Now we're about to talk about the different implementations that you
can do for IPsec with the IPv6 address families.
There aren't too many implementation types that are
available now to discuss really since IPv6 isn't as
widely adopted as we'd like it to be.
By this, I mean the internet still uses IPv4 for the most part.
There are also many other reasons why the adoption is slow,
which is a little out of the scope for this course.
Expanding on that a little bit, currently,
according to Google,
there's only about a 36% adoption rate of IPv6 throughout the United States.
Go to this link to check it out.
In the world, overall, it's only about 24%.
This is based on the percentage of users accessing Google over IPv6,
so the data could be a little skewed as well.
And of course,
this is a constantly growing number as more and more
organizations adopt the protocol.
But think about it, to create the VPN tunnel for IPv6,
we need one of two things: reachability over IPv6 to create an
IPv6-to-IPv6 tunnel or reachability over IPv4 to create an
IPv4-to-IPv4 tunnel for IPv6 to ride on.
Reachability is the key, so if you're using IPv6 in your networks,
but the service providers aren't yet,
then you can't create that direct 6-to-6 connection.
So that brings me to my options that I wanted to talk
about that are available to us.
The first is going to be the 6-to-6 VPN.
Now this is possible for site-to-site VPNs with the remote
access VPN links still developing and maturing.
This type of implementation will use those VTIs that we
discussed earlier on in the course.
There's other implementations that are possible,
such as GRE IPv6 tunnels that we can configure as well,
but for this course, we'll stick with the VTIs.
There are other implementations that are possible,
such as GRE IPv6 tunnels and those VTIs that we talked about,
as well as many others.
With those,
we're able to establish the VPN connectivity and
secure our traffic using only IPv6.
No IPv4 addresses are needed.
This is, of course, if you have IPv6 reachability between the two sites,
just like I mentioned earlier.
Here, you will configure the VTIs or tunnels,
configure IPsec, and connect the two sites via the secure VPN.
Easy.
Well, not easy if you don't have that reachability.
We'll cover one of these a little later on in a demo.
The next one I wanted to discuss really quickly has to do
with what we'll talk about in the next clip,
riding IPv6 over IPv4.
This is one of the transition methods that we can use if we're
in a mixed protocol environment or if our service providers
aren't quite on the same page as us.
With these,
we're able to create an IPv4 VPN connection and have our IPv6
traffic secured via IPsec through the tunnel.
These can be complex to implement, but if you design and plan it out carefully,
it could provide you with many benefits,
as well as the ability to be ahead of three-quarters of the world in adopting IPv6.