[118272] in North American Network Operators' Group
Re: IPv6 Deployment for the LAN
daemon@ATHENA.MIT.EDU (Mikael Abrahamsson)
Sun Oct 18 00:55:16 2009
Date: Sun, 18 Oct 2009 06:54:29 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Ray Soucy <rps@maine.edu>
In-Reply-To: <7a6830090910171755q563d081fs7324a2f7d875bc9a@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sat, 17 Oct 2009, Ray Soucy wrote:
> Given that historically we have relied on DHCP for a means of NAC and
> host registration, like many academic institutions, the idea of sweeping
> changes to accommodate IPv6 was just not going to happen in the near
> future.
IETF has historically dropped the ball on delivering IPv4/v6 services
securely, and all the development for IPv4 done outside the IETF hasn't
been integrated into IPv6, which now shows when people are trying to
deploy it.
There is now some working going on though, you should look into the SAVI
working group, they have some nice work going on both for v4 and v6 in
this space. The v6ops WG is also producing deployment models for securely
deploying v6 in ISP environment.
--
Mikael Abrahamsson email: swmike@swm.pp.se