DNS and IPv6 Training

Duration: 1 day.

La formation est aussi disponible en français.

Other courses: Basic DNS, DNS Security, DNS and Telephony (VoIP), Advanced DNS, DNS on Windows Servers, LDAP Courses, Telecommunications/SS7 courses.

The primary focus of the course is BIND which is available on Linux, UNIX and Windows platforms. The course is offered with Linux (Fedora Core), FreeBSD or Windows 2003 as the platform for all excercises.

Summary

Reliable, robust and secure operation of the DNS hierarchy - from the root servers to an individual domain name server - is critical to all Internet operations. With the advent of IPv6, whose address format is extremely user-hostile, it is imperative that names be used rather than physical addresses. DNS and DHCP are the vehicles by which this goal will be achieved. The course covers the configuration and operation of DNS systems used for IPv6 and IPv6 based mobile applications with particular emphasis on DHCPv6 integration. While the primary focus of the course is BIND other DNS software will be discussed.

Description

Students will review the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. The course covers IPv6 forward mapping (AAAA RR) and reverse mapping using the PTR RRs. While the current IETF recommendation uses AAAA and PTR - the experimental A6 and DNAME RRs will be covered since they contain important principles. Dynamic DNS (DDNS), secure integration with DHCPv6, diagnostic tools and security models are also covered. The course includes a number of hands-on configuration exercises.

Audience:

The course is designed for DNS administrators, Network and System Administrators, Mobile system administrators and those who need a thorough understanding of the DNS when used for IPv6. Students should either have attended the Basic DNS course or have two years of DNS operational experience.

About the Instructor

Ron Aitchison is the author of Pro DNS and BIND (Apress ISBN 1-59059-494-0) which was the first book to cover the new DNS security protocols (DNSSEC). Ron has been involved in communications and networking for more years than he cares to admit and is president and founder of Zytrax, Inc. a company specializing in IP communications (wired and wireless), systems development and consulting in Montreal, Canada. He has been involved with Open Source systems for over 10 years.

Outline

Module 1: DNS Refresher

• The DNS hierarchy (name servers and resolvers)
• Authoritative and cached responses
• Delegation - Parent and child domains
• Forward and Reverse mapping
• DDNS, AXFR, IXFR, NOTIFY
• Zone files - best practice
• DNS types
• Diagnostic Tools - DIG, NSLOOKUP
• DNS software - options and overview

Module 2: DNS Security Basics

• Security overview
• Security threat analysis
• DNS security scope (Zone transfer, DDNS, Zone integrity)
• Stealth configurations
• Administrative security (jails, permissions, server configurations)
• BIND Logs
• BIND's server clause
• Cache Poisoning 101
• RNDC - advanced configuration
• Mail Anti-SPAM (SPF, DKIM)
• Software diversity

Module 3: IPv6 and DNS

• IPv6 hierarchical Address Structure
• IPv6 Address Notation
• IPv6 Forward mapping (AAAA/A6 RR)
• IPv6 Reverse Mapping (PTR/DNAME RRs)
• Exercise

Module 4: IPv6 and Mobile Telephony

• The mobile environment
• mobile and IPv6 (3GPP)
• Status and plans
• DNS (and DHCP) implications

Module 5: DHCPv6 and Forward Mapping

• The DHCP protocol
• IPv6 node initialisation
• Auto-updating DNS from DHCP - strategic choices
• Securing the auto-update process - TSIG/SIG(0)
• Exercise

Module 6: DHCPv6 and Reverse Mapping

• IPv6 Reverse Mapping
• Secure Auto-updating DNS from DHCPv6 - configurations
• Exercise

Module 7: Summary

• Review
• Resources

Other courses: Basic DNS, DNS Security, DNS and Telephony (VoIP), Advanced DNS.