TechKnowSurge
Cisco CCNA 1.8 Cisco CCNA 1.9 CompTIA Network+ 3.4 Cisco CCST Networking 2.3 Cisco CCNA 1.7 Cisco CCST Networking 2.1 CompTIA Network+ 1.7
VideoNetworkFree

IPv6 Architecting

IPv6 corporate network design uses a /48 allocation to give organizations a structured block of public addresses, with the remaining bits divided across regions, sites, departments, and individual hosts.

Complete this video to capture a CTF flag worth 1 point.

About this video

IPv6 corporate network design differs fundamentally from IPv4 in one critical way: organizations receive a block of globally routable public addresses rather than relying on private address space internally. A typical allocation is a /48 prefix, which leaves a significant range of bits available for internal network structuring before reaching the 64-bit host portion that terminates every IPv6 address. The bits between the /48 prefix and the /64 host boundary form the subnet ID space, and organizations have flexibility in how they carve it up. A practical approach assigns individual nibbles — four-bit groupings represented as single hexadecimal characters — to successive levels of the network hierarchy. The first nibble might identify a geographic region, the next one or two nibbles identify specific sites within that region, and additional nibbles can represent departments or functional segments within each site. This layered approach accommodates up to 16 values per nibble, so a single nibble for departments supports up to 16 distinct groups at any given site. Because IPv6's address space is so expansive, there is genuine room to plan for future growth and reorganization without exhausting available prefixes. While there are clearly inefficient or structurally unsound ways to implement this hierarchy, multiple valid designs exist depending on the size, complexity, and anticipated growth of the organization. The key is defining the hierarchy deliberately upfront so that address assignments remain consistent, scalable, and easy to manage over time.

What you'll learn

What's covered

IPv6 Corporate Subnetting

Aligned to

Cisco CCNA
1.8 Configure and verify IPv6 addressing and prefix
1.9 Describe IPv6 address types
1.7 Describe private IPv4 addressing
CompTIA Network+
3.4 Given a scenario, implement IPv4 and IPv6 network services
1.7 Given a scenario, use appropriate IPv4 network addressing
Cisco CCST Networking
2.3 Identify IPv6 addresses and prefix formats
2.1 Compare and contrast private addresses and public addresses

Key terms

IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
Subnet
A logical subdivision of an IP network, used to organize and segment network traffic.
Network Address Translation
NAT
A method that maps private IP addresses to a public IP address, allowing multiple devices to share a single public IP.
Scalability
The ability of a system to handle increased load by adding resources without degrading performance.
IPv6
The sixth version of the Internet Protocol, using 128-bit addresses written in hexadecimal and separated by colons to provide a vastly larger address space than IPv4's 32-bit addresses. IPv6 also introduces built-in features like SLAAC, NDP, and mandatory support for IPsec.
IPv4
The fourth version of the Internet Protocol, using 32-bit addresses that provide approximately 4.3 billion unique addresses.
Prefix Length
The number of consecutive 1-bits in a subnet mask, written after a slash (e.g., /24), that defines how many bits of an IP address represent the network portion versus the host portion. A /24 prefix means the first 24 bits identify the network, leaving 8 bits for host addresses.
Nibble
A group of exactly 4 bits, equivalent to one hexadecimal digit; two nibbles make up one byte.

Transcript

We're going to talk about IPv6 and how we would apply it to our corporate network. Quite honestly, IPv6 is so scalable and has so much ability right now that we don't need to overthink this. It's really pretty simple, and we've covered most of the information, so we're just going to essentially rehash or summarize what we've talked about before. So let's go ahead and jump into it and take a look at subnetting IPv6 on our corporate network.

Public addressing with IPv6

One of the big differences between IPv4 and IPv6 is that with an IPv4 you're going to have to probably use a private addressing scheme internally. With IPv6 that's not the case. You're going to get a range of public addresses that you can assign on all of your machines, and this is going to be a /48, giving you this last little bit to assign to your network for subnets, and then the last 64 bits, which are not shown right here, is going to be for your hosts. So we've got a whole hextet here that we can assign to different subnets.

Laying out regions, sites, and departments

So what would that look like? We talked in the last one how we did have different regions. We have a zero region, which is everything in between, we've got a one, two, and three regions. So we're going to use this first nibble here for the region.

Next, we are going to need to work out the sites. So each one of these sites — this looks like the biggest one, with one, two, three, four, five, six, seven, eight, nine different links there, or nine different networks — so we're going to call each one of those a site. We could just assign a nibble to that, or we could assign two nibbles to that, or three nibbles to that, however we see fit.

So we could even, as we talked about, maybe we want to break down this into departments later on. So this one right here, rather than having just one big network of 2000, maybe we want to break that down into departments. And so if that's the case, then maybe we have a site right here, so we've got a region, a site, and then we have a department. The department might take up two nibbles, or maybe we make the department take up one nibble here, that gives us 16 different departments we can have. And then we've got a bunch of sites that we can roll out.

So there's different ways to chop this up, and as I mentioned before, there are wrong ways to implement this, but there are several right ways to implement this as well.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →