分配與管理课件

《分配與管理课件》由会员分享，可在线阅读，更多相关《分配與管理课件（68页珍藏版）》请在装配图网上搜索。

1、APNIC/TWNIC IP Address APNIC/TWNIC IP Address 分配與分配與管理管理1分配與管理WelcomeAPNIC Members Training CourseEffective IP Address Management:Asia-Pacific Policies and Procedures2分配與管理Introduction to APNICAsia Pacific Network Information Center3分配與管理What is APNIC?Regional Internet Registry(RIR)for the Asia Paci

2、fic RegionResource registration,allocation and supportIP addresses,AS numbers,inaddr.arpa delegationMembershipbased organizationNonprofit,neutral and impartialNot:an operations forumNot:a standards development body4分配與管理Internet Registry HierarchyASOICANN5分配與管理APNIC Structure6分配與管理APNIC Core Service

3、sResource allocationIP allocationsSecond Opinion approval of IP assignmentsAS number assignmentsResource registrationRegistration servicesAPNIC whois serverDNS managementReverse domains in-addr.arpa Not:Forward DNS services7分配與管理Internet Registry allocation and assignmentPolicies8分配與管理Definitions(1)

4、Internet Registry(IR)An organisation which allocates or assigns,and registers Internet resources including IP addresses and related resources Regional Internet Registry(RIR)An organisation with regional responsibility for management of Internet resources Responsibilities include allocation/registrat

5、ion services,coordination and policy development Must be neutral and consensus-based9分配與管理Definitions(2)Internet RegistriesLocal Internet Registry(LIR)Otherwise known as an APNIC MemberNormally operates as an ISP,and assigns address space to its customers National Internet Registry(NIR)IR which oper

6、ates on a national basis and primarily allocates resources to its membersMust be neutral and consensus-based10分配與管理Definitions(3)Allocation and AssignmentAllocationA block of address space held by an IR for subsequent allocation or assignmentAssignmentA block of address space used to address an oper

7、ational network May be provided to IR customers,or used for an IRs infrastructure(“selfassignment”)11分配與管理APNIC PoliciesBased on global Internet registry policiesRFC 2050(1996)Other RIR policies(developed since)Policies for Address Space Management in the Asia Pacific Region(was effective Jan 2000)M

8、inimum practical allocation:/19Slow Start policy for new membersAllocations as PA Address SpaceProvider responsible for aggregationCustomer assignments must be nonportable12分配與管理APNIC PoliciesAllocations based on demonstrated needDetailed documentation requiredAll address space held to be declaredAd

9、dress space to be obtained from one sourcerouting considerations may applyStockpiling not permittedValidity of allocations and assignmentsAccording to original criteriaAccording to correct managementAccording to duration of lease 13分配與管理Internet Registry procedures Address space allocations and assi

10、gnments14分配與管理OverviewAddressing plan exampleISP address request formAddress allocationsSecond opinion request form15分配與管理 Addressing Plan ExampleStarting off UpstreamISPLeased line services 5-8 customersDialup services 16 modemsCustomer services15 hosts NOC operations10 hosts Internal DNS,Web Mail

11、serversISP Infrastructure 5 hostsVirtual web (http1.1)Interconnected resilience16分配與管理Addressing Plan Example5 hosts15 hosts10 hostsUpstreamISP16 dialup modemsWAN point to point/305-8 leased line customersip unnumberedto customers one loopback interface per assigned router/32 ip unnumberedto upstrea

12、m ISP17分配與管理Addressing Plan(contd)networkplan:networkplan:networkplan:analogue dialup modems,vendor xLAN web hosting(http1.1)5-8 leased line customers(/28)networkplan:networkplan:networkplan:networkplan:networkplan:LAN NOC and Ops managementLAN mail,DNS,web servers internalloopback router interfaces

13、router WAN portsrouter WAN ports(x 5 lines)Initial addressing plan1651281510 4 2 2numbers of host addresses(interfaces)18分配與管理Network Plan Example 6 months later scale increased redundancy60 dialupmodems(2PRI)30 leased linecustomers11 hosts-http1.18 hosts-2ndary Servers25 hosts-NOC16 hosts-Servers60

14、 dialupmodems(2PRI)UpstreamISPadded new router and LAN for redundancyadded new dial up equipmentreplaced originalmodemincreased number of leased line customersincreased number of hosts on all LANs19分配與管理Addressing Plan(contd)networkplan:networkplan:networkplan:2 PRI dialup modems,vendor yLAN web hos

15、ting(http1.1)30 leased line customers(pool)16/5/128/15/10/4/2/2/networkplan:networkplan:networkplan:networkplan:networkplan:LAN NOC and Ops managementLAN mail,DNS,web servers internalloopback router interfacesrouter WAN portsrouter WAN ports(x 8 lines)Network plan at 6 months60115122516622increases

16、in hosts(interfaces)New hardware2 PRI dialup modems LAN-secondary serversnetwork-plan:network-plan:0/0/608Changed description20分配與管理Network Plan 12 months total site redundancy greater complexity efficiency60 leased linecustomersip unnumbered11 hosts8 hosts35 host240 dialupmodems(8PRI)UpstreamISP A3

17、5 hosts240 dialupmodems(8PRI)40 hostsUpstreamISP Badded new customer routerredundancy of WAN connections now numbered links for BGP4two pieces of essential equipment21分配與管理Addressing Plan(contd)networkplan:networkplan:networkplan:networkplan:8 PRI dialup modems,vendor x8 PRI dialup modems,vendor y L

18、AN web hosting(http1.1)60 leased line customers(pool)16/60/0/60/5/11/128/512/15/25/10/16/0/8/2/2/2/2/4/6networkplan:networkplan:networkplan:networkplan:networkplan:networkplan:LAN NOC and Ops managementLAN mail,DNS,web servers internalLANsecondary serversrouter WAN portsrouter WAN ports(x 8 lines)lo

19、opback router interfaces Network plan at 12 months240240111024403582212increases in hosts(interfaces)one year total22分配與管理Addressing Plan(contd)networkplan:networkplan:networkplan:networkplan:8 PRI dialup modems,vendor x8 PRI dialup modems,vendor yLAN web hosting(http1.1)60 leased line customers(poo

20、l)16/60/2400/60/2405/11/11128/512/102415/25/4010/16/35 0/8/8 2/2/2 2/2/2 4/6/12networkplan:networkplan:networkplan:networkplan:networkplan:networkplan:LAN NOC and Ops managementLAN mail,DNS,web servers internalLANsecondary serversrouter WAN portsrouter WAN ports(x 8 lines)loopback router interfaces2

21、56256161024646484416 Can now determine subnet sizes23分配與管理Addressing Plan(contd)Addressing plan for networkplandetermination of relative subnet addressesreordered large to small according to relative subnet sizenetworkplan:0.0.0.01024128/512/1024 60 leased line customers(pool)networkplan:0.0.4.02561

22、6/60/240 8 PRI dial up modems,vendor xnetworkplan:0.0.5.02560/60/240 8 PRI dial up modems,vendor ynetworkplan:0.0.6.06410/16/35 LAN mail,DNS,web internalnetworkplan:0.0.6.646415/25/40 LAN NOC and Ops managementnetworkplan:0.0.6.128 165/11/11 LAN web hosting(http1.1)networkplan:0.0.6.144 160/8/8 LAN

23、secondary serversnetworkplan:0.0.6.160 164/6/12 loopback router interfacesnetworkplan:0.0.6.176 42/2/2 router WAN ports(x8)cumulative total 0.0.6.20824分配與管理Addressing Plan(contd)Addressing plan for networkplandetermination of subnet masksnetworkplan:0.0.0.0255.255.252.0 1024 128/512/1024 60 leased l

24、ine customersnetworkplan:0.0.4.0255.255.255.0 256 16/60/2408 PRI dial up modems,vendor xnetworkplan:0.0.5.0255.255.255.0256 0/60/240 8 PRI dial up modems,vendor ynetworkplan:0.0.6.0255.255.255.1926410/16/35 LAN mail,DNS,web internal networkplan:0.0.6.64255.255.255.1926415/25/40 LAN NOC&Ops managemen

25、tnetworkplan:0.0.6.128 255.255.255.240165/11/11 LAN web hosting(http1.1)networkplan:0.0.6.144 255.255.255.240 160/8/8 LAN secondary serversnetworkplan:0.0.6.160 255.255.255.240164/6/12 loopback router interfacesnetworkplan:0.0.6.176 255.255.255.25242/2/2 router WAN ports(x 8)25分配與管理Addressing Plan(c

26、ontd)Addressing plan for networkplanconnect to the Internet(fulltime,parttime)?networkplan:0.0.0.0255.255.252.0 YES 1024 128/512/1024 60 leased customersnetworkplan:0.0.4.0255.255.255.0 PART 256 16/60/240 8 PRI dial up workplan:0.0.5.0255.255.255.0PART 256 0/60/240 8 PRI dial up workplan:0.0.6.0255.

27、255.255.192YES 64 10/16/35 LAN mail,DNS,web internal networkplan:0.0.6.64255.255.255.192YES 64 15/25/40 LAN NOC&Ops managementnetworkplan:0.0.6.128 255.255.255.240YES 16 5/11/11 LAN web hosting(http1.1)networkplan:0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN secondary serversnetworkplan:0.0.6.160 255.

28、255.255.240YES 16 4/6/12 loopback router interfacesnetworkplan:0.0.6.176 255.255.255.252YES 42/2/2 router WAN ports(x 8)26分配與管理Addressing plan completetotal planned for customer assignments/22total planned for ISP infrastructure/24+/23networkplan:0.0.0.0255.255.252.0 YES 1024 128/512/1024 60 leased

29、line customersnetworkplan:0.0.4.0255.255.255.0 PART 256 16/60/2408 PRI dial up workplan:0.0.5.0255.255.255.0PART 256 0/60/2408 PRI dial up workplan:0.0.6.0255.255.255.192YES 6410/16/35LAN mail,DNS,web internal networkplan:0.0.6.64255.255.255.192YES 6415/25/40 LAN NOC&Ops managementnetworkplan:0.0.6.

30、128255.255.255.240YES 165/11/11 LAN web hosting(http1.1)networkplan:0.0.6.144255.255.255.240 YES 16 0/8/8LAN secondary serversnetworkplan:0.0.6.160255.255.255.240YES 16 4/6/12loopback router interfacesnetworkplan:0.0.6.176255.255.255.252YES 42/2/2router WAN ports(x 8 lines)detailed,efficient and acc

31、urateAddressing Plan(contd)27分配與管理ISP Address Request LifecycleMore documentationand clarification by Member no Member has completed documentation?Step 1yes Evaluation ofrequest by APNIC OK?Step 2yesupdate localrecordsupdate APNICdatabaseNotifyMemberStep 3Allocation by APNICno28分配與管理OverviewISP addr

32、ess request formNetwork templatePerson templateTechnical templateAdditional information29分配與管理Complete the DocumentationISP Address Request Form(APNIC065)W Address Request FormNetwork Template -registration details need for allocationAPNIC ISPNon Profit ISP in the Asia PacificAL25AP31分配與管理ISP Addres

33、s Request FormPerson Template -need accurate contact details for network An APNIC NIC handle will automatically be created32分配與管理ISP Address Request FormTechnical Template-General Overview Must be currentmember to receiveserviceExpectation is classlessTopological informationExpectation of nonportabl

34、eassignments 33分配與管理ISP Address Request FormTechnical Template -Customer Network fields Odd sized assignments should bereported on multiple lines34分配與管理Evaluation by APNIC Customer network fieldsRegistrationcheck all customer assignments are in the APNIC whois database accuratelyParsercheck the netn

35、ame on the form&the netname field in the database are the same ie.software reports discrepancieshost and subnet estimates are accurate and realPolicy prefix distribution of all customer assignmentsclassless assignments NOT on/24 boundariesassignments in line with rfc2050 50%after one year35分配與管理ISP

36、Address Request FormTechnical Template -ISP internal Infrastructure36分配與管理ISP Address Request FormTechnical Template -ISP Future Network Plan37分配與管理Evaluation by APNIC Infrastructure&networkplan fieldsPolicy technical descriptions are detailed enough so APNIC hostmaster can understand why subnet siz

37、e was chosendo customer projections match infrastructure plans?Efficient subnet assignmentsBest current practicename based virtual web hostingdynamic dial upmore on this to follow.38分配與管理Evaluation by APNICSpecial verificationIP based virtual hostingup to a/22 assigned for this purposemust send list

38、 of domains and URLvirtual ftp,Ecommerce with SSL excludedAPNIC will ask why you cant use name based hostingcable,adsl,xdslstatic assignment for permanently online customersIP addresses for static assignments/32 must be reported when subsequent allocation requesteddynamic address assignment preferre

39、d39分配與管理ISP Address Request FormAdditional InformationPOP topologyDiagrams showing network designDiagrams showing POP designdoes network/POP topology description correlate with addressing plan and current infrastructure?larger requests will require additional documentationDeployment planGive details

40、 of phases of deploying equipmentDoes deployment plan match information in networkplan fields?40分配與管理ISP Address Request FormAdditional information Equipment and servicesSpecifications,number of portsinformation that cannot fit onto fields of formDetails of how implement servicesexplain acronyms or

41、special servicesMiscellaneousAnything not covered by the form,anything unusualsupplementary information very useful to the hostmaster in evaluating your request41分配與管理Evaluation by APNICGeneralAll address space held should be documentedcheck other RIR,NIR databases for historical allocationsNo reser

42、vations policyReservations may never be claimedFragments address spaceCustomers may need more or less address space than is actually reserved42分配與管理Address AllocationsFirst allocation summaryRequires clear detailed requestImplementation of Best Current PracticeEfficient assignments plannedAlways a/1

43、9 slow startexceptions made for very large networks but not common43分配與管理APNIC Address AllocationSubsequent allocations80%overall must be usedunless large assignment pendingDependant on accurate and detailed informationDemonstrated conservative assignments Correct database registrations for customer

44、sAmount depends on“usage”ratehow much,how fast?allocate for up to one yearContiguous allocation not guaranteedbut every effort made44分配與管理Customers NeedsAddress space assignment procedures45分配與管理DefinitionsCustomer ASSIGNMENT (by APNIC member)Assignment window 0determines maximum amount of address s

45、pace a member can assign without approval from APNICincreases when procedures&criteria are understoodMember ALLOCATION (by APNIC)Slow start/19determines an initial allocationsize that is consistent and fairly applied to allincreases when usage rate determined46分配與管理Assignment WindowAssignment window

46、 of memberAW=0 AW=/28AW=/27AW=/26 .AW=/19Member Assignment limit(host addresses)All new registriesrequests=16requests=32requests=64.requests AW?NoStep 3 Assignment Windowprocedure Member adds comments&recommendations&sends toMember makes assignment,updates DB&local recordsYesStep 2 Member evaluates

47、OKAPNIC approves request?YesiterationNo48分配與管理2nd Opinion Request FormName&addressof customersnetworkTechnical detailsof customers networkMust be currentAPNIC memberSize of Opinion Request FormConnect to Internet?Future network plan Description of useAccuratehost estimates50分配與管理2nd Opinion Request

48、FormOverview of ALL address space used previously use whois to research other databases51分配與管理2nd Opinion Request FormRequestor should be APNIC member and“known”to APNICUse to describe anything not covered by form eg.renumbering52分配與管理Evaluation SummaryPolicy Efficiencymore than 50%used in any one s

49、ubnetmore than 80%used overallStockpilingis all address space held declared on form?has organisation obtained address space from more than one member/ISP Registration is assignment in the APNIC database?are the contact details correct and up to date?53分配與管理EvaluationAPNIC&Member evaluation Should be

50、 the sameIf NO,APNIC will ask member to obtain more informationiterative processIf YES,APNIC approves 2nd opinion request54分配與管理Questions?55分配與管理TWNIC IP Address 管理政策管理政策56分配與管理IP Address 管理政策管理政策相關需求之申請依規定之程序及所需文件審核,無特殊待遇.相關網路資源申請文件應確實且完整.於 whois database 內之資料應紀錄至 end user level,且應即時更改相關資料,以保持最新及最完

51、整之資料於資料庫內.不可買賣 IP Address,且應於網際網路上宣告所持有之 IP Address.若客戶更換 ISP,需將IP Address 歸還予原 ISP,然其所新換之 ISP 應無條件配發相同額度之 IP Adress 予該客戶.57分配與管理第一次申請 IP Address 之會員應遵循 Slow Start 之機制,其核定之最大量為/19(32 class C),後續之申請則依其之前使用狀況審核.一定期限內未使之 IP address 應退還原發放單位.鼓勵使用“ip unnumbered”,“private address space”(rfc1918),NAT 等方式,以

52、節省 IP address 之使用.RIR 對 LIR 應設定“assignment window”,當 LIR 分配與客戶 IP address 之數量超過“assignment window”所定之數量時,應填寫”second-opinion”表,送 RIR 審核,審核通過方得分配給客戶.IP Address 管理政策管理政策58分配與管理IP Address 申請辦法申請辦法59分配與管理申請對象及原則申請對象及原則 對象一對象一:網際網路服務單位 原原 則則:凡網際網路服務單位向 TWNIC 提出 代理發放申請,經 TWNIC 審核會議 通過授權者,即可向 TWNIC 提出 IP 位址

53、需求申請。60分配與管理徵選網際網路服務廠商(ISP)代理發放IP位址公告1.台灣網路資訊中心(TWNIC)負責國內、外網際網路IP 地址的申請與分配，為因應國內商業網路的發展，擬開放其他網路服務申請代理發放IP 地址予連線單位申請。目前國內IP地址代理發放的單位有:教育部電子計算機中心(TANet)行政院研考會(GSN)數位聯合限公司(SeedNet)中華電信數據分公司(HiNet)廣通科技股份有限公司(GCN)向邦網路科技股份有限公司(UNET)太碁股份有限公司(AcerNet)仲琦科技股份有限公司(HTNet)精業股份有限公司(SYSNet)台灣電訊網路服務股份有限公司(TTN)悉達資訊

54、股份有限公司(Seeder)英普達資訊科技股份有限公司(ISNet)太聯科技股份有限公司(MyNet)吉立通電訊網路股份有限公司(TimeNet)瑪凱電信股份有限公司(MKY)年代影視事業股份有限公司(ERA)昇源資訊科技有限公司 遠傳電信股份有限公司(FET)成佳資訊股份有限公司(SaveCom)61分配與管理徵選網際網路服務廠商(ISP)代理發放IP位址公告(續)2、有意代理此項業務之網路服務業者，需具有交通部電信 總局第二類電信事業許可之執照，並檢附計畫書暨執照 影本，送 TWNIC。3、計畫書至少應包含下列內容：需保證Domain Name Server及國內外Routing能正常 運

55、作 IP Address 使用相關規劃 網路架構圖,並註明全國區域網路中心點數及國際專 線、國內專線速率62分配與管理申請對象及原則申請對象及原則(續)對象二對象二:一般網際網路用戶 原原 則則:一般用戶可向代理發放單位申請所需 IP address,如需大量 IP address (16 個 Class C 以上)可逕向 TWNIC 提出申請(個人尚未開放申請),經 TWNIC 註冊組審核通過後發放。63分配與管理申請流程申請流程填寫需求表送至TWNIC更多的文件與說明 更新 whois databaseTWNIC 核發IP Address文件是否完整需求是否明確、合理nonoyesyes(

56、Email 至至 )64分配與管理申請表申請表(Request Form)l ISP IP Address Request Form(APNIC-065)ISP IP Address Request Form(APNIC-065)l Second Opinion Request Form(APNIC-073)Second Opinion Request Form(APNIC-073).tw/ip-info/apnic-.tw/ip-info/apnic-073.txt65分配與管理Allocation Window 目前目前 APNIC 予予 TWNIC 之額度為之額度為/19,即即 TWNI

57、C 欲分配予欲分配予 ISP IP Address 量超過量超過 32 class C,ISP 需填寫需填寫 APNIC-073 送送 APNIC 審核通過審核通過,TWNIC 方可核發方可核發.Assignment Window 目前目前 APNIC 予予 TWNIC 之額度為之額度為/24,即即 ISP 欲分配予客戶欲分配予客戶 IP Address 量超過量超過 1 class C,ISP 需請客戶填寫需請客戶填寫 APNIC-073 送送 TWNIC 審核通過審核通過,ISP 方可核發方可核發.66分配與管理F相關組織網址TWNIC-.twAPNIC -RIPE -IANA -ICANN-.iccan.org67分配與管理Questions?68分配與管理