IPv6 Security Training Course

This course is restricted to RIPE NCC members only.

Description

The IPv6 Security Training Course is a one-day course providing an overview of the most relevant IPv6 security topics. The participant will gain insight into industry best practices and gain a high-level understanding of the most pressing IPv6 security concerns today. The course includes theory and hands-on exercises.

IMPORTANT: if you only have basic knowledge of IPv6, either learned on your own or in the Basic IPv6 training course, the IPv6 Security course may be difficult to follow for you. This course requires an advanced level of knowledge of the IPv6 Protocol and its operations. We strongly recommend that you attend our Advanced IPv6 Training Course before signing up for this course.

You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) and if:

You have knowledge and experience with IPv6
Your organisation has implemented IPv6 or is planning implementation
You are a security/network/systems administrator, information security officer, IT consultant, or security policy writer

If you cannot attend this training course you can also follow the IPv6 Security e-learning course at the RIPE NCC Academy.

Pre-requisites

This is an advanced course that requires the participant to understand:

IPv4 networking and security
IPv6 networking equivalent to that covered in the RIPE NCC Basic IPv6 Course or the RIPE NCC Academy IPv6 Fundamentals Course
Basic Internet security concepts
For the labs: CLI and command tools

Course content

Introduction to IPv6 Security

Basic IPv6 Protocol Security

IPv6 Basic Header and EHs
IPv6 Addressing Architecture

IPv6-Associated Protocols Security

ICMPv6
NDP
MLD
DNS
DHCPv6

IPv6 Filtering

Filtering IPv6 Traffic

Internet-wide IPv6 Threats

DDoS
Transition Mechanisms

IPv6 Security Tools and Tips

The course doesn't cover:

IPv6 basics
IPv6 addresses details and addressing plans
IPv6 routing
The basics of IPv6-associated protocols like NDP or ICMPv6

Goals

Identify what IPv6 security is and isn't
Identify and protect your network from IPv6-related threats
Understand how the IPv6-associated protocols work (e.g. ICMPv6, NDP, MLD, DHCPv6). Identify and protect your network from related threats
Recognise the existing security solutions to protect your IPv6 network
Understand how to apply packet filtering in IPv6
Understand how Internet-wide IPv6 threats could happen (e.g. DDoS, transition mechanisms)
Understand the many complexities of IPv6 that must be taken into account from a security point-of-view