Extracto de: http://www.cisco.com/cisco/web/solutions/small_business/resource_center/articles/be_more_productive/how_to_become_an_it_security_expert/index.html.

The Real Life of an Expert: Introducing the New CCIE Security

CCIE Security 4.0 is unusual among security certificates for its up-to-date, real-world content. It emphasizes security competency and efficient problem solving in networks that use cloud services, carry voice and multimedia traffic, and are accessed by a variety of wireless devices.

The content, currently in development, may include real-world applications that involve:

• Securing both wireless and wired networks, including managing security policy by device and service
• Extending application awareness to security devices, moving security up to Layer 7 from the stateless packets of Layers 3 and 4, and applying policy on a per-identity basis
• Applying security policy in a network that has voice and video traffic
• Securing networks that use managed services, dual ISPs, IPv6, or IP multicast

Cisco will soon announce the blueprints for the CCIE Security 4.0 written and lab exams; the first exam will take place approximately six months later.
Although there are no prerequisites for registration, Cisco offers a preparation path through its CCNA and/or CCNP Security levels, and recommends that candidates have at least three years of hands-on network security experience.

Durante la semana del 5 de marzo del presente año se podrá rendir el examen del CCIE de los tracks de Routing & Switching, Security y Voice en Buenos Aires, Argentina.

Pueden encontrar la lista completa de sitios en esta modalidad Mobile en: https://learningnetwork.cisco.com/docs/DOC-3224. Al día de hoy se informa:

Lab Locations	2012 Dates	Status	Lab
Mexico City, Mexico	Jan 9 - 13	R	Routing & Switching, Security and Voice
Johannesburg, South Africa	Jan 23 - 27	R	Routing & Switching, Security
Bangkok, Thailand	Jan 30 -Feb  3	R	Routing & Switching, Security
Riyadh, Saudi Arabia	Feb 4 - 8	R	Routing & Switching, Security
Sao Paulo, Brazil	Feb 13 - 17	R	Routing & Switching, Security
Cairo, Egypt	Feb 19 - 23	R	Routing & Switching, Security
Buenos Aires, Argentina	Mar 5 - 9	R	Routing & Switching, Security and Voice
Moscow, Russia	Mar 19 - 23	R	Routing & Switching, Security
Seoul, South Korea	Mar 19 - 23	R	Routing & Switching, Security and Voice
Mexico City, Mexico	Apr 2 - 6	R	Routing & Switching, Security and Voice
Istanbul, Turkey	Apr 16 - 20	R	Routing & Switching, Security
Lagos, Nigeria	Apr 30 - May 4	R	Routing & Switching, Security
Moscow, Russia	May 14 - 18	R	Routing & Switching, Security
Johannesburg, South Africa	May 28 - Jun 1	R	Routing & Switching, Security
Singapore, Singapore	Jun 4 - 8	R	Routing & Switching, Security and Voice
Rio de Janeiro, Brazil	Jun 11 - 15	R	Routing & Switching, Security
Toronto, Canada	Jun 18-22	R	Routing & Switching, Security and Voice
Warsaw, Poland	Jun 25 - 29	R	Routing & Switching, Security
Shanghai, PR China	Jul 23 - 27	R	Routing & Switching, Security

Se ha hecho anuncio del World IPv6 Launch para el 6 de junio de este año. Esta vez no sólo se habilitará el protocolo por un día como sucedió en el  World IPv6 Day, si no que esta vez será para siempre en varios websites famosos como Facebook, Google, etc. y en los productos y servicios de grandes ISP's como Comcast, AT&T, etc. y por supuesto en productores de equipamiento como Cisco.

Más info en: http://blogs.cisco.com/news/launching-a-new-internet-protocol/.

ISOC Argentina, en cooperación con el proyecto 6DEPLOY, ha publicado un nuevo libro de IPv6 "IPv6 para Todos: Guía de uso y aplicación para diferentes entornos".

Está orientado a diferentes tipos de lectores, incluyendo usuarios finales, redes residenciales, empresas, redes académicas y de investigación, así como a ISPs. También incluye un capítulo acerca de como desplegar diversos servicios IPv6.

El libro puede ser descargado en Castellano, Catalán, Vasco, Gallego e Inglés.

Cisco lanzó recientemente IPv6 Knowledge Base Portal: http://www.cisco.com/web/solutions/netsys/ipv6/knowledgebase/index.html. Acá se pueden encontrar links a un sinnúmero de guías de configuración, white papers, etc. al respecto. Conviene darse una vuelta para aprender un poco ;)

A continuación un ejemplo básico de configuración de OSPFv3, con la particularidad que un vecino estará corriendo IOS XR. La topología es sencilla y se muestra en la siguiente figura:


Primero se configura el direccionamiento IPv6 en las interfaces que interconectan a R1 y R2.

RP/0/1/CPU0:R1#conf t
RP/0/1/CPU0:R1(config)#int Gi0/0/0/1
RP/0/1/CPU0:R1(config-if)#ipv6 add 2001:db8:1212::1/48
RP/0/1/CPU0:R1(config-if)#commit

R2#conf t
R2(config)#interface GigabitEthernet1/0/0
R2(config-if)#ipv6 add 2001:db8:1212::2/48

Se verifica conectividad básica.

RP/0/1/CPU0:R1(config-if)#do ping 2001:db8:1212::2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:db8:1212::2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/23/87 ms

Luego se configura direccionamiento IPv6 en las Loopbacks.

RP/0/1/CPU0:R1(config)#int lo0
RP/0/1/CPU0:R1(config-if)#ipv6 add 2001:db8:1111:1111::1/128
RP/0/1/CPU0:R1(config-if)#commit

R2(config)#int lo0
R2(config-if)#ipv6 add 2001:db8:2222:2222::2/128

Posteriormente se configura el proceso 1 de OSPFv3 y ambos routers en el área 0.

RP/0/1/CPU0:R1(config)#router ospfv3 1
RP/0/1/CPU0:R1(config-ospfv3)#area 0
RP/0/1/CPU0:R1(config-ospfv3-ar)#int Gi0/0/0/1
RP/0/1/CPU0:R1(config-ospfv3-ar-if)#commit

R2(config)#ipv6 uni
R2(config)#interface GigabitEthernet1/0/0
R2(config-if)#ipv6 ospf 1 a 0

Se verifica la vecindad se haya establecido.

RP/0/1/CPU0:R1#sh ospfv3 neighbor

Neighbors for OSPFv3 1

Neighbor ID     Pri   State           Dead Time   Interface ID    Interface
2.2.2.2         1     FULL/DR         00:00:39    17              GigabitEthernet0/0/0/1
Neighbor is up for 00:00:38

Total neighbor count: 1
RP/0/1/CPU0:R1#

Se agregan las Loopbacks al proceso de OSPFv3.

RP/0/1/CPU0:R1#sh run int lo0

interface Loopback0
ipv4 address 1.1.1.1 255.255.255.255
ipv6 address 2001:db8:1111:1111::1/128

R2#sh run int lo0

interface Loopback0
ip address 2.2.2.2 255.255.255.255
ipv6 address 2001:DB8:2222:2222::2/128

RP/0/1/CPU0:R1#conf t
RP/0/1/CPU0:R1(config)#router ospfv3 1
RP/0/1/CPU0:R1(config-ospfv3)#area 0
RP/0/1/CPU0:R1(config-ospfv3-ar)#int lo0
RP/0/1/CPU0:R1(config-ospfv3-ar-if)#commit

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#int lo0
R2(config-if)#ipv6 ospf 1 area 0

Se verifica la tabla de ruteo.

RP/0/1/CPU0:R1#sh route ipv6

Gateway of last resort is not set

L    2001:db8:1111:1111::1/128 is directly connected,
      00:12:10, Loopback0
C    2001:db8:1212::/48 is directly connected,
      00:05:22, GigabitEthernet0/0/0/1
L    2001:db8:1212::1/128 is directly connected,
      00:05:22, GigabitEthernet0/0/0/1
O    2001:db8:2222:2222::2/128
      [110/1] via fe80::21e:f7ff:fef7:5340, 00:00:14, GigabitEthernet0/0/0/1

...y por último conectividad entre las Loopbacks.

R2#ping 2001:db8:1111:1111::1 sou lo0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:1111:1111::1, timeout is 2 seconds:

Packet sent with a source address of 2001:DB8:2222:2222::2
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/14/64 ms