Administering Security In An Enterprise Level Infrastructure Tunneling Technology

Administering Security in an Enterprise-Level Infrastructure tunneling technology

by

tracy carter

A Windows Server 2008 or Windows Vista computer can act as a 6to4 router through Internet Connection Sharing (ICS). ISATAP, which stands for Intra-Site Automatic Tunnel Addressing Protocol, is an automatic dual stacking tunneling technology that is installed by default in Windows Vista without Service Pack 1, Windows Server 2003, and Windows XP. However, in Windows Server 2003 and Windows XP, it is called Automatic Tunneling Pseudo-Interface. The ISATAP tunneling method can be used for either public or private addressing. With public unicast addressing, ISATAP uses this global address:

A.B.C.D. in this case is a standard IPv4 address that is assigned within the

MCITP Course

IPv4 infra-structure. Additionally, ISATAP uses the private address of ::200:5EFE:A.B.C.D. where A.B.C.D. is again the assigned IPv4 address within the infrastructure.

By this method, ISATAP creates a link-local address that can be used to communicate between devices through tunneling. An important feature to note, however, is that ISATAP is not installed by default on either Windows Vista Service Pack 1 or Windows Server 2008 unless the name ?ISATAP?can be resolved.

ISATAP allows computers operating IPv6 in IPv4 infrastructures to communicate with IPv4 clients in the same subnet. However, to communicate with additional subnets running either pure or mixed IP protocols, an ISATAP router is required. Normally, this

MCITP: Server Administrator

router is resolved either through the mapping of the ?ISATAP?hostname or by the use of the netsh interface isatap set router command, which allows the address of the router to be manually speci?ed in either Windows Server 2008 or Windows Vista.

As mentioned earlier, one of the primary goals with the implementation of IPv6 was to enable almost all organizations to use publicly assigned addresses throughout their entire orga- nization without the use of Network Address Translation. Although this is good in theory (NAT was such a pain anyway), the problem is that NAT is still used?a lot. Therefore, to make the shift from IPv6 to IPv4, network administrators need to have an option at their disposal to shift from IPv4 to IPv6 and still make use of NAT or at least give the network the ability to interpret between these addresses. And that?s where Teredo comes in.

MCITP Certifications

certification exam is the first of two exams to be passed before earning your A+ certification.

Article Source:

ArticleRich.com