[118284] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 Deployment for the LAN

daemon@ATHENA.MIT.EDU (Owen DeLong)
Sun Oct 18 08:17:11 2009

From: Owen DeLong <owen@delong.com>
In-Reply-To: <C31C30A2-FE29-4B55-9A95-3E2F87F75F78@daork.net>
Date: Sun, 18 Oct 2009 05:10:37 -0700
To: Nathan Ward <nanog@daork.net>
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Oct 18, 2009, at 3:05 AM, Nathan Ward wrote:

> On 18/10/2009, at 11:02 PM, Andy Davidson wrote:
>
>> On 18 Oct 2009, at 09:29, Nathan Ward wrote:
>>
>>> RA is needed to tell a host to use DHCPv6
>>
>> This is not ideal.
>
> Why?
> Remember RA does not mean SLAAC, it just means RA.
>
> --
> Nathan Ward

Because RA assumes that all routers are created equal.
Because RA is harder to filter.
Because the bifercated approach to giving a host router/mask  
information and address information
	creates a number of unnecessary new security concerns.

I think those are the top 3.  I can't think of the rest of the list  
off the top of my head as my
brain still thinks it's 5 AM.

Owen



home help back first fref pref prev next nref lref last post