MNET Services>Telecom Data Networking>IPv6>Customers>Executive Branch

This documentation is preliminary and is likely to change before becoming final. Do not implement to it yet. Check for the next update by February 2012.

You can get going with IPv6 by following these steps:

  • Try it out.
  • Get real addresses.
  • Configure your firewalls.
  • Test.

You're done!

Try It Out

Configure IPv6 up on a couple of clients. You can use the ec00::/10 network for this purpose (it's sort of like the 10/8 network block).

Then, get it working on a server in a test area.

Test out your application.

Get Real Addresses

At some point, you'll get your "real" addresses from MN.IT.

To do so, see our Obtaining Addresses page.

There's no IPv6 NAT, so you'll need to readdress, but it's easier to readdress IPv6 than IPV4.

As the notice at the top of this page warns, don't do this until MN.IT's instructions are finalized, probably in December 2011.

Configure Your Firewalls

If your firewall supports IPv6, you can use it. Note, however, that IPv6 security (below the TCP/UDP level) is very different from IPv4 security. MN.IT recommends working closely with your firewall supplier to develop a security configuration that meets your needs. MN.IT will be releasing its own recommendations (again, probably by December 2011) and you should consider those as well before going into production.

If your firewall does not support IPv6, we can route IPv4 traffic to your firewall and handle the IPV6 traffic with router access lists. MN.IT will be ready to support these lists by December 2011.

Test

The site http://test-ipv6.com will help you test your connectivity.