and above is working as expected. If IPv6 is going to be used, we suggest using no kernel older than this. ** No suitable test environment for NetBSD and FreeBSD with regards to IPv6 support were available at the time of writing. However, we see no reason why this should not work. Since Mping uses raw sockets to send the ICMP packets, the client needs to be setuid and owned by root (at least have permissions to access raw sockets).

61

Page 62: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The traceroute feature for the PERL web interface, requires iputils => 200209, due to a bug in traceroute6 in older iputils-packages. The PERL installation for the web interface, requires either the GIFGraph (or GDGraph) module and gnuplot, to be able to produce graphs from the collected data. The Mping C-client is packaged in a separate tar.gz file, and support normal *nix Makefile operations. The web interface extension has its own relatively easy installation procedure described in the README file included in the package.

NETWORK CONFIGURATION: IPv6 over IPv4 tunnelling has been used in the testing phase, so we have yet to determine if encapsulation of packets this way has had any impact on the data collected or performance observed.

62

Page 63: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test description, results (including screenshots, frame captures), observed difficulties Currently Mping 2.0 is tested against several groups of hosts, including the 6Net router backbone, a mixed IPv4 / IPv6 group and a group with other hosts residing on 6Net. (See http://mping.uninett.no ) EXTERNAL DIFFICULTIES: As noted above, on Linux kernel <2.4.18 we've observed issues with IPv6 packet checksum generation, resulting in Mping doing pretty much nothing – since it believes the packets received are bad due to kernel checksum generation was flawed. This can easily be rectified by using >=2.4.18-27.7 (RedHat patch) or some other up-to-date patched Linux kernel >=2.4.18. INTERNAL MPING DESIGN DIFFICULTIES: When listening to two sockets at once, to be able to support both IPv4 and IPv6 in parallel, we also had to make sure they did not block each other – and thus the Mping design is somewhat different than a normal ping client found on most *nix OSes. The other major “difficulty” encountered, was the decision on how to design Mping when a DNS hostname resolves more than one address, and perhaps it resolves both an IPv4 and IPv6 address. We have implemented an optional -4 and -6 switch set at runtime, so the user can specify the desired protocol if more than one is available, and have yet to see the need for a more sophisticated behaviour. If no protocol is specified, Mping just takes the first address it resolves. Test summary, remarks All tests so far have been successful, and the Mping client is working as expected. The web interface is currently undergoing changes, but the data collection is unaffected by this. Since the Mping client is written in C and the web interface is based on PERL, they do not share any mutual code at all (the web interface is simply using the data output from the Mping client in its presentation). Remark: How efficiently a network stack is able to handle a high load, is very different from platform to plattfom. Generally, a machine under heavy load is unsuited to perform accurate network measurements. Ideally, one would want one machine to only collect the data, and use another machine to manipulate this data and host the web interface etc. The machine running our Mping service is also used for other tasks, and how this affects the statistics is something we are investigating.

63

Page 64: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type: Tool location and information links, authors: Is source

available:

MRTG Version: 2.10.15

Linux, FreeBSD, Solaris, Win32

GPL http://people.ee.ethz.ch/~oetiker/webtools/mrtg/ Yes

6NET contact: Is used in 6NET: Date of description

Lorenzo Colitti [email protected], Roma Tre University

Yes August 2004

IPv6 status:

IPv6 Support: YES (tested on Linux; should work on other platforms, but depends on libraries) Brief description of the product (brief functionality etc)

MRTG is a tool to monitor to monitor the traffic load on network links. The Computer Networks research group at Roma Tre University added IPv6 support to MRTG in version 2.10.0

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Example of running implementations publicity available

http://www.uniroma3.6net.garr.it/mrtg/graphs/gsr.html

Other remarks:

IPv6 must be explicitly enabled in the configuration file (MRTG) or via command-line options (cfgmaker).

IPv6 support requires the Socket6 (v0.11 or later) and IO::Socket::INET6 (v1.26 or later) Perl modules, which can be downloaded from CPAN (http://www.cpan.org/).

Tests description

MRTG’s IPv6 support was tested with Net-SNMP agents under Linux and with a Cisco GSR router running an EFT image with support for SNMP over IPv6. Regression tests were also run, on a Cisco 2600 and a Cisco 7500, to investigate whether IPv6 support causes problems with the monitoring of dual stack routers that do not support SNMP over IPv6 and must be queried over IPv4.

Test environment description (schemes, topology, configuration)

64

Page 65: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The tests were run on various Linux distributions including Red Hat 7.2 and 8.0, Debian unstable, and Mandrake 9.1. All hosts were dual stack. The IPv6 libraries used were Socket6.pm v0.11 and INET6.pm v1.26. No special network or host configuration was performed. Test description, results (including screenshots, frame captures), observed difficulties Testing consisted in using cfgmaker to generate MRTG configuration files for all routers, using both IPv6 and IPv4, and using MRTG to monitor traffic and generate traffic graphs using the generated configuration files. In all cases, IPv6 was enabled by passing the --enable-ipv6 option to cfgmaker. Both numeric IPv6 addresses and hostnames were tried.

Test summary, remarks All tests were successful. In the case of dual stack routers that did not support IPv6, cfgmaker correctly switched to IPv4 when SNMP queries over IPv6 failed. However, as MRTG does not currently support IPv6 MIBs, IPv6 interface addresses were not displayed in the generated web pages. Also, more testing is required to determine if IPv6 support works on other operating systems such as FreeBSD.

65

Page 66: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

MTR Mtr-0.64

[16 Aug 2004]

Most UNIX systems (tested on Linux)

GPL http://www.bitwizard.nl/mtr/ Yes

6NET contact: Is used in 6NET: Date of description

Marcin Kamiński, PSNC Yes August 2004

IPv6 status:

IPv6 Support: Yes

Brief description of the product (brief functionality etc)

mtr combines the functionaly of the traceroute and ping programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and the destination. After it determines the address of each network hop between the machines, it sends a sequence ICMP ECHO requests to each one to determine the quality of the link to each machine. As it does this, it prints running statistics about each machine.

Is still under development, what is the next version number?

Yes

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Some features from TODO file:

Request timestamping at the remote site (for one-way measurements)

Implement rfc2317 mechanism to do reverse lookups for networks that have DNS delegations on non-octet boundaries

allow "keyboard navigation" in the GTK version

Example of running implementations publicity available

Other remarks:

Using of IPv6 requires -6 command option.

66

Page 67: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type: Tool location and information links, authors: Is source

available:

Multicast Beacon PSNC version

All OS platform with Java (v.1.4 and higher)

GPL

NALNR (original version), http://dast.nlanr.net/Projects/Beacon/

[email protected]

PSNC (PSNC version)

http://noc.man.poznan.pl/noc/strony/aplikacje.html

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Roman Łapacz, PSNC

[email protected] Yes July 2004

IPv6 status:

IPv6 enabled

Brief description of the product (brief functionality etc)

The Multicast Beacon is a measurement tool to monitor multicast traffic.Its architecture is client-server. Clients exchange test packets between themselves using multicast technology. This way they compute traffic parameters (delay, loss, jitter, order, duplicate) and send gathered results to the Beacon server. The server offers web presentation to the end user.

Is still under development, what is the next version number?

The application is ready to use but still is being developed

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Example of running implementations publicity available

http://beaconserver.m6bone.pl/

Other remarks:

Tests description

Here is a section for results of the tests which can show functionality of the tool or some important part of the functionality

67

Page 68: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test environment description (schemes, topology, configuration) Multicast: present in the network OS platform: Linux Java version: 1.4 (IPv6 support) Nr of clients: more then one in different locations Executive script of Beacon client: -- multicast_group=FF0e::8320:1 multicast_port=56465 beacon_server=3ffe:8320:5:101:210:4bff:fe91:9120 server_port=19996 time_to_live=127 user_name=PSNC ementation on your platform /usr/java/j2sdk1.4.0/bin/java -client Beacon \ -group $multicast_group \ -port $multicast_port \ -server $beacon_server \ -serverport $server_port \ -ttl $time_to_live \ -name $user_name Executive script of Beacon server: beacon_port=19996 # beacons report to this port viewer_port=19998 # viewer send query to this port web_view_port=80 # web browser send query to this port default_session=FF0e::8320:1:56465 # default session for web view (shortcut) history_interval=10 # interval of statistics archiving /usr/java/j2sdk1.4.0/bin/java -server -cp "/usr/java/j2sdk1.4.0/jre/lib/rt.jar:./class:./lib/freemarker152.jar:./l ib/mail.jar:./lib/activation.jar" BeaconServer \ -beaconport $beacon_port \ -viewerport $viewer_port \ -webviewport $web_view_port \ -defaultsess $default_session \ -history $history_interval

Test description, results (including screenshots, frame captures), observed difficulties

68

Page 69: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test summary, remarks The application is stable and runs in both network infrastructures: IPv6 and Ipv4.

69

Page 70: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version andreleased date:

Available platforms:

License type:

Tool location andinformation links, authors:

Is source available:

Nagios

Nagios version 1.1and Nagios

plugins 1.3

Linux, *BSD and other UNIX operating system

GPLv2 www.nagios.org Yes

6NET contact: Is used in 6NET: Date of description

János Mohácsi (HUNGARNET) Yes January 2004

IPv6 status:

The IPv6 support depends on several factors.

- The information reporting is relying on an external webserver. If the webserver supports IPv6 the visualization part supports IPv6.

- The ping plugin can be interfaced for a while to use fping that supports IPv6 therefore IPv6 support for pinging is available in the current version.

- Other check plugins has recently extended to support IPv6. Next version of plugins (v1.4) will support IPv6 service monitoring.

Brief description of the product (brief functionality etc)

Nagios is a host and service monitor designed to inform network operators about the network problems. The monitoring daemon runs intermittent checks on hosts and services you specify using external "plugins" which return status information to Nagios. When problems are encountered, the daemon can send notifications out to administrative contacts in a variety of different ways (email, instant message, SMS, etc.). Current status information, historical logs, and reports can all be accessed via a web browser.

Is still under development, what is the next version number?

For Nagios probably version 2.0 and

For Nagios plugins version 1.4

Planned extensions, new features ,with dates: DE

VE

LO

PME

NT

Internationalization, grouping services, more rational configuration files

Example of running implementations publicity available

NIIF/HUNGARNET: http://6net.iif.hu/nagios/

Other remarks:

Tests description

The NAGIOS software is used at NIIF/HUNGARNET for monitoring networking services. We set up a separate NAGIOS monitoring station for monitor IPv6 network service of HUNGARNET and 6NET also. We wanted to test the feasibility of using NAGIOS for monitoring IPv6 services. Find out the missing functionality and develop the missing components.

70

Page 71: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test environment description (schemes, topology, configuration) We tested NAGIOS on a FreeBSD 4.8-STABLE but also some features also tested on Solaris 8.The NAGIOS was installed from the port collection: Nagios version 1.0 later 1.1 and Nagios plugins 1.3beta2 and later 1.3 No special network and host configuration performed. Test description, results (including screenshots, frame captures), observed difficulties Initially the NAGIOS configured to monitor IPv6 reachability of 6NET core routers and 6NET ping hosts and NIIF/HUNGARNET IPv6 enabled routers. To be able to test IPv6 reachability from NAGIOS we had to use check_fping plugin with IPv6 enabled fping since check_ping did not support IPv6. After our report and help IPv6 support for check_ping appeared in the CVS tree. Then we tested IPv6 support of service checking plugins. We found to be unavailable and therefore we developed code for it. We reported to nagios plugins developers, and they implemented a more rational interface of IPv6 service checking, that is available in the CVS tree. We tested the CVS version and we found a name resolution handling error. After our bug report it has been corrected. In the next upcoming release (v1.4) Nagios plugins will have fill IPv6 service checking support.

Test summary, remarks The test of Nagios CVS version was successful. The tool will be IPv6 enabled soon. However more service testing and other platform testing would be necessary.

71

Page 72: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Netflow/IPFIX Netflow v9

List of supported platforms

open specification

http://www.cisco.com/go/netflow/, http://ipfix.doit.wisc.edu/ No

6NET contact: Is used in 6NET: Date of description

Simon Leinen (SWITCH), Janos Mohacsi (HUNGARNET)

Yes (SWITCH, SURFNet, HUNGARnet, DANTE) January 2004

IPv6 status:

IPv6 Support: None in versions prior to v9. An initial router implementation of IPv6 support for Netflow v9 is now available as an IOS EFT (Early Field Test, NetFlowIos). A few collectors have added IPv6 support, mostly in experimental status (NetFlowUtc).

Brief description of the product (brief functionality etc)

Netflow is a flow-based traffic accounting protocol defined by Cisco Systems. It is widely used to support various applications such as usage-based charging, traffic analysis, or capacity planning. The latest version, Netflow v9, will be used as a basis for the IPFIX (IP Flow Information eXport) protocol that is currently being standardized in the IETF

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment

• Transport of Netflow accounting data over IPv6

Proposed extensions

• Support for the emerging IPFIX protocol

• Metering/export monitoring through a Netflow MIB

Example of running implementations publicity available

Public available URL where one can check running software, for example for MRTG and RRDBAR:

http://www.ipv6.man.poznan.pl/cgi-bin/14.cgi?cfg=tunele.cfg

Other remarks:

Application domains in the 6Net management framework Network Element usage data collection, Network Element trend analysis, Network Element capacity planning, Traffic management, network capacity analysis, network data aggregation and trending, network usage correlation, network usage data storage, traffic pattern analysis, network security breach detection, traffic reporting, customer profiling, usage pattern analysis, service intrusion detection, feature pricing, usage charge, correlation, validation and aggregation.

72

Page 73: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Net-snmp Version 5.0.3, 5.0.8

All major unices + windows

Open source

www.net-snmp.sourceforge.net for the net-snmp offical version

w6.loria.fr for the extended version

Yes

6NET contact: Is used in 6NET: Date of description

For version 5.0.3: Isabelle ASTIC, Olivier FESTOR

for version 5.0.8: Athanasios Douitsis [email protected]

No January 2004

IPv6 status:

The net-snmp project offers an IPv6 support to the SNMP protocol and for the first MIBs defined by IETF in 1996, which was able to manage IPv6 networks only.

Brief description of the product (brief functionality etc)

The net-snmp project was originally based on the Carnegie Mellon University and Univerisity of California at Davis SNMP implementations .It has various tools relating to the Simple Network Management Protocol including:

• An extensible agent

• An SNMP library

• tools to request or set information from SNMP agents

• tools to generate and handle SNMP traps

• a version of the unix 'netstat' command using SNMP

The tools provide to query and act on remote SNMP agents are :

• snmpget command, which can be used to retrieve data from a remote host given its host name, authentication information and an OID.

• snmpgetnext command, which is similar in usage to the snmpget command, is used to retrieve the next OID in the MIB tree of data. Instead of returning the data requested, it returns the next OID in the tree and its value:

• The snmpwalk command which essentially performs a whole series of getnext commands automatically, and stops when it returns results that are no longer inside the range of the OID that was originally specified. This command can be used to get all of the information stored on a machine in the system MIB group.

Is still under development, what is the next version number?

Package is constantly under developement by many people around the world on a voluntary basis. Next version number will probably be 5.0.9 or something similar.

DE

VE

LO

PM

EN

T

Possible extensions:

73

Page 74: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Some extensions can be done, like notification support or the udpListenerTable or the TcpListenerTable, now that FreeBSD kernel manages UDP v6 and TCP v6. It is thus possible to extend our current implementation.

Example of running implementations publicity available

Other remarks:

Development description

Our extension of the net-snmp package implements the new MIB II which is able to manage both IPv4 and IPv6 networks. At the time of the development, the implementation concerned draft-ietf-ipngwg-rfc2011-update-00.txt,

draft-ietf-ipngwg-rfc2012-update-01.txt, draft-ietf-ipngwg-rfc2013-update-01.txt, draft-ietf-ipngwg-rfc2096-update-00.txt.

Within the MIB directories, four files have been added (one per draft) and the INET-ADDRESS-MIB.txt file

has been updated with the RFC3291.

Those drafts are only implemented in read access. No set function is currently defined, neither notifications. Some tables are not yet complete, as udpListenerTable, because the system did not manage the information we needed, at the time of development.

This implementation has been done on FreeBSD 4.5-RELEASE #22

Test description #1 performed by Isabelle ASTIC, Olivier FESTOR

During the development, tests were made to verify the consistency of the data returned.

Test environment description (schemes, topology, configuration) The tests were made on the IPv6 testbed platform of the LORIA. All systems were defined with FreeBSD 4.5 RELEASE #22-. Two nodes were used, one to support the net-snmp manager, the other the net-snmp agent. Test description, results (including screenshots, frame captures), observed difficulties

It is not of a great interest to put here the entire MIB II that we implemented. Just as an example, here is an extract of the output for ipAddressTable : IP-MIB::ipAddressAddrType.ipv4.32.127.0.0.1 = INTEGER: ipv4(1) IP-MIB::ipAddressAddrType.ipv4.32.152.81.48.2 = INTEGER: ipv4(1) IP-MIB::ipAddressAddrType.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: ipv6(2) IP-MIB::ipAddressAddrType.ipv6.128.32.1.6.96.3.1.0.50.2.1.2.255.254.227.96.138 = INTEGER: ipv6(2) IP-MIB::ipAddressAddrType.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: ipv6(2) IP-MIB::ipAddressAddrType.ipv6.128.254.128.0.0.0.0.0.0.2.1.2.255.254.227.96.138 = INTEGER: ipv6(2) IP-MIB::ipAddressAddr.ipv4.32.127.0.0.1 = STRING: "127.0.0.1" IP-MIB::ipAddressAddr.ipv4.32.152.81.48.2 = STRING: "152.81.48.2"

74

Page 75: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

IP-MIB::ipAddressAddr.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = STRING: "::1" IP-MIB::ipAddressAddr.ipv6.128.32.1.6.96.3.1.0.50.2.1.2.255.254.227.96.138 = STRING: "2001:660:301:32:201:2ff:fee3:608a" IP-MIB::ipAddressAddr.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = STRING: "fe80::1" IP-MIB::ipAddressAddr.ipv6.128.254.128.0.0.0.0.0.0.2.1.2.255.254.227.96.138 = STRING: "fe80::201:2ff:fee3:608a" IP-MIB::ipAddressIfIndex.ipv4.32.127.0.0.1 = INTEGER: 3 IP-MIB::ipAddressIfIndex.ipv4.32.152.81.48.2 = INTEGER: 1 IP-MIB::ipAddressIfIndex.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: 3 IP-MIB::ipAddressIfIndex.ipv6.128.32.1.6.96.3.1.0.50.2.1.2.255.254.227.96.138 = INTEGER: 1 IP-MIB::ipAddressIfIndex.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: 3 IP-MIB::ipAddressIfIndex.ipv6.128.254.128.0.0.0.0.0.0.2.1.2.255.254.227.96.138 = INTEGER: 1 IP-MIB::ipAddressType.ipv4.32.127.0.0.1 = INTEGER: unicast(1) IP-MIB::ipAddressType.ipv4.32.152.81.48.2 = INTEGER: unicast(1) IP-MIB::ipAddressType.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: unicast(1) IP-MIB::ipAddressType.ipv6.128.32.1.6.96.3.1.0.50.2.1.2.255.254.227.96.138 = INTEGER: unicast(1) IP-MIB::ipAddressType.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = INTEGER: unicast(1) IP-MIB::ipAddressType.ipv6.128.254.128.0.0.0.0.0.0.2.1.2.255.254.227.96.138 = INTEGER: unicast(1) IP-MIB::ipAddressPrefix.ipv4.32.127.0.0.1 = OID: IP-MIB::ipAddressPrefixPrefix.3.ipv4.32.127.0.0.0.8 IP-MIB::ipAddressPrefix.ipv4.32.152.81.48.2 = OID: IP-MIB::ipAddressPrefixPrefix.1.ipv4.32.152.81.48.0.24 IP-MIB::ipAddressPrefix.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = OID: IP-MIB::ipAddressPrefixPrefix.3.ipv6.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.128 MIB::ipAddressPrefixPrefix.1.ipv6.128.32.1.6.96.3.1.0.50.0.0.0.0.0.0.0.0.64 IP-MIB::ipAddressPrefix.ipv6.128.32.1.6.96.3.1.0.50.2.1.2.255.254.227.96.138 = OID: IP-MIB::ipAddressPrefixPrefix.1.ipv6.128.32.1.6.96.3.1.0.50.0.0.0.0.0.0.0.0.64 MIB::ipAddressPrefixPrefix.2.ipv6.128.32.1.6.96.3.1.0.51.0.0.0.0.0.0.0.0.64 MIB::ipAddressPrefixPrefix.2.ipv6.128.32.1.6.96.3.1.0.51.0.0.0.0.0.0.0.0.64 IP-MIB::ipAddressPrefix.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.1 = OID: IP-MIB::ipAddressPrefixPrefix.3.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.64 MIB::ipAddressPrefixPrefix.2.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.64 IP-MIB::ipAddressPrefix.ipv6.128.254.128.0.0.0.0.0.0.2.1.2.255.254.227.96.138 = OID: IP-MIB::ipAddressPrefixPrefix.1.ipv6.128.254.128.0.0.0.0.0.0.0.0.0.0.0.0.0.0.64 The most difficult part was to obtain the information from the kernel. Sometimes, like for UDP or TCP table, the information was not managed by the kernel. Sometimes, it was partially managed, like the data for the INET ICMP Table, where we could only find the information for the system-wide and not interface per interface

Tests description #2 performed by Athanasios Douitsis

Here is a section for results of the tests which can show functionality of the tool or some important part of the functionality

Test environment description (schemes, topology, configuration) The test machine was an i386 machine running Linux 2.4.x. The package was downloaded, compiled and tested in that machine. The IPV6 stack was enabled and was using stateless autoconfiguration. Other than that, no special configuration or customization was made. The package configuration script includes a handy –enable-ipv6 option which allows the administrator to enable all available ipv6-aware mechanisms with one argument. There are a lot of available mib modules that can be compiled if the administrator desires it, but very few of them were of actual value during this test. The package compiled and installed perfectly without any trouble whatsoever. The snmpd.conf file supports ipv6 equivalents of all usefull operands. For example, the operand rocommunity has its rocommunity6 counterpart for ipv6 transports. The ability to create elaborate access lists and VACM configurations is present in the ipv6 domain also.

Test description, results (including screenshots, frame captures), observed difficulties

75

Page 76: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

The primary objective of the tests was to ascertain whether the agent has or has not the ability to use ipv6 as the transport for the snmp communication with other management entities. Since the Net-SNMP package offers a full range of snmpget, snmpwalk etc commands, it was also imperative that those tools' ability to use ipv6 be tested too. After the software was installed, a sample configuration was created, allowing only ipv6 transport capabilities and the agent was launched. We tested the agent by doing several snmp queries on various sub trees of the OID tree. All kinds of snmpwalks , snmpgets etc were successful so it was clear that the ipv6 transport capabilities of the agent are quite complete.

Test summary, remarks Overall impression is that the Net-SNMP package has excellent IPV6 support and is clearly ready for widespread use. The only bad thing is that there are only a few MIBs that include information related to IPV6 and even those seem to be probably incomplete. For example, the ipv6-mib lacked several objects which according the ASN.1 file should be there.

76

Page 77: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version andreleased date:

Available platforms:

License type:

Tool location andinformation links, authors:

Is source available:

Network Weathermap N/A All major Unix systems with Perl support

GNU General Public License

[email protected]

YES (http://netmon.grnet.gr/weathermap/)

6NET contact: Is used in 6NET: Date of description

Panagiotis Christias ([email protected]), Athanassios Liakopoulos ([email protected])

Yes (http://netmon.grnet.gr/6net.html)

May 2004

IPv6 status:

The Network Weathermap tool is a perl script that uses direct (IPv6/IPv4) SNMP calls to gather data from appropriate router interface MIB objects. Brief description of the product (brief functionality etc)

The “Network Weatermap” tool is an SNMP-based network traffic condition grapher. Network connections are depicted as colour arrows usually over geographical maps. The colour of the arrow changes according to the current load of the network connection. Placing the pointer over the arrows, the MRTG graphed line utilisation is presented while double-clicking the on the arrow, the corresponding MRTG traffic analysis page is presented. The “Network Weathermap” front page is updated every five-minute interval

Is still under development, what is the next version number?

There is no new functionality added to the tool. However, the code is reconstructed and documented in order to facilitate the deployment of the software. The next version will be 1.0 and its expected to be released in end of July 2003Planned extensions, new features ,with dates:

DEVELOPMENT

Not available at this time

Example of running implementations publicity available

6NET network traffic load is depicted in http://netmon.grnet.gr/6net.html. Additional, GRNET network traffic load may be found in http://netmon.grnet.gr/

Other remarks:

The Network Weathermap code is currently released but it is available if requested.

Tests description

Test environment description (schemes, topology, configuration) Network Weathermap is running as a service for the 6NET/GRNET network since the beginning of 2003. Earlier (IPv4-only) versions of the tool were tested in the past in order to validate the perl script code. After adding IPv6 support to the tool, limited tests were performed as IPv6 calls with available SNMP tools were validated from other research groups. The tool is tested in the past in many different Unix environments.

77

Page 78: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test description, results (including screenshots, frame captures), observed difficulties Follows a screen shot of theNnetwork Weathermap tool showing the 6NET network.

Test summary, remarks The Network Weatermap may be used for building production services in IPv6 only or dual stack networks.

78

Page 79: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

NMIS version: 3.1.11

Solaris for Sparc and i386

Unix

GPL http://www.sins.com.au/nmis/

Yes (perl)

6NET contact: Is used in 6NET: Date of description

Olivier Reuland (UniGE) - August 2004

IPv6 status:

Not planned yet. Would need SNMP support over IPv6 in order to work.

Brief description of the product (brief functionality etc)

NMIS stands for Network Management Information System. It is a Network Management System which performs multiple functions from the OSI Network Management Functional Areas, those being, Performance, Configuration, Fault. The backend, polling engine, uses SNMP to collect interface and health statistics for Cisco Routers, certain Cisco Catalyst Switches and Generic SNMP devices every 5 minutes. It stores the statistics in RRD's (Round Robin Databases) and ensures that devices are up, issues alerts, etc. The front end accesses the information stored in the RRD's and displays statistics the resulting graphs, reports, etc.

Is still under development, what is the next version number?

Yes, version 3.2.4 (Beta 2, will go stable soon), version: 4.0 (Dev)

Planned extensions, new features ,with dates:

DEVELOPMENT

Example of running implementations publicity available

Other remarks:

Application domains in the 6Net management framework

Traffic and device monitoring (collects, analyzes and stores SNMP data)

Reports generation

79

Page 80: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

NTOP 3.0

FreeBSD,

Linux,

Solaris,

Win32,

MacOS,

And expected to work on most Unix-like systems

GNU GPL http://www.ntop.org Yes

6NET contact: Is used in 6NET: Date of description

Lahmadi Abdelkader

Olivier FESTOR No January 2004

IPv6 status:

Add IPv6 support.

Brief description of the product (brief functionality etc)

Ntop (Network TOP) similar to the Unix to tool that reports processes CPU usage, the aministrators needed a simple tool able to report the network top users (hence the term ntop) for quickly identifying those hosts that were currently using most of the available network ressources. Ntop focuses on:

- Traffic measurement

- Traffic monitoring

- Network optimization and planning

- Detection of network security violations

The ntop tool architecture is based on three layers : The Sniffing layer responsible on the capture of packets, the Analysing layer proceses packets captured and the reporting layer synthetise collected data and displays statistics to users.

Is still under development, what is the next version number?

The Ntop tool is developped and maintained by Luca Deri ([email protected])

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Extensions can be made by enhancing the ipv6 support and add more features.

Example of running implementations publicity available

80

Page 81: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Ntop

Other remarks:

Provided IPv6 extensions for NTOP

In the first stage of porting ntop to IPv6, we have defined an IP independent data structure to represent both IPv4 and IPv6 addresses. In a second stage, we have modified the functions to support IPv6. The different layers of ntop were modified as well to support ipv6 features. For example, the reporting layer should displays IPv6 addresses of hosts on the network to administrator. Moreover, We have add some functions to retrieve IPv6 informations about the network informations on which ntop is running, such as the set of IP addresses.

We finally have ported the http server embedded in the ntop application to IPv6. This server allows users to connect to ntop by using the http protocol and obtain user friendly access to date gathered from the network being monitored.

The ported framework was integrated in the official distribution and deployed on both the LORIA Ipv6 wired and wireless networks.

81

Page 82: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type: Tool location and information links, authors: Is source

available:

PCHAR 1.4

06.13.2001

FreeBSD, NetBSD, Solaris, Linux, OSF/1

GPL http://www.employees.org/~bmah/Software/pchar

Bruce A. MahYes

6NET contact: Is used in 6NET: Date of description

PSNC: Lucas Dolata, Wiktor Procyk Yes July 2004

IPv6 status:

To enable IPv6 support, give the --with-ipv6 option to configure. If there is a directory for IPv6-specific libraries, it can be specified via an argument to the --with-ipv6 option, for example:

% ./configure --with-ipv6=/usr/local/v6

% make

Brief description of the product (brief functionality etc)

Pchar is a tool to characterize the bandwidth, latency, and loss of links along an end-to-end path through the Internet. It is based on the algorithms of the pathchar utility written by Van Jacobson, formerly of Lawrence Berkeley Laboratories.

Pchar measures the characteristics of the network path between two Internet hosts, on IPv4 or IPv6 network.

The program measures network throughput and round trip time by sending varying sized UDP packets into the network and waiting for ICMP messages in response. It modulates the IPv4 time to live (TTL) field or the IPv6 hop limit field to get measurements at different distances along a path.

Pchar for each hop in the trip shows the following details:

• the number of partial lost datagrams and percentage of probe packets that were lost during the probes for that hop

• the estimated round trip time from the probing host through the current hop

• estimates of the round trip time and bandwidth for the current hop

• estimate of the average queuing along the path, up to and including the current hop

After the last hop (usually the target host), pchar prints statistics in the entire path, including the path length and path pipe (the latter is an estimate of the delay bandwidth product of the path).

In the other/second mode of operation called trout (short for “tiny traceroute”). Pchar sends packets of random sizes (one packet per hop diameter) along the path to a destination. This mode is extremely fast but no attempt at estimating link properties is made.

Is still under development, what is the next version number?

Software is not under development

DE

VE

LO

PME

NT

Planned extensions, new features ,with dates:

82

Page 83: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

N/a

Example of running implementations publicity available

There have been created special site where you can try use Pchar in your research

http://www.ipv6.man.poznan.pl/cgi-bin/pchar.cgi

Other remarks:

N/a

Tests description

Test environment description (schemes, topology, configuration)

Pchar do not need special network configuration, host configuration and network topology. It can be used on every machine. In test there have been used Redhat 8.0 Linux and Suse 8.0 Linux. To compile the downloaded version of pchar in some Linux distributions (i.e. RedHat 8.0) it is necessary to make a few changes in the source codes. The compliance problem occur because there are differences in the udphdr structure, between various unix systems. Test description, results (including screenshots, frame captures), observed difficulties Bellow there are shown some tests which were made using PCHAR. There were tested paths between host in Poland boletus.man.poznan.pl and some host from 6net core network:

pchar to lo0.se6.se.6net.org (2001:798:25::1) using UDP/IPv6 Using raw socket input Packet size increments from 52 to 1000 by 32 31 test(s) per repetition 3 repetition(s) per hop 0: 2001:808::2 (2001:808::2) Partial loss: 0 / 90 (0%) Partial char: rtt = 1.105496 ms, (b = 0.000990 ms/B), r2 = 0.722094 stddev rtt = 0.123493, stddev b = 0.000116 Partial queueing: avg = 0.000639 ms (645 bytes) Hop char: rtt = 1.105496 ms, bw = 8080.983999 Kbps Hop queueing: avg = 0.000639 ms (645 bytes) 1: 2001:808::7 (2001:808::7) Partial loss: 0 / 90 (0%) Partial char: rtt = 24.949370 ms, (b = 0.001405 ms/B), r2 = 0.790427 stddev rtt = 0.145433, stddev b = 0.000137 Partial queueing: avg = 0.000638 ms (645 bytes) Hop char: rtt = 23.843874 ms, bw = 19293.139293 Kbps Hop queueing: avg = -0.000001 ms (0 bytes) 2: 2001:798:25:201::1 (2001:798:25:201::1) Path length: 2 hops Path char: rtt = 24.949370 ms r2 = 0.790427 Path bottleneck: 8080.983999 Kbps Path pipe: 25201 bytes Path queueing: average = 0.000638 ms (645 bytes) Start time: Thu Jun 5 09:51:53 2003 End time: Thu Jun 5 09:52:40 2003 pchar to lo0.de6.de.6net.org (2001:798:14::1) using UDP/IPv6 Using raw socket input Packet size increments from 52 to 1000 by 32 31 test(s) per repetition 3 repetition(s) per hop 0: 2001:808::2 (2001:808::2) Partial loss: 0 / 90 (0%) Partial char: rtt = 1.284268 ms, (b = 0.000781 ms/B), r2 = 0.590162 stddev rtt = 0.130818, stddev b = 0.000123

83

Page 84: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Partial queueing: avg = 0.000486 ms (622 bytes) Hop char: rtt = 1.284268 ms, bw = 10247.203818 Kbps Hop queueing: avg = 0.000486 ms (622 bytes) 1: 2001:808::7 (2001:808::7) Partial loss: 0 / 90 (0%) Partial char: rtt = 25.325033 ms, (b = 0.001032 ms/B), r2 = 0.634418 stddev rtt = 0.157546, stddev b = 0.000148 Partial queueing: avg = 0.001017 ms (2735 bytes) Hop char: rtt = 24.040765 ms, bw = 31816.409760 Kbps Hop queueing: avg = 0.000531 ms (2113 bytes) 2: 2001:798:25:201::1 (2001:798:25:201::1) Partial loss: 1 / 90 (1%) Partial char: rtt = 38.986758 ms, (b = 0.001277 ms/B), r2 = 0.645145 stddev rtt = 0.190410, stddev b = 0.000179 Partial queueing: avg = 0.000902 ms (2735 bytes) Hop char: rtt = 13.661725 ms, bw = 32695.553346 Kbps Hop queueing: avg = -0.000115 ms (0 bytes) 3: 2001:798:0:8::2 (se.de6.de.6net.org) Path length: 3 hops Path char: rtt = 38.986758 ms r2 = 0.645145 Path bottleneck: 10247.203818 Kbps Path pipe: 49938 bytes Path queueing: average = 0.000902 ms (2735 bytes) Start time: Thu Jun 5 11:50:36 2003 End time: Thu Jun 5 11:51:52 2003 pchar to lo0.uk6.uk.6net.org (2001:798:28::1) using UDP/IPv6 Using raw socket input Packet size increments from 52 to 1000 by 32 31 test(s) per repetition 3 repetition(s) per hop 0: 2001:808::2 (2001:808::2) Partial loss: 0 / 90 (0%) Partial char: rtt = 1.103903 ms, (b = 0.000999 ms/B), r2 = 0.774260 stddev rtt = 0.108488, stddev b = 0.000102 Partial queueing: avg = 0.000678 ms (678 bytes) Hop char: rtt = 1.103903 ms, bw = 8006.289702 Kbps Hop queueing: avg = 0.000678 ms (678 bytes) 1: 2001:808::7 (2001:808::7) Partial loss: 0 / 90 (0%) Partial char: rtt = 24.966060 ms, (b = 0.001056 ms/B), r2 = 0.601759 stddev rtt = 0.172701, stddev b = 0.000162 Partial queueing: avg = 0.000559 ms (678 bytes) Hop char: rtt = 23.862158 ms, bw = 141452.980947 Kbps Hop queueing: avg = -0.000118 ms (0 bytes) 2: 2001:798:25:201::1 (2001:798:25:201::1) Partial loss: 0 / 90 (0%) Partial char: rtt = 53.804452 ms, (b = 0.001450 ms/B), r2 = 0.850281 stddev rtt = 0.122365, stddev b = 0.000115 Partial queueing: avg = 0.000747 ms (1153 bytes) Hop char: rtt = 28.838392 ms, bw = 20280.756792 Kbps Hop queueing: avg = 0.000188 ms (475 bytes) 3: 2001:798:0:7::1 (se.uk6.uk.6net.org) Path length: 3 hops Path char: rtt = 53.804452 ms r2 = 0.850281 Path bottleneck: 8006.289702 Kbps Path pipe: 53846 bytes Path queueing: average = 0.000747 ms (1153 bytes) Start time: Thu Jun 5 14:29:38 2003 End time: Thu Jun 5 14:30:52 2003

Test summary, remarks

Tests which have been made shown the main disadvantage of pchar tool. The accuracy of determining measures depends on network infrastructure. Pchar use algorithms of pathchar to characterize the bandwidth, latency, and loss of links along an end-to-end path through the Internet. In this algorithm the differences between measures and real value of parameters rise, if links which have less bandwidth precede links which have more bandwidth.

84

Page 85: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

Polyphemus 1.0 Cross-platform (Java) freeware www.dia.uniroma3.it/~polyph No

6NET contact: Is used in 6NET: Date of description

Roma Tre Computer Networks research group No January 2004 IPv6 status:

IPv6 is not yet supported.

Brief description of the product (brief functionality etc)

Polyphemus works only on networks that use the OSPF protocol and exploits the protocol information for learning the network topology. Is is based on a two levels architecture with a client and a drawing-server.

Polyphemus requires to access private routing information using SNMP. It is conceived as a local application that has to be installed and used by single users. The drawing-server of Polyphemus encapsulate a graph drawing engine that computes visual maps of the network exploiting sophisticated algorithms.

Is still under development, what is the next version number?

1.1

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

(unknown date) – IPv6 MIB and OSPFv3 support

Example of running implementations publicity available

http://www.dia.uniroma3.it/~polyph/PolyphemusClip.zip

Other remarks:

IPv6 support is planned in the near future. The first stage will probably be support for the IPv6 MIBs and OSPFv3, and support for SNMP over IPv6 will come later.

Tests description

No tests have been carried out as Polyphemus does not yet support IPv6.

85

Page 86: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of thetool:

Version and released date:

Available platforms: License type:

Tool location andinformation links,authors:

Is source available:

RANCID

2.3

Any UNIX like operating system where CVS available. Rancid currently supports Bay routers, Cisco routers, Juniper routers, Catalyst switches, Foundry switches, Redback NASs, ADC EZT3 muxes, MRTd (and thus likely IRRd), Alteon switches, and HP procurve switches

Freely available copyrighted

http://www.shrubbery.net/rancid/ Yes

6NET contact: Is used in 6NET: Date of description

János Mohácsi (NIIF/HUNGARNET), Ioannis Kappas (DANTE), Rob Evans (UKERNA), Christian Schild,Westfälische Wilhelms-Universität Münster (JOIN)

Yes August 2004

IPv6 status:

Rancid itself is not aware of IPv6, but it uses external programs It is relying on the telnet, ssh or rlogin tools of host operating system to login and obtain configuration information.. If these remote access programs are IPv6-capable one can use IPv6 addresses and transport

Brief description of the product (brief functionality etc)

RANCID - Really Awesome New Cisco confIg Differ (http://www.shrubbery.net/rancid/) is a tool written in perland it is a configuration management tool for Cisco routers and Catalyst switches, as well as equipment from Alteon, Bay Networks, Extreme, Force 10 Networks, Foundry, HP, Juniper and Redback. It works by periodically connecting to devices by means of telnet, SSH, or rlogin and recording the configuration. Any differences are flagged using diff and emailed to network operator and saved in CVS. With CVS, changes over time in these configurations can be tracked. There are various frontends to watch these changes conveniently (e.g."cvsweb" or"viewcvs").

Is still under development, what is the next version number?

Probably 2.2.3

Planned extensions, new features ,with dates:

DEVELOPMENT

Extension to support other router platform (done for HITACHI at HUNGARNET)

make it more modular (ongoing work at HUNGARNET)

Example of running implementations publicity available

6NET core: http://tools.6net.org/cgi-bin/cvsweb.cgi/

NIIF/HUNGARNET: http://6net.iif.hu/routerconfig/

Other remarks:

86

Page 87: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

The managers and operators of 6NET can look to the 6NET core RANCID webpages to find out the current configuration and latest configuration changes of core 6NET routers. They can use it for operational management to configuration management of the 6NET core routers. At NIIF/HUNGARNET we are also using for similar purpose to provide configuration information to network managers of the IPv6 enabled regional centers.

Test environment description (schemes, topology, configuration) At NIIF/HUNGARNET we installed RANCID 2.2.2 on a FreeBSD 4.8-STABLE host from the port collection. No special software and network configuration required except adding name and type of the router we wanted to monitor router into the configuration file of RANCID. We also added a special account for monitoring purpose on the FreeBSD monitoring host.

Test description, results (including screenshots, frame captures), observed difficulties We tested RANCID in an IPv6 only and IPv6/IPv4 dualstack environment. We tested numerical address and hostname also.

Test summary, remarks All tests were successful. We have to test the ssh/rlogin interface also since currently we used telnet interface. More testing is required to determine if IPv6 support works on other operating systems such as Linux. Some testing also done on Solaris in the 6NET core sites.

87

Page 88: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

RIPE NCC Test Traffic Server with IPv6 support

February 2003

Dedicated FreeBSD based system supplied by RIPE NCC

System can be bought and maintained by RIPE NCC. Cost currently under review

http://www.ripe.net/ttm//ttm-ipv6.html No

6NET contact: Is used in 6NET: Date of description

Tim Chown, University of Southampton Yes February 2004

IPv6 status:

IPv6 functionality was added to the existing RIPE NCC TT server after discussion between 6NET and the RIPE NCC which started in Q1 2002. It was decided that RIPE NCC rather than 6NET would develop the new IPv6 functionality so that expertise could be gathered and maintained in RIPE NCC.

Brief description of the product (brief functionality etc)

The TT server allows statistics to be gathered between any pair of deployed TT servers. The statistics include packet delay and loss, as well as a historical view of observed traceroutes. The system is available as a “black box” shipped from RIPE-NCC. It requires a roof-mounted GPS to be deployed for time synchronisation. Statistics are gathered at the RIPE NCC site and presented for views there by RIPE-NCC TT server owners (once you own a box, you can view any details). There is a purchase fee and maintenance fee – these fees are currently under review and likely to be lowered (purchase is around 3,000 Euros, maintenance is likely to fall to 1,000 Euros p.a.).

Is still under development, what is the next version number?

RIPE NCC is still working on new IPv6 functionality, e.g. AS path tracing alongside IP-based traceroute views

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

To be determined by RIPE NCC.

Example of running implementations publicity available

http://www.ripe.net/ttm/Plots/IPv6/

(requires user name and password)

Other remarks:

The TT server is a well-established tool for IPv4 (around 70 deployed monitoring systems), which is now shipping with IPv6 support by default as a result of 6NET’s initiative to promote adoption of IPv6 by RIPE NCC.

88

Page 89: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

Here we illustrate the usage of the TT server by showing plot results.

The function to view delay and loss plots for the previous day, week, month and 6 month period is working.

The traceroute view function is working (but the AS view is not yet implemented for IPv6).

Test environment description (schemes, topology, configuration) The TT server data views are available via a web server at the RIPE NCC web site, protected by username and password. Local statistics, and details such as GPS satellite reception quality, can be viewed via the local TT server web server. This does not yet support IPv6 access, but this should be available soon. Test description, results (including screenshots, frame captures), observed difficulties The following three figures show:

a. The overview “dashboard” view of performance for the last day, week, month and 6 months. From this the interesting plots or trends can be seen, and the more detailed chart selected.

b. Here we are focused on the month view from the above page. The top left chart shows

scatter of delays, with the red line being an indication of the hop count between the hosts. The delays distribution can be seen on the right.

c. In this chart we see part of the historic traceroute view. This is very useful for diagnosing

routing path problems. All three plots are from the live system between University of Southampton, UK and NTUA, Greece.

89

Page 90: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

90

Page 91: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Test summary, remarks The plots are proving very useful for IPv6 monitoring, especially the historical traceroute view (while we are at the stage of routing experiments and occasional instability).

91

Page 92: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

92

Page 93: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool:

Version and released date:

Available platforms:

License type:

Tool location and information links, authors:

Is source available:

SNMP_Session.pm 0.99 artistic http://www.switch.ch/misc/leinen/snmp/perl/ Yes

6NET contact: Is used in 6NET: Date of description

Simon Leinen, SWITCH No January 2004

IPv6 status:

IPv6 Support: YES

Brief description of the product (brief functionality etc)

An SNMP library written entirely in Perl. There are two layers of programming interface: SNMP_Session.pm/BER.pm provide a low-layer interface to encoding and decoding of SNMP requests and data structures. SNMP_util.pm adds basic MIB parsing support and convenient interfaces to some basic SNMP operations.

Is still under development, what is the next version number?

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

Required extensions to be operational within a native IPv6 environment In order to communicate with managed devices over IPv6, support for INET6 address family sockets is needed. The package initially used the IO::Socket::INET class. A usable version of a IO::Socket::INET6 module has very recently been contributed to CPAN by Rafael Martinez Torres (Novagnet). IPv6 support should be in IO::Socket::INET6 starting with version 1.26, but Rafael claims one actually needs at least version 2.00. IPv6 support for SNMP_Session.pm was independently developed by Rafael on one hand and by Lorenzo Colitti (Universita Roma III) [MrtgV6Tool] on the other. The Colitti implementation seemed to be put a higher concern on backward compatibility, so it has been selected for inclusion in MRTG and SNMP_Session. Many of the SNMP agents currently deployed don't support IPv6 even when on devices that are otherwise IPv6-capable (and thus have AAAA records in the DNS). Therefore, IPv6 support must be explicitly requested by setting $SNMP_Session::ipv4_only to 0 (default is 1).

Example of running implementations publicity available

Other remarks:

Application domains in the 6Net management framework This is a library and cannot be used directly. However, it has been used to support applications in network capacity planning (MRTG, Cricket) network and service monitoring (devpatrol, Big Sister), inventory management and other areas.

93

Page 94: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Name of the tool: Version andreleased date:

Available platforms:

License type:

Tool location andinformation links, authors:

Is source available:

Westhawk's Java SNMP stack

4.13

20/11/2002 JDK 1.3.0

The stack is free and commercial support isavailable

http://www.westhawk.co.uk/resources/snmp/index.html ,

Tim Panton & Birgit Arkesteijn,

[email protected]

Yes

6NET contact: Is used in 6NET: Date of description

Ioannis Kappas (DANTE), Robert Szuman (PSNC), Bartosz Belter (PSNC) No July 2004

IPv6 status:

Officially, in the current version of the SNMP stack the IPv6 protocol is not supported. In spite of this, some simple tests performed in PSNC under a native IPv6 environment proved that the tested stack supports the IPv6 transport. It worked correctly under JDK 1.4.1.

Brief description of the product (brief functionality etc)

It is a lightweight implementation of Java SNMP stack, with Java application and servlet examples. The stack provides manager functionality for SNMPv1, SNMPv2c and SNMPv3 (both authentication and privacy). As authentication protocols the stack offers MD5 and SHA1. It is capable of sending and receiving traps, but has no other agent functionality. This is the “lightweight” type package, so the target applications can be small applets, which can be easily popped in any frame (e.g. Netscape). This stack has no MIB browsing capabilities, so the application has to know the OID (Object Identifier) of MIB parameters it wants to monitor or it can use any other packages that do MIB browsing and general network management. The source code and documentation is included in the distribution.

Is still under development, what is the next version number?

The project is still open and under development.

Planned extensions, new features ,with dates:

DE

VE

LO

PME

NT

The use of Java 1.4 features to improve support polling of large numbers of agents.

Support for agent functionality (if enough manpower).

Example of running implementations publicity available

MUVI (Multicast Visualisation Tool) http://muvi.man.poznan.pl

Other remarks:

A much more detailed description about the architecture of this SNMP stack and the history of its design and development can be found in „The Simple Times” magazine (the December 2001 issue) and is accessible via Web at http://www.simple-times.org/pub/simple-times/issues/9-1.html#tools

94

Page 95: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Tests description

Test environment description (schemes, topology, configuration)

The main objective of this test is to provide information about IPv6 transport support in Westhawk's Java SNMP stack.

baobab.man.poznan.pl2001:808:0:6:207:e9ff:fee3:55d5

hollyhock.man.poznan.pl2001:808:0:6:202:3fff:feaf:9d52

SNMPGET

SNMP REPLY

Westhawk's JavaSNMP stack

NET-SNMPagent

Fig. 6 Test topology

Configuration: - hollyhock.man.poznan.pl

address: 2001:808:0:6:202:3fff:feaf:9d52 platform: Linux application: MUVI MIB Browser with Westhawk’s Java SNMP stack

- baobab.man.poznan.pl address: 2001:808:0:6:207:e9ff:fee3:55d5 platform: Linux snmp agent: NET-SNMP

Test description, results (including screenshots, frame captures), observed difficulties

hollyhock.man.poznan.pl station performed the SNMPGET operation using the MUVI MIB Browser.

The NET-SNMP agent located at baobab.man.poznan.pl responded with correct results:

95

Page 96: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Fig. 7 MUVI MIB Browser with results.

Test summary, remarks

The MUVI MIB Browser uses the Westhawk's Java SNMP stack. As it is shown above the tested stack supports the IPv6 transport. It was tested on the Linux platform with JAVA 1.4.1. IPv6 requests cannot be performed on Windows platforms, because Windows version of Java Virtual Machine does not support IPv6.

96

Page 97: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

5. Summary

In this document 36 network management tools have been identified by the WP6 participant as useful for network management and monitoring in current IPv6 networks. Comparing to the previous version of this deliverable, 4 new tools have been added and described.

The following table presents a list of all described tools extended with the status of three requirements: if a tool is IPv6 ready, if it is being used in the 6NET community and if the results of tests have been presented.

Name of the tool IPv6 ready used in 6NET test results provided

1. Analyzer yes no no2. Argus yes yes yes3. ASpath-tree yes yes yes4. Cisco Works Campus Manager yes-partially yes yes5. CoralReef yes-partially no yes6. Cricket no yes no7. Ethereal yes yes no8. Flow-tools no no no9. HP OpenView NNM yes-partially no no

10. JOIN-TV yes yes yes11. IPFlow yes yes no12. IPm yes no no13. IPv6 Lan Dynamic Topology Discovery yes no no14. IPv6 Looking Glass yes yes no15. IPv6 LookingGlass PHP yes yes yes16. IPv6 Management Gateway yes yes yes17. IPv6 support for Netflow v9 in IOS yes yes no18. IRRToolSet yes-partially yes no19. jnettop yes yes no20. Meinberg Lantime yes yes yes21. Mping yes yes yes22. MRTG yes yes yes23. MTR yes yes no24. Multicast Beacon yes yes yes25. Nagios yes yes yes26. Netflow/IPFIX yes yes no27. Net-snmp yes no yes28. Network Weathermap yes yes yes29. NMIS no no no30. NTOP yes-partially no no31. Pchar yes yes yes32. Polyphemu no no no33. Rancid yes yes yes34. RIPE NCC Test Traffic Server yes yes yes35. SNMP_Session.pm yes no no36. Westhawk's Java SNMP stack yes no no

number of tools for Yes 32 24 17percent of tool for Yes 89% 67% 47%

97

Page 98: IST Project # 2001-32603 · IST-2000-32603 Deliverable D 6.2.4 Final report on IPv6 management tools, developments and tests Project Number: IST-2001-32603 Project Title: 6NET CEC

IST-2000-32603 Deliverable D 6.2.4

Final report on IPv6 management tools, developments and tests

Out of 36 described tools 32 (which is 89%) are IPv6 ready. In the area of network management and monitoring, compatibility with the IPv6 protocol is often a complex issue because it requires existence of IPv6 enabled protocols (like i.e. SNMP protocol) for management, whose protocols have to be implemented on monitored network devices and, moreover, the transport for these protocols also has to be implemented. Not all of these requirements are always fulfilled (i.e Management Information Base (MIB) standards for network management protocols are still under development). The issues concerning management protocols and MIBs in the standardisation process were covered in D6.3.1 6Net IPv6 Network Management Cookbook.

The selected IPv6 ready tools are mostly identified as useful for IPv6 network monitoring tasks and 24 of them (which is 67%) are being used in 6NET.

Over half of the presented tools – 17 (which is 47%) have been tested by WP6 participants and the results have been presented in this paper.

D6.2.4 shows that there is a set of tools varying in their complexity and functionality, which have been recognized as useful today for IPv6 network monitoring and management. In this paper one can find an appropriate tool for their need together with technical remarks and the results of tests which present their advantages and disadvantages.

The real use of the tool in the IPv6 test network in the 6net environment was presented in deliverable D6.3.3 Implementation of tools and operational procedures.

6. Bibliography

[1] 6NET Deliverable 6.1: “6NET Management Architecture”, version 1.0, July 2002.

[2] 6NET Deliverable 6.2.1: “6NET Management Tools Requirements”, version 1.0, July 2002.

[3] 6NET Deliverable 6.2.3: “Interim report on development and test”, version 1.0, July 2003.

[4] 6NET Deliverable 6.3.1: “6Net IPv6 Network Management Cookbook”, version 1.0, September 2002.

[5] 6NET Deliverable 6.3.2: “Implementation of tools and operational procedures”, version 1.0, July 2003.

[6] “Cisco IPv6 Solutions Calendar Year 2004 and Beyond”: Network Management Applications, http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/ipv6_sol/ipv6b_wp.pdf

98