[tech] New IPv6 address range

Fri Jul 11 23:43:04 WST 2014

Hi all,

Following the recent IPv6 outage, we were informed that our public address 
range had changed, yay! (not). At first they tried only giving us enough 
addresses to have a single subnet instead of our previous 256, however we 
managed to convince them to give us enough for 64 instead. Why on earth 
this was necessary is beyond me - maybe we are already running out of IPv6 
address space or something. I've included the wheel emails below for 
posterity. To those of you just starting in IT, let that be an example of 
how NOT to roll out changes.

With the new range a fair few things need to change on UCC machines:

1. Any machines with autoconfigured IP addresses will just need their 
interfaces restarted so they grab the new address prefix. Because the 
IPv6 interface identifier is static (I think), things like dns and 
anything behind the UCC firewall should Just Work as I've already updated 
them with the new range.

2. Any machines with manually configured IPs will need to have their 
config manually corrected. The wiki has already been updated with the new 
details so head over to http://wiki.ucc.asn.au/Network#IPv6 for the info 
you need. I think most of the clubroom machines fall into this category 
but it's been a while since I've had to look at their network configs.

3. Other services need their configs updated - I've already done:
- firewalls on mussel, mooneye, murasoi
- cups on mussel
- bind on mooneye
- postfix on mooneye

What else is there to do still?

Andrew Adamson
bob at ucc.asn.au

|"If you can't beat them, join them, and then beat them."                |
| ---Peter's Laws                                                        |

---------- Forwarded message ----------
Date: Fri, 11 Jul 2014 11:11:19 +0800 (WST)
From: Andrew Adamson <bob at ucc.gu.uwa.edu.au>
To: Jenny Vuong <jenny.vuong at uwa.edu.au>
Cc: Mark Curtis <mark.curtis at uwa.edu.au>, "wheel at ucc.asn.au" <wheel at ucc.asn.au>,
    Dino Reinadi <dino.reinadi at uwa.edu.au>,
    Toivo Pedaste <Toivo.Pedaste at uwa.edu.au>,
    Mitchell Pomery <mjpomery at ucc.asn.au>
Subject: Re: [wheel] UCC IPv6 Address & Testing

Hi Jenny,

Yes we can work with a /58, however I understand this will make reverse 
DNS delegation more difficult on your end - it will have to be split into 
4 subdomains because a /58 is not a round nibble. While we can survive 
with four different domains allocated to us, I think it really would 
be easier to just change it back to a /56.

Andrew Adamson
UCC Wheel Member
mob: REDACTED

On Fri, 11 Jul 2014, Jenny Vuong wrote:

> Hi Andrew and Mitch, 
> 
> Would a    /58   be adequate at all for UCC's requirements? 
> 
> Thanks,
> Jenny
> 
> 
> 
> -----Original Message-----
> From: Andrew Adamson [mailto:bob at ucc.gu.uwa.edu.au] 
> Sent: Friday, 11 July 2014 12:43 AM
> To: Mitchell Pomery
> Cc: Jenny Vuong; Mark Curtis; wheel at ucc.asn.au; Dino Reinadi
> Subject: Re: [wheel] UCC IPv6 Address & Testing
> 
> Hi Jenny,
> 
> We do actually have a working uplink - the UCC admin group (wheel) didn't get the new uplink address until Mitch cc'ed wheel at ucc.asn.au in on his reply to you. I've not had a chance to test our other range yet as I was hoping to talk to you or the ipv6 specialist about getting a /56 subnet like we had before.
> 
> The club network is divided into seven subnets in addition to our uplink range, documentation for which can be found at
> http://wiki.ucc.asn.au/Network#IPv6 . We have a /64 allocated to each subnet to allow for prefix delegation, and a /59 for the VPN subnet so that each connection can get its own /64. 
> 
> To my knowledge SLAAC cannot do prefix delegation on a subnet smaller than /64, which is a problem given our current setup with multiple subnets. 
> While it is technically possible to break our network down to a single subnet, it would be much easier if we could just have a bigger range.
> 
> In short, can we please have a /56 again?
> 
> Kind regards, Andrew Adamson
> UCC Wheel Member
> mob: REDACTED
> 
> On Thu, 10 Jul 2014, Mitchell Pomery wrote:
> 
> > Hi Jenny,
> > 
> > Thanks for the info, and thanks for looking into it.
> > 
> > IPv6 currently isn't working for us. It seems that we have no uplink.
> > 
> > As for contacting UCC for IT related queries, wheel at ucc.asn.au is the 
> > best address to email.
> > 
> > I will lodge a ticket with IS next week after replicating the SSH 
> > droputs again.
> > 
> > Thanks,
> > Mitch
> > 
> > On Thu, 10 Jul 2014, Jenny Vuong wrote:
> > 
> > > 
> > > Hi Mitch,
> > > 
> > >  
> > > 
> > > Could you or someone in UCC please test  IPv6 and let me know if 
> > > it’s working?
> > > 
> > > Could you please let me know as soon possible?  We’ve got an IPv6 
> > > specialist onsite and their last day to help speed up any 
> > > troubleshooting tasks is tomorrow.
> > > 
> > >  
> > > 
> > > The UCC LAN range  is  2405:3C00:5200:100::/64
> > > 
> > >  
> > > 
> > > ~~~~~~~~~~~~
> > > 
> > > Point to Point Link to UCC
> > > 
> > > UCC   End       ipv6 address 2405:3C00:10:4::2/64
> > > 
> > > UWA  End      ipv6 address 2405:3C00:10:4::1/64
> > > 
> > >  
> > > 
> > >  
> > > 
> > > Thanks,
> > > 
> > > Jenny
> > > 
> > >  
> > > 
> > >  
> > > 
> > >  
> > > 
> > > Jenny Vuong | Senior Project Officer
> > > 
> > > Information Services
> > > 
> > > Phone: +61 8 6488 7366
> > > 
> > > Email:    Jenny.Vuong at uwa.edu.au
> > > 
> > >  
> > > 
> > > cid:image001.png at 01CF2D57.D46D6EE0
> > > 
> > >  
> > > 
> > > 
> > 
> 