[112049] in North American Network Operators' Group
Re: IPv6 Confusion
daemon@ATHENA.MIT.EDU (Jack Bates)
Wed Feb 18 16:29:37 2009
Date: Wed, 18 Feb 2009 15:29:27 -0600
From: Jack Bates <jbates@brightok.net>
To: Raymond Dijkxhoorn <raymond@prolocation.net>
In-Reply-To: <alpine.LFD.2.00.0902182127350.13522@control.prolocation.net>
Cc: Aria Stewart <aredridel@nbtsc.org>, nanog list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Raymond Dijkxhoorn wrote:
> Is there something like RA filtering on switches yet, so end users can
> be filtered? Just like the dhcp stuff thats available on most switches
> nowdays... ?
>
> Its as annoying as fake DHCP servers...
Per customer VLAN isolation (common to solve DHCP server issues). You
can also perform *some* filtering today for multicast addresses, but not
the specific packets themselves from what I've seen. This is a big
implementation change. I've had lengthy discussions with the DSLAM
vendors who said, "VLANs are stupid and as bad as PVCs," about their
ability to filter RAs and DHCPv6.
-Jack
