Where eight network management vendors stand on IPv6

With the June 2008 deadline for federal agencies to support IPv6 only a year away, network management vendors are starting to upgrade their products to support the emerging protocol.

Cisco Network Registrar (CNR), a DNS and DHCP package, supports IPv6, including stateful and stateless configuration. Cable service providers are among the early adopters of IPv6-enabled Cisco Network Registrar.

Cisco also has an IPv6-enabled Network Analysis Module, which is a blade that sits in its switches and reports back to Cisco's NetFlow traffic monitoring software.

"Over the next several years, you will see us really begin to strengthen our management product portfolio across the board just like we’re doing within our hardware platforms because we see it as a fundamental component of any IPv6 transition," says Dave West, director of field operations at Cisco’s Federal Center of Excellence.

West says one of the first things that network managers need for the transition to IPv6 is DNS and DHCP tools. That’s because IPv6 addresses are so long that network managers won’t be able to remember them and accurately type them into network management applications. Instead, network managers will use IPv6-enabled DNS and DHCP software for those tasks.

"The way we have taken advantage of stateless and stateful autoconfiguration in CNR is an example of us understanding the capabilities of IPv6 and providing those capabilities to our customers through DHCP v6 services," he says.

West says federal network managers will find enough IPv6-enabled network management tools for the initial deployments required by the Office of Management and Budget mandate. Those tools, however, are nowhere near parity between IPv6 and IPv4 capabilities.

"The management products will mature as more devices support IPv6," he says.

2. Network Instruments

Networks Instruments offers full IPv6 support in Version 12 of its Observer family of network analysis and monitoring products. The new version, released in March, supports native IPv6, dual-stack IPv4 and IPv6 environments, and tunneling.

"We’ve had native IPv6 filtering and decoding for three or four years," says Charles Thompson, the company's manager of sales engineering. "But with the release of Observer 12 in March, we’ve implemented support for IPv6 across our entire application. We’ve added IPv6 support for VoIP, for all of our expert-analysis functionality and all of our statistics."

Thompson says all the functionality available for IPv4 is now available for IPv6. Next up for Network Instruments is adding features specific to IPv6.

"Once people start implementing additional features, it’s going to change the way we analyze the data,’’ he says. "We're going to have to look more at the transport of the data than the data itself because IPSec will force us to do that."

Thompson says customers were asking Network Instruments for IPv6 support. "The government space has some interest but also carriers and service providers that are going to be transporting IPv6," he says.

3. EMC

EMC introduced support for IPv6 in Release 6.5 of its EMC Smarts IP Availability Manager.

"We did introduce support for IPv6 around dual-stack deployments, which we see as the most likely deployment for most enterprises to move to IPv6," says Jonathan Reeve, technical product marketing manager for EMC’s Resource Management Group. "Our solution supports the discovery and monitoring of IPv6."

Reeve says EMC’s software discovers the IPv6 information using SNMP over IPv4 connections. "We monitor those IPv6 addresses using [Internet Control Message Protocol] V6," he adds.

He says EMC’s IPv6 capabilities are "pretty similar" to its IPv4 functions.

Next up for EMC is supporting pockets of pure IPv6 networks.

"As we operationalize IPv6, there are going to be opportunities to do some things differently, such as autoconfiguration and autodiscovery," Reeve says. "Some of those things may become easier to do."

4. Network General

Network General has offered limited IPv6 support in its Sniffer products for many years, but the feature has had little use.

"I can count the number of IPv6 users on one hand," says James Messer, director of technical marketing for the vendor.

Network General doesn’t support dual stack or tunneling for IPv6. Nor does Network General let network managers evaluate how critical applications are running over a diverse network running IPv4 and IPv6. Those features are under development now.

"Our products today are IPv6-aware. They will identify and gather basic statistics from IPv6 devices or components on the network. But the additional metrics, such as the nuances of QoS and the application performance is a phased process that is going to happen throughout the rest of the year," Messer says.

In light of the federal government’s IPv6 mandate, Network General is reexamining its IPv6 support to offer more detailed visibility into the performance and availability of IPv6 systems.

"Having decodes is good, but that’s just a first step," Messer says. Users want "very detailed information about the transmission of the IPv6 protocol and IPv6 applications going over the network at a very network-centric level."

Network General says it is improving IPv6 support in all of its products, including its Sniffer network-traffic analysis tool, NetVigil; IT performance management solutions and Visualizer troubleshooting tools.

Network General says updating its products to support IPv6 fully is a significant issue.

IPv6 "requires different addressing and different types of statistics that we will gather because there’s different information in the IPv6 header vs. the IPv4 header," Messer says. "We know how to gather that information we need. . . . It’s a question of interpreting the information that we gather because it is IPv6 information."

Network General says network management tools also will need different security mechanisms because more traffic will be encrypted via IPSec. Network managers won’t have as much visibility into IPv6 traffic as they had in the past, so they will have to find other ways of gathering performance and availability information on networks, Messer adds.

5. IBM Tivoli

IBM's Tivoli subsidiary intends to release versions of its Netcool/Omnibus event management and IBM Tivoli Network Manager software that support IPv6 in the fourth quarter of 2007. Both products originally were part of Micromuse, which IBM acquired in 2006.

"We’ve been talking to our customers and asking them about their plans and requirements for IPv6," says John Krachenfels, market management for Tivoli. "Because of the U.S. government regulations that are requiring IPv6 starting next year but also because of customer feedback in Asia-Pacific and Europe, our customers wanted us to move to IPv6."

IBM Tivoli’s new products will support dual-stack IPv6 and IPv4 environments but not the tunneling of IPv6 traffic over IPv4 connections.

"Omnibus will be capturing events from IPv6-based devices, and then send them to Network Manager," Krachenfels says. "Network Manager discovers and maps a complete network environment and creates a topology view. Both products will be able to be hosted on dual-stack machines running IPv6 and IPv4."

Jonathan Baggott, software engineer for Netcool products, says the IPv6 functions will be limited to IPv6 interface data, routing information and basic integration with Ethernet switching functions.

"This still leaves potential grey areas in MPLS and with some enterprise-specific equipment," Baggott says. "The support is aimed at the standards and Cisco, so if a device supports them, it should at the least have its IPv6 interface information retrieved and routed correctly."

6. Netcordia

Netcordia has started an initiative to support IPv6 on its NetMRI real-time network analytics appliance by June 2008. Terry Slattery, the company's founder and CTO, sees promise in the IPv6 market.

"The U.S. Army is a very big customer of ours. Also on the nonmilitary side, the U.S. House of Representatives is a big customer," he says. "Federal is about 20% to 25% of our customers."

Slattery says IPv6 is more than just an addressing change.

"We expect it to bring a whole new set of problems with autoconfiguration," he says. "DNS is going to be a lot more important. People are going to have to deal with great, big, long addresses. . . . Also, you can’t do a ping sweep of a subnet because the addresses are too long. Scanning that 128-bit address space is not going to scale."

Another big challenge for network management applications is being able to store IPv6 data, he says.

"The addresses take up four times more room than IPv4 addresses, so they’ll need more address space," Slattery says. "The other interesting thing is they are going to need something for displaying I28-bit addresses. That’s a lot of screen real estate. I think the most useful way will be displaying a device name and then running the mouse over it to view the address in a shortened form."

7. Apparent Networks

Apparent Networks expects to support IPv6 on its network assessment and optimization tool by the federal government’s June 2008 deadline.

Loki Jorgenson, chief scientist, says it’s unclear how network management applications will exist in dual-stack environments.

"What we’re looking at is an extended dual-stack future, where there isn’t a serious driver to push people out of IPv4 to IPv6 for a clean cutover," he says. "This raises all sorts of hairy questions. How does one think about a network that is part IPv4 and part IPv6 with hosts with dual stack interfaces? How do you construct logical diagrams in a way that allows you to confirm something operating at IPv4 is operating at IPv6? . . . I don’t think there is a quick and easy answer."

Another challenge for network management applications is handling IPv6 packets.

"Presentation is probably the trickiest one," Jorgenson says. "How do you construct a network management process and support it with a particular view in a mixed IPv4 and IPv6 environment? We’re looking at that in particular."

He says that support for IPv6 in the network core is further along than at the edge.

"In the case of IPv6, the whole process around things like host discovery and MTUs [maximum transmission units] and trace route-like mechanisms -- they’ve all changed slightly," Jorgenson says.

He says Apparent Networks also needs to make some significant changes to its GUI to support handling IPv4 and IPv6 addresses at the same time.

8. Network Physics

Network Physics, a provider of real-time performance-management appliances for converged networks, doesn’t support IPv6 and hasn’t committed to a particular timeframe for IPv6 support.

"We’ve been waiting a little bit to see the demand in the marketplace," says Tom Tavel, the company's chief architect. "There are downsides in dealing with the larger addresses, and we haven’t quite gotten started on that."

The larger addresses will create storage issues for network management platforms like Network Physics appliances "Potentially, there may be some interesting stuff there in IP addresses being easier to correlate to individual users," he says.

Tavel says supporting IPv6 will create some challenges for Network Physics because of IPv6’s built-in support for IPSec.

"Our product is passive monitoring of packets on the network," he says. "To the extent that the transportation layer is encrypted, that’s going to be a problem for us."

From CSO: 7 security mistakes people make with their mobile device
Join the discussion
Be the first to comment on this article. Our Commenting Policies