[112078] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 Confusion

daemon@ATHENA.MIT.EDU (Aria Stewart)
Wed Feb 18 19:03:54 2009

From: Aria Stewart <aredridel@nbtsc.org>
To: nanog list <nanog@nanog.org>
In-Reply-To: <20090218205354.GA14504@ussenterprise.ufp.org>
Date: Wed, 18 Feb 2009 17:03:27 -0700
Errors-To: nanog-bounces@nanog.org


--Apple-Mail-18--1003430171
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit


On Feb 18, 2009, at 1:53 PM, Leo Bicknell wrote:
>
> Try that with an IPv6 router.  About 10 ms after you plug into the  
> wrong
> port out goes an RA, the entire subnet ceases to function, and your
> phone lights up like a christmas tree.
>
> Let me repeat, none of these solutions are secure.  The IPv4/DHCP  
> model
> is ROBUST, the RA/DHCPv6 model is NOT.



Depends -- the DHCP model also ceases to work, and some time later,  
when there's no cause and effect.

When I've added a misconfigured router to my IPv6 network, I added a  
few prefixes, but since it never worked, it never got used.  
Multihoming and good address selection seems to be a real win there.

Good router authentication would be a nice thing to have in both  
cases, though.

Aria Stewart
aredridel@nbtsc.org




--Apple-Mail-18--1003430171
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail-18--1003430171--


home help back first fref pref prev next nref lref last post