Comments on: will we need vpn(virtual private network ) when we start using a complete ipv6 network

By: BlankReg

BlankReg — Mon, 01 Jun 2009 13:25:38 +0000

Now, what did my opld teacher say ? READ THE QUESTION !

Or at least the update to it.
“i am asking for a pure IPv6 network… where we dnt have any IPv4 network… IPv6 is going to be the future…”

In a pure IPv6 network, the encryption is done by the IP protocol, as I understand it, and you don’t need any other protocol to achieve this. It is supposed to be one of the major benefits of IPv6, along with the ability to allocate an IP address to every atom in the known universe. You would not need a separate VPN as such, but you would need to configure the appropriate level of security on the IP connection.

By: BlankReg

BlankReg — Wed, 27 May 2009 22:42:40 +0000

Regarding the VPN, it could be IPSEC, or it could be something like MPLS, if that is available at the right cost. It kind of depends on price, availability and other factors such as if the end points are fixed locations.

My guess is you would go for an IPv4 IPSEC VPN that tunnels the IPv6 packets between the end points.

By: BlankReg

BlankReg — Wed, 27 May 2009 22:39:28 +0000

You can’t use any of the IPv6 features for security when it goes over an IPv4 network. The IPv4 network doesn’t know anything about these. You need to have devices on both sites to do the IPv4 VPN and they will tunnel the IPv6. They may be able to ‘look’ at the IPv6 and take some features if they can be implemented in IPv4 (QoS is an example), but that is likely to be the limit.

I am not still 100% convinced that IPv6 is the cure to all our ills. I lived through OSI and ATM, both of which were supposed to do everything,and are now not used in anything like the omnipresent way it was expected. By the time we really need to replace IPv4, a new and better solution is likely to be found. But don’t listen to an old cynic like me

By: Denim0mm

Denim0mm — Wed, 27 May 2009 18:36:00 +0000

in vpn we tunnel the data and address.. when we send it through the transport media… so when we use IPv6 as a network.. where IPv6 is build with IPsec on it already… so does IPsec going to do the tunneling process here…

By: Jfernatt

Jfernatt — Wed, 27 May 2009 18:12:50 +0000

Blank is correct. During the many years I am sure it is going to take for everyone to transition to IPv6, you will have to have some sort of way to transport your IPv6 packets across an IPv4 backbone.

If you were on a pure IPv6 internet, with IPv6 end to end, I’m sure you could be set up so that everything on your network was visible from anywhere, but I would assume that you and your organization would want some sort of privacy and VPN in some form would still be used.

But only time will tell haha